GSM Network Elements and

Interfaces
Functional Basics
GSM System Architecture
The mobile radiotelephone system includes
the following subsystems

Base Station Subsystem (BSS)

Network and Switching Subsystem (NSS)
Operations and Maintenance Subsystem
(OSS)
 GSM Network Structure : Concept
PLMN Terrestrial
Public Land Mobile Network
Um public mobile communications network network
Mobile
terminal device Air Interface

PSTN
BSS Public Switched
Base Station
Telephone Network
Subsystem
radio access

NSS
BSS Network Switching ISDN
Base Station
Subsystem Integrated Services
Subsystem
MS radio access Control/switching of Digital Network
Mobile mobile services
Station
BSS
Base Station
Subsystem
PDN
radio access Public Data
Network

Mobile network Fixed network

components components
 GSM-PLMN: Subsystems
PLMN Terrestrial
RSS Public Land Mobile Network
Network
Radio
SubSystem
PSTN
Public Switched
Telephone Network

ISDN
Integrated Services
MS BSS NSS Digital Network

Mobile Base Station Network Switching

Station Subsystem Subsystem
PDN
Public Data
Network
OSS
Operation SubSystem
 Function Units in GSM-
GSM-PLMN

Radio Network Switching

SubSystem Subsystem
RSS = NSS Other networks
Mobile Base Station
Station + Subsystem
MS BSS AC EIR

BTS HLR VLR

T PSTN
R
BSC A MSC ISDN
U
Data
OMC-
OMC-R OMC-
OMC-S
MS =
net-
net-
ME + SIM works
Operation SubSystem OSS
Functional Units in GSM-
GSM-PLMN Phase 2+

RSS NSS Other networks

MS + BSS AC EIR

BTS HLR/GR VLR

T PSTN
R
BSC A MSC ISDN
U

CSE Data
networks
SGSN GGSN
Inter/
intranet
OMC-
OMC-B OMC-
OMC-S
OSS
Base station subsystem (BSS)
The base station subsystem includes Base Transceiver Stations
(BTS) that provides the radio link with MSs.
BTSs are controlled by a Base Station Controller
(BSC),which also controls the Trans-Coder-Units (TCU). -
These units enable users to reduce the number, and thus the
cost, of PCM (Pulse CodeModulation) links needed between
BSS and NSS.
The BSS has a standard interface so it can be connected to
different types of switching centers.
The PCUSN is a separate node in the BSS that is used in
order to provide the specific packet processing (PCU) of the
GPRS. It provides the interworking function between the BSS
and the GPRS Core Network.
Network and switching subsystem (NSS)
The NSS part handles all switching and routing
functions.
The Mobile services Switching Center (MSC) is
responsible for switching and routing. Reference data,
specific to each subscriber, is stored in a database
that is distributed among Home Location Registers
(HLR).
To minimize access to the HLR, the MSC uses a
Visitor Location Register (VLR), which contains
working data for
subscribers moving around its coverage area.
Network security and access controls are provided
by the AUthentication Center (AUC) and by the
Equipment Identity Register (EIR).
Operations subsystem (OSS)

The operations and support subsystem contains

two parts:
The Radio Operations and Maintenance
Center (OMC-R)
The Switching Operations and Maintenance
Center (OMC-S).
Main GSM Network Interfaces
 E1 PCM links:
The E1 PCM bit rate is 2.048Mbit/s carrying 32
time slots at 64kbit/s.Time slot 0 is used for
synchronization only.
The GSM system components use PCM E1 links
or internal PCMs

T1 PCM links:
The T1 PCMbit rate is 1.544Mbit/s (24
time slots at 64 kbit/s plus one kilobyte for
synchronization)
Interfaces (PCM links):

The components of the GSM network are linked

together by PCM links on the following interfaces

Abis (BTS-BSC)
Ater (BSC-TCU)
A (TCU-MSC)
Common Interfaces:
Radio interface, also called Um or Air interface
Abis interface
Agprs interface
Ater interface
Asynchronous BTS-PCU interface
A interface
OMN (Operations and Maintenance Network)
interface
MAP (Mobile Application Part) interface
PSTN/PSPDN (Public Switched Telephone
Network/Public Switched Packet Data Network)
interface (enables the MSC to be connected to
public speech or
data networks via PCM (Pulse Code Modulation) links)
GSM (Phase 1/2) - Other networks
Interfaces MSC/xxx interworking interface

AC

Um Abis Not
Asub specified
A C
MS BTS TRAU MSC HLR
BTS
T E D
T B

LMT LMT MSC VLR

T
F G
LMT O
EIR VLR

OMC-R
 Radio interface:
The radio interface provides communication
between the mobile station and the BTS for
Speech and data. The signaling protocol is
based on the LAPDm layer 2.

Abis interface:
The Abis interface provides communication
between the BTS and the BSC for radio traffic
management and base station operations and
maintenance using the LAPD protocol.
 Agprs interface:
The interface is composed of GPRS traffic at
n*16kb/s.
The GPRS traffic uses Abis 16Kb/s TS between the
BSC and the BTS, and Agprs 16Kb/s TS between the
BSC and the PCUSN.

Asynchronous BTS-PCU interface:

The Asynchronous BTS-PCU interface handles data
between the BTS (Base Transceiver Station) and the
PCU(Packet Control Unit).
This interface is applicable in V15 and supports all
GPRS and EGPRS coding schemes. The data
carried by this interface is transmitted to and from
user phones by the BTS.
 Ater interface:
The Ater interface provides communication
between the BSC and the TCU for traffic
management using the LAPD protocol CCITT
No. 7 signaling protocol and X.25 protocols
are also used.
A interface:
The A interface provides communication
between the TCU and the MSC for traffic
management using the CCITT No. 7 signaling
protocol and the system Defined BSSAP
(BSS Application Part) protocol.
 OMN interface:
The OMN interface provides communication between
the BSC 2G and the OMC-R
using a X.25 no-type data transmission network for
radio subsystem centralized operations.
The OMN interface provides communication between
the BSCe3 and the OMC-R using Ethernet links for
radio subsystem centralized operations.

MAP interface:
The MAP interface provides communication between
NSS various units, using the CCITT No. 7 signaling
protocol and the MAP protocol. Communication
between the MSC and database enables mobile
station mobility monitoring.
GSM Network Elements
 Radio technology counterpart to
GSM Mobile Station BTSE, BSC & TRAU
Signaling counterpart to
BSC, MSC, HLR/AC, VLR & EIR
Block switching r
diagram

Safety check Filtering

Reverse speech
Temporal re-ordering Decoding Amplification
conversion
Reformation Demodulation

Securing HF generation
Speech
Temporal paths Coding Modulation
conversion
Burst block formation Amplifier

Mobile Equipment ME

Subscriber Identity Module SIM

 The Mobile Station MS

MS = ME + SIM

SIM card:
Subscriber licence
Personal identification
(MSISDN, IMSI, TMSI,
PIN, PUK,...)
Subscriber key (Ki, Kc)
Algorithms (A3, A8)
Personal telephone book
SIM toolkits,...

ME:
hard &
software
for radio transmission
Base Station Subsystem BSS
Architecture

BTS TRAU MSC

TRAU
BTS BSC

LMT
BTS
OMC-R
 BSS Architecture
Includes Antennas sender & receiver together
with the controlling equipments
The radio part of the BSS consists of one or more
cells made of one or more BaseStations (BSs) or
BTSs.
The interface between the BSC and BS is named
A bis interface.
The BS is directly in contact with the MS
The BSC carries these contacts to the MSC switch
BTS
The BTS provides the interface between the fixed
network and the mobile stations.
Communication with mobile stations is enabled by a
radio interface, also called the Um interface.
The Radio interface carries signaling and
speech/data channels between the base station
(BTS) and the mobile stations (MS).
Communication with the fixed network is enabled via
a second wire interface called the Abis interface. The
Abis interface connects the BTS to its Base Station
Controller (BSC).
The transmission of signaling, speech, and data
channels is performed by means of PCM links.
 The BTS configures its equipment and establishes,
maintains, and clears calls to and from mobile
stations as directed by the BSC.
The BTS organizes and manages radio electric
resources, supervises its own equipment.
BTSs are connected to their controller (BSC) in one
of the following configurations,
star
chain
loop
The loop configuration provides a more reliable
connection between the BTS and the BSC.
 Base Transceiver Station
User and signaling
information
BTS

Parity Inter-
Hash coding
Abis bits leaving
Channel coding
Um
max. 16 bearers/cell
Coding

+ Frequency hopping
Synchronization
Build-up of Burst (time and frequency)
burst blocks multiplexing Monitoring and optimization
of transmission quality
Power Control PC
Timing Advance TA

Additional information
HF generation Transmit
modulation

Modulation
Receive
BSC
The BSC plays the linking role between the radio sites of
the radio sub-system BSS, and the network sub-system
NSS.
The BSC manages all the radio resources of its connected
BTSs.
It does everything required to set up or re-establish calls,
and perform specific call sustaining procedures (power
control and handover management).
It also supervises the radio subsystem as a whole and is
responsible for it.
It performs operations and maintenance functions under
central OMC-R management control.
The BSC concentrates external PCM links, thus reducing
the number of traffic channels used to be transmitted via the
TCU to the MSC.
 Base Station Controller BSC

BTS
TRAU
Asub
TRAU Abis
BTS

TRAU
BSC



BTS
BSS control system
OMC-B
Through-switching TRAU BTS
Radio frequency management
Collecting error messages in BSS
Contact to OMC-B
Database storage, SW of BSS
TCU 2G (TRAU)

A TCU cabinet contains four shelves. Each

shelf manages four PCM links from the MSC
and one from the BSC.

The number of shelves depends on the

number of required PCM links to connect the
BSC to the MSC.
TRAU: Transcoder & Rate Adaptor Unit

TRAU

TC
64 kbit/s Transcoder 16 kbit/s

NSS 64 kbit/s 16 kbit/s Sub-

64 kbit/s
64 kbit/s or 16 kbit/s multi- BSC
(MSC) 64 kbit/s 16 kbit/s plexer
RA
Rate
adapter

A Asub
 Transcoder and Rate Adaptor Unit: TRAU

TRAU
TDMA

16 64 64 64 64 kbit/s

16 64 64 64 64 kbit/s MSC
64 64 64 64 kbit/s
BSC 16 64 64 64 64 kbit/s

16 16 16 16 16 64 64 64 64 kbit/s

Submultiplexer

Speech compression: 64kbit/s 13 or 5.6 kbit/s + inband signalling

Data transmission: "64 kbit/s" 0.3 - 9.6 kbit/s + inband signalling
Signaling: transparent
MSC
The MSC/HLR/VLR units include several cabinets.
Their equipment units vary according to the amount
of traffic to be handled.

OMC-R
The OMC-R includes workstations, database
servers, and computer peripheral equipment units
(disks, printers, etc.). Their number depends on the
amount of traffic to be monitored.
OMC-S

The OMC-S constituents are computer display units

that handle operations and maintenance of the
Network and Switching Subsystem (NSS).
 NSS
Other
Network &
MSC/VLRs
Switching
AC Subsystem
Authentication Center

HLR EIR
Home Location Equipment Identification
Register Register

VLR
Visitor Location
Register
Other
MSC networks
Mobile services
Switching Center
 MSC

Mobile services
Switching Center

Central tasks in NSS

Nodes between NSS registers, BSS,
other MSCs and external networks
Linkage of several BSS
Setup and through switching of several user
and signaling connections
Always associated with VLR
Association with HLR/AC and EIR possible
Gateway MSC: linkage of external networks
Visited MSC: MSC from the point of view
of visiting MS

Call processing functions Mobile communications -

(similar to terrestrial net VSt) specific functions
 MSC

Mobile services
Switching Center

Call processing functions Mobile communications -

(similar to terrestrial net VSt) specific functions
Setup of signaling/user connections
Signaling evaluation
Access to all subscriber & ME databases
Destination determination
Processing of mobile-specific services
Connection path selection
Processing of abnormal Mobile management, e.g. paging, HOV,
signaling information LR & LUP,...
Supplementary service processing Processing of abnormal
Call monitoring signaling information
Traffic monitoring and measurement Process handling, e.g. OACSU
Overload protection Interworking function for data services
Billing User information, e.g. instruction messages
Priority control (e.g. emergency call)
Support of O & M functions
 MSC

Mobile services
Switching Center

VLR
Visitor Location Register

Tasks:
Subscriber management in MSC area
Associated with MSC
Authentication coordination

Subscriber data:
Partial HLR data (MSISDN, IMSI, subscriber services,
restrictions,..)
Temporary suscriber information (LMSI, TMSI, LAI,
IMSI attach/detach, MSRN, HON, triples,...)
Entries valid until re-registration in another VLR!
 AC
Authentication Center

Tasks:
Security data storage (Ki)
Generation of triples (VLR request)
Associated with HLR
Data/algorithms:
Ki, IMSI, A3, A8

HLR
Home Location Register
Tasks:
Central storage/management of subscriber data
Delivery of data to VLR
Route information at MTC
Associated with AC

Subscriber data:
Semipermanent data: MSISDN, IMSI,
subscriber services, restrictions,...
Temporary subscriber information: VLR address,
LMSI, MSRN, SMS flags,...
 CEIR
Common EIR
Site: Dublin
Tasks:
Central, worldwide ME register
Worldwide ME theft prevention

EIR
Equipment Identication Register

Tasks:
Storage of ME data (IMEI)
Monitoring of IMEI: "white", "gray", "black" list

ME data:
IMEI = International Mobile Equipment Identity
= Type Approval Code TAC
+ Final Assembly Code FAC (manufacture site)
+ Serial Number SNR (device serial number)
+ Software Version Number SVR
 OSS
Operation SubSystem

MSC/VLR
EIR

HLR/
AC
WS
NSS MSC/VLR
OMC
Operation & Maintenance Center
Subscriber and equipment data
management
e.g. enabling services, bills
TRAU Network operation, configuration
and management
Collecting network load information
BSC and compiling statistics
Error detection and correction
BSS
Security management
BTS
Performance control
 OSS
Telecommunications Operating systems
Management System
as per National
TMN OMCs,
administration, billing,
network management system,..

Regional
OMCs

Network elements NE

TMN: Telecommunication Management Network

 Location Update / Registration
When a mobile station moves into another
cell, it first checks if the new cell belongs to
the same location area. If it does, no
procedure is initiated.
If it does not, the mobile station must register
itself to the new location area. Depending on
whether the new location area is controlled by
the same MSC or by a different one.
A location updating or a registration
procedure is performed. Both procedures are
performed the same way.
Procedure:
BTS1 sends a broadcast channel and the mobile
station (MS) moves.
BTS2 sends a broadcast channel and the MS
detects a location area change.
MS makes a random access setup request to the
base station controller (BSC2) that, according to
radio resource availability, allocates a signaling
channel (SDCCH) to the mobile station.
BSC2 establishes a connection between the mobile
station and the mobile services switching center
(MSC2) that controls the new location area.
MS makes a location updating request to MSC2 via
BSC2 and BTS2 by indicating its IMSI (International
Mobile Subscriber Identity).
MSC2 consults its visitor location register
(VLR2) to check whether the mobile station
comes from a location area controlled by itself
or by a different MSC.

If MSC2 controls the former location area, it

performs out an authentication procedure
and, if it is successful, updates the mobile
new location data into its visitor database
(VLR). This is the end of the location updating
procedure.
Otherwise, MSC2 initiates a registration
procedure:
It asks the HLR for the subscribers
information and authentication data and
begins an authentication procedure.
If it is successful, MSC2 enters the mobile
station new location data into VLR2 and
informs the HLR that it is now controlling the
mobile station.
The HLR stores the identity of the
MSC/VLR, which now controls the mobile
station and informsVLR1 that it can remove
all mobile station information from its
database.
Paging
When a user attempts to call a mobile subscriber,
the call is handled by the MSC, which controls the
location area the mobile station is in and a paging
procedure starts
A call to the fixed network is switched to the mobile
services switching center (MSC), which searches its
VLR for the location area the mobile station is in.
The MSC sends instructions to the BTS via one or
several BSC to page the mobile station in all cells
within the location area.
The BTS send a signal to every cell they control that
informs the mobile station that it is being called.
The mobile station receives the request from BTS2.
When the mobile station picks up the
message, it performs a call setup
procedure.

When the path is setup, the MSC routes the

call to the mobile station.
Authentication

The authentication procedure prevents

unauthorized access to the network. Each
time a connection is attempted, the mobile
subscriber undergoes an authentication
procedure to check the IMSI (International
Mobile Subscriber Identity).

Each IMSI is associated with a secret key

(Ki). This key is stored in the HLR and in a
special module inside the mobile terminal, the
SIM (Subscriber Identity Module).
 The mobile equipment identity number
(IMEI) is used to ensure that the mobile
station is not faulty or stolen. If it is faulty
or stolen, the attempt to establish a
connection is rejected. Confidentiality is
also increased by replacing the IMSI with a
temporary mobile subscriber identity
(TMSI) number which is frequently
changed.
 The home location register (HLR) hosts an
authentication central unit (AUC) that stores
the subscribers IMSI and secret key.
Using the IMSI and the secret key, the AUC
processes an algorithm that produces triplets
composed of the following:

a random number (RAND)

a signed answer (SRES) for signed result
a cipher key (Kc)
 Upon each HLR request, the AUC generates
authentication triplets. The HLR sends some of
these triplets to the VLR that requests them. One
triplet per authentication procedure is used.
When its stock is exhausted, the VLR makes a new
request to the HLR.
During an authentication procedure, the VLR
transmits a random number (RAND) to the mobile
terminal . The mobile terminal uses this number,
together with the secret key (Ki) stored in the SIM, to
generate a signed response (SRES) and sends it to
the VLR, which compares it to the one supplied by
the HLR. If they are identical, the connection may be
established between the mobile station and the
network. If they are not, the connection is
immediately rejected.
Handover
When a call is in progress, the mobile station
measures the quality of the signal received
from its cell, as well as from neighbouring
cells for which the received level is
acceptable.
Measurements are sent to the BTS, which
measures the reception level and quality.
If transmission is at full strength and service
quality is too low, or if the BTS and the MS
are too far apart, the BSC may perform a
handover procedure, either inside the same
cell or with the first cell from a list of preferred
order cells table to support the call.
 In the case of a poor uplink transmission (MS-
BTS), the BSC may request that the mobile
increase its transmitted power.

The BSS supports intra-cell and inter-cell

handovers. Inter-cell handovers may be either
intra-BSC handovers (both cells belong to
sites that are controlled by the same BSC),
inter-BSC handovers (each site is controlled
by a different BSC that may be controlled by a
different MSC), or inter cellular layers.
Inter-cell handover within the same MSC

This type of procedure is initiated after the BSC

decides to handover the call to another cell (two
cells same BSC).

A call is in progress between the mobile subscriber

(MS) and another user. It is controlled by BTS1.

The mobile station moves to another cell.

The BSC1 decides to hand over the call and

allocates a traffic channel (TCH) to the target BTS
(BTS2).
 The BSC1 sends the cipher key (Kc), the
channel to be used, and the frequency
hopping sequence to BTS2 and requests the
mobile station to connect to BTS2 by
sending a handover request to MS via BTS1,
which indicates the identity of the target cell.

The mobile station sends a random access

setup request to BTS2 to establish a
connection.
 BTS2 informs the BSC1 that the connection has
been successfully established and the BSC1
switches the call to the new cell via BTS2.

The BSC1 sends a message to the MSC1, which

informs it of the transfer and releases BTS1 radio
resources.

Depending on where the BTSs are located, two

cases may arise:
If both BTS are in the same radio location, they
use the same time base.
The mobile station undergoes a synchronous
handover.
 If the target BTS is in a different radio
location, it is not synchronized with the initial
BTS. The BSC informs the target BTS that
the mobile station must be synchronized
and, when the connection is established, the
target BTS synchronizes the mobile station
using the timing advance signal.
Inter-MSC handovers
The procedure is the same as the one described in
Inter-cell handovers within the same MSC
paragraph until the initial MSC (MSC1) detects that
the target cell is controlled by another MSC:
MSC1 sends a channel allocation request to MSC2
and indicates the identity of the target cell.
MSC2 makes a channel allocation request to the
BSC3 that controls the target cell (BTS5).
BSC3 selects and activates radio resources and
informs MSC2. MSC2 informs MSC1, which informs
BSC2 that the procedure has been performed.
BSC2 transmits the handover request to the mobile
station via BTS4.
The mobile station attempts to connect to BSC3 via
BTS5
 When the connection is established, MSC1 switches
the call to the mobile station via MSC2, BSC3, and
BTS5.
MSC1 informs BSC2 that it can release all radio
resources used.
MSC2 keeps control of the call and stores all
resource information.
When a mobile station that has already been
handed over from MSC1 to MSC2 leaves the area
controlled by MSC2, a new handover procedure
must be started.
This new procedure is similar to the one described
above and depends on the MSC to which the new
target cell belongs.