2G/3G Mobile Communication Systems

Transcription

1 2G/3G Mobile Communication Systems Winter 2012/13 Integrated Communication Systems Group Ilmenau University of Technology

2 Outline 2G Review: GSM Services Architecture Protocols Call setup Mobility management Security HSCSD GPRS Architecture Protocols QoS EDGE UMTS

3 2G to 3G Evolution: GSM - GPRS - UMTS Transmission ATM based ISDN GSM RAN controller MSC GSM Core (Circuit switched) GMSC GSM HLR AuC EIR 3

4 Architecture of the GSM system GSM is a PLMN (Public Land Mobile Network) several providers setup mobile networks following the GSM standard within each country GSM system comprises 3 subsystems RSS (radio subsystem): covers all radio aspects MS (mobile station) BSS (base station subsystem) or RAN (radio access network) BTS (base transeiver station) BSC (base station controller) NSS (network and switching subsystem): call forwarding, handover, switching MSC (mobile services switching center) LR (location register): HLR and VLR OSS (operation subsystem): management of the network OMC (operation and maintenance center) AuC (authentication center) EIR (equipment identity register) 4

5 GSM: cellular network segmentation of the area into cells possible radio coverage of the cell cell idealized shape of the cell use of several carrier frequencies not the same frequency in neighboring cells cell radius varies from some 100 m up to 35 km depending on user density, geography, transceiver power etc. hexagonal shape of cells is idealized (cells overlap, shapes depend on geography) if a mobile user changes cells -> handover of the connection to the neighbor cell 5

6 Cellular systems: Frequency planning I Frequency reuse only with a certain distance between the base stations Typical (hexagon) model: f 5 f 4 f 6 reuse-3 cluster: f 3 f 1 reuse-7 cluster: f 3 f 1 f 7 f 2 f 5 f 2 f 1 f 1 f 4 f 6 f 5 f 3 f 3 f 1 f 4 f 6 f 2 f 2 f 3 f 7 f 1 f 2 f 3 f 7 Other regular pattern: reuse-19 the frequency reuse pattern determines the experienced CIR Fixed frequency assignment: certain frequencies are assigned to a certain cell problem: different traffic load in different cells Dynamic frequency assignment: base station chooses frequencies depending on the frequencies already used in neighbor cells Frequency Hopping (fixed or random sequence of frequencies) Improves quality for slow moving or stationary users (frequency diversity) Reduces impact of intercell interference by statistical averaging 6 f 2

7 GSM: Air Interface FDMA (Frequency Division Multiple Access) / FDD (Frequency Division Duplex) Uplink 890 MHz 915 MHz Downlink 935 MHz 960 MHz khz frequency TDMA (Time Division Multiple Access) Downlink Uplink ,615 ms = 1250 bit time 7

8 GSM: Voice Coding Voice coding Channel coding Framing Modulation (GMSK) 114 bit/slot bit GSM TDMA frame ms GSM time-slot (normal burst) guard space tail user data S Training S user data tail 3 bits 57 bits 1 26 bits 1 57 bits 3 guard space µs 577 µs Guard (8.25 bits): avoid overlap with other time slots (different time offset of neighboring slot) Training sequence: select the best radio path in the receiver and train equalizer Tail: needed to enhance receiver performance Flag S: indication for user data or control data 8

9 Mobile Terminated Call (MTC) 1: calling a GSM subscriber 2: forwarding call to GMSC 3: signal call setup to HLR 4, 5: request MSRN from VLR 6: forward responsible MSC to GMSC 7: forward call to current MSC 8, 9: get current status of MS 10, 11: paging of MS 12, 13: MS answers 14, 15: security checks 16, 17: set up connection calling station PSTN 1 2 HLR 3 6 GMSC VLR MSC BSS BSS BSS MS

10 Location Management / Mobility Management The issue: Compromise between minimizing the area where to search for a mobile minimizing the number of location updates Solution 1: Large paging area RA RA Solution 2: Small paging area Location RA Update TOTAL Signalling Cost + = Paging Signalling Cost Paging Area Update Signalling Cost RA RA Location RA Update RA Location Update RA Location Update Location Update RA 10

11 Link quality Handover The problem: Change the cell while communicating Reasons for handover: Quality of radio link deteriorates Communication in other cell requires less radio resources Supported radius is exceeded (e.g. Timing advance in GSM) Overload in current cell Maintenance cell 1 cell 2 cell 1 cell 2 Handover margin (avoid ping-pong effect) Link to cell 1 Link to cell 2 time 11

12 Handover procedure (change of BSC) Make-before-break strategy MS measurement report BTS old measurement result BSC old MSC BSC new BTS new HO decision HO required HO request resource allocation ch. activation HO command HO command HO command HO access HO request ack ch. activation ack make Link establishment clear command clear complete clear command clear complete HO complete HO complete break 12

13 GSM - authentication K i RAND 128 bit 128 bit AuC A3 Challenge-Response: Authentication center provides RAND to Mobile AuC generates SRES using Ki of subscriber and RAND via A3 Mobile (SIM) generates SRES using Ki and RAND Mobile transmits SRES to network (MSC) network (MSC) compares received SRES with one generated by AuC SRES* 32 bit RAND mobile network Authentication Request (RAND) RAND K i 128 bit 128 bit A3 SIM SRES 32 bit MSC SRES* =? SRES Authentication Response (SRES 32 bit) SRES K i : individual subscriber authentication key SRES: signed response 13

14 GSM - key generation and encryption Ciphering: Data sent on air interface ciphered for security A8 algorithm used to generate cipher key A5 algorithm used to cipher/decipher data Ciphering Key is never transmitted on air MS with SIM K i RAND RAND RAND K i AuC 128 bit 128 bit 128 bit 128 bit SIM A8 A8 cipher key K c 64 bit mobile network (BTS) K c 64 bit BTS A5 data encrypted data SRES data A5 MS 14

15 GSM Evolution Overview adaptive modulation EDGE space Macro diversity Spectral efficency diversity Intelligent antennas time Equalizer interference adaptive redundancy GPRS HSCSD Frequency hopping Dynamic channel allocation Interference cancelation (multi-user detection) bursty continuous Data traffic 15

16 HSCSD (High-Speed Circuit Switched Data) continuous use of multiple time slots for a single user (on a single carrier frequency) asynchronous allocation of time slots between DL and UL gain: net data rate up to 115,2 kbps (allocation of all 8 traffic channels) Downlink Uplink mainly software update additional HW needed if more than 3 slots are used 16

17 2G to 3G Evolution: GSM - GPRS - UMTS Transmission ATM based ISDN GSM RAN controller MSC GSM Core (Circuit switched) GMSC GSM+GPRS HLR AuC EIR SGSN GPRS Core (Packet Switched) GGSN Internet 17

18 GPRS (General Packet Radio Service) Introducing packet switching in the network Using shared radio channels for packet transmission over the air: multiplexing multiple MS on one time slot flexible (also multiple) allocation of timeslots to MS (scheduling by PCU Packet Control Unit in BSC or BTS) using free slots only if data packets are ready to send (e.g., 115 kbit/s using 8 slots temporarily) standardization 1998, introduction 2001 advantage: first step towards UMTS, flexible data services GPRS network elements GSN (GPRS Support Nodes): GGSN and SGSN GGSN (Gateway GSN) interworking unit between GPRS and PDN (Packet Data Network) SGSN (Serving GSN) supports the MS (location, billing, security) HLR (GPRS Register GR) maintains location and security information 18

19 GPRS: Multiplexing and multislot allocation Multiplexing TS carrier Multislot capability

20 GPRS protocol architecture MS U BSS m G SGSN b G GGSN n G i appl. IP/X.25 IP/X.25 SNDCP LLC SNDCP LLC UDP GTP GTP UDP RLC RLC BSSGP BSSGP IP IP MAC MAC FR FR L1/L2 L1/L2 radio radio BSSGP: Base Station Subsystem GPRS Protocol (control plane: routing & QoS) SNDCP: Subnetwork-Dependent Convergence Protocol (mapping, segmentation, header compression) 20

21 GPRS services End-to-end packet switched traffic (peak channel rates) 28 kbps (full use of 3 time slots, CS-1: FEC) kbps (full use of 8 time slots, CS-4: no FEC) Average aggregate throughput of a cell (Source: H. Menkes, WirelessWeb, Aug. 2002) 95 kbps (for both up and downlink) Assumptions: 4/12 reuse, realistic RF conditions, random traffic Worse figures for individual TCP traffic Adaptive Coding Schemes (adaptive Forward Error Control FEC) CS 1: 9.05 Kbps/slot CS 2: 13.4 Kbps/slot CS 3: 15.6 Kbps/slot CS 4: 21.4 Kbps/slot (no Forward Error Correction) Problems and limits IP-based network => high latency, no guarantees Limited data rate: 28 kbps (3 slot/cs-1) kbps (3 slot/cs-4) Latency/flow control problems with TCP 21

22 EDGE (Enhanced Data Rates for GSM Evolution) Enhanced spectral efficiency depends on: Size of frequency band Duration of usage Level of interference with others (power) Near-far problem EDGE Technology: EDGE can carry data speeds up to kbit/s for 4 timeslots (theoretical maximum is kbit/s for 8 timeslots) Adaptation of modulation depending on quality of radio path GMSK (GSM standard 1 bit per symbol) 8-PSK (3 bits per symbol) Adaptation of coding scheme depending on quality of radio path (9 coding schemes) Gain: data rate (gross) up to 69,2kbps (compare to 22.8kbps for GSM) complex extension of GSM! NodeB UE 1 UE 2 22

23 EDGE Adaptive Modulation and Coding Schemes Scheme Modulation Maximum rate [kb/s] Code Rate Family M CS-9 8PSK A M CS A M CS B M CS / A MCS B M CS-4 GMSK C M CS / A M CS B MCS C 23

24 2G to 3G Evolution: GSM - GPRS UMTS R99/R3 GSM RAN controller MSC Transmission ATM based GSM Core (Circuit switched) GSM+GPRS+UMTS R99 HLR AuC EIR GMSC ISDN UTRAN Radio network controller SGSN GPRS Core (Packet Switched) GGSN Internet 24

25 2G to 3G Evolution: GSM - GPRS - UMTS R5 - IMS GERAN GSM RAN controller GERAN + UMTS R5 + IMS UTRAN Radio network controller SGSN Transmission IP based 3G Core GPRS Core (Packet Switched) GGSN Internet 25