Network Switching System (NSS)

Similar documents
Mobile Communications

2 System introduction

The GSM and GPRS network T /301

Wireless and Mobile Network Architecture

Global System for Mobile Communications (GSM)

GSM Architecture Training Document

GSM BASICS GSM HISTORY:

GSM Architecture and Interfaces

1 Introduction. 2 Assumptions. Implementing roaming for OpenBTS

Global System for Mobile Communication Technology

!!! "# $ % & & # ' (! ) * +, -!!. / " 0! 1 (!!! ' &! & & & ' ( ' 3 ' Giuseppe Bianchi

Ch GSM PENN. Magda El Zarki - Tcom Spring 98

Provides a communication link between MS and MSC; Manages DB for MS location. Controls user connection. Transmission.

Global System for Mobile Communication (GSM)

GSM - Global System for Mobile Communications

ETSI TR V8.0.0 ( )

9.1 Introduction. 9.2 Roaming

LTE Tutorial GSM Tutorial i

GSM Databases. Virginia Location Area HLR Vienna Cell Virginia BSC. Virginia MSC VLR

Mobile Services (ST 2010)

1. Introduction: The Evolution of Mobile Telephone Systems

The Global System for Mobile communications (GSM) Overview

GSM and IN Architecture

GSM GSM TECHNICAL March 1996 SPECIFICATION Version 5.0.0

Global System for Mobile Communication (GSM)

GSM System Architecture

Lecture overview. History of cellular systems (1G) GSM introduction. Basic architecture of GSM system. Basic radio transmission parameters of GSM

Theory and Practice. IT-Security: GSM Location System Syslog XP 3.7. Mobile Communication. December 18, GSM Location System Syslog XP 3.

What is telecommunication? electronic communications. service?

MAP/C SEND ROUTING INFO FOR SM. Destination Mobile Number. Obtain the SS7 address of the MSC VLR currently serving the specified Mobile Number

2G/3G Mobile Communication Systems

What is telecommunication? electronic communications? What is telephony?

Mobile Communications Chapter 4: Wireless Telecommunication Systems slides by Jochen Schiller with modifications by Emmanuel Agu

3GPP TS V ( )

Handoff in GSM/GPRS Cellular Systems. Avi Freedman Hexagon System Engineering

GSM GPRS. Course requirements: Understanding Telecommunications book by Ericsson (Part D PLMN) + supporting material (= these slides)

Mobile Networking. SS7 Network Architecture. Purpose. Mobile Network Signaling

-The equipment was limited to operate only within the boundaries of each country. -The market for each mo bile equipment was limited.

Mobility Management 嚴 力 行 高 雄 大 學 資 工 系

How To Understand The Gsm And Mts Mobile Network Evolution

Chapter 10 VoIP for the Non-All-IP Mobile Networks

Mobile Application Part protocol implementation in OPNET

MRN 6 GSM part 1. Politecnico di Milano Facoltà di Ingegneria dell Informazione. Mobile Radio Networks Prof. Antonio Capone

Using an approximated One-Time Pad to Secure Short Messaging Service (SMS)

Wireless Mobile Telephony

Worldwide attacks on SS7 network

Cellular Technology Sections 6.4 & 6.7

Mobile Wireless Overview

ETSI ETR 363 TECHNICAL January 1997 REPORT

Mobile Computing. Basic Call Calling terminal Network Called terminal 10/25/14. Public Switched Telephone Network - PSTN. CSE 40814/60814 Fall 2014

GSM GSM TECHNICAL November 1996 SPECIFICATION Version 5.0.0

ETSI TS V7.5.0 ( )

CHANGE REQUEST CR xx

Mobile Communications Chapter 4: Wireless Telecommunication Systems

GSM Network Architecture, Channelisation, Signalling and Call Processing

EAP-SIM Authentication using Interlink Networks RAD-Series RADIUS Server

GSM Security Claude Castelluccia INRIA

Chapter 10 ( PART-1) Existing Wireless Systems

GSM Network Structure and Network Planning. Contents: Dipl.- Ing. Reiner Stuhlfauth, ROHDE & SCHWARZ; Training Centre

GPRS Overview. GPRS = General Packet Radio Service. GPRS Network

TELECOMMUNICATIONS REGULATORY AUTHORITY BAHRAIN. Bahrain Number Portability Implementation Routing and Charging specification

Wireless Telecommunication Systems GSM, GPRS, UMTS. GSM as basis of current systems Satellites and

Authentication and Secure Communication in GSM, GPRS, and UMTS Using Asymmetric Cryptography

Cellular mobile communication is based on the. The Cellular Concept. GSM and PCNs. Moe Rahnema

3GPP TR V3.1.0 ( )

ETSI TS V6.5.0 ( )

2G Mobile Communication Systems

Technical Specification Railway Telecommunications (RT); Rel-4 Core Network requirements for GSM-R

The Network Layer Layer 3

GSM Voice Mail Service TDM Call Control

Teknillinen Korkeakoulu Teletekniikan laboratorio S Teletekniikan erikoistyö. General Packet Radio Service

Product report GSM Call Service

Introduction to SS7 Signaling This tutorial provides an overview of Signaling System No. 7 (SS7) network architecture and protocols

GSM Network and Services

EUROPEAN ETS TELECOMMUNICATION February 1998 STANDARD

Cellular Network Organization

Wireless and Mobile Network Architecture

This tutorial gives provides an introduction to the terms and structure of the Signalling System Number 7 (SS7) protocol.

An Example of Mobile Forensics

In this Lecture" Access method CDMA" Mobile and Sensor Systems Lecture 2: Mobile Medium Access Control Layer and Telecommunications

Cleep Solution Description

3GPP TS V8.0.0 ( )

Wireless Cellular Networks: 1G and 2G

GLOSARIO. Authentication key, se usa en sistemas basados en TIA/EIA-41. Estándar de comunicación celular basado en TDMA.

Bölüm 8. GSM. 6 Milyar mobil telefon kullanıcısı (2011 sonu)* Dünya nüfusu 7 Milyar!

How To Connect Gsm To Ip On A Gsm Network On A Pnet On A Microsoft Cell Phone On A Pc Or Ip On An Ip Onc (Gsm) On A Network On An Iph (Gms) On An

MOBILE CREDIT USING GSM NETWORK TOPUP FOR MOBILE PHONES

Global System for Mobile (GSM) Global System for Mobile (GSM)

M E M O R A N D U M. Wireless Roaming Services for Emergency Medical Facilities

Telecommunication Systems (GSM) Mobile Communications (Ch 4) John Schiller, Addison-Wesley

Advanced SIP Series: SIP and 3GPP Operations

CS Cellular and Mobile Network Security: GSM - In Detail

Digital Communications Exploring SS7 signaling fraud that threatens mobile network security and subscriber privacy

EP A1 (19) (11) EP A1 (12) EUROPEAN PATENT APPLICATION. (43) Date of publication: Bulletin 2006/26

[Description for the use of a Shared Inter Working Function (SIWF) in a GSM PLMN - Stage 2]

TSG CN WG4, TSG SA WG1, TSG GERAN WG2

IMT-2000 Network Architecture

GSM GSM TECHNICAL December 1996 SPECIFICATION Version 5.0.0

GSM v. CDMA: Technical Comparison of M2M Technologies

Introduction to Mobile Telephone Systems

Transcription:

Network Switching System (NSS) Key elements of the NSS: Mobile Switching Center (MSC) Visitor Location Register (VLR) Home Location Register (HLR) Authentication Center (AuC) Equipment Identity Register (EIR) Gateway MSC (GMSC) These elements are interconnected by means of an SS7 network

NSS Identifier IMEI International Mobile Equipment Identifier. The IMEI is an internationally-unique serial number allocated to the MS hardware at the time of manufacture. It is registered by the network operator and (optionally) stored in the AuC for validation purposes. IMEI = TAC + FAC + SNR +sp TAC = Type Approval Code by central GSM body FAC = Final Assembly Code, identifies the manufacturer SNR = Serial Number, unique six digit number sp = spare for future use

IMSI International Mobile Subscriber Identifier When a subscriber registers with a network operator, a unique subscriber IMSI identifier is issued and stored in the SIM of the MS as well as in the HLR. An MS can only function fully if it is operated with a valid SIM inserted into an MS with a valid IMEI. IMSI consist of three parts: IMSI = MCC + MNC + MSIN MCC = Mobile Country Code MNC = Mobile Network Code MSIN = Mobile Station Identification Number

TMSI Temporary Mobile Subscriber Identity A TMSI is used to protect the true identity (IMSI) of a subscriber. It is issued by and stored within a VLR (not in the HLR) when an IMSI attach takes place or a Location Area (LA) update takes place. At the MS it is stored in the MS s SIM. The issued TMSI only has validity within a specific LA. Since TMSI has local significance, the structure may be chosen by the administration. It should not be more than four octets.

MSISDN Mobile Station ISDN Number The MSISDN represents the true or dialled number associated with the subscriber. It is assigned to the subscriber by the network operator at registration and is stored in the SIM. According to the CCITT recommendations, it is composed in the following way: CC = Country Code MSISDN = CC + NDC + SN NDC = National Destination Code SN = Subscriber Number

MSRN Mobile Station Roaming Number The MSRN is a temporary, location-dependant ISDN number issued by the parent VLR to all MSs within its area of responsibility. It is stored in the VLR and associated HLR but not in the MS. The MSRN is used by the VLR associated MSC for call routing within the MSC/VLR service area.

LAI Location Area Identity Each Location Area within the PLMN has an associated internationally unique identifier (LAI). The LAI is broadcast regularly by BTSs on the Broadcast Control channel (BCCH), thus uniquely identifying each cell with an associated LA. LAI = MCC + MNC + LAC MCC = Mobile Country Code, same as in IMSI MNC = Mobile Network Code, same as in IMSI LAC = Location Area Code, identifies a location area within a GSM PLMN network. Maximum length of LAC is 16 bits.

Mobile Switching Center (MSC) The Mobile services Switching Center (MSC) performs the telephony switching functions of the system. It also controls calls to and from other telephony and data systems, such as the Public Switched Telephone Network (PSTN) and Public Land Mobile Network (PLMN). Difference between a MSC and an exchange in a fixed network is - MSC has to take into account the impact of the allocation of radio resources and the mobile nature of the subscribers and has to perform in addition, at least the following procedures:

required for location registration procedures required for handover An MSC can be connected to only one VLR. Therefore, all mobile stations that move around under base stations connected to the MSC are always managed by the same VLR. An MSC would communicate typically with one EIR. While it is possible for an MSC to communicate to multiple EIRs, this is highly unlikely since the EIR provides a centralized and geographic independent function.

The MSC consults an HLR to determine how a call should be routed to a given mobile station: For incoming calls to a mobile station, the MSC would typically consult one HLR. For mobile-to-mobile calls in larger networks, a MSC could consult HLRs of other systems to help minimize the trunk paths to the other mobile station. A given MSC can be interconnected to other MSCs to support inter- MSC handovers

The following are typical MSC functions in a cellular system: Provide switched connections with PSTN Provide switched connections between mobile subscribers Provide coordination over signaling with mobiles Coordinate the location and handover process Provide custom services to mobile users Collect billing data

Protocols MSC/BSC MSC/HLR MSC/VLR MSC/EIR MSC/GMSC VLR/VLR VLR/HLR MSC/MSC OMC/MSC OMC/HLR OMC/VLR OMC/BSS MSC/Fixed Network MSC/Voice messaging BSSMAP TCAP+MAP X.225 R2, ISUP other Signaling SCCP SCCP X.224 MTP MTP X.25 MTP SS7 SS7

Switching In MSC Signaling network is separated from the speech network and consists of signaling Links (SL) signaling Point (SP) signaling Transfer Part (STP).

Telephony system contains: Group Switch to switch the calls, ST to perform signaling in accordance with SS7 Trunk interfaces for interfacing the PCM. Group switch provides a semi permanent connection between time slot (PCM) and ST.

Signaling Point (SP) SP provides the functions of signaling and transmit and receive messages to and from different nodes. Each SP in the network will have an identification code termed as signaling Point Code (SPC).

Signaling Transfer Point (STP) Signaling Transfer Part is signaling point that only transfers messages from one signaling point (SP) to another. STP SP (SPC) STP SP (SPC)

Signaling Link (SL) Signaling Link is the 64kbps link interconnecting two signaling Points and provides the functions of message error control and message sequencing. Each signaling Link has an SLC (signaling Link Code), which identifies the signaling Link with in the signaling Link Set.

Service Switching Point (SSP) The MSC contains: The Service Switching Point One or more radio control point SSP handles the usual switching function and can be connected via 2Mbps PCM link with: Other exchanges of fixed PSTN or mobile PLMN, Points on the SS7 signaling network, X.25 network Continued..

The OA&M network, The Intelligent network, PSTN via user data channels and signaling channels using ISUP and R2 protocols, Other elements of the GSM

Switching Function of SSP: Main control, Switching matrix, PCM multiplex connection, Service circuits Operation and maintenance Establishing and releasing section of the links from and to mobiles, Finding circuits to the BSS; special circuit groups are created. SSP selects an incoming and outgoing circuit.

Call Routing If a number received is a national or international number, the address information is passed to the SSP. If the number received is an HPLMN (Home PLMN), the RCP asks the HLR for a roaming number (MSRN). This MSRN is passed to the SSP for routing. If the number received is an emergency service number, the originating geographic area is attached to it and the combined information passed to the SSP. Continued..

In the SSP the number received from RCP follow the standard translation process: Preliminary analysis: Selection of a translator (national, international), Translation: Determination of a routing depend on the first digits dialled, Routing: Determination of an outing circuit group.

Circuit Groups Call routes from the MSC through circuit groups. Different circuit groups are created inside it: Group for the PSTN (according to the exchange) Group for the BSCs Group for the Supplementary services Group for the IWF

CG1 CG2 BSC1 BSC2 MSC CGn CGa BSCn PSTN1 CGx CG PSTNx Supplementary Services CG IWF

Interfaces Section 3 NSS Topology

A-Interface (MSC BSC) The interface between the MSC and its BSS is specified in the 08-series of GSM Technical Specifications. The BSS-MSC interface is used to carry information concerning: BSS management; call handling; mobility management.

B-Interface (MSC VLR) The VLR is the location and management data base for the mobile subscribers roaming in the area controlled by the associated MSC(s). Whenever the MSC needs data related to a given mobile station currently located in its area, it interrogates the VLR. When a mobile station initiates a location updating procedure with an MSC, the MSC informs its VLR which stores the relevant information. This procedure occurs whenever an MS roams to another location area. Also, when a subscriber activates a specific supplementary service or modifies some data attached to a service, the MSC informs (via the VLR) the HLR which stores these modifications and updates the VLR if required.

C-Interface (HLR - MSC) The Gateway MSC must interrogate the HLR of the required subscriber to obtain routing information for a call or a short message directed to that subscriber.

D-Interface (HLR - VLR) This interface is used to exchange the data related to the location of the mobile station and to the management of the subscriber. The main service provided to the mobile subscriber is the capability to set up or to receive calls within the whole service area. To support this, the location registers have to exchange data. The VLR informs the HLR of the location of a mobile station managed by the latter and provides it (either at location updating or at call set-up) with the roaming number of that station. The HLR sends to the VLR all the data needed to support the service to the mobile subscriber. The HLR then instructs the previous VLR to cancel the location registration of this subscriber. Exchanges of data may occur when the mobile subscriber requires a particular service, when he wants to change some data attached to his subscription or when some parameters of the subscription are modified by administrative means

E-Interface (MSC - MSC) When a mobile station moves from one MSC area to another during a call, a handover procedure has to be performed in order to continue the communication. For that purpose the MSCs have to exchange data to initiate and then to realize the operation. After the handover operation has been completed, the MSCs will exchange information to transfer A-interface signaling as necessary. When a short message is to be transferred between a Mobile Station and Short Message Service Centre (SC), in either direction, this interface is used to transfer the message between the MSC serving the Mobile Station and the MSC which acts as the interface to the SC.

F-Interface (MSC - EIR) This interface is used between MSC and EIR to exchange data, in order that the EIR can verify the status of the IMEI retrieved from the Mobile Station.

G-Interface (VLR - VLR) When a mobile subscriber moves from a VLR area to another Location Registration procedure will happen. This procedure may include the retrieval of the IMSI and authentication parameters from the old VLR.

H-Interface (HLR - AUC) When an HLR receives a request for authentication and ciphering data for a Mobile Subscriber and it does not hold the requested data, the HLR requests the data from the AuC. The protocol used to transfer the data over this interface is not standardized.

Switch Modules Switch has three major types of equipment modules: Switching module (SM) Communication module (CM) Administrative module (AM)

Switching Module (SM): All external lines, trunks, and special services circuits are terminated at the switching module. The analog and digital signals are converted to the digital format used inside the switch. The SM performs almost 95% of the call processing and maintenance functions including: Line and trunk scanning Tone generation Announcements Call progress supervision Routine maintenance and self-maintenance.