GSM Tutorial

1 Introduction ....................................................................................................................................2
2. Architecture, Entities And Functions of the GSM network ..........................................................2
2.1 GSM Architecture....................................................................................................................2
2.2 GSM Network entities .............................................................................................................2
2.2.1 The Mobile Station ...........................................................................................................3
2.2.1.1 The Terminal .............................................................................................................3
2.2.1.2 The SIM .....................................................................................................................4
2.2.1 The Base Station Subsystem.............................................................................................4
2.2.1.1 The Base Transceiver Station ....................................................................................4
2.2.1.2 The Base Station Controller.......................................................................................4
2.3 The Network and Switching Subsystem..................................................................................4
2.3.1 The Mobile services Switching Center (MSC).................................................................4
2.3.2 The Gateway Mobile services Switching Center (GMSC) ..............................................4
2.3.3 Home Location Register (HLR) .......................................................................................5
2.3.4 Visitor Location Register (VLR) ......................................................................................5
2.3.5 The Authentication Center (AuC) ....................................................................................5
2.3.6 The Equipment Identity Register (EIR)............................................................................5
2.3.7 The GSM Interworking Unit (GIWU)..............................................................................5
2.4 The Operation and Support Subsystem (OSS) ........................................................................5
3 PLMN interfaces.............................................................................................................................6
3.1 General...............................................................................................................................6
Figure 2 - Signaling protocols from MS via BTS and BSC to MSC.............................................6
3.2 Interface between the MSC and Base Station System (A-interface).......................................6
3.2.1 Layer 1 ..........................................................................................................................6
3.2.2 MTP ..............................................................................................................................6
3.2.3 SCCP ............................................................................................................................7
3.2.4 Layer 3 ..........................................................................................................................7
3.3 Interface between BSC and BTS (Abis-interface).............................................................7
3.4 Interface between MS and BTS (Um-interface)................................................................7
3.5 Interface between the MSC and its associated VLR (B-interface)....................................8
3.5 Interface between the HLR and the MSC (C-interface) ....................................................8
3.6 Interface between the HLR and the VLR (D-interface) ....................................................8
3.7 Interface between MSCs (E-interface) ..............................................................................8
3.8 Interface between MSC and EIR (F-interface)..................................................................9
3.9 Interface between VLRs (G-interface) ..............................................................................9
3.10 Interface between HLR and AuC (H-Interface) ................................................................9
4 Services...........................................................................................................................................9
4.1 Tele-services ............................................................................................................................9
4.2 Bearer-services ......................................................................................................................10
4.3 Supplementary Services ........................................................................................................10
5. Different GSM networks .............................................................................................................10
6. Troubleshooting GSM network using GL GSM Analyzer..........................................................11
References .......................................................................................................................................11
 2

1 Introduction
The Global System for Mobile communications is a digital cellular communications system. GSM
was developed in order to create a common European mobile telephone standard but it has been
rapidly accepted worldwide. GSM was designed to be compatible with ISDN services.

This document gives an overview of a GSM PLMN (Public Land Mobile Network), GSM
architecture, interfaces, protocols between GSM entities and GSM frequency bands.

2. Architecture, Entities And Functions of the GSM network

GSM PLMN defines and summarizes description of the elements comprised in the network, and
their functions and the associated performance objectives within the digital cellular
telecommunications system. A GSM PLMN in cooperation with other networks provides, a set of
network capabilities, which are defined by standardized protocols and functions and enable
telecommunication services to be offered to customers.
The general objectives of a GSM PLMN network is to provide:

• Voice & non voice services, which are compatible with fixed networks like PSTN, ISDN
• Exclusive services to mobile stations.
• Facilities for automatic roaming, locating and updating mobile subscribers.
• Service to a wide range of mobile stations, including vehicle mounted stations, portable
stations and handheld stations.

In order for the system to support the services and facilities described above, a series of functions are
required.

2.1 GSM Architecture

In GSM, the covering area of an operator is divided into cells. A cell corresponds to the covering
area of one transmitter or a small collection of transmitters. The size of a cell is determined by the
transmitter's power.

The concept of cellular systems is the use of low power transmitters in order to enable the efficient
reuse of the frequencies. In fact, if the transmitters used are very powerful, the frequencies cannot be
reused for hundred of kilometers as they are limited to the covering area of the transmitter.

The frequency band allocated to a cellular mobile radio system is distributed over a group of cells
and this distribution is repeated in all the covering area of an operator. The whole number of radio
channels available can then be used in each group of cells that form the covering area of an operator.
Frequencies used in a cell will be reused several cells away. The distance between the cells using the
same frequency must be sufficient to avoid interference. The frequency reuse will increase
considerably the capacity in number of users.

2.2 GSM Network entities

A GSM network is composed of several functional entities, whose functions and interfaces are
specified. Figure 1 shows the entities of the GSM system.

The GSM network can be divided into four main parts:

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 3

• The Mobile Station (MS): carried by the subscriber

• The Base Station Subsystem (BSS): controls the radio link with the Mobile Station
• The Network and Switching Subsystem (NSS): performs the switching of calls between the
mobile users, and between mobile and fixed network users
• The Operation and Support Subsystem (OSS): which oversees the proper operation and setup
of the network.

The Mobile Station and the Base Station Subsystem communicate across the Um interface, also
known as the air interface or radio link. The Base Station Subsystem communicates with the Mobile
services Switching Center across the A interface.

Um

MS: Mobile Station VLR: Visited Location Register

BSS: Base Station System OMC: Operation and Maintenance Centre
MSC: Mobile services Switching Centre EIR: Equipment Identity Register
HLR: Home Location Register AUC: Authentication Centre

Figure 1 - General architecture of a GSM network

In the following, each of the different entities will be described.

2.2.1 The Mobile Station

A Mobile Station consists of two main elements:

• The mobile equipment or terminal.

• The Subscriber Identity Module (SIM).

2.2.1.1 The Terminal

There are different types of terminals distinguished principally by their power and application:

• The `fixed' terminals are the ones installed in cars. Their maximum allowed output power is
20 W.
• The GSM portable terminals can also be installed in vehicles. Their maximum allowed
output power is 8W.
• The handheld terminals have experienced the biggest success thanks to their weight and
volume, which are continuously decreasing. These terminals can emit up to 2 W. The
evolution of technologies allows decreasing the maximum allowed power to 0.8 W.

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 4

2.2.1.2 The SIM

The SIM is a smart card that identifies the terminal. By inserting the SIM card into the terminal, the
user can have access to all the subscribed services. Without the SIM card, the terminal is not
operational.

A four-digit Personal Identification Number (PIN) protects the SIM card. In order to identify the
subscriber to the system, the SIM card contains some parameters of the user such as its International
Mobile Subscriber Identity (IMSI).

Another advantage of the SIM card is the mobility of the users. In fact, the only element that
personalizes a terminal is the SIM card. Therefore, the user can have access to his subscribed
services in any terminal using the SIM card.

2.2.1 The Base Station Subsystem

The BSS connects the Mobile Station and the NSS. It is in charge of the transmission and reception.
The BSS can be divided into two parts:

• The Base Transceiver Station (BTS) or Base Station.

• The Base Station Controller (BSC).

2.2.1.1 The Base Transceiver Station

The BTS corresponds to the transceivers and antennas used in each cell of the network. A BTS is
usually placed in the center of a cell. Its transmitting power defines the size of a cell. Each BTS has
between one and sixteen transceivers depending on the density of users in the cell.

2.2.1.2 The Base Station Controller

The BSC controls a group of BTS and manages their radio resources. A BSC is principally in charge
of handovers, frequency hopping, exchange functions and control of the radio frequency power
levels of the BTSs.

2.3 The Network and Switching Subsystem

Its main role is to manage the communications between the mobile users and other users, such as
other mobile users, ISDN users, fixed telephony users, etc. It also includes databases needed in order
to store information about the subscribers and to manage their mobility. The different components of
the NSS are described below.

2.3.1 The Mobile services Switching Center (MSC)

It is the central component of the NSS. The MSC performs the switching functions of the network. It
also provides connection to other networks via GMSC.

2.3.2 The Gateway Mobile services Switching Center (GMSC)

A gateway is a node interconnecting two networks. The GMSC is the interface between the mobile
cellular network and the PSTN. It is in charge of routing calls from the fixed network towards a
GSM user. The GMSC is often implemented in the same machine as the MSC.

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 5

2.3.3 Home Location Register (HLR)

The HLR is the home register of the subscriber. All personalized information like Subscription
information, allowed services, authentication information and localization of the subscriber are
stored in the HLR. This information may be obtained by the VLR/MSC when necessary. When the
subscriber roams into the location area of another VLR/MSC, the HLR is updated. For mobile
terminated calls, the HLR is interrogated to find which MSC the MS is registered with. Because the
HLR is a centralized database that need to be accessed during every call setup and data transmission
in the GSM network, this entity need to have a very large data transmission capacity.

2.3.4 Visitor Location Register (VLR)

The VLR stores data about all customers who are roaming within the location area of that MSC. This
data is updated with the location update procedure initiated from the MS through the MSC, or
directly from the subscriber Home Location Register (HLR). The VLR will then have enough
information in order to assure the subscribed services without needing to ask the HLR each time a
communication is established. The VLR is always implemented together with a MSC; so the area
under control of the MSC is also the area under control of the VLR.

2.3.5 The Authentication Center (AuC)

The AuC register is used for security purposes. It provides the parameters needed for authentication
and encryption functions. These parameters help to verify the user's identity.

2.3.6 The Equipment Identity Register (EIR)

The EIR is also used for security purposes. It is a register containing information about the mobile
equipments. More particularly, it contains a list of all valid terminals. EIR identifies mobile
equipment by International Mobile Equipment Identity (IMEI). The EIR allows then to forbid calls
from stolen or unauthorized terminals (e.g., a terminal which does not respect the specifications
concerning the output RF power).

2.3.7 The GSM Interworking Unit (GIWU)

The GIWU corresponds to an interface to various networks for data communications. During these
communications, the transmission of speech and data can be alternated.

2.4 The Operation and Support Subsystem (OSS)

The OSS is connected to the different components of the NSS and to the BSC, in order to control
and monitor the GSM system. It is also in charge of controlling the traffic load of the BSS.

However, the increasing number of base stations, due to the development of cellular radio networks,
has provoked that some of the maintenance tasks are transferred to the BTS. This transfer decreases
considerably the costs of the maintenance of the system.

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 6

3 PLMN interfaces
3.1 General

The implementation of the mobile service with international roaming implies the exchange of data
between the equipments involved in the service. The same No.7 signalling network should be used
to transfer these data and the call-related signalling information.

Figure 2 shows an overview of the signalling protocols in the GSM network between the entities MS
and MSC.

Figure 2 - Signaling protocols from MS via BTS and BSC to MSC

3.2 Interface between the MSC and Base Station System (A-interface)

The interface between the MSC and its BSS is specified in the 08-series of GSM Technical
Specifications.
The BSS-MSC interface is used to carry information concerning:

- BSS management
- Call handling
- Mobility management

3.2.1 Layer 1

GSM 08.06 defines the structure of the physical layer (layer 1) of the BSS-MSC interface for
supporting traffic channels. Use of the physical layer for supporting Signalling System No.7
signalling links is covered in Technical Specification GSM 08.06.
Layer 1 shall utilize digital transmission:
- At a rate of 2048 kbit/sec with a frame structure of 32 * 64kbit/sec time slots, as specified in
CCITT Recommendation G.705 section 3 for E1 interface; or
- At a rate of 1544kbit/sec with a frame structure of 24*64 kbit/s time slots, as specified in
T1.102 specification for T1 interface.

3.2.2 MTP
GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 7

For E1 links, the MTP functions as specified in CCITT Recommendations Q.702, Q.703, Q.704 and
Q.707 are applicable. For T1 links, the MTP functions as specified in ANSI specifications T1.110
section 2, and T1.112 clause 2 are applicable.

3.2.3 SCCP

For E1 links, the minimum set of SCCP functions that apply are specified in the Blue Book CCITT
Recommendations Q.711, Q.712, Q.713 and Q.714, with the qualifications specified in this
Recommendation.
For T1 links, the minimum set of SCCP functions that apply are specified in ANSI T1.112 with the
qualifications specified in this Recommendation.

3.2.4 Layer 3

There are two currently identified in the BSS to MSC interface protocol, these are the:
BSSOMAP;
BSSAP.
The BSSAP is further subdivided into two sub protocols, the BSSMAP and the DTAP.
- The Direct Transfer Application sub-Part (DTAP) is used to transfer messages between the
MSC and the MS; the layer-3 information in these messages is not interpreted by the BSS. The
descriptions of the layer 3 protocols for the MS-MSC information exchange are contained in the 04-
series of GSM Technical Specifications.
- The BSS Management Application sub-Part (BSSMAP) supports other procedures between
the MSC and the BSS related to the MS (resource management, handover control), or to a cell within
the BSS, or to the whole BSS. The description of the layer 3 protocols for the BSSMAP information
exchange is contained in GSM 08.08.
The BSSOMAP (base station system operation and maintenance application part) supports all of the
O and M communications for the BSS with either the MSC or the BSS. The actual detailed protocol
at layer 3 is defined in the 12-series of GSM Technical Specification.

3.3 Interface between BSC and BTS (Abis-interface)

When the BSS consists of a Base Station Controller (BSC) and one or more Base Transceiver
Stations (BTS), this interface is used between the BSC and BTS to support the services offered to the
GSM users and subscribers.
The interface also allows control of the radio equipment and radio frequency allocation in the BTS.
The interface is specified in the 08.5x-series of GSM Technical Specifications.

3.4 Interface between MS and BTS (Um-interface)

The mobile station is connected to the PLMN fixed infrastructure via a radio path to a base station. It
is one of the most important interfaces of the GSM system. The radio interface in GSM uses a
combination between frequency (FDMA) and time (TDMA) multiplexing.

The FDMA part involves the division by frequency of the (maximum) 25 MHz bandwidth into 124
carrier frequencies spaced 200 kHz apart. One or more carrier frequencies are assigned to each base
station. Each of these carrier frequencies is then divided in time in to 8 bursts using a TDMA
scheme. The fundamental unit of time in this TDMA scheme is called a burst period and it lasts
15/26 ms (or approx. 0.577 ms). Eight burst periods are grouped into a TDMA frame (120/26 ms, or
approx. 4.615 ms), which forms the basic unit for the definition of logical channels. One physical

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 8

channel is one burst period per TDMA frame. Each of the eight bursts, which form a TDMA frame,
is then assigned to a single user. The bit rate for each channel is 22.8 kbit/s.

In order to get the TDMA scheme to work, the time frames from each mobile station must be
synchronized when received by the BTS. This synchronization is achieved by using the concept of
Timing Advance (TA).

A channel corresponds to the recurrence of one burst every frame. It is defined by its frequency and
the position of its corresponding burst within a TDMA frame. In GSM there are two types of
channels:

• The traffic channels used to transport speech and data information.

• The control channels used for network management messages and some channel
maintenance tasks.

3.5 Interface between the MSC and its associated VLR (B-interface)

The VLR is the location and management database for the mobile subscribers roaming in the area
controlled by the associated MSC(s). Whenever the MSC needs data related to a given mobile
station currently located in its area, it interrogates the VLR. When a mobile station initiates a
location updating procedure with an MSC, the MSC informs its VLR which stores the relevant
information. This procedure occurs whenever an MS roams to another location area. Also, when a
subscriber activates a specific supplementary service or modifies some data attached to a service, the
MSC informs (via the VLR) the HLR which stores these modifications and updates the VLR if
required.
This interface is internal to the MSC/VLR; signalling on it is not standardized.

3.5 Interface between the HLR and the MSC (C-interface)

The Gateway MSC must interrogate the HLR of the required subscriber to obtain routing
information for a call or a short message directed to that subscriber.
Signalling on this interface uses the Mobile Application Part (MAP), which in turn uses the services
of Transaction Capabilities. See TS GSM 09.02.

3.6 Interface between the HLR and the VLR (D-interface)

This interface is used to exchange the data related to the location of the mobile station and to the
management of the subscriber. The main service provided to the mobile subscriber is the capability
to set up or to receive calls within the whole service area. To support this, the location registers have
to exchange data. The VLR informs the HLR of the location of a mobile station managed by the
latter and provides it (either at location updating or at call set-up) with the roaming number of that
station. The HLR sends to the VLR all the data needed to support the service to the mobile
subscriber. The HLR then instructs the previous VLR to cancel the location registration of this
subscriber. Exchanges of data may occur when the mobile subscriber requires a particular service,
when he wants to change some data attached to his subscription or when some parameters of the
subscription are modified by administrative means.
Signalling on this interface uses the Mobile Application Part (MAP), which in turn uses the services
of Transaction Capabilities. See TS GSM 09.02.

3.7 Interface between MSCs (E-interface)

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 9

When a mobile station moves from one MSC area to another during a call, a handover procedure has
to be performed in order to continue the communication. For that purpose the MSCs have to
exchange data to initiate handover operation.
After the handover operation has been completed, the MSCs will exchange information to transfer
A-interface signalling as necessary.
When a short message is to be transferred between a Mobile Station and Short Message Service
Center (SC), in either direction, this interface is used to transfer the message between the MSC
serving the Mobile Station and the MSC, which acts as the interface to the SC.
Signalling on this interface uses the Mobile Application Part (MAP), which in turn uses the services
of Transaction Capabilities. See TS GSM 09.02.

3.8 Interface between MSC and EIR (F-interface)

This interface is used between MSC and EIR to exchange data, in order that the EIR can verify the
status of the IMEI retrieved from the Mobile Station.
Signalling on this interface uses the Mobile Application Part (MAP), which in turn uses the services
of Transaction Capabilities. See TS GSM 09.02.

3.9 Interface between VLRs (G-interface)

When a mobile subscriber moves from a VLR area to another Location Registration procedure will
happen. This procedure may include the retrieval of the IMSI and authentication parameters from the
old VLR.
Signalling on this interface uses the Mobile Application Part (MAP), which in turn uses the services
of Transaction Capabilities. See TS GSM 09.02.

3.10 Interface between HLR and AuC (H-Interface)

When an HLR receives a request for authentication and ciphering data for a Mobile Subscriber and it
does not hold the requested data, the HLR requests the data from the AuC. The protocol used to
transfer the data over this interface is not standardised.

4 Services
The services in GSM can be categorized in three main groups.

• Tele services
• Bearer services
• Supplementary Services

Tele services & Bearer services constitutes the basic services.

4.1 Tele-services

Tele-Services are Telecommunication Services that provide the user with necessary capacities
including terminal equipment functions, to communicate with any other users. The tele-services
group consists of, Telephony, Emergency Calls, Short Message Mobile Terminated Point-to-Point,
Short Message Mobile Originated Point-To-Point, Short Message Cell Broadcast, Alternate Speech
and Facsimile Group 3, Automatic Facsimile Group 3, Voice Group Call Service, Voice Broadcast
Service.

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 10

4.2 Bearer-services

Bearer services are Telecommunication Services that give the user the capacity needed to transmit
appropriate signals between certain access points (user-network interfaces). A bearer service is used
for transporting user data. Some of the bearer services are listed below:

• Data Circuit Duplex Asynchronous 300 - 9600 bit/s (T/NT)

• Data Circuit Duplex Synchronous 1200 - 9600 bit/s (T/NT)
• PAD Access Circuit Asynchronous 300 - 9600 bit/s (T/NT)
• Data Packet Duplex Synchronous 2400 - 9600 bit/s (T/NT)
• Alternate Speech/Data (T/NT)
• Speech followed by Data (T/NT)

4.3 Supplementary Services

A supplementary service modifies or supplements a basic telecommunication service (Bearer

Services and Teleservices). Consequently, it cannot be offered to a customer as a stand-alone
service. It must be offered together or in association with a basic telecommunication service.
Supplementary services are provided on top of teleservices or bearer services. They include, Call
Forwarding, Call Barring, Call hold, Call Waiting, Advice of Charge, Multiparty service, Closed
User Group, CUG & etc.

5. Different GSM networks

• GSM 900 (also called GSM) - operates in the 900 MHz frequency range and is the most
common in Europe and the world.
• GSM 1800 (also called PCN (Personal Communication Network), and DCS 1800) - operates
in the 1800 MHz frequency range and is found in a rapidly-increasing number of countries
including France, Germany, Switzerland, the UK, and Russia. A European Commission
mandate requires European Union members to license at least one DCS 1800 operator before
1998.
• GSM 1900 (also called PCS (Personal Communication Services), PCS 1900, and DCS 1900)
- the only frequency used in the United States and Canada for GSM. Note that the terms PCS
is commonly used to refer to any digital cellular network operating in the1900 MHz
frequency range, not just GSM.

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com
 11

6. Troubleshooting GSM network using GL GSM Analyzer

Problems in the network can be determined by analyzing the signaling information transported
between nodes in the network. GL GSM analyzer detects problems in the network by decoding
& displaying the signaling information. GL GSM analyzer can monitor multiple interfaces
simultaneously. Error messages can be quickly tracked using Filter option.
GL analyzer is an effective tool in:
• Checking network utilization, network performance, subscriber information and Quality of
service
• Network Optimization

References
1. GSM Recommendation 01.02, “General description of a GSM Public Land Mobile Network
(PLMN)”
2. GSM Recommendation 08.02, “BSS-MSC Interface-Interface Principles.”
3. GSM Recommendation 08.04, “BSS-MSC Layer 1 Specifications.”
4. GSM Recommendation 09.02, “Mobile Application Part (MAP) Specification.”
5. GSM Recommendation 08.08, “BSS-MSC Layer 3 Specifications.”
6. GSM Recommendation 04.08, “Mobile Radio Interface-Layer 3 Specifications.”

GL Communications
207 A Perry Parkway Suite One, Gaithersburg, MD 20877 ! (V) 301-670-4784 (F) 301-670-9187
Web Page Address: http://www.gl.com ! E-mail Address: gl-info@gl.com