traditional telephony network and...

53
Traditional telephony network and protocols Nicolas Montavont [email protected] Universidad de los Andes Merida, Venezuela May 2011 ULA - May 2011 page Traditional Telephony Networks Outline ! Introduction What is telephony Historic ! Architecture of the PSTN ! Common Channel Signaling ! Call setup 2

Upload: tranthien

Post on 17-Apr-2018

221 views

Category:

Documents


1 download

TRANSCRIPT

Traditional telephony network and protocols

Nicolas [email protected]

Universidad de los Andes

Merida, Venezuela

May 2011

ULA - May 2011page Traditional Telephony Networks

Outline

!Introduction

• What is telephony

• Historic

!Architecture of the PSTN

!Common Channel Signaling

!Call setup

2

ULA - May 2011page Traditional Telephony Networks

Introduction

!What is telephony?

3

ULA - May 2011page Traditional Telephony Networks

Introduction

!What is telephony?

4

ULA - May 2011page Traditional Telephony Networks

Introduction

!What is telephony?

5

ULA - May 2011page Traditional Telephony Networks

Introduction

!What is telephony

• Make the illusion to users that they are in the same room and that they can talk together

!Technically, it involves

• To set up a network

• To locate users

• To advertise users about incoming calls - signalling

• Voice encoding- Convert the voice signal to a digital signal

• Transmission and routing

• Management and supervision (administration)

!Global interoperability

• Need for standardization

!Quality of service

• Call set up failure

• Time to establish a communication

• Quality of the sound

• Interactivity

6

ULA - May 2011page Traditional Telephony Networks

Main principles…

!Passband for the voice transmission is [300; 3400Hz]

• where the voice is actually between [300; 7000Hz]!Circuit switched network

• Communication circuit reservation

• Need for a call setup and clear-down

!Digital transmission of the signal

• Pulse Code Modulation (PCM)

• Voice rate is 64 kbps

!Signaling network is independent from the voice transmission network

7

ULA - May 2011page Traditional Telephony Networks

History of telephony

!French invention

• 1854 : Charles Bourseul was the first to invent a system for the electric transmission of the voice

!First patent in 1876

• Alexander Graham Bell

• <tele> far away and <phone> sound

!Manual switch

• The connexion between two peers was made manually in telephony offices- Operators manually plugged in cords to provide the necessary circuit

connections

!Nowadays…

• The main concepts remain the same

• The technologie is totally different- Digital, automatic and computer programs

8

ULA - May 2011page Traditional Telephony Networks

The PSTN network Public Switched Telephone Network

!Allow to set up a call

• Find a path between a caller and a receiver

• Temporary connection between two subscribers- Allocate the resources for the duration of the call

• Clear down the resources after the call ends

!Main concepts

• Connection-oriented service

• Circuit switched

• Multiplexing

9

ULA - May 2011page Traditional Telephony Networks

Base elements of the PSTN

……

TandemSwitch

TandemSwitch

Trunks

Local loop on battery

Hundred

meters to

few

kilometers

Central office switch

Central office switch

Central office switch

Central office switch

A hundred or more connections - fiber (used to be 2 pair of wires)

10

ULA - May 2011page Traditional Telephony Networks

Link between switches

!Digital Multiplexing

• Transport of multiple channels on the same physical support

• Multiplexing unit: the sample

• Multiplexing in wavelength for optical fibers

!Required bandwidth

• 8000 bytes / second (1 byte every 125 !s)

• 64 kbps per voice channel

Unique transport system

11

ULA - May 2011page Traditional Telephony Networks

Hierarchical switched Network

12

ULA - May 2011page Traditional Telephony Networks

Routing

!Objective : Find a path in the graph of the switched network

!How does it work

• Static routing: routing tables are defined before deployment at the national level and uploaded in the switches

13

ULA - May 2011page Traditional Telephony Networks

Network property

!Asynchronous : No temporal constraints on packets. Each packet needs to reach the destination as fast as possible

!Synchronous : Temporal constraint on each packet : keep the end-to-end delay below a maximum threshold

! Isochronous : Double temporal constraint for each packet: packets must be transported between a minimum and maximum time

What is the time to cross the network?

14

ULA - May 2011page Traditional Telephony Networks

Impact of the delay

!Defined in the ITU-T G.114 recommandation

" t in ms G.114 Recommandation

0 to 150 ms Acceptable for most applications

150 to 400 ms Acceptable if the effect on applications are known

> 400 ms Not acceptable but in exceptional cases

15

ULA - May 2011page Traditional Telephony Networks

Signaling and signaling network

!This section presents two topics

• Signaling network: network for the transport of messages

• Signaling channel: application level

!Features

• Optimized for digital network

• High level of reliability

• Evolving

• Adapted for channels at 64 kbit/s

• A single signaling channel manages 2000 circuits

16

ULA - May 2011page Traditional Telephony Networks

What is Signaling?

!Set of control information exchanged among switches or between switches and end-terminals that are used to setup, tear down, or manage a communication

!The signaling is used for

• Set up and clear down a voice call

• Billing control

• Supervision and maintenance

17

ULA - May 2011page Traditional Telephony Networks

Introduction to the telephony signaling

!In data network there are 2 signaling modes• In-band signaling

- The signaling is transported inside the data

• out-of-band signaling- The signaling is transported independently from the data

!... in the PSTN• SS5: Channel Associated Signaling (CAS)

- Multiplexing of the voice and signalling within the same channel- DTMF 'Dual-Tone multi-frequency' signaling

• SS6 - SS7:Common Channel Signalling (CCS)- A specific (separated) channel is dedicated to the signaling of several voice channels

- Allow for new services (signaling independent from a call, or during a call)

18

ULA - May 2011page Traditional Telephony Networks

Common Channel Signaling

Control unit Control unit

NNI Signalling

UNI signalling UNI Signalling

Circuit 1

Circuit i

Circuit n

Signaling channelSignal Transfert Point

Signal Transfert Point

19

ULA - May 2011page Traditional Telephony Networks

SS7 Network components

!Service Switching Point (SSP)

• SSPs are the "brains" of the SS7 network and are usually located at phone switches. Because signaling messages will either originate or terminate within them, SSPs are considered "end points" on a network.

!Signaling Transfer Point (STP)

• STPs relay signaling messages. An STP is a packet switch that acts as a hub to transfer messages to other STPs, SCP databases, or SSPs.

!Service Control Point (SCP)

• An SCP is a database that holds information required to provide services that are more complex than basic call control (e.g., providing a business with an 800 number).

Voice circuits

SS7 link

SS7 link

20

ULA - May 2011page Traditional Telephony Networks

SS7 protocols architecture

OSI model SS7 protocols

21

ULA - May 2011page Traditional Telephony Networks

MTP - Message Transfer Part

! Switched network for data transmission

• First 3 levels of the stack

! The goal of MTP is to route signaling packets and ensure reliability

! MTP1

• Called Signaling Data Link Functional Level (Data Link Level)

• Equivalent to the physical layer of OSI

! MTP2

• Called Signaling Link Functional Level (Link Level)

• Equivalent to the data link of OSI (HDLC-like)

• Provides error detection and sequence checking, and retransmits unacknowledged messages

! MTP3

• Signaling Network Functional Level (Network Level)

• Equivalent to the network layer of OSI

• Addresses are only valid on the local (national) network

22

ULA - May 2011page Traditional Telephony Networks

Message Signaling Unit

INFORMATIONCIC

INFORMATIONSLSOPCDPCSIO FIN

INFORMATIONSLSOPCDPCSIO

Header

SLS : Route between the Signaling PointOPC / DPC : Src and dst SP

SIO: SAP

MTP2

MTP3

ISUP

Routing label

23

ULA - May 2011page Traditional Telephony Networks

User protocols

!Generate the signaling

!Several types

• ISDN User Part (see next)

• SCCP (signaling Connection Control Part)- Add functionalities to MTP3 - offer connection and non-oriented connection mode- Allow exchange of data independently from any telephony communication

• TCAP (Transactions Capabilities Application Part)- Also called Transaction Manager- Between the application and SCCP to facilitate dialog independently from any applications- Communication support for applications- Examples:

– Location of users– Call with a credit card (need further verification)– Network administration

24

ULA - May 2011page Traditional Telephony Networks

ISDN User Part (ISUP)

!Signalling protocol

• Use the MTP3 services (may also use SCCP)

!User sub-system

• Call setup

• Call clear-down

• Supervision of the call channel ((un)blocking, check, restart)

• Additional services

!Usage

• Analogic networks

• Mix networks

• Digital networks

25

ULA - May 2011page Traditional Telephony Networks

Protocols stack of ISUP

MTP 1

MTP 2

MTP 3

ISUPSCCP

MTP 1

MTP 2

MTP 3

ISUPSCCP

SS7

Signalisation NNI

Source Destination

26

ULA - May 2011page Traditional Telephony Networks

Overview of the user protocol

A B

User hangs up

Phone is ringing

User picks up

Communication

Call

Signaling User Part

27

ULA - May 2011page Traditional Telephony Networks

Call scenario

A B

REL

ACM

ANM

Communication

IAM

RLC

28

ULA - May 2011page Traditional Telephony Networks

Call scenario

SSP

STP

CAA CTPCTS

CAA

STP

STP

SSP SSP SSP

Ring

IAM

IAMIAM

pick up

Tone

Dial

Commutateur

d’origine

Commutateur

destination

29

ULA - May 2011page Traditional Telephony Networks

SSP

STP

CAA CTP CAA

STP

STP

SSP SSP SSP

ACM

ACMACM

Commutateur

d’origine

Commutateur

destination

CTS

30

Call scenario

ULA - May 2011page Traditional Telephony Networks

SSP

STP

CAA CTP CAA

STP

STP

SSP SSP SSP

ANM

ANMANM

Commutateur

d’origine

Commutateur

destination

Décroché

CTS

31

Call scenario

ULA - May 2011page Traditional Telephony Networks

Call scenario

SSP

STP

CAA CTP CAA

STP

STP

SSP SSP SSP

Commutateur

d’origine

Commutateur

destination

Communication

CTS

32

ULA - May 2011page Traditional Telephony Networks

ISDN

Integrated Services Digital Network

!First and last hop digital

!Why digital

• Allow the transmission of various type of communication on the same line (voice, image, video, text)

• May be seen as the evolution of the telephony network

• Tolerate more errors than an analogic signal

• Increase the power of computation (multiplexing, switch)

!ISDN

• Digital continuity from end to end

• Extend the concept of Common Channel Signaling to the interface between the user and the switch

33

ULA - May 2011page Traditional Telephony Networks

Goals and implementation

!The ISDN signaling extends the information exchanged between the user and the network

• Dedicated signaling channel

!Setup of a single network

• Simultaneous and heterogeneous services (e.g., voice + data)

!Service support

• Voice

• Audio 3,1KHz

• Digital Information without restriction

!Téléservice

• Télécopie

• Videotex

• Téléconférences

• Additional services : id of the caller, portability, call presentation, etc

34

ULA - May 2011page Traditional Telephony Networks

Signaling

ISUPISUP

Q.931 Q.931

UNI NNI UNI

35

ULA - May 2011page Traditional Telephony Networks

How does it work?

TNR

TE TE TE

Terminal equipment

RTC

ISDN bus : 144 kbits/sEach of the B channel: 64 kbpsD channel : 16 kbps

Digital termination of the network

36

ULA - May 2011page Traditional Telephony Networks

Q.931 signaling - main messages

! SETUP

• indicating the establishment of a connection! CALL PROCEEDING

• indicating that the call is being processed by the destination terminal! ALERTING

• tells the calling party that the destination terminal is ringing! CONNECT

• sent back to the calling party indicating that the intended destination has answered the call! DISCONNECT

• sent to indicate a request to terminate the connection, by the end that seeks to terminate! RELEASE

• sent in response to the disconnect request indicating that the call is to be terminated! RELEASE COMPLETE

• sent by the receiver of the release to complete the handshake

37

ULA - May 2011page Traditional Telephony Networks

Classical call flow

B

User hangs up

Phone is ringing

User picks up

Communication

Call

A B

Disconnect

Call Proceeding

Communication

Set Up

A

Alerting

Connect

Release

Release Complete

38

ULA - May 2011page Traditional Telephony Networks

Conclusion

!Global network for a dedicated application

• Everything is defined

!High level of QoS

!Main concepts

• PCM coding

- Passband [300, 3400Hz]

- Sampling at 8 kHz

- 64 kbps

• Separate two planes

- Data plane

- Control plane

!High cost of maintenance and evolution

39

On overview of GSM networks Global System for Mobile communication

ULA - May 2011page Traditional Telephony Networks

Terrestrial Mobile Service

!The terrestrial mobile service designates the telecommunication system that allows mobile stations to communicate, while being subject to movement within the border of a country or a continent

• This definition does not include satellite systems

• We consider bi-directional services

• We consider services including voice communications

• We focus on cell phone networks

41

ULA - May 2011page Traditional Telephony Networks

From the fixed networkto the mobile network

!During the 1900’s, a fixed network for telephony has been set up

• PSTN - Public Switched Telephony Network

• A network dedicated for telephony

!GSM aims at extending the PSTN to mobile user

• Use a radio interface between the user and the network

- Cut the cable which link a phone, computer, fax

• Support user mobility

• Main principals are maintained

- Separation of control and data plans

- Application protocol to establish / realize voice calls

- Digital communication

- Circuit switched network

42

ULA - May 2011page Traditional Telephony Networks

Main challenges for GSM

!Interconnection with the PSTN and potentially other networks

!Radio interface

• is shared among large amount of users

• is a broadcast channel

• is less reliable

• is rare and expensive

• Security

!Support the users mobility

• Roaming (movement without communication)

• Handover (movement while being in communication)

43

ULA - May 2011page Traditional Telephony Networks

Principles

!Re-use of radio resources

!Several identities for users

!Authentication and confidentiality

!Location managers

!Gateways between different kinds of networks

!Integration of services

• Voice and data

• Security

• Teleservices

44

ULA - May 2011page Traditional Telephony Networks

Cellular concept

!The goal of the GSM technology is to provide mobile communication for an entire country

!Communication between Base Station and Mobile Station

• The coverage is provided by a set of Base Stations

- Base Stations are distributed within an area in a way to provide full coverage

• Mobile Stations attach to those Base Stations which allow voice calls and other services

!The link between fixed telephony network and mobile system is provided through a fixed network called PLMN (Public Land Mobile Network)

!Frequency bands are 450MHz, 900MHz and 1800MHz

45

ULA - May 2011page Traditional Telephony Networks

Concept of a cell

! A service is made available if the radio link with a mobile station is good enough

! Control the power of the Base Station which are distributed on a region

• The area within which a Mobile Station is able to establish a link with a Base Station is called a Cell

! The problem is to set up a system with continuous services, which means that cells must be continuous

MobileStation

BaseStation

Cell

?

46

ULA - May 2011page Traditional Telephony Networks

Deployment example

Which frequency to use ?

Where is a user?

47

ULA - May 2011page Traditional Telephony Networks

Roaming and handover

!A mobile station must be able to call and to be called wherever it is located in the network

!During a communication, a Mobile Station may exit the coverage area of its serving Base Station

• The mobile Station needs to switch Base Station

48

ULA - May 2011page Traditional Telephony Networks

Overview of the location management for an incoming call

Cell 1 Cell 2

Home RegisteryMobile 1 is in Cell 1

1. Initiate a communication with Mobile

2. Call Mobile

3. Call Mobile

Visited registery

4. Voice conversation

49

ULA - May 2011page Traditional Telephony Networks

Overview of the Location Management

Cell 1 Cell 2

Home NetworkMobile 1 is in Cell 1

1. Mobile moves to Cell 2

3. Redirection of voice traffic

2. Information exchange between old and new

location

Active voice communication

50

ULA - May 2011page Traditional Telephony Networks

Radio resource management

!Number of frequencies is limited

!Number of Base Stations is large to cover a region

=> Re-use of the frequencies in non-adjacent cells

R - Radius of the cellD - Re-use distance

R

D

R

51

ULA - May 2011page Traditional Telephony Networks

Cellular deployment

!Pave the area with regular hexagon

!Optimize the number of simultaneous communication in an area

52

ULA - May 2011page Traditional Telephony Networks

Multiplexing

!Objectives

• Provide channel access to several users

• Provide a downlink and an uplink

!Uplink and downlink

• Frequency division

• Half of the frequency band is used for downlink and half is used for uplink

!Share the medium among several users

• TDMA - Time Division Multiple Access

• 8 time slots are used per channel

53

ULA - May 2011page Traditional Telephony Networks

Terminal and SIM card

! Subscriber = person who obtains a service from an operator and who is responsible of the payment

! SIM = Subscriber Identity Module

• Smart card

• Store the user data

- Identity- Last location area- Authorized services- Personal passwords

54

Mobile phone - device

Subscriber

ULA - May 2011page Traditional Telephony Networks

Phone numbers and identities

!MSISDN

• Mobile Station ISDN Number

• Phone number at which a subscriber can be called

! IMSI

• International Mobile Subscriber ID

• Uniquely identifies a user in the network

! IMEI

• International Mobile Equipment ID

• Unique identifier of equipment (cell phone)

!Other numbers

• MSRN - Mobile Station Roaming Number

• TMSI - TEmporary Mobile Station ID

55

ULA - May 2011page Traditional Telephony Networks

Why having multiple identities?

!More practical to manage subscribers

!It is possible to associate several numbers to a single user

!Protect the user from identity stealing

• Avoid sending the IMSI over the radio interface

!Manage mobility

56

GSM Architecture

ULA - May 2011page Traditional Telephony Networks

Three sets

!BSS - Base Station Subsystem

• Radio interface management

!NSS - Network Subsystem

• Communication management (switch and data base)

!OSS - Operation Support System

• Network management by the operator

58

ULA - May 2011page Traditional Telephony Networks

Why these sets?

!NSS vs BSS

• Communication management VS radio management

• NSS manages roaming- Memorize location and route calls

• BSS manages the specifics of the radio- channel allocation, radio transmission, handover

59

ULA - May 2011page Traditional Telephony Networks

Global overview

Um

60

ULA - May 2011page Traditional Telephony Networks

Components

! BSS: radio subsystem

• BTS Base Transceiver Station

- Antenna with a minimum of intelligence

• BSC - Base Station Controller

- Control a set of BTS

61

• NSS: Fixed subsystem

• MSC - Mobile Service Switching center

• Switch for mobile

• VLR - Visitor Location Register

• Data base for visiting mobiles

• HLR - Home Location Register

• Data base for subscribers

ULA - May 2011page Traditional Telephony Networks

Power of the BTS

!It is possible to dynamically control the power of the BTS

Class Power in Watts for GSM 900 Power in Watts for DCS 1800

1 from 320 to 640 from 20 to 40

2 from 160 to 320 from 10 to 20

3 from 80 to 160 from 5 to 10

4 from 40 to 80 from 2.5 to 5

5 from 20 to 40

6 from 10 to 20

7 from 5 to 10

8 from 2.5 to 5

M1 from 0.08 to 0.25 from 0.5 to 1.6

M2 from 0.03 to 0.08 from 0.16 to 0.5

M3 from 0.01 to 0.03 from 0.05 to 0.16

Normal BTS

Micro-BTS

62

ULA - May 2011page Traditional Telephony Networks

BTS-BSC configuration

63

ULA - May 2011page Traditional Telephony Networks

BSC functionalities

!Smart part of the BSS

!Manage the radio interface

• Channels Allocation

• Use of the measures made by the MS and the BTS

• Control the power of the MS

• Decision for handovers

!Manage interfaces with the architecture

• With BTS

• With MSC

• With OSS

64

ULA - May 2011page Traditional Telephony Networks

HLR - Home Location Register

!Manage data base for subscribers

• Information on a user

- IMSI - International Mobile Station Identity

- MSISDN - Mobile Station ISDN Number

- Profile: restriction, additional services, etc

• Location information

- Identity of the VLR where the subscriber is

65

ULA - May 2011page Traditional Telephony Networks

MSC - Mobile-Services Switching Centre

! Manages communication between the mobile stations and the PSTN

! Executes some handover

! Link with the PSTN network

! GMSC function

• Gateway for the incoming calls

! SM-GMSC function

• Gateway for short messages

! Scale

• several hundred of thousands subscribers

66

ULA - May 2011page Traditional Telephony Networks

VLR - Visitor Location Register

! Data base of mobile users that are currently connected to

the MSC

• IMSI - International Mobile Station Identity

• MSISDN - Mobile Station ISDN Number

• TMSI - Temporary Mobile Station Identity

• User profile (restriction, additional services)

• Location area

! Manage the roaming number MSRN

• Mobile Station Roaming Number

• Used for incoming calls between the GMSC and the MSC

! Deployment

• It is possible to have n VLR for 1 MSC or 1 VLR for n MSC

• Usually 1 VLR is coupled with 1 MSC

• Several hundred of thousands subscribers are managed by

a VLR

67

ULA - May 2011page Traditional Telephony Networks

Administration subsystem

! Role

• Monitor network performance

• Commercial administration

• Monitor security

• Equipment maintenance

! EIR - Equipment Identity Register

• Optional - may not be used

• Data base of IMEI (International Mobile Equipment Identity)

! Network management is split in 2 parts

• OMC - Operation and Maintenance system

- Supervise a set of local equipment

- Ex: an OMC-radio may manage some BTS and BSC

• NMC - Network Management Centre

- General administration of the whole network

68

ULA - May 2011page Traditional Telephony Networks

Terminal equipment

! Car phone

• Equipment which is mounted inside a vehicle with an outdoor antenna

! Portable

• Equipment that we can carry, but the antenna is not physically attached to the set keyboard/screen.

! Hand-held station

• Cell phone where the antenna, the keyboard and the screen are on the same device

GSM 900 Power Type

Class 2 8W Vehicule/Portable

Class 3 5W hand-held

Class 4 2W hand-held

Class 5 0.8W hand-held

69

Protocols suite

ULA - May 2011page Traditional Telephony Networks

Role of each interface

Name Location Usage

Um MS - BTS Radio interface

Abis BTS - BSC Various

A BSC - MSC Various (interface BSS - NSS)

C GMSC - HLR Request HLR for incoming calls

C SM-GMSC - HLR Request HLR for incoming short msg

D VLR - HLR Location and subscription management

D VLR - HLR Additional services

E MSC - SM-GMSC Short messages transport

E MSC - MSC Handover execution

F VLR - VLR Subscriber information management

G MSC - EIR Check the terminal ID

H HLR - AUC Authentication

SS7

71

ULA - May 2011page Traditional Telephony Networks

SS7 usage in GSM networks

72

! SS7 is the signalling system in telephony network

! SS7 is used on

• A interface, between the BSC and MSC/VLR

• Within NSS

! Organization

• Each operator defines its own semaphore network

• MSC/VLR and HLR are Semaphore Point

• a MSC/VLR from a country must be able to call an HLR in another country

! Use of MAP (Mobile Application Part) for mobility management in NSS

! Re-use ISUP protocol for call establishment

ULA - May 2011page Traditional Telephony Networks

Inter-connection with PSTN

73

ULA - May 2011page Traditional Telephony Networks

International connection

!Each PLMN is connected

• To the international SS7 network

• To the international telephony circuit switched network

74

ULA - May 2011page Traditional Telephony Networks

Level 3 of the radio interface

! CM - Connection Management

• Re-use of the layer 3 of ISDN between the MS and the MSC (Q.931)

• 3 components

- CC - Call control

- SS - Supplementary services

- SMS - Short Messages

! MM - Mobility Management

• Between the MS and the MSC

• Location update, authentication, MM connection management

! RR - Radio Resource management

• Between the MS and the BSC

• Allocate channel, handover decision, etc

75

ULA - May 2011page Traditional Telephony Networks

The protocol stack

CM = Connection ManagementMM = Mobility ManagementRR = Radio RessourceLAPD = Link Access Protocol-D ChannelMTP = Message Transfer PartSCCP = Signaling Connection Control PartBSSAP = Base Station System Application Part

(SS7)

76

ULA - May 2011page Traditional Telephony Networks

Message identification

Wired case

!Each subscriber line is connected to a port on the switch

• Physical identification of the link

77

ULA - May 2011page Traditional Telephony Networks

Message identification

GSM case

!MS sends messages over the radio interface

!MSC receives the messages from a SCCP connection with the BSC

• Does not see the radio specificities

!Usage of an association table in the BSC

BTS + physical channel SCCP connection

15 (slot 3, Freq 41) Connection 27

... ...

Physical channel SCCP connection

78

ULA - May 2011page Traditional Telephony Networks

Layered architecture in NSS

!Principles• Use SS7

• Re-use at maximum classic protocols (ISUP, SSUTR2)

• Additional protocol MAP to manage roaming

79

CO

Roaming and security

ULA - May 2011page Traditional Telephony Networks

Problem Statement

!Roaming

• Location of each mobile station

• Active mobile, even if is is in stand-by mode

!Radio channel

• User authentication

• Temporary identity

• Encryption

81

ULA - May 2011page Traditional Telephony Networks

Numbers

! IMSI - International Mobile Station Identity

• Permanent identification of a user within the GSM network

!TMSI - Temporary Mobile Station Identity

• Temporary identity of a mobile station used between the mobile station and its BTS

!MSISDN - Mobile Station ISDN Number

• Phone number (can be used by other network, e.g., from the PSTN)

!MSRN - Mobile Station Roaming Number

• Number which is allocated for a call

! IMEI - International Mobile Equipment Identity

• Uniquely identify a device (phone terminal)

82

ULA - May 2011page Traditional Telephony Networks

Call example

7. MSC finally calls the MS by using the TMSI

1. The MSISDN is dialed and routed by the fixed network to the closest MSC

2. GMSC requests the HLR to identify the current MSC

3. HLR translates the MSISDN and request the current VLR

4. VLR allocates a MSRN and send it to the HLR

5. HLR forwards the MSRN to GMSC

6. GSMC establishes the call toward the current MSC, just as a classic call

83

ULA - May 2011page Traditional Telephony Networks

Authentication and encryption

!Radio communication

• Confidentiality threads

- Communication may be listened

• Security threads

- Pirate mobile phone

!GSM solution

• IMSI confidentiality

• User authentication

• User data confidentiality

• Signaling confidentiality

84

ULA - May 2011page Traditional Telephony Networks

User identity confidentiality

!GSM avoids to send IMSI over the radio interface

• Maintain the confidentiality of users identity

• Usage of the TMSI

!Implementation

• VLR generates TMSI for MS

- At least each time the MS changes VLR, and maybe more often

• VLR maintains the correspondence between IMSI and TMSI

• Only at bootstrap or upon failure, the IMSI needs to be sent over the radio interface

• The allocation of the TMSI is encrypted

85

ULA - May 2011page Traditional Telephony Networks

TMSI allocation

SIM MSC/VLR

Location Updating Request (LAI, TMSIold)

Encryption process

Allocation of TMSInew

TMSI Reallocation Command (TMSInew)

Memorize TMSInew

TMSI Reallocation Complete

Deallocation of TMSIold

86

ULA - May 2011page Traditional Telephony Networks

Authentication and encryption Main principles

!Random Numbers (RAND)

!Authentication key Ki

• Ki is the base secret

• Allocated to a user (never sent over the network)

• Authentication (SRES) and determination of the encryption key Kc

!Kc is an encryption key

!Several algorithms

• SRES = A3(RAND, Ki)

• Kc = A8(RAND, Ki)

• A5 algorithm for encryption from Kc

87

ULA - May 2011page Traditional Telephony Networks

Security principals

RAND Ki

A3 A8

RAND SRES Kc

Authentication A5Encryption

Triplet

88

ULA - May 2011page Traditional Telephony Networks

User ID authentication

89

ULA - May 2011page Traditional Telephony Networks

Encryption

90

ULA - May 2011page Traditional Telephony Networks

Distribution of security data

91

Roaming & Location Management

ULA - May 2011page Traditional Telephony Networks

Why do we need location management?

! The last hop is wireless

• Radio interface

• No wired link between the network and the terminal

! No wire ⇒ mobility

• Users can move around

- While they are in stand-by mode

- While they are in a communication

⇒ We need to locate a user

• In case of an incoming call

• Support its mobility : do not break the communication while the user is moving

• Provide efficient methods

- To scale to a large number of users and coverage

- Because signaling is not paid by users

93

ULA - May 2011page Traditional Telephony Networks

Definition

!Roaming: MS without any active communication which is in motion

!Handover: MS with an active voice call which is moving

!Several types of movement

• Inter / intra BSC

• Inter / intra MSC

!Paging

• Research of a user in the network

94

ULA - May 2011page Traditional Telephony Networks

Location management Different choices

! Only search a MS when you need it

• Cost of location: 0

• Cost of research: high

- The entire network is flooded to find the MS

! Always know the exact position of MS

• Cost of location: high

- Each movement must be advertised to the network

- The network needs to store large amount of information

• Cost of research: 0

- The network knows exactly where is the MS, paging is not needed

! Intermediate mechanism

• Define Location Area

95

ULA - May 2011page Traditional Telephony Networks

Location Area

!Set of cells

!Location of the MS = identifier of the location area

!Allow having a rough location of the MS

Cell Border of the location area

96

ULA - May 2011page Traditional Telephony Networks

When do you update the location?

!Manually

• In some systems (e.g., CT2/CAI) users could manually update their position

• Simplify the terminal and network functions

• Does not scale

!Periodically

• Every Xs, the terminal sends its position to the network

• Easy to implement, but may generate to much traffic

!Update upon a change

• When the terminal detects a change in its location area, it informs the network

• Need the BTS to periodically send a Location Area Identifier

97

ULA - May 2011page Traditional Telephony Networks

Roaming management

! Location trade-off

• Make the precise location of MS known by all entity is costly

- Frequent location updates are needed

• Maintain a rough location of MS

- Cost of location update is low

- Research of the MS is costly

! GSM choice : 2 mechanisms

• Location

- Knowledge of the location area of the mobile station

- Location updates are made by the MS

– At each change in the location area

– Periodically

• Paging

- Find the precise location of a mobile station upon an incoming call

- Only look into the known location area

98

ULA - May 2011page Traditional Telephony Networks

Location Area Identification

!MCC - Country Code

!MNC - PLMN identification

!LAC - Number of the location area, freely allocated by the operator

MCC MNC LAC

99

ULA - May 2011page Traditional Telephony Networks

Who knows what?

LAIk

IMSIa, TMSIa, LAIk

IMSIa => MSCj, LAIk, TMSIa

MSCj

GMSC

MSISDN => VLRi, IMSIa

100

Some call flows

ULA - May 2011page Traditional Telephony Networks

Outgoing calls

102

ULA - May 2011page Traditional Telephony Networks

Incoming call

103

ULA - May 2011page Traditional Telephony Networks

Incoming call

104

ULA - May 2011page Traditional Telephony Networks

Conclusion

!GSM is a very popular system

• By 2005, more than 75% of the worldwide cellular network market

• Over 3 billions of subscribers in 219 countries

!Extend the fixed telephony network with a radio interface

• TArget the same quality of service - a dedicated architecture for a dedicated (single) application

!Strongly evolve over the past 15 years towards data communication

105

2G 3G 4G

GSM 1992

GPRS 1997

EDGE 1998

UMTS 2000

HSPA 2002

HSPA+ 2007

LTE 2008

LTE-Adv

2011