In: Categories » Electronics and communication » Wireless and mobile computing » GSM Call Management Procedures
|
This article outlines some call management procedures, namely, mobile initialization, location update, authentication, ciphering, mobile station termination, mobile station origination, handover, and call clearing. Mobile Initialization There are three main goals of the mobile initialization procedure: 1. Frequency synchronization 2. Timing synchronization 3. Overhead information acquisition Frequency Synchronization. As the terminal is switched on, it scans over the available GSM RF channels and takes several readings of their RF levels to obtain an accurate estimate of the signal strengths. Starting with the channel with the highest level, the terminal searches for the frequency correction burst on the BCCH. If no frequency correction burst is detected, it then moves to the next highest level signal and repeats the process until it is successful. In this event, the terminal will then synchronize its local oscillator with the frequency reference of the base station transceiver. Timing Synchronization. After frequency synchronization has been achieved, the terminal will search for the synchronization burst for the timing information present on the SCH. If it is not successful, it then moves to the next highest level signal and repeats the process starting from the frequency synchronization procedure until it is successful. In this event, it moves to the BCCH to acquire overhead system information. Overhead Information Acquisition. After timing synchronization has been achieved, the terminal will search for overhead information on the BCCH. If the BCCH information does not include the current BCCH number, it will restart the mobile initialization procedure. In a successful event, the terminal will have acquired, from the BCCH and through the system information message present on the BCCH, the following main information:
Location Update A location update procedure is carried out in one of the following events: The terminal is switched on and verifies that the identification codes present on the current BCCH do not coincide with those in the SIM card. The terminal moves into a location area different from that within which it is currently registered. There has been no activity for a preestablished amount of time. As part of the process used to speed the paging procedure, location reports are used. These location reports are periodic reports used to update the location of the terminal so that, in the event of a page, the latest reported location is used as an initial guess to locate the terminal. The time span between location reports constitutes a system parameter whose value is indicated on the BCCH, varying in accordance with the network loading. The location update procedure starts with the uplink channel request message on the RACH. The network answers with an immediate assignment message on the AGCH indicating the SDCCH number to be used throughout the location update procedure. The terminal moves to this SDCCH and sends a location updating request message with its identification (IMSI or, preferably, TMSI). An authentication procedure is then carried out. In case the authentication is unsuccessful, the procedure is aborted. In a successful event, the ciphering procedure is performed. The network then uses the location updating accept message to assign a new TMSI to the terminal. The terminal stores its TMSI and responds with a TMSI allocation complete message. The location update is concluded with a channel release message from the network to the terminal. The terminal then resumes its PCH monitoring procedure. Authentication An authentication procedure may be required at the location update procedure or at the request of a new service. The authentication procedure starts with the network sending an authentication request message to the terminal; the message conveys a 128-bit random number (RAND). The terminal uses the RAND, the secret key, Ki, stored at SIM, and the encryption algorithm, referred to as A3, to compute a 32-bit number, referred to as a signed response (SRES). Another 64-bit key, the ciphering key, Kc, is computed using another encryption algorithm, referred to as A8. The Kc parameter is later used in the ciphering procedure. After these computations, the terminal responds with an authentication response message, which contains the SRES. The network uses the same parameters and the same algorithm to compute another SRES. The terminal SRES and the network SRES are then compared with each other. If a match occurs, the network accepts the user as an authorized subscriber. Otherwise, the authentication is rejected. Ciphering Ciphering (or encryption) is usually required for user transactions over the RF link after authentication has been successful. The network transmits a ciphering mode message to the terminal indicating whether or not encryption is to be applied. In case ciphering is to be performed, the secret key Kc (64 bits), which was generated previously in the authentication procedure, the frame number (22 bits), and an encryption algorithm, referred to as A5, are used to compute a 114-bit encryption mask. This mask is modulo-2 added to the 2 × 57 = 114 bits of the data fields, in the bursts. Deciphering is obtained at the base station by performing the same procedure. The terminal answers with a ciphering mode acknowledgment message. Note that the ciphering to be used is continuously changing (on a frame-by-frame basis), because it depends on the current frame number. Mobile Station Termination After the mobile initialization procedure, the terminal camps on the PCH. It eventually detects a paging request message conveying its TMSI. This impels the terminal to access the RACH to transmit a channel request message. An immediate assignment with theSDCCHnumber is sent by the network on the AGCH.The terminal moves toSDCCHand the following occurs. The terminal transmits a paging response message indicating the reason for the specific message (response to a paging). An authentication procedure is carried out, as already described. In a successful event, a ciphering procedure is accomplished, as already described. The base station then sends a setup message. The terminal responds with a call confirmed message followed by an alerting message to indicate that the subscriber is being alerted. At the subscriber’s call acceptance, the terminal sends a connect message and removes the alerting tone. The network responds with an assignment command message indicating the traffic channel number to be used for the conversation. The subscriber, still on the SDCCH, responds with an assignment acknowledgment message and moves to the traffic channel that has been assigned. The network confirms the acceptance of the call by the other party by means of a connect acknowledgment message on the FACCH of the assigned TCH. And the conversation proceeds on the TCH. Mobile Station Origination The terminal detects a user-originated call. It then accesses the RACH to send a channel request message. An immediate assignment with the SDCCH number is sent by the network on the AGCH. The terminal moves to this channel and the following occurs. The terminal transmits a paging response message indicating the reason for the specific message (call setup). The base station responds with an unnumbered acknowledgment message.Anauthentication procedure is carried out, as already described. In a successful event, a ciphering procedure is performed, as already described. The terminal then sends a setup message. The base station responds with a call confirmed message followed by an alerting message in which case the terminal applies the ring-back tone. At the called party’s call acceptance, the network sends an assignment command message informing the traffic channel number to be used for the conversation. The subscriber, still on the SDCCH, responds with an assignment acknowledgment message and moves to the traffic channel that has been assigned. The network confirms the acceptance of the call by the other party by means of a connect acknowledgment message on the FACCH of the assigned TCH. And the conversation proceeds on the TCH. Handover The handover process in aGSMnetwork has the mobile terminal as an integral part of the procedure. The whole process is named mobile-assisted handover (MAHO). While making use of the traffic channel, the mobile monitors the signal levels of its own channel, of the other channels of the same cell, and of the channels of six surrounding cells. The measurements are then reported to the base on an SACCH. Concerning the control of the process, handovers may occur:
In addition, there are two modes of handovers: synchronous or asynchronous. In the synchronous mode, the origin cell and the destination cell are synchronized. By measuring the time difference between their respective time slots, the mobile itself may compute the timing advance. This is used to adjust its transmissions on the new channel, therefore, speeding up the handover process. In the asynchronous mode, the origin cell and the destination cell are unsynchronized. The timing advance, in this case, must be acquired by means of a procedure involving the terminal and the new BTS, as follows. The mobile terminal sends a series of access bursts with a zero timing advance through several handover access messages. The BTS then computes the required timing advance using a round-trip time delay of the messages. On the average, the handover processing time in the synchronous mode (200 ms) is twice as long as that of the synchronous mode (100 ms). Next a simple asynchronous handover procedure occurring between BTSs of the same BSC is described. While in conversation on a TCH, the terminal monitors the signal levels of several channels. These measurements are reported to the base station on a periodic basis by means of the measurement report message running on the SACCH. Whenever suitable, the base sends a handover command message on the FACCH, indicating that a handover is to take place. The number of the new TCH is included within the message. The terminal then moves to this new channel and sends a series of handover access messages so that the base may compute the timing advance to be transmitted to the terminal. This is done in the physical information message transmitted to the terminal on the FACCH. The timing adjustment is carried out and the terminal responds with a handover complete message. Call Clearing The call clearing process may be initiated either by the network or by the mobile. In either case, the channel used for the exchange of information is the BCCH. Assuming the network initiates the clearing, the base sends a disconnect message to the terminal. The terminal responds with a release message. The base replies with a release complete message. If the terminal initiates the clearing, then the same messages flow, but in the opposite direction.
|
legal disclaimer
1) Our website is not responsible for the information contained by this article as well for any and all copyright infringements by authors and writers. E-articles is a free information resource. If you suspect this article for any copyright infringements, please read the Terms of service and contact us to investigate the problem.
2) The E-articles directory team is not responsible for inaccuracies, falsehoods, or any other types of misinformation this tutorial may contain and will not be liable for any loss or damage suffered by a user through the user's reliance on the information gained here. Please read the Terms of service
Useful tools and features
If you like this article (tutorial), please link to it from your web page using the information above. Linking to this page, this is the only way to help us improve our service, the same time providing your visitors with a way to improve their online experience.
related articles
When a surveillance attack is either impossible or too difficult, war driving is an effective alternative. In many situations, war driving follows and adds information to a prior surveillance attack. Conversely, the information obtained from random war driving often leads to a surveillance attack on a discovered location. The term war driving is borrowed from the 1980s phone hacking tactic known as war dialing. War dialing involves dialing all the phone numbers in a given sequence to search for modems. In fact, this method of ...
2. How To Get Photo Quality Prints
There are a variety of ways to get photo-quality prints from your digital images. You can make them yourself with a printer at home, or have a photo finisher do the work for you. Many camera stores offer photo finishing from digital images. Simply take in your memory card, order the prints, and pick them up the next day. This service is now available in most drugstore chains, too—instead of dropping off a roll of film while running your errands, you leave them your memory card instead. You can also order prints throu...
3. Wireless Privacy Protocols ~ WEP detailed
The Wired Equivalent Privacy protocol is incorporated as part of the IEEE 802.11b protocol. Actually, the standard only calls for 40-bit WEP, but almost all vendors offer up to 128-bit WEP. To secure data, WEP uses the RC4 algorithm to encrypt the packets of information as they are sent out from the access point or wireless network card. This is the same algorithm used in many other Internet applications that require security, such as Secure Sockets Layer (SSL). SSL is the most common protocol used by online stores to e...
4. Wireless Attacks ~ Rogue Access Points
Rogue access points are those connected to a network without planning or permission from the network administrator. For example, we know one administrator in Dallas who just did his first wireless security scan (war driving) on his eight-building office campus. To his surprise, he found over thirty access points. Worse, only four of them had authorization to be connected to the network. Needless to say, heads rolled. Rogue access points are becoming a major headache in the security industry. With the price of low-end ac...
There are various wireless communication protocols. These technologies range in scope from long distance WLANs to one-meter IrDA devices. Each of these technologies has its niche, as well as its attendant strengths and weaknesses. For example, WLANs enable the transmission of data up to several hundred feet, but often require manual configuration changes that are difficult to implement. On the other hand, IrDA permits a seamless connection between devices without the need for extra configuration. However, their usability is de...
6. Wireless Network Protocols ~ Understanding HomeRF and IrDA
About the same time WECA approved the 802.11 standard, several other types of wireless technologies were being introduced. Although a few have made a rather impressive niche in the Personal Area Network (PAN) market, the only other WLAN technology that came close to competing with 802.11 was HomeRF. Using the Shared Wireless Access Protocol (SWAP), HomeRF merges the 802.11 FHSS standard with the six voice channels based on Digital Enhanced Cordless Telecommunications (DECT). In other words, the home network included both ...
7. WLAN Broadcasting ~ MiniStumbler ~ a wireless network scanner
MiniStumbler is a very user-friendly wireless network scanner that listens for beacon signals coming from open and broadcasting WLANs. In addition, this program will provide a plethora of information that makes it very useful for both hackers and the security professionals. As you will see, MiniStumbler might be small, but it packs a load of power in its functionality. Installing MiniStumbler MiniStumbler is a basic one-file program that simply needs to be downloaded, unzipped, and placed in the My Documents sha...
8. How To Present a Digital Slideshow
Slideshows are an age-old photographic tradition. Digital cameras make it easier than ever to present your images to many people at once. Most digicams have a "video out" capability that lets you connect your camera directly to a television for playback on a large screen. If your camera has this functionality, it most likely has a slideshow mode that allows you to choose images that are stored on the memory card and present them on the television in timed intervals. All you have to do is turn on the stereo for some ba...