Preface xiii
List of Figures xv
List of Tables xxiii
List of Abbreviations xxv
1 Global System for Mobile Communications (GSM) 1
1.1 Circuit-Switched Data Transmission 1
1.1.1 Classic Circuit Switching 1
1.1.2 Virtual Circuit Switching over IP 3
1.2 Standards 4
1.3 Transmission Speeds 4
1.4 The Signaling System Number 7 5
1.4.1 The Classic SS-7 Protocol Stack 6
1.4.2 SS-7 Protocols for GSM 8
1.4.3 IP-Based SS-7 Protocol Stack 9
1.5 The GSM Subsystems 10
1.6 The Network Subsystem 11
1.6.1 The Mobile Switching Center (MSC) 11
1.6.2 The Visitor Location Register (VLR) 13
1.6.3 The Home Location Register (HLR) 14
1.6.4 The Authentication Center 18
1.6.5 The Short Messaging Service Center (SMSC) 19
1.7 The Base Station Subsystem (BSS) and Voice Processing 21
1.7.1 Frequency Bands 21
1.7.2 The Base Transceiver Station (BTS) 23
1.7.3 The GSM Air Interface 24
1.7.4 The Base Station Controller (BSC) 30
1.7.5 The TRAU for Voice Encoding 34
1.7.6 Channel Coder and Interleaver in the BTS 38
1.7.7 Ciphering in the BTS and Security Aspects 39
1.7.8 Modulation 42
1.7.9 Voice Activity Detection 43
1.8 Mobility Management and Call Control 44
1.8.1 Call Reselection and Location Area Update 44
1.8.2 The Mobile-Terminated Call 46
1.8.3 Handover Scenarios 49
1.9 The Mobile Device 51
1.10 The SIM Card 53
1.11 The Intelligent Network Subsystem and CAMEL 58
1.12 Questions 60
References 60
2 General Packet Radio Service (GPRS) and EDGE 63
2.1 Circuit-Switched Data Transmission over GSM 63
2.2 Packet-Switched Data Transmission over GPRS 64
2.3 The GPRS Air Interface 66
2.3.1 GPRS vs. GSM Timeslot Usage on the Air Interface 66
2.3.2 Mixed GSM/GPRS Timeslot Usage in a Base Station 68
2.3.3 Coding Schemes 68
2.3.4 Enhanced Datarates for GSM Evolution (EDGE) 70
2.3.5 Mobile Device Classes 73
2.3.6 Network Mode of Operation 73
2.3.7 GPRS Logical Channels on the Air Interface 75
2.4 The GPRS State Model 77
2.5 GPRS Network Elements 80
2.5.1 The Packet Control Unit (PCU) 80
2.5.2 The Serving GPRS Support Node (SGSN) 81
2.5.3 The Gateway GPRS Support Node (GGSN) 83
2.6 GPRS Radio Resource Management 84
2.7 GPRS Interfaces 88
2.8 GPRS Mobility Management and Session Management (GMM/SM) 92
2.8.1 Mobility Management Tasks 93
2.8.2 GPRS Session Management 94
2.9 Session Management from a User Point of View 97
2.10 Small Screen Web Browsing over GPRS and EDGE 100
2.10.1 WAP 1.1 Used in Early GPRS Devices 101
2.10.2 WAP 2.0 103
2.10.3 Small Screen Web Browsing with Network Side Compression 104
2.10.4 Small Screen Web Browsing – Quality of Experience 105
2.11 The Multimedia Messaging Service (MMS) over GPRS 106
2.12 Web Browsing via GPRS 110
2.12.1 Impact of Delay on the Web-Browsing Experience 110
2.12.2 Web Browser Optimization for Mobile Web Browsing 112
2.13 Questions 113
References 113
3 Universal Mobile Telecommunications Systems (UMTS) and High-Speed
Packet Access (HSPA) 115
3.1 Overview, History and Future 115
3.1.1 3GPP Release 99: The First UMTS Access Network Implementation 116
3.1.2 3GPP Release 4: Enhancements for the Circuit-Switched Core Network 119
3.1.3 3GPP Release 5: IMS and High-Speed Downlink Packet Access 119
3.1.4 3GPP Release 6: High-Speed Uplink Packet Access (HSUPA) 122
3.1.5 3GPP Release 7: Even Faster HSPA and Continued Packet Connectivity 122
3.1.6 3GPP Release 8: LTE, Further HSPA and Enhancements and Femtocells 123
3.1.7 3GPP Release 9: Digital Dividend and Dual Cell Improvements 123
3.1.8 3GPP Release 10: LTE-Advanced 124
3.2 Important New Concepts of UMTS 124
3.2.1 The Radio Access Bearer (RAB) 124
3.2.2 The Access Stratum and Nonaccess Stratum 125
3.2.3 Common Transport Protocols for CS and PS 126
3.3 Code Division Multiple Access (CDMA) 126
3.3.1 Spreading Factor, Chip Rate and Process Gain 130
3.3.2 The OVSF Code Tree 130
3.3.3 Scrambling in Uplink and Downlink Direction 131
3.3.4 UMTS Frequency and Cell Planning 133
3.3.5 The Near–Far Effect and Cell Breathing 133
3.3.6 Advantages of the UMTS Radio Network Compared to GSM 135
3.4 UMTS Channel Structure on the Air Interface 136
3.4.1 User Plane and Control Plane 136
3.4.2 Common and Dedicated Channels 137
3.4.3 Logical, Transport and Physical Channels 137
3.4.4 Example: Network Search 141
3.4.5 Example: Initial Network Access Procedure 143
3.4.6 The Uu Protocol Stack 145
3.5 The UMTS Terrestrial Radio Access Network (UTRAN) 148
3.5.1 Node-B, Iub Interface, NBAP and FP 148
3.5.2 The RNC, Iu, Iub and Iur Interfaces, RANAP and RNSAP 150
3.5.3 Adaptive Multirate (AMR) Codec for Voice Calls 154
3.5.4 Radio Resource Control (RRC) States 154
3.6 Core Network Mobility Management 158
3.7 Radio Network Mobility Management 159
3.7.1 Mobility Management in the Cell-DCH State 159
3.7.2 Mobility Management in Idle State 167
3.7.3 Mobility Management in Other States 169
3.8 UMTS CS and PS Call Establishment 170
3.9 UMTS Security 173
3.10 High-Speed Downlink Packet Access (HSDPA) and HSPA+ 175
3.10.1 HSDPA Channels 175
3.10.2 Shorter Delay Times and Hybrid ARQ (HARQ) 177
3.10.3 Node-B Scheduling 179
3.10.4 Adaptive Modulation and Coding, Transmission Rates and Multicarrier
Operation 180
3.10.5 Establishment and Release of an HSDPA Connection 181
3.10.6 HSDPA Mobility Management 182
3.11 High-Speed Uplink Packet Access (HSUPA) 183
3.11.1 E-DCH Channel Structure 184
3.11.2 The E-DCH Protocol Stack and Functionality 187
3.11.3 E-DCH Scheduling 188
3.11.4 E-DCH Mobility 191
3.11.5 E-DCH-Capable Devices 192
3.12 Radio and Core Network Enhancements: CPC and One Tunnel 192
3.12.1 A New Uplink Control Channel Slot Format 193
3.12.2 CQI Reporting Reduction and DTX and DRX 193
3.12.3 HS-SCCH Discontinuous Reception 194
3.12.4 HS-SCCH-less Operation 194
3.12.5 Enhanced Cell-FACH and Cell-/URA-PCH States 195
3.12.6 Radio Network Enhancement: One Tunnel 196
3.13 HSPA Performance in Practice 197
3.13.1 Throughput in Practice 198
3.13.2 Radio Resource State Management 198
3.13.3 Power Consumption 199
3.13.4 Web-Browsing Experience 200
3.14 UMTS and CDMA2000 201
3.15 Questions 203
References 204
4 Long Term Evolution (LTE) 205
4.1 Introduction and Overview 205
4.2 Network Architecture and Interfaces 207
4.2.1 LTE Mobile Devices and the LTE Uu Interface 207
4.2.2 The eNode-B and the S1 and X2 Interfaces 209
4.2.3 The Mobility Management Entity (MME) 212
4.2.4 The Serving Gateway (S-GW) 214
4.2.5 The PDN-Gateway 214
4.2.6 The Home Subscriber Server (HSS) 215
4.2.7 Billing, Prepaid and Quality of Service 217
4.3 FDD Air Interface and Radio Network 217
4.3.1 OFDMA for Downlink Transmission 218
4.3.2 SC-FDMA for Uplink Transmission 220
4.3.3 Symbols, Slots, Radio Blocks and Frames 221
4.3.4 Reference and Synchronization Signals 221
4.3.5 The LTE Channel Model in Downlink Direction 223
4.3.6 Downlink Management Channels 224
4.3.7 System Information Messages 224
4.3.8 The LTE Channel Model in Uplink Direction 225
4.3.9 MIMO Transmission 227
4.3.10 HARQ and Other Retransmission Mechanisms 230
4.3.11 PDCP Compression and Ciphering 232
4.3.12 Protocol Layer Overview 233
4.4 TD-LTE Air Interface 234
4.5 Scheduling 235
4.5.1 Downlink Scheduling 235
4.5.2 Uplink Scheduling 238
4.6 Basic Procedures 239
4.6.1 Cell Search 239
4.6.2 Attach and Default Bearer Activation 241
4.6.3 Handover Scenarios 245
4.6.4 Default and Dedicated Bearers 249
4.7 Mobility Management and Power Optimization 250
4.7.1 Mobility Management in Connected State 250
4.7.2 Mobility Management in Idle State 252
4.8 LTE Security Architecture 254
4.9 Interconnection with UMTS and GSM 2544.9.1 Cell Reselection between LTE and GSM/UMTS 255
4.9.2 RRC Connection Release with Redirect between LTE and GSM/UMTS 256
4.9.3 Handover between LTE and GSM/UMTS 257
4.10 Interworking with CDMA2000 Networks 258
4.10.1 Cell Reselection between LTE and CDMA2000 Networks 259
4.10.2 RRC Connection Release with Redirect between LTE and CDMA2000 259
4.10.3 Handover between LTE and CDMA2000 259
4.11 Network Planning Aspects 260
4.11.1 Single Frequency Network 260
4.11.2 Cell Edge Performance 260
4.11.3 Self-Organizing Network Functionality 261
4.12 Voice and SMS over LTE 262
4.12.1 SMS over SGs 263
4.12.2 CS Fallback 264
4.12.3 VoLGA 266
4.12.4 IMS and the One Voice Profile 268
4.12.5 Internet-Based Alternatives 270
4.12.6 LTE Bearer Configurations for VoIP 270
4.13 Backhaul Considerations 271
4.14 LTE-Advanced (3GPP Release 10) 272
4.14.1 Latency Reduction 272
4.14.2 Carrier Aggregation 273
4.14.3 8 × 8 Downlink and 4 × 4 Uplink MIMO 273
4.14.4 Relays 273
4.14.5 Study on Coordinated Multipoint Operation 274
4.15 Questions 274
References 275
5 IEEE 802.16 and WiMAX 277
5.1 Overview 277
5.2 Standards, Evolution and Profiles 279
5.3 WiMAX PHYs for Point-to-Multipoint FDD or TDD Operation 280
5.3.1 Adaptive OFDM Modulation and Coding 281
5.3.2 Physical Layer Speed Calculations 283
5.3.3 Cell Sizes 284
5.4 Physical Layer Framing 286
5.4.1 Frame Structure in FDD Mode for Point-to-Multipoint Networks 286
5.4.2 Frame Structure in TDD Mode for Point-to-Multipoint Networks 288
5.5 Ensuring Quality of Service 290
5.6 MAC Management Functions 293
5.6.1 Connecting to the Network 293
5.6.2 Power, Modulation and Coding Control 297
5.6.3 Dynamic Frequency Selection 297
5.7 MAC Management of User Data 298
5.7.1 Fragmentation and Packing 298
5.7.2 Data Retransmission (ARQ) 298
5.7.3 Header Compression 301
5.8 Security 301
5.8.1 Authentication 302
5.8.2 Ciphering 303
5.9 Advanced 802.16 Functionalities 304
5.9.1 Mesh Network Topology 304
5.9.2 Adaptive Antenna Systems 306
5.10 Mobile WiMAX: 802.16e 308
5.10.1 OFDM Multiple Access for 802.16e Networks 308
5.10.2 MIMO 309
5.10.3 Handover 310
5.10.4 Power-Saving Functionality 313
5.10.5 Idle Mode 314
5.11 WiMAX Network Infrastructure 315
5.11.1 Network Reference Architecture 315
5.11.2 Micro Mobility Management 317
5.11.3 Macro Mobility Management 318
5.12 Questions 319
References 320
6 Wireless Local Area Network (WLAN) 321
6.1 Wireless LAN Overview 321
6.2 Transmission Speeds and Standards 321
6.3 WLAN Configurations: From Ad Hoc to Wireless Bridging 323
6.3.1 Ad Hoc, BSS, ESS and Wireless Bridging 323
6.3.2 SSID and Frequency Selection 327
6.4 Management Operations 328
6.5 The MAC Layer 333
6.5.1 Air Interface Access Control 333
6.5.2 The MAC Header 335
6.6 The Physical Layer and MAC Extensions 337
6.6.1 IEEE 802.11b – 11Mbit/s 337
6.6.2 IEEE 802.11g with up to 54 Mbit/s 339
6.6.3 IEEE 802.11a with up to 54 Mbit/s 341
6.6.4 IEEE 802.11n with up to 600 Mbits/s 341
6.7 Wireless LAN Security 348
6.7.1 Wired Equivalent Privacy (WEP) 349
6.7.2 WPA and WPA Personal Mode Authentication 350
6.7.3 WPA and WPA2 Enterprise Mode Authentication 351
6.7.4 EAP-SIM Authentication 353
6.7.5 WPA and WPA2 Encryption 354
6.8 IEEE 802.11e and WMM – Quality of Service 355
6.9 Comparison of Wireless LAN and UMTS 360
6.10 Questions 362
References 363
7 Bluetooth 365
7.1 Overview and Applications 365
7.2 Physical Properties 367
7.3 Piconets and the Master/Slave Concept 369
7.4 The Bluetooth Protocol Stack 371
7.4.1 The Baseband Layer 371
7.4.2 The Link Controller 376
7.4.3 The Link Manager 378
7.4.4 The HCI Interface 378
7.4.5 The L2CAP Layer 381
7.4.6 The Service Discovery Protocol 382
7.4.7 The RFCOMM Layer 384
7.4.8 Overview of Bluetooth Connection Establishment 385
7.5 Bluetooth Security 386
7.5.1 Pairing up to Bluetooth 2.0 386
7.5.2 Pairing with Bluetooth 2.1 (Secure Simple Pairing) 388
7.5.3 Authentication 389
7.5.4 Encryption 389
7.5.5 Authorization 391
7.5.6 Security Modes 391
7.6 Bluetooth Profiles 392
7.6.1 Basic Profiles: GAP, SDP and the Serial Profile 392
7.6.2 The Network Profiles: DUN, LAP and PAN 394
7.6.3 Object Exchange Profiles: FTP, Object Push and Synchronize 397
7.6.4 Headset, Hands-Free and SIM Access Profile 399
7.6.5 High-Quality Audio Streaming 403
7.7 Comparison between Bluetooth and Wireless LAN 405
7.8 Questions 406
References 406
Index 409