Advanced Mobile Phone System

Motorola DynaTAC 8000X AMPS mobile phone

Advanced Mobile Phone System (AMPS) was an analog mobile phone system standard developed by Bell Labs, and officially introduced in the Americas in 1983,^[1][2] Israel in 1986, and Australia in 1987.^[3] It was the primary analog mobile phone system in North America (and other locales) through the 1980s and into the 2000s. As of February 18, 2008, carriers in the United States were no longer required to support AMPS and companies such as AT&T and Verizon have discontinued this service permanently. AMPS was discontinued in Australia in September 2000.^[3]

Technology

AMPS was a first-generation cellular technology that uses separate frequencies, or "channels", for each conversation (see FDMA). It therefore required considerable bandwidth for a large number of users. In general terms, AMPS was very similar to the older "0G" Improved Mobile Telephone Service, but used considerably more computing power in order to select frequencies, hand off conversations to PSTN lines, and handle billing and call setup.

What really separated AMPS from older systems is the "back end" call setup functionality. In AMPS, the cell centers could flexibly assign channels to handsets based on signal strength, allowing the same frequency to be re-used in various locations without interference. This allowed a larger number of phones to be supported over a geographical area. AMPS pioneers fathered the term "cellular" because of its use of small hexagonal "cells" within a system.^[4][5]

It suffered from some weaknesses when compared to today's digital technologies. Since it was an analog standard, it is very susceptible to static and noise and has no protection from eavesdropping using a scanner. In the 1990s, "cloning" was an epidemic that cost the industry millions of dollars. An eavesdropper with specialized equipment could intercept a handset's ESN (Electronic Serial Number) and MIN (Mobile Identification Number, aka the telephone number). An Electronic Serial Number is a packet of data which is sent by the handset to the cellular system for billing purposes, effectively identifying that phone on the network. The system then allows or disallows calls and or features based on its customer file. If an ESN/MIN Pair is intercepted, it could then be cloned onto a different phone and used in other areas for making calls without paying.

Dr. Martin Cooper of Motorola, made the first private handheld mobile phone call on a larger prototype model in 1973. This is a reenactment.

Cell phone cloning became possible with off-the-shelf technology in the '90s. Three key items were needed. The first was a radio receiver, such as the Icom PCR-1000, that could tune into the Reverse Channel, which is the frequency that the phones transmit data to the tower on. The second item was PC with a sound card and a software program called Banpaia, and the third item was a phone that could easily be used for cloning, such as the Oki 900. By tuning the radio to the proper frequency, it would receive the signal transmitted by the cell phone to be cloned, containing the phone's ESN/MIN Pair. This signal would be fed into the sound card audio input of the PC, and Banpaia would decode the ESN/MIN pair from this signal and display it on the screen. The person could then input that data into the Oki 900 phone and reboot it, after which the phone network could not distinguish the Oki from the original phone whose signal had been received. This gave the cloner, through the Oki phone, the ability to use the mobile phone service of the legitimate subscriber whose phone was cloned just as if that phone had been physically stolen instead, except that the subscriber was not without his or her phone and was not aware that the phone had been cloned—at least until that subscriber received his or her next bill.

The problem became so large that some carriers required the use of a PIN before making calls. Eventually, the cellular companies initiated a system called RF Fingerprinting, where it could determine subtle differences in the signal of one phone from another and shut down some cloned phones. Some legitimate customers had problems with this though if they made certain changes to their own phone, such as replacing the battery and/or antenna. The Oki 900 was the ultimate tool of cell phone hackers because it could listen in to AMPS phone calls right out of the box with no hardware modifications.

Standards

AMPS was originally standardized by ANSI as EIA/TIA/IS-3. EIA/TIA/IS-3 was superseded by EIA/TIA-553 and TIA interim standard IS-91 (Narrowband Advanced Mobile Phone System). AMPS networks have been replaced by digital networks based on standards including Digital AMPS, GSM, and CDMA2000 which brought improved security as well as increased capacity. Though cloning is still possible even with digital technologies, the cost of wireless service is so low that the problem has virtually disappeared.

Frequency bands

AMPS cellular service operated in the 800 MHz Cellular FM band. For each market area, the United States Federal Communications Commission (FCC) allowed two licensee (networks) known as "A" and "B" carriers. Each carrier within a market uses a specified "block" of frequencies consisting of 21 control channels and 395 voice channels. Originally, the B (wireline) side license was usually owned by the local phone company, and the A (non-wireline) license was given to wireless telephone providers.

At the inception of cellular in 1983, the FCC had granted each carrier within a market 333 channels (666 channels total). By the late 1980s, the cellular industry's subscriber base had grown into the millions across America and it became necessary to add channels for additional capacity. In 1989, the FCC granted carriers an expansion from the current 666 channels to the final 832 (416 per carrier). The additional frequencies were from the band held in reserve for future (inevitable) expansion. These frequencies were immediately adjacent to the existing cellular band. These bands had previously been allocated to UHF TV channels 70–83.

The anatomy of each channel is composed of 2 frequencies. 416 of these are in the 824–849 MHz range for transmissions from mobile stations to the base stations, paired with 416 frequencies in the 869–894 MHz range for transmissions from base stations to the mobile stations. Each cell site will use a subset of these channels, and must use a different set than neighboring cells to avoid interference. This significantly reduced the number of channels available at each site in real-world systems. Each AMPS channel has a one way bandwidth of 30 kHz, for a total of 60 kHz for each duplex channel.

Laws were passed in the US which prohibited the FCC type acceptance and sale of any receiver which could tune the frequency ranges occupied by analog AMPS cellular services. Though the service is no longer offered, these laws remain in force.^[6][7]

Digital AMPS

Later, many AMPS networks were partially converted to D-AMPS, often referred to as TDMA (though TDMA is a generic term that applies to many cellular systems). D-AMPS was a digital, 2G standard used mainly by AT&T Mobility and U.S. Cellular in the United States, Rogers Wireless in Canada, Telcel in Mexico, Vivo S.A. and Telecom Italia Mobile (TIM) in Brazil, VimpelCom in Russia, Movilnet in Venezuela. In Latin America, AMPS is no longer offered and has been replaced by GSM and new UMTS networks.

GSM and CDMA2000

AMPS and D-AMPS have now been phased out in favor of either CDMA2000 or GSM which allow for higher capacity data transfers for services such as WAP, Multimedia Messaging System (MMS), and wireless Internet access. There are some phones capable of supporting AMPS, D-AMPS and GSM all in one phone (using the GAIT standard).

Analog AMPS being replaced by digital

In 2002, the FCC decided to no longer require A and B carriers to support AMPS service as of February 18, 2008. All AMPS carriers have converted most of their consumer base to a digital standard such as CDMA2000 or GSM and continue to do so at a rapid pace. Digital technologies such as GSM and CDMA2000 support multiple voice calls on the same channel and offer enhanced features such as two-way text messaging and data services.

Unlike in the United States, the Canadian Radio-television and Telecommunications Commission (CRTC) and Industry Canada have not set any requirement for maintaining AMPS service in Canada. Rogers Wireless has dismantled their AMPS (along with IS-136) network; the networks were shut down May 31, 2007. Bell Mobility and Telus Mobility, who operated AMPS networks in Canada, announced that they would observe the same timetable as outlined by the FCC in the United States, and as a result would not begin to dismantle their AMPS networks until after February 2008.^[8]

OnStar relied heavily on North American AMPS service for its subscribers because, when the system was developed, AMPS offered the most comprehensive wireless coverage in the US. In 2006, ADT asked the FCC to extend the AMPS deadline due to many of their alarm systems still using analog technology to communicate with the control centers.^[9] Cellular companies who own an A or B license (such as Verizon and Alltel) were required to provide analog service until February 18, 2008. After that point, however, most cellular companies were eager to shut down AMPS and use the remaining channels for digital services. OnStar transitioned to digital service with the help of data transport technology developed by Airbiquity, but warned customers who could not be upgraded to digital that their service would permanently expire on January 1, 2008.^[10]

Companies that used analog AMPS

• Verizon Wireless — Formerly operating an AMPS network, on February 18, 2008, Verizon has discontinued all AMPS service. Now primarily operates on CDMA2000 technology.
• Bell Mobility and Telus Mobility operated AMPS networks in Canada, though they have since been overlaid with digital services. Both Bell Mobility and Telus Mobility had announced that they would observe the same shutdown guidelines as in the United States, and decommissioned their AMPS networks in 2008.^[8]
• Alltel — In 2005 disclosed that only 15% of their total customer base are still using the existing analog network. The company has posted a three phase turn down schedule, which was completed in September 2008. With the recent acquisition of Western Wireless, Alltel now takes the claim of the "largest network in America." The claim was true, oddly enough because of wide analog coverage in rural areas. All Alltel AMPS and D-AMPS service was discontinued in September 2008
• Coastel Offshore Cellular — Operated an AMPS network in the Gulf of Mexico that stretched from south of Corpus Christi, TX to south of Gulf Shores, AL. In 2006 Coastel was the only carrier in the US whose entire customer base was still 100% analog based. In 2007 Coastel was merged with Petrocom and SOLA Communications to form Broadpoint Inc. and the network was converted to GSM.^[11]
• Moviline (Telefónica Servicios Uno since 1971, Moviline since 1994) was the analogue service provider for the Spanish operator. Moviline has operated an ETACS 900 (mHz) network in Spain. Since 31 December 2003, the system has been closed to new users, at that time, it covered 100% of the Spanish population, but now some antennas have been given to GSM operators. The Moviline brand has been completely replaced by Movistar, the digital brand of Telefónica, since 1992. The network was completely converted to GSM and its in all Spanish territory. Movistar have a 3G network with UMTS technology, and offer services over GSM in places without 3G coverage.^[12]
• AT&T Mobility - In areas where AT&T Mobility previously had D-AMPS operating on 1900 MHz frequencies, no analog AMPS network existed, and the D-AMPS network on the 1900 MHz frequency was shut down in mid-2007. Service on the remaining 850 MHz AMPS markets was discontinued along with 850 MHz D-AMPS service on February 18, 2008, except in areas where service was provided by Dobson Communications. The Dobson AMPS and TDMA networks were shut down on March 1, 2008.
• Telecom New Zealand — Operated an AMPS/TDMA network in New Zealand from 1987 until 2007 throughout the whole country and the network was renowned for its superb coverage, In 2000 Telecom announced that they would discontinue the AMPS network within 5 years (2005) to give customers an opportunity to transition to the CDMA2000 and later 1XRTT technologies that replaced it. They later extended that deadline until 6PM 31March 2007. At approximately 7:15 on March 31, 2007 the AMPS/TDMA network ceased to function.^[13]
• Telstra (formerly Telecom Australia) - operated an AMPS network in Australia from February 1987 until the end of 2000. As part of the introduction of mobile phone competition in Australia, the Australian government mandated GSM as the new standard for mobile networks, and required that Telstra close the AMPS network by 2000. However, GSM base stations could only serve a limited area. While this was OK for Europe, it meant that GSM could not cover large, sparsely populated rural areas of Australia cost effectively. Telstra deployed a CDMA network, which did not suffer this limitation, and while the AMPS network was closed down at the end of 1999 in the major cities, the closure deadline was extended until the end of 2000 in rural areas to ease the transition to CDMA. The CDMA network has since been replaced by an 850 MHz UMTS network.
• SaskTel - operated an AMPS network in Saskatchewan, Canada. It was the third largest AMPS network, by subscribers, in the world at the time of its turndown.^[14] It was officially shutdown site by site starting at 00:00 on January 2, 2010 after twenty-one years of service. SaskTel continues to run CDMA and UMTS networks.

See also

• History of mobile phones

References

• Interview of Joel Engel

Notes

1. ^ Private Line.
2. ^ MilestonesPast.
3. ^ ^{a b} "Ten years of GSM in Australia". AMTA. Australian Mobile Telecommunications Association. 2003. http://www.amta.org.au/default.asp?Page=142. Retrieved 2008-08-16. 
4. ^ W. Rae Young, "AMPS: Introduction, Background, and Objectives", Bell System Technical Journal, vol. 58, 1, pages 1-14, January 1979. (Note: Young was the Bell Labs engineer who invented the hexagonal cell concept.)
5. ^ Z. C. Fluhr and Philip T. Porter, "AMPS: Control Architecture", Bell System Technical Journal, vol. 58, 1, pages 1-14, January 1979. (Note: Porter was the Bell Labs engineer who proposed that the cell towers be at the corners of the hexagons rather than the centers and have directional antennas that would transmit/receive in 3 directions into 3 adjacent hexagon cells.)
6. ^ http://www.arrl.org/forum/topics/view/112
7. ^ 47cfr15.121 http://edocket.access.gpo.gov/cfr_2010/octqtr/47cfr15.121.htm and http://wireless.fcc.gov/services/index.htm?job=service_home&id=cellular
8. ^ ^{a b} http://www.sptnews.ca/index.php?option=com_content&task=view&id=238&Itemid=9
9. ^ ITWorld.
10. ^ OnStar.
11. ^ http://www.broadpointinc.com/aboutus.htm
12. ^ Document covering end of Spanish analogue mobile telephone services (in Spanish), Ministerio de Industria, Turismo y Comercio (Spain). Article dated 2003-12-19, retrieved 2007-01-28.
13. ^ http://www.telecom.co.nz/content/0,2502,200633-1548,00.html
14. ^ https://www.wirelessintelligence.com/