GSM

For other uses, see GSM (disambiguation).

The GSM logo is used to identify compatible handsets and equipment

GSM (Global System for Mobile Communications, originally Groupe Spécial Mobile), is a standard set developed by the European Telecommunications Standards Institute (ETSI) to describe technologies for second generation (or "2G") digital cellular networks. Developed as a replacement for first generation analog cellular networks, the GSM standard originally described a digital, circuit switched network optimized for full duplex voice telephony. The standard was expanded over time to include first circuit switched data transport, then packet data transport via GPRS. Packet data transmission speeds were later increased via EDGE. The GSM standard is succeeded by the third generation (or "3G") UMTS standard developed by the 3GPP. GSM networks will evolve further as they begin to incorporate fourth generation (or "4G") LTE Advanced standards. "GSM" is a trademark owned by the GSM Association.

The GSM Association estimates that technologies defined in the GSM standard serve 80% of the world's population, encompassing more than 5 billion people across more than 212 countries and territories, making GSM the most ubiquitous of the many standards for cellular networks.

History

Early European analogue cellular networks employed an uncoordinated mix of technologies and protocols that varied from country to country, preventing interoperability of subscriber equipment and increasing complexity for equipment manufacturers who had to contend with varying standards from a fragmented market. The work to develop a European standard for digital cellular voice telephony began in 1982 when the European Conference of Postal and Telecommunications Administrations (CEPT) created the Groupe Spécial Mobile committee and provided a permanent group of technical support personnel, based in Paris. In 1987, 15 representatives from 13 European countries signed a memorandum of understanding to develop and deploy a common cellular telephone system across Europe. The foresight of deciding to develop a continental standard paid off, eventually resulting in a unified, open, standard-based network larger than that in the United States. ^[1][2][3][4]

France and Germany signed a joint development agreement in 1984 and were joined by Italy and the UK in 1986. In 1986 the European Commission proposed to reserve the 900 MHz spectrum band for GSM. By 1987, basic parameters of the GSM standard had been agreed upon and 15 representatives from 13 European nations signed a memorandum of understanding in Copenhagen, committing to deploy GSM. In 1989, the Groupe Spécial Mobile committee was transferred from CEPT to the European Telecommunications Standards Institute (ETSI).^[3]

Phase I of the GSM specifications were published in 1990. The historic world's first GSM call was made by the Finnish prime minister Harri Holkeri to Kaarina Suonio (mayor in city of Tampere) in July 1 1991. The first network was built by Telenokia and Siemens and operated by Radiolinja.^[5] 1992, the first short messaging service (SMS or "text message") message was sent and Vodafone UK and Telecom Finland signed the first international roaming agreement. Work had begun in 1991 to expand the GSM standard to the 1800 MHz frequency band and the first 1800 MHz network became operational in the UK in 1993. Also in 1993, Telecom Australia became the first network operator to deploy a GSM network outside of Europe and the first practical hand-held GSM mobile phone became available. In 1995, fax, data and SMS messaging services became commercially operational, the first 1900 MHz GSM network in the world became operational in the United States and GSM subscribers worldwide exceeded 10 million. In this same year, the GSM Association was formed. Pre-paid GSM SIM cards were launched in 1996 and worldwide GSM subscribers passed 100 million in 1998.^[3]

In 2000, the first commercial GPRS services were launched and the first GPRS compatible handsets became available for sale. In 2001 the first UMTS (W-CDMA) network was launched and worldwide GSM subscribers exceeded 500 million. In 2002 the first multimedia messaging services (MMS) were introduced and the first GSM network in the 800 MHz frequency band became operational. EDGE services first became operational in a network in 2003 and the number of worldwide GSM subscribers exceeded 1 billion in 2004.^[3]

By 2005, GSM networks accounted for more than 75% of the worldwide cellular network market, serving 1.5 billion subscribers. In 2005, the first HSDPA capable network also became operational. The first HSUPA network was launched in 2007 and worldwide GSM subscribers exceeded two billion in 2008.^[3]

The GSM Association estimates that technologies defined in the GSM standard serve 80% of the global mobile market, encompassing more than 5 billion people across more than 212 countries and territories, making GSM the most ubiquitous of the many standards for cellular networks.^[6]

Technical details

GSM cell site antennas in the Deutsches Museum, Munich, Germany

GSM is a cellular network, which means that cell phones connect to it by searching for cells in the immediate vicinity. There are five different cell sizes in a GSM network—macro, micro, pico, femto and umbrella cells. The coverage area of each cell varies according to the implementation environment. Macro cells can be regarded as cells where the base station antenna is installed on a mast or a building above average roof top level. Micro cells are cells whose antenna height is under average roof top level; they are typically used in urban areas. Picocells are small cells whose coverage diameter is a few dozen metres; they are mainly used indoors. Femtocells are cells designed for use in residential or small business environments and connect to the service provider’s network via a broadband internet connection. Umbrella cells are used to cover shadowed regions of smaller cells and fill in gaps in coverage between those cells.

Cell horizontal radius varies depending on antenna height, antenna gain and propagation conditions from a couple of hundred metres to several tens of kilometres. The longest distance the GSM specification supports in practical use is 35 kilometres (22 mi). There are also several implementations of the concept of an extended cell,^[7] where the cell radius could be double or even more, depending on the antenna system, the type of terrain and the timing advance.

Indoor coverage is also supported by GSM and may be achieved by using an indoor picocell base station, or an indoor repeater with distributed indoor antennas fed through power splitters, to deliver the radio signals from an antenna outdoors to the separate indoor distributed antenna system. These are typically deployed when a lot of call capacity is needed indoors; for example, in shopping centers or airports. However, this is not a prerequisite, since indoor coverage is also provided by in-building penetration of the radio signals from any nearby cell.

The modulation used in GSM is Gaussian minimum-shift keying (GMSK), a kind of continuous-phase frequency shift keying. In GMSK, the signal to be modulated onto the carrier is first smoothed with a Gaussian low-pass filter prior to being fed to a frequency modulator, which greatly reduces the interference to neighboring channels (adjacent-channel interference).

GSM carrier frequencies

Main article: GSM frequency bands

GSM networks operate in a number of different carrier frequency ranges (separated into GSM frequency ranges for 2G and UMTS frequency bands for 3G), with most 2G GSM networks operating in the 900 MHz or 1800 MHz bands. Where these bands were already allocated, the 850 MHz and 1900 MHz bands were used instead (for example in Canada and the United States). In rare cases the 400 and 450 MHz frequency bands are assigned in some countries because they were previously used for first-generation systems.

Most 3G networks in Europe operate in the 2100 MHz frequency band.

Regardless of the frequency selected by an operator, it is divided into timeslots for individual phones to use. This allows eight full-rate or sixteen half-rate speech channels per radio frequency. These eight radio timeslots (or eight burst periods) are grouped into a TDMA frame. Half rate channels use alternate frames in the same timeslot. The channel data rate for all 8 channels is 270.833 kbit/s, and the frame duration is 4.615 ms.

The transmission power in the handset is limited to a maximum of 2 watts in GSM850/900 and 1 watt in GSM1800/1900.

Voice codecs

GSM has used a variety of voice codecs to squeeze 3.1 kHz audio into between 5.6 and 13 kbit/s. Originally, two codecs, named after the types of data channel they were allocated, were used, called Half Rate (6.5 kbit/s) and Full Rate (13 kbit/s). These used a system based upon linear predictive coding (LPC). In addition to being efficient with bitrates, these codecs also made it easier to identify more important parts of the audio, allowing the air interface layer to prioritize and better protect these parts of the signal.

GSM was further enhanced in 1997^[8] with the Enhanced Full Rate (EFR) codec, a 12.2 kbit/s codec that uses a full rate channel. Finally, with the development of UMTS, EFR was refactored into a variable-rate codec called AMR-Narrowband, which is high quality and robust against interference when used on full rate channels, and less robust but still relatively high quality when used in good radio conditions on half-rate channels.

Network structure

The structure of a GSM network

The network is structured into a number of discrete sections:

• The Base Station Subsystem (the base stations and their controllers).
• the Network and Switching Subsystem (the part of the network most similar to a fixed network). This is sometimes also just called the core network.
• The GPRS Core Network (the optional part which allows packet based Internet connections).
• The Operations support system (OSS) for maintenance of the network.

Subscriber Identity Module (SIM)

Main article: Subscriber Identity Module

One of the key features of GSM is the Subscriber Identity Module, commonly known as a SIM card. The SIM is a detachable smart card containing the user's subscription information and phone book. This allows the user to retain his or her information after switching handsets. Alternatively, the user can also change operators while retaining the handset simply by changing the SIM. Some operators will block this by allowing the phone to use only a single SIM, or only a SIM issued by them; this practice is known as SIM locking.

Phone locking

Main article: SIM lock

Sometimes mobile network operators restrict handsets that they sell for use with their own network. This is called locking and is implemented by a software feature of the phone. Because the purchase price of the mobile phone to the consumer may be subsidized with revenue from subscriptions, operators must recoup this investment before a subscriber terminates service. A subscriber may usually contact the provider to remove the lock for a fee, utilize private services to remove the lock, or make use of free or fee-based software and websites to unlock the handset themselves.

In some countries (e.g., Lebanon, Bangladesh, Hong Kong, India, Malaysia, Pakistan, Singapore) all phones are sold unlocked. In others (e.g., Finland, Singapore) it is unlawful for operators to offer any form of subsidy on a phone's price.^[9]

GSM service security

See also: UMTS security

GSM was designed with a moderate level of service security. The system was designed to authenticate the subscriber using a pre-shared key and challenge-response. Communications between the subscriber and the base station can be encrypted. The development of UMTS introduces an optional Universal Subscriber Identity Module (USIM), that uses a longer authentication key to give greater security, as well as mutually authenticating the network and the user – whereas GSM only authenticates the user to the network (and not vice versa). The security model therefore offers confidentiality and authentication, but limited authorization capabilities, and no non-repudiation.

GSM uses several cryptographic algorithms for security. The A5/1 and A5/2 stream ciphers are used for ensuring over-the-air voice privacy. A5/1 was developed first and is a stronger algorithm used within Europe and the United States; A5/2 is weaker and used in other countries. Serious weaknesses have been found in both algorithms: it is possible to break A5/2 in real-time with a ciphertext-only attack, and in January 2007, The Hacker's Choice started the A5/1 cracking project with plans to use FPGAs that allow A5/1 to be broken with a rainbow table attack.^[10] The system supports multiple algorithms so operators may replace that cipher with a stronger one.

On 28 December 2009 German computer engineer Karsten Nohl announced that he had cracked the A5/1 cipher.^[11] According to Nohl, he developed a number of rainbow tables (static values which reduce the time needed to carry out an attack) and have found new sources for known plaintext attacks. He also said that it is possible to build "a full GSM interceptor ... from open source components" but that they had not done so because of legal concerns.^[12]

New attacks have been observed that take advantage of poor security implementations, architecture and development for smart phone applications. Some wiretapping and eavesdropping techniques hijack^[13] the audio input and output providing an opportunity for a 3rd party to listen in to the conversation. At present such attacks often come in the form of a Trojan, malware or a virus and might be detected by security software.^{[citation needed][original research?]}

GSM uses General Packet Radio Service (GPRS) for data transmissions like browsing the web. The most commonly deployed GPRS and EDGE ciphers were publicly broken in 2011, and the evidence indicates that they were once again intentionally left weak by the mobile industry designers.^[14]

The researchers revealed flaws in the commonly used GEA/1 and GEA/2 ciphers and published the open source "gprsdecode" software for sniffing GPRS/EDGE networks. They also noted that some carriers don't encrypt the data at all (i.e. using GEA/0) in order to detect the use of traffic or protocols they don't like, e.g. Skype, leaving their customers unprotected. GEA/3 seems to remain relatively hard to break and is said to be in use on some more modern networks. If used with USIM to prevent connections to fake base stations and downgrade attacks, users will be protected in the medium term, though migration to 128-bit GEA/4 is still recommended.

But since GEA/0, GEA/1 and GEA/2 are widely deployed, applications should use SSL/TLS for sensitive data, as they would on wi-fi networks.

Standards information

The GSM systems and services are described in a set of standards governed by ETSI, where a full list is maintained.^[15]

GSM open-source software

Several open-source software projects exist that provide certain GSM features:

• gsmd daemon by Openmoko^[16]
• OpenBTS develops a Base transceiver station
• The GSM Software Project aims to build a GSM analyzer for less than $1000^[17]
• OsmocomBB developers intend to replace the proprietary baseband GSM stack with a free software implementation^[18]

Issues with patents and open source

Patents remain a problem for any open-source GSM implementation, because it is not possible for GNU or any other free software distributor to guarantee immunity from all lawsuits by the patent holders against the users. Furthermore new features are being added to the standard all the time which means they have patent protection for a number of years.^{[citation needed]}

The original GSM implementations from 1991 are now entirely free of patent encumbrances and it is expected that OpenBTS will be able to implement features of that initial specification without limit and that as patents subsequently expire, those features can be added into the open source version. As of 2011, there have been no law suits against users of OpenBTS over GSM use.^{[citation needed]}

See also

• International Mobile Subscriber Identity (IMSI)
• MSISDN Mobile Subscriber ISDN Number
• Handoff
• Visitors Location Register (VLR)
• Um Interface
• GSM-R (GSM-Railway)
• GSM services
  • Cell Broadcast
  • GSM localization
  • Multimedia Messaging Service (MMS)
  • NITZ Network Identity and Time Zone
  • Wireless Application Protocol (WAP)
• Network simulation Simulation of GSM networks
• Standards
  • Comparison of mobile phone standards
  • GEO-Mobile Radio Interface
  • Intelligent Network
  • Parlay X
  • RRLP – Radio Resource Location Protocol
  • GSM 03.48 – Security mechanisms for the SIM application toolkit
• RTP audio video profile
• Enhanced Network Selection (ENS)
• Huawei SingleRAN: RAN technology that allows migration from GSM to UMTS or simultaneous use of both.

References

1. ^ Leader (7 September 2007). "Happy 20th Birthday, GSM". zdnet.co.uk. CBS Interactive. Archived from the original on 5 May 2011. http://www.webcitation.org/5yRRJnMZw. Retrieved 5 May 2011. "Before GSM, Europe had a disastrous mishmash of national analogue standards in phones and TV, designed to protect national industries but instead creating fragmented markets vulnerable to big guns from abroad." 
2. ^ "GSM". etsi.org. European Telecommunications Standards Institute. 2011. Archived from the original on 5 May 2011. http://www.webcitation.org/5yRQjyd8W. Retrieved 5 May 2011. "GSM was designed principally for voice telephony, but a range of bearer services was defined...allowing circuit-switched data connections at up to 9600 bits/s." 
3. ^ ^{a b c d e} "History". gsmworld.com. GSM Association. 2001. Archived from the original on 5 May 2011. http://www.webcitation.org/5yRQRGPgH. Retrieved 5 May 2011. "1982 Groupe Speciale Mobile (GSM) is formed by the Confederation of European Posts and Telecommunications (CEPT) to design a pan-European mobile technology." 
4. ^ "Cellular History". etsi.org. European Telecommunications Standards Institute. 2011. Archived from the original on 5 May 2011. http://www.webcitation.org/5yRQXw2sv. Retrieved 5 May 2011. "The task was entrusted to a committee known as Groupe Spécial Mobile (GSMTM), aided by a 'permanent nucleus' of technical support personnel, based in Paris." 
5. ^ "Maailman ensimmäinen GSM-puhelu [World's first GSM call]". yle.fi. Yelisradio OY. 22 February 2008. Archived from the original on 5 May 2011. http://www.webcitation.org/5yRT5T3dC. Retrieved 5 May 2011. "Harri Holkeri made the first call on the Radiolinja (Elisa's subsidiary) network, at the opening ceremony in Helsinki on 07.01.1991." 
6. ^ "GSM World statistics". gsmworld.com. GSM Association. 2010. http://www.gsmworld.com/newsroom/market-data/market_data_summary.htm. Retrieved 8 June 2010. 
7. ^ Motorola Demonstrates Long Range GSM Capability – 300% More Coverage With New Extended Cell.
8. ^ "GSM 06.51 version 4.0.1" (ZIP). ETSI. December 1997. http://www.3gpp.org/ftp/Specs/archive/06_series/06.51/0651-401.zip. Retrieved 5 September 2007. 
9. ^ Victoria Shannon (2007). "iPhone Must Be Offered Without Contact Restrictions, German Court Rules" (in English). The New York Times. http://www.nytimes.com/2007/11/21/technology/21iphone.html. Retrieved 2 February 2011. 
10. ^ "The A5/1 Cracking Project". http://www.scribd.com. http://www.scribd.com/doc/7227619/Cracking-a5-THC-Wiki. Retrieved 03 Nov 2011. 
11. ^ Kevin J. O'Brien (28 December 2009). "Cellphone Encryption Code Is Divulged". New York Times. http://www.nytimes.com/2009/12/29/technology/29hack.html. 
12. ^ "A5/1 Cracking Project". http://reflextor.com/trac/a51. Retrieved 30 December 2009. 
13. ^ "cPanel®". Infosecurityguard.com. http://www.infosecurityguard.com. Retrieved 30 August 2010. 
14. ^ "Codebreaker Karsten Nohl: Why Your Phone Is Insecure By Design". Forbes. 2011-08-12. http://www.forbes.com/sites/andygreenberg/2011/08/12/codebreaker-karsten-nohl-why-your-phone-is-insecure-by-design/. Retrieved 2011-08-13. 
15. ^ "GSM UMTS 3GPP Numbering Cross Reference". ETSI. http://webapp.etsi.org/key/key.asp?full_list=y. Retrieved 30 December 2009. 
16. ^ "Gsmd – Openmoko". Wiki.openmoko.org. 8 February 2010. http://wiki.openmoko.org/wiki/Gsmd. Retrieved 22 April 2010. 
17. ^ "The Hacker's Choice Wiki". http://wiki.thc.org/. Retrieved 30 August 2010. 
18. ^ "OsmocomBB". Bb.osmocom.org. http://bb.osmocom.org/trac. Retrieved 22 April 2010. 

Further reading

• Redl, Siegmund M.; Weber, Matthias K.; Oliphant, Malcolm W (February 1995). An Introduction to GSM. Artech House. ISBN 978-0890067857. 
• Redl, Siegmund M.; Weber, Matthias K.; Oliphant, Malcolm W (April 1998). GSM and Personal Communications Handbook. Artech House Mobile Communications Library. Artech House. ISBN 978-0890069578. 
• Hillebrand, Friedhelm, ed (Devember 2001). GSM and UMTS, The Creation of Global Mobile Communications. John Wiley & Sons. ISBN 978-0470843222. 
• Mouly, Michel; Pautet, Marie-Bernardette (June 2002). The GSM System for Mobile Communications. Telecom Publishing. ISBN 978-0945592150. 
• Salgues, Salgues B. (April 1997). Les télécoms mobiles GSM DCS, 2e édition. Hermes. Hermes Sciences Publications. ISBN 2-86601-608-8. 

External links

• GSM Association—Official industry trade group representing GSM network operators worldwide
• 3GPP—3G GSM standards development group
• GSM For Dummies—A basic introduction to GSM network architecture and procedures
• GSM GADGETS—Basic tools for GSM programing and repairing