…… ... 2 Lecture JohannWolfgang Goethe University Frankfurt M. a. Prof. Dr. Kai Rannenberg DeutscheChairTelekom of Mobile Multilateral & Business Security Mobile Business I (WS 2017/18) Infrastructures Basic Communication Paradigms Telecommunications Mobile and …… ... 2 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, ) broadband (): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) () () UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 3 s ’ [Schiller2003] transmission transmission is used. is shared Speed Data Switched Circuit Speed - High Mobile Data Services Data Mobile and is used for billing purposes billing for used is even if no data is transferred, the network is transferred, even no if data Ü amount of amount transferred data DataTransmission Paradigms oriented networks, the communication is divided into is divided the communication networks, oriented switched networks, linetheswitched communication is used - - Mobile Data Services Mobile Data exclusive Mobile Data Services Mobile Data In circuit In In packet In for data transmission it is less than 10%. Circuit Switched Data (CSD) Data Switched Circuit - for duration of duration a connection Oriented: Switched: - used when data is used when data transmitted. The capacity of the communication network is allocated dynamically. For billing purposes, the for GPRS Example: The connection is kept all the time (always on). However, the network is only capacity The Example: (HSCSD) Connections are are Connections used. are resources network the of 30% is connections voice for usage typical the reality, In - § § § § § § § § Packet Circuit § using a transferred and get addressed which several packets, medium. § parties. the communicating for exclusively networks: Thereare majortwo paradigms datafor transmission incommunication …… ... 4 Chair] - [M Destination Modem Modem Switched Networks - Mobile Data Services Data Mobile Circuit Modem Modem Modem switched networks, the communication line is used is used line communication the networks, switched -

Source

system, CSD and HSCSD). system,CSDand In circuit In phone (similar the parties to communicating the for exclusively …… ... 5 1 3 2 Chair] - Destination [M Router D Oriented Networks Oriented - Mobile Data Services Data Mobile oriented networks, the communication is the communication networks, oriented - Router B Packet In packet In divided into several packets, which get addressed and (e.g. medium transmission shared a using transferred Internet). the Router C Data packets 1 2 3 RouterA Source …… ... 6 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, 4G) broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ §

Lehrstuhl] - …… [M ... 7 ] Cell 2 Cell 1 Schiller2003 [ Cell 3 What is a ? is Cellular a What a cell. Ü Cell BasedCommunication (CBC)

perfect circle, even though this is the them. usual drawing way of the environment (buildings, etc) and usually a nor neither hexagonal Cell radii can vary from tens of meters meters tens of Cell radii vary can from to several kilometres. The shape of a cell is influenced by Each transmitter or , covers a certain area Cellular are networks networks radio consisting of several transmitters.

§ § § § …… ... 8 ] Schiller2003 [ . In order to do do to order In . Advantages of CBC of (1) Advantages Reduced power usage usage power Reduced Cells offer the possibility to Cells possibility to the offer e.g. by multiplexing) by e.g. Cell BasedCommunication (CBC) the transmission frequencies assigned to ” Reduced power consumption for mobile devices mobile for consumption power Reduced Moreuserscan use the infrastructure

Ü Ü reuse

limited amount of transmission power is needed in a a in needed is power transmission of amount limited away base station. a far to cell,small compared Reduced power:transmission for the mobile device, due to the fact that only a mobile devices ( the of planning need thorough a networks the so, position baseof stations and their frequencies. Higher capacity: “

§ § Cellular networks offer a number of advantages of anumber offer networks Cellular systems: radio centralised to compared § …… ... 9 ] Schiller2003 [ Advantages of CBC of (2) Advantages Cells can be adapted to to Cells be adapted can Cellular are decentralised systems with Cell BasedCommunication (CBC) Failure of one base station does not affect the complete complete the affect not does station base one of Failure Better availability of the infrastructure infrastructure

Ü Ü Better coverage: geographic conditions (mountains, buildings, etc.). regard to their base stations. In the case that one one that case the In stations. base their to regard antenna fails, affected. area small only a gets Robustness:

§ § compared to centralised radio systems: radio centralised to compared Cellular networks offer a number of advantages of anumber offer networks Cellular § …… ... 10 ] Schiller2003 [ Disadvantages of CBC of Disadvantages time. These - A complex and costly The distribution of the When changing from one cell to to cell one from changing When Cell BasedCommunication (CBC)

frequencies being used for the base stations needs to be planned carefully, in order to minimise etc. interferences, allows a change of cells in of real allows a change mechanisms are complex. Frequency planning: registers, etc. registers, needed: is needed that mechanism another, a handover Required infrastructure: base all link to order in is required, infrastructure location antennas, switches, includes This stations.

§ § § However, there are also some drawbacks of cell cell of drawbacks some also are there However, infrastructures: communication based § …… ... 11 Multiplexing Traffic(users)a using Cell BasedCommunication (CBC) Most efficient usage of a medium a of usage efficient Most

accidents (interference) accidents Abstract example: highwaywith several lanes (medium) without no interference.no Goal: Describeshow several users can share a or minimum with network) mobile (e.g. medium Fundamental mechanism in communication communication in mechanism Fundamental system

§ §

§ § …… ... 12 digital dividend) digital nd Radio Radio - - Spectrum Ranges Spectrum wireless phones AM TV FM LTE 2,6 GHz oven 3G/UMTS GHz) Consumer (2,4 / SDL 1500 GSM/LTE 1800 GSM 900 dividend) LTE 800 (digital LTE 700 (2 Frequency (Hz) 10 G 10 M 100 M 1000 K 1000 M Cf. [Heise2014] for more information on discussion related to the digital dividend. 1 6 21 11 16 10 10 10 10 10 Cell BasedCommunication (CBC) Radar Radio Frequency (Hz) Infrared Radiation Radiation Television - - Ultraviolet visible light Microwaves X

Roentgen

communication electronics Frequency range of instruments of entertainment and and entertainment of instruments Frequency of range …… ... 13 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, 4G) broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 14 5G Infrastructures 4G − LTE Advanced 3.9G/4G − LTE UMTS/HSPA/HSPA+ – Mobile Telecommunication Telecommunication Mobile GSM networks LTE Advanced LTE broadband Mobile Analogue networks – – – – 3G − UMTS LTE – 2G − GSM Generation (2G) Generation (3G/3.5G) Generation (5G) Generation (4G) Generation ()

Evolution of mobileEvolution telecommunication infrastructures

th th rd st nd

1G 5 3.9G or 4G 4G or 3.9G Evolution Term Long 4 Global System for Mobile Communications for System Global 3 System Mobile Telecommunications Universal =HSPA+ HSPA /Evolved Access Packet Speed High 1 2

§ § § § § § …… ... 15 (range from from (range ” ” ” Netz callee Netz Netz - - - A B “ 31 “ - 12 - the caller or operator (switchboard Infrastructures History − 15.000 DM 15.000 - Mobile Telecommunication Telecommunication Mobile callee decommissioned in 1977 in decommissioned – . mobile radio network Germany:in radio mobile mobile radio network Germany:in radio mobile Caller Caller needed to know area and the area code the mobile of the callee Terminal prices comparable to those of the “A Started in 1972 − decommissioned 1994 network Analogue code area by switching dial Automatic 30 to 50 km radius). km 50 to 30 150 MHz range Frequency 8.000 terminal: of Price Analogue network Analogue calls of switching Manual a mobile to a call For clerk) needed to know the location area of the Started in 1958

nd st § § § § § § § § § § § 2 1

§ § …… ... 16 ” for all all for Netz - ” C “ 0161 31 “ - 12 - Infrastructures History − Mobile Telecommunication Telecommunication Mobile mobile radio system in Germany systemin radiomobile cell based cell

GSM SIM) 1993:peak Customer 850.000 participants Uniform (location independent) area code code area independent) Uniform(location participants a to but terminal the to allocated is not number Telephone the of (predecessor card chip a later and card stripe magnet measuring to the nearest base station. base nearest the to measuring partner call the of place the detect automatically can net The (HLR) Register Homea Location of use by Analogue network Analogue First distance by automatically happens cells of change The Started in 1985in −decommissioned 2000 Started § § § § § § § § 3rd mobile radio network in Germany: Germany: in network radio mobile 3rd § …… ... 17 ) ” 2008 - Netze - D “ standards standards - (3G) networks (3G) became Infrastructures 1990 Mobile Telecommunication Telecommunication Mobile

UMTS border mobile communication communication mobile border -

available. In 2003 the first 2003 In became possible. became and roaming agreements among mobile mobile among agreements roaming and operatorscross By introducing the worldwide GSM worldwide the introducing By started in a test run in Germany. in run test a in started In 1991, the first 1991, In network GSM (2G) (

§

§ § …… ... 18 from 2009 from . in Stockholm and digital dividend digital Networks (3.9G/4G) 5G in 2020 Mobile Telecommunication Mobile commercially available Long Term Evolution

use in Long Term Evolution Networks (3.9G/4G) Evolution Term use in Long coverage broadband improving

§ §

On April and May 2010, the frequency spectrum auctioned in Germany bn(4.4 €) for First became inOslo 2009. in May/June 2015. In 2012, the European Commission committed 50 m € for to research deliver The radio frequencies for broadband for mobile frequencies The radio connection were auctioned in Germany bn(5.08 €)

§ § § § …… ... 19 2017 2016 2015 2014 Recent Recent development 2013 Number Uniqueof Users GSMof in Millions 2012 2011 nique users of GSM and related networks related and GSM of users nique Population in Millions 2010 U 2009

2008 0

1.000

2.000 3.000

4.000 5.000

6.000 7.000

8.000 [Stat2013], [Stat2014], [StiftWelt2013], [StiftWelt2014], [GSMA2014][GSMA2015][Stat2015] [Stat2017] [GSMA2017] [StiftWelt2014], [Stat2013], [Stat2014], [StiftWelt2013], …… ... 20 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, 4G) broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 21 Overview GSM(2G) in order to to order in ” 212 countries countries 212 Communications(GSM) obile M (European Telecommunications Telecommunications (European ETSI is a partner in the 3rd Generation Generation 3rd the in ETSIis partner a Groupe Spéciale Mobile SpécialeGroupe “ ystem for for ystem S ETSI lobal lobal G (most successful mobile radio system up to now) to systemup radiomobile (mostsuccessful

and territories and network mobile different among roaming worldwide Thus, possible. became operators Partnership Project (3GPP). Project Partnership than more in standard the of adoption Worldwide European standard by standard European Institute). Standardisation Originally 1982 driven by 1982 Originally driven analogue national to contrary standard national cross a create standards Abbreviation for for Abbreviation

§

§ §

§ § …… ... 22 ” (2G) Services - GSM GSM Mobile Services Communication Mobile “ R), Teleconference (up to 7 7 to (up Teleconference R), Cf. Lecture 4 - internal network or GSM or network internal - participants). communicationsamong users standard network to (specific services supplementary of number a provides GSM (e.g. groups user closed redirect, ID, call caller as such operators), company Servicestotransfer signals over the networkGSM mobile the support voice) (mainly services Telecommunication Telecommunication services play a central role in the GSM GSM the in role central a play services Telecommunication The focus of GSM standardization was on voice services voice on was standardization GSM of focus The Services

- • • à • à

Supplementary services Telecommunications services Carrier services § § § GSM § …… ... 23 & (2G) - OSS : Operating : Network : Radio Subsystem GSM PSTN Schiller2003] NSS Subsystem Switching OSS Subsystem RSS System Architecture System Based on [ AuC BTS BSC OMC, EIR OMC, MSC BTS GMSC BTS VLR BTS BTS BTS HLR MSC BSC BTS VLR RSS NSS …… ... 24 BSC BTS (2G) BTS BTS BTS GSM [Schiller2003] BTS RSS BSC RSS − Architecture System Radio facility for signal signal for Radio facility Administrates affiliated BTS and BTS and affiliated Administrates System of mobile terminal & SIM& terminal mobile of System Base Station Controller (BSC): Controller Station Base handover connection and allocation frequency e.g. supervises cells. between Base Transceiver Station (BTS): Station Transceiver Base (~100m ~30km GSM to cell one radius). BTS serves A transfer. Mobile Station (MS): MobileStation Specific components Specific System consisting of radio of consisting System

§ § § § § Components: Radio Subsystem (RSS)

§ § …… ... 25 GMSC ’ VLR (2G) HLR MSC GSM MSC VLR [Schiller2003] NSS NSS − Architecture System s range (HLR fraction copy). ’ Database assigned to every MSCwith Switchingcentre for initiation, Centraldata base with subscribers Visitor Location Register (VLR): Register Location Visitor dataactive of subscribers in the MSC Home Location Register (HLR): data(telephone numbers, keys, locations) MobileSwitching Centre (MSC): terminationand handover connections of withconventional networks monitors and subscribers Locates changelocationof Connectsradio network

§ § § § § Components: Network & Switching Subsystem (NSS) Switching & Network

§ § …… ... 26 BTS BSC (2G) BTS BTS GSM BTS BTS BTS BSC BTS Handover − Architecture System in American English American in - handoff common incommon British English ANSI publications ANSI T,IETF, ETSI3GPP and - and handover

In IEEE In In international and Europe based organisations, based Europe and Ininternational e.g. ITU

§ §

Equivalent term BTS) to another. to BTS) Term mitting station (in GSM: Station, Transceiver Base Transferal of calls or data trans one from sessions

§

§ § …… ... 27 & (2G) - OSS : Operating : Network : Radio Subsystem GSM PSTN Schiller2003] NSS Subsystem Switching OSS Subsystem RSS Based on [ AuC BTS BSC OMC, EIR OMC, MSC BTS Handover − Architecture System GMSC BTS VLR BTS BTS BTS HLR MSC BSC BTS VLR RSS NSS …… ... 28 AuC (2G) OMC, EIR OMC, GSM OSS [Schiller2003] Supervises each each Supervises OSS− Architecture System data base with with base data protects identity of participants participants of identity protects identification list for devices, e.g. stolen terminals (whitelist, terminals stolen e.g. devices, for list identification blacklist) greylist, Authentication Centre (AuC): Centre Authentication transmission,keys administrates data & (EIR): Register Identity Equipment Operation and Maintenance Centre (OMC): Centre Maintenance and Operation reports status creates and component network maintenance of the whole whole the of maintenance GSM network Supervises operation and and operation Supervises

§ § § § Components: Operation Subsystem (OSS) Subsystem Operation

§ § …… ... 29 (2G) : “ GSM Security Model Security Procedure - Response - security services security “ instead temporary identification temporary instead ID, TMSI)Mobile (Temporary Subscriber No transfer of data which can identify the subscriber via radio,via subscriber the identify can which data of transfer No Data & voice transferred between mobile station and BTS are BTS are and station mobile between transferred voice & Data encrypted. Authentication of the subscriber to the SIM by input of a PINa of SIM input by the to subscriber the of Authentication Challenge by GSM network the to and

§ § § §

(Partial) Anonymity: (Partial) Confidentiality: Access control and authentication: and control Access

§ §

§ The GSM system offers different …… ... 30 [Schiller2003] i 128 bit K GSM(2G) A3 SIM SRes (32 bit) SRes rand 128 bit SRes 32 bit SRes: signed response signed SRes: rand SIM based subscriber authentication SIMsubscriber based 128 bit rand A3 i K ) authentication algorithm authentication ) “ Mobile network Mobile SRes* (32 SRes* bit), rand SRes* =? SRes* SRes 128 bit „secret (

: individual subscriber authentication key authentication subscriber individual : i

A3: A3: K Challenge response protocol response Challenge

AuC § NSS AuC/ …… ... 31 (2G) GSM Security Model Security the subscriber , i >SRes*). - to SIM. rand. and A3 Signed Response SRes. i K via via A3 ( rand ” i own “ Procedure (Subscriber Authentication) Authentication) (Subscriber Procedure - Response - VLR transfers exclusively with computes SIM The SRES computed by the SIM is transmitted to the VLR and is compared with SRES*. successfully. authenticated is subscriber the equal SRES are and SRES* If AuC creates random number number random creates AuC K and rand encrypts AuC VLR. to SRes* and rand transfers AuC

5. 6. 7. 2. 3. 4. 1. and A3 are stored on the SIM and deposited in the AuC. the in deposited and SIM the on stored are A3 and

i K Challenge key K theindividual on based Authenticationis andidentification asecretIMSI algorithm A3.

§ § …… ... 32 [Schiller2003] (2G) MS SIM GSM i 128 bit K c K 64 bit data data block A5 A8 SRES MS with SIM with MS rand 128 bit −Encryption Model Security ) ” rand secret “ ( coded coded data blocks A5 for encryption A8 for computation key 128 bit rand data data block A5 A8 i K c K 64 bit mobile radio network radio mobile 128 bit AuC BTS …… ... 33 (2G) GSM −Encryption Model Security and A8. and i K for the encryption of the using A8, the rand using c i c K K K and algorithm A5 for encryption and and encryption for A5 algorithm and c K

Mobile station and mobile radio network use generated decryption sent of and received data. SIM computes the key local the and received transferred data via rand, SIM. to rand only transfers VLR AuC creates random number rand. AuC generates the key

5. 4. 3. 1. 2. GSMprovides encryption of voice anddata interface: air the via transferred § …… ... 34 (2G) GSM Security Model Security Anonymous chargingis Anonymous

(technically)possible via prepaid card. transferred. Example: demand. Datawhich identify users are not Temporaryidentificationuser is updated on or time to time from automatically userstemporary user identification (TMSI) is used. In orderIn to guarantee the anonymity of the § § § § PartialAnonymity: § …… ... 35 (2G) GSM −Shortcomings Model Security Centralized movement tracking is possibleis tracking movement Centralized orderIn to avoid localization the subscriber terminal. the off switch must Security model was developed at a time with with time a at developed was model Security monopoly provider a Assumptionthat thenetwork is trustworthy se per

§ § § § Subscriber localization is almost exclusively Subscriber almost exclusively is localization by controlled the network. authenticate itself. Solely Solely authentication of the terminal/subscriber toward the GSM network. The network does not

§ § …… ... 36 (2G) GSM because of of because ” weak −Shortcomings Model Security “ standardized algorithms. standardized -

Sometimes the real key length is shorter. keylength real Sometimesthe notification of the users the of notification Encryption deactivation by the network possible, without possible, without network the by deactivation Encryption A3 and A8 were published without authorization. authorization. without published were A8 and A3 non use operators Some

§ § § §

key length (64 bit) (64 length key Encryption comparativelyEncryption No encryption from terminal to terminal but terminal to terminal from encryption No interface air the over solely Security model bases partly on secret secret on partly bases model Security algorithms. encryption

§

§ § …… ... 37 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, 4G) broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 38 (3G) UMTS Globally uniform Globally uniform Different standards in some some in standards Different Networks: - Networks: - Demand for 3G standard Status of 2G different continents avoid worldwide roaming

§ § ARIB, ANSI)ARIB, via theInternational Telecommunication(ITU) Union Voting of regional & national national & regional of Voting regulationoffices ETSI, (e.g. UniversalMobile Telecommunications System (UMTS):

Ü § …… ... 39 Telefónica UMTS(3G) 3G network coverage in Germany in 2016in Germany in coverage network 3G Vodafone [http://maps.mobileworldlive.com/network_info.php?nid=727&org_id=2076&cid=15] Telekom …… ... 40 Frequencies [UMTSLink2006] UMTS(3G) . Frequency Division Duplex Division Frequency – Networks, introduced by the ITU, leaves room room leaves theITU, by introduced Networks, - FDD/TDD) frequency allocation in Europe: in allocation FDD/TDD)frequency -

FDD: UMTS Terrestrial Radio Access Access Radio Terrestrial FDD: UMTS - The specification of 3G of specification The fornational, partly incompatible implementations Existingnational networks and installed network technique shall preferablybe transferred into the new standard.

Ü §

UTRA UMTS (UTRA UMTS Problem of competing targets: Commonapproach: 2GHz range the in frequencies of reservation Worldwide

§

§ § …… ... 41 & - Network Source: (2011) UMTSlink.at is not shown here in detail UMTS Core network UMTS Core network § § to corresponds SubsystemSwitching (NSS) in GSM UMTS (3G) System UMTS(3G) Architecture Radio Radio Radio Radio (BTS) in GSM to base to base transceiver stations stations stations (equivalent Node B: UMTS base (controls the Node Bs) RNC: Network Controller Subsystem RNS: Network Radio Access Radio Network UTRAN: UMTS Terrestrial § § § § …… ... 42 Bandwidths UMTS(3G) Multiple Input Multiple Multiple Input Multiple provides higher data speeds speeds data higher provides technology provides using either Cell - downlink speed (HSDPA) Dual uplink speed (HSUPA). speed uplink or or : 384 kbit/s downlink/uplink kbit/s 384 : downlink speeds of e.g. 21,1 or 42,2 Mbit/s and a maximum uplink speed of 11.5 Mbit/s. 7.2 or 14.0 Mbit/s 1.4 or 5.7 Mbit/s § § § § Evolved HSPA (HSPA+) HSPA Evolved (MIMO) Output (HSPA) Access Packet Speed High e.g. uplink, and downlink for UMTS Bandwidths enable multimedia services multimedia enable Bandwidths

§ § § Ü is moving or if there are many participants in one radio radio one in participants many are there if or is moving cell. But: Available bandwidth per user decreases if terminal terminal if decreases user per bandwidth Available But: 3G UMTS/HSPA/HSPA+ bandwidths UMTS/HSPA/HSPA+ 3G

§ § …… ... 43 Networks - UMTS(3G) VLR) - Security in UMTS in Security End encryption ispossible. encryption End - to -

Increasedkey length End Transferredsecurity keys are also encrypted HLR (e.g. network fixed the in Network authentication Network Integrityprotection of data traffic Enhanced participantEnhanced authentication (EMSI)

§ § § § § § mechanisms known by GSM: by known mechanisms UMTScomplements the security § …… ... 44 ] UMTSLink2013 [ UMTS(3G) Standard vs. Implementation vs. Standard ofthese features that have all … Virtual Home Environment (VHE) Environment Home Virtual (HSDPA) Access Packet Downlink Speed High Quality of Service (QoS) for data services data for (QoS) Service Quality of Multilateral Security (with regard to authentication)

§ § § § § been standardised are actually implemented in in implemented actually are standardised been existingnetworks,areoptionalandcanas they demand. on added be However, not not However, The UMTS standardThe includes thefollowing features:

§ § …… ... 45 Overview Mobile Telecommunication Infrastructures MobileTelecommunication Long Term Evolution (3.9G, 4G) broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § §

Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 46 Advanced - requirements requirements http://www.3gpp.org/LTE http://www.3gpp.org/LTE Advanced - IMT ” Long Term Evolution Mbit/s Mbit/s standard standard ) ” 4G network 4G “ 4G Long Term Evolution (3.9G, 4G) “ R. For R. more information [Parkvall2008]. see - makes use of the the of makes use *) A 4G service was originally defined as meeting the ITU the by issued Mbit/s downlink and 75 Mbit/sand downlink duestricterto naming requirements *) 4G or 3.9G either named be can technology The today. network First commercial LTE network launched in in launched network LTE commercial First Scandinaviain December 2009 named anot originally was LTE

§ § § lower . It remains backward compatible compatible backward Itremains latency. lower bands. LTE,same frequency uses with LTE Advanced (4G) Advanced LTE frequency spectrum more efficiently, resulting 1Gbit/s) and (towards rates data higher in uplink speeds Long TermEvolution (3.9G, Long 300 for allows

§ § …… ... 47 Telephony? based approach) based - Long Term Evolution : ) – . - based on the IP Multimedia Subsystem IPMultimedia Subsystem the on based com switched based - - switched - IP switched - IP networks) circuit no circuit - – (Voice over LTE via GAN LTEGAN via (Voiceover (all (Simultaneous Voice and LTE, handset and Voice (Simultaneous (Circuit Switched Fallback) (CircuitSwitched packet SVLTE VoLGA (Voice LTE) Over VoLTE network. (IMS) CSFB networks connections/calls/telephony! (UMTS) are Only LTE in is supported munication Voice calls in GSM and 3G GSMin and calls Voice

Long Term Evolution networks

§ § § § § § Four different approaches to provide telephony services provide to different approaches Four in LTE LTE networks are systems

§ § …… ... 48 Overview ) Mobile Telecommunication Infrastructures MobileTelecommunication

Long Term Evolution (3.9G, 4G broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § § Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 49 [GSMA5G] typedevices - The Concept The 5th Generation(5G) end round trip delay (latency) delay trip round end - to - connected visionconnected - generation radio access technology access radio generation - The hyper The Next 100 x number of connected devices connected of number x 100 – – - 10 Gbps connections to end points in the field (i.e. not theoretical theoretical not (i.e. field the in points end to connections Gbps 10

- Up to ten year battery life for low power, machine 99.999 % availability % 99.999 coverage geographical % 100 usage energy network in reduction % 90 1 maximum) area unit per bandwidth x 1000 10 1 millisecond end millisecond 1

§ § § § § § § §

View 2 View View 1 View 5G technology promises promises technology 5G § Two views of 5G: of views Two § …… ... 50 [GSMA5G] person person - Potentialusecases 5G systems (e.g. smart meters, smart smart meters, (e.g. smart systems ’ based office/Multi based - machineconnectivity (M2M) - to - connected home consumer electronics and healthcare monitoring. thermostats, smoke detectors) vehicle telemetric systems (a field which overlaps cars above) with Connected ‘

§ § §

VirtualReality/Augmented Reality/Immersive or Tactile Internet videoconferencing Machine Autonomous driving/Connected Autonomous cars Wirelesscloud

§ §

§ § …… ... 51 Overview ) Mobile Telecommunication Infrastructures MobileTelecommunication

Long Term Evolution (3.9G, 4G broadband (5G): mobile Generation 5th GSM (Technology, Authentication, Location Location Authentication, (Technology, GSM Management) (2G) (3G) UMTS Introduction Introduction (Cells,Multiplexing) Technology Basic

§ § § § § § § Roaming Mobile Telecommunication Infrastructures Telecommunication Mobile TransmissionParadigms (CBC) BasedCommunication Cell

§ §

§ § …… ... 52 Overview Roaming The mobile device automatically logs into airport, conferences). Example: is entered (e.g. whenan available a hotspot WLAN Cell change within the GSM system (Handover) system Cell within the GSM change Change of the GSM network operator network the GSM of Change (UMTS, systems between different network Change PDC) CDMA, WLAN, GSM,

§ § § § Roaming usually means extensive changes, e.g. ofthe network technique orthe network operator,and with a new authentication: Roaming denotes a change of network access, e.g.:

• § …… ... 53 Roaming Roaming within GSM within Roaming

others,an update of the VLR. connection interruption. connection theinterruptionreason for The is, among GSM manages the handover between radio cells short a implies this ms; 100 of range the in be as smooth as possible. possible. as smooth as be Ifa user of a mobile device moves from cellone should handover connection the cell, another to

§

§ § …… ... 54 & - OSS Roaming : Operating : Network : Radio Subsystem PSTN Schiller2003] NSS Subsystem Switching OSS Subsystem RSS Based on [ AuC BTS BSC GSM System Architecture OMC, EIR OMC, MSC BTS GMSC BTS VLR BTS BTS BTS HLR MSC BSC BTS VLR RSS NSS …… ... 55 AuC AuC BSC OMC, EIR OMC, EIR BSC MSC MSC GMSC GMSC VLR VLR Roaming SIMBasedRoaming HLR MSC HLR MSC BSC BSC VLR VLR AuC AuC OMC, EIR OMC, EIR BSC BSC MSC MSC GMSC GMSC VLR VLR HLR HLR MSC MSC BSC BSC VLR VLR …… ... 56 AuC AuC OMC, EIR BSC OMC, EIR BSC MSC MSC GMSC GMSC VLR VLR Roaming HLR SIMBasedRoaming HLR MSC MSC BSC BSC VLR VLR AuC AuC OMC, EIR OMC, BSC OMC, EIR BSC MSC MSC GMSC GMSC VLR VLR HLR MSC HLR MSC BSC VLR BSC VLR …… ... 57 - 13. - d111000/ 10 Evolving Evolving - - – 03. 10. - - 09 Literature 10 - - identity/int - LTE Advanced Advanced LTE and - - 15. 14. - - 09 09. 10 - - - Dividende, accessed 2014 accessed Dividende, - accessed 2013 Advanced (PDF). Vehicular Technology Conference Fall 2008, 2008, Fall Conference Technology Vehicular (PDF). Advanced - 01. - 10 - http://www.fidis.net/resources/deliverables/mobility LTE towards IMT towards LTE http://www.ericsson.com/res/thecompany/docs/journal_conference_papers/wirel ess_access/VTC08F_jading.pdf, [Royer2006] Royer, D. (ed.) (2006): FIDIS Deliverable D11.1, available online at 5g.pdf&download 5g.pdf&download [Heise2014] Heise online: Digitale Dividende, http://www.heise.de/thema/Digitale [Parkvall2008] Parkvall, S.; Dahlman, E.; Furuskär, A. [GSM2017] GSM Association (2017), GSM Global data, 2017 accessed https://gsmaintelligence.com/, [GSMA5G] Understanding 5G: Perspectives on future technological advancements in mobile, December 2014GSM https://gsmaintelligence.com/research/?file=141208 [GSMA2014] GSM Association accessed (2014), www.gsmamobileeconomy.com, 2014 [GSM2015] GSM Association (2015), GSM Global data, 2015 accessed https://gsmaintelligence.com/, [BITKOM2005] BITKOM (2005), UMTS[BITKOM2005] Subscribers 2005, www.bitkom.org/de/markt_statistik/38511_38543.aspx, accessed 2006 [GSM2010] GSM Association (2010), GSM Coverage Maps, 2010 accessed http://www.mobileworldlive.com/coverage.asp, § § § § § § § § § …… ... 58 - - - , United, statista - - Literature der - Soziale und Soziale Soziale und Soziale - - 11. - 10 - Addison Wesley, London, London, Wesley, Addison accessed 2013 accessed 01. - Dossier 2013, Dossier - 10 - 01. 01. - - 15 - 10 10 - - 09 09 01. - - - world population,http://www.worldometers.info/world world world population,http://www.worldometers.info/world world - - 10 - Vieweg, Wiesbaden. Vieweg, Datenreport2013 Stiftungder Weltbevölkerung Datenreport2014 Stiftungder Weltbevölkerung Entwicklungvon 1950 Weltbevölkerung derbis 2010 (in Milliarden) [StiftWelt2014] (2014),demographische Daten weltweit www.weltbevoelkerung.de/fileadmin/content/PDF/Datenreport_2014_Stiftung_Weltbevo 2014 elkerung.pdf,accessed [UMTSLink2013]UMTSlink, www.umtslink.at, [StiftWelt2013] (2013),demographische Daten weltweit www.weltbevoelkerung.de/fileadmin/content/PDF/Datenreport_2013_Stiftung_Weltbevo 2014 elkerung.pdf,accessed weltbevoelkerung/, accessed 2014 accessed weltbevoelkerung/, [Stat2015]Worldometers 2015 population/,accessed [Stat2017]Worldometers 2017 population/,accessed de.statista.com/statistik/studie/id/12358/dokument/weltbevoelkerung 2014 dossier/,accessed [Stat2014] PopulationDivision) Affairs, (2014), Nations and Social (Department Economic of de.statista.com/statistik/daten/studie/1716/umfrage/entwicklung [Sauter2008]Sauter, (2008): M. Grundkurs Kommunikationssysteme Mobile (3., Auflage), erweiterte Communications, (2003): Mobile J. Schiller, [Schiller2003] England. [Stat2013]Statista Weltbevölkerung § § § § § § § § §