summaryrefslogtreecommitdiffstats
path: root/Tex
diff options
context:
space:
mode:
authorTom2012-02-10 18:13:43 +0100
committerTom2012-02-10 18:13:43 +0100
commitfb3f1af1900d97d04cd6bda83942b458952bdd36 (patch)
tree0823179cd07b54ca8477464e4287a546ee0bfb05 /Tex
parentradio transmission section started (need to insert frame composisiton) (diff)
downloadimsi-catcher-detection-fb3f1af1900d97d04cd6bda83942b458952bdd36.tar.gz
imsi-catcher-detection-fb3f1af1900d97d04cd6bda83942b458952bdd36.tar.xz
imsi-catcher-detection-fb3f1af1900d97d04cd6bda83942b458952bdd36.zip
U_m finished
Diffstat (limited to 'Tex')
-rw-r--r--Tex/Content/GSM.tex187
-rw-r--r--Tex/Master/Glossary.tex13
-rw-r--r--Tex/Master/Master.acn93
-rw-r--r--Tex/Master/Master.aux62
-rw-r--r--Tex/Master/Master.ist2
-rw-r--r--Tex/Master/Master.lof6
-rw-r--r--Tex/Master/Master.log117
-rw-r--r--Tex/Master/Master.lot1
-rw-r--r--Tex/Master/Master.pdfbin245727 -> 262852 bytes
-rw-r--r--Tex/Master/Master.synctex.gzbin197940 -> 245630 bytes
-rw-r--r--Tex/Master/Master.tex2
-rw-r--r--Tex/Master/Master.toc20
12 files changed, 418 insertions, 85 deletions
diff --git a/Tex/Content/GSM.tex b/Tex/Content/GSM.tex
index ffb72c4..b35c36b 100644
--- a/Tex/Content/GSM.tex
+++ b/Tex/Content/GSM.tex
@@ -253,14 +253,14 @@ A possible arrangement of these components is displayed in Figure \ref{fig:gsm_n
The \gls{msc} is the component that does the actual routing of calls and therefore the core component of the \gls{nss}.
It basically works like any other \gls{isdn} exchange device with additional functionality to manage mobility.
Since the amount of signalling inside a \gls{plmn} would be far to big for a single \gls{msc}, there is one for every \gls{la}.
-Amongst others its most important tasks are \gls{cc} and Mobility Management.
+Amongst others its most important tasks are \gls{cc} and \gls{mm}.
\gls{cc} entrails registration when the subscriber connects to the network as well as routing the calls or text messages from one registered subscriber to another.
This routing can include transmission of calls to landlines or to networks of other providers.
\glspl{msc} that bind the provider's networks to other provider's networks or the \gls{pstn} are called Gateway \glspl{msc}.
The above part is also true for pure landline switching centres.
-What sets a mobile switching centre apart from these is called Mobility Management.
+What sets a mobile switching centre apart from these is called \gls{mm}.
Since the participants can freely move around in the network and thus cannot be identified the same way as a fixed landline participant, authentication before using the offered services is important.
Another consequence of mobility is, that the network has to keep track of where a subscriber is and through which \gls{msc} it can be reached.
This is done via Location Updates, that update the current location in the databases for other \glspl{msc} to look up.
@@ -584,6 +584,8 @@ Afterwards the notion of logical channels, virtual channels that are mapped on t
The last section compares the network layers of the \gls{gsm} stack to ISO/OSI layer model, to give a basis for understanding where the framework employed in the practical part is situated in that hierarchy.
\subsection{Radio Transmission}
+\label{sec:radio}
+
Without additional techniques, the \gls{bts} would only be able to serve a single caller at a time.
Therefore even in older radio networks like the C-Netz in Germany used \gls{fdma}.
With \gls{fdma} a specific frequency of the broad frequency band of the \gls{bts} is allocated to a specific subscriber for a call, leaving other frequencies open to use for other subscribers connected to the same base station.
@@ -598,21 +600,27 @@ Onto this smaller carrier frequency, \gls{tdma} frames are transmitted, that con
These frames have a transmission length of 4.615 ms.
Each of these timeslots could host the data of a different subscriber, although the first one is usually used for signalling procedures.
An illustration of how these multiplexing methods work together can be seen in Figure \ref{fig:fdma_tdma}.
+
\begin{figure}
\centering
\caption{The combination of FDMA and TDMA.}
\label{fig:fdma_tdma}
\end{figure}
-Another important parameter is the frame number since they are used for cyphering as well as channel mapping and synchronisation.
+\subsubsection{Frame Numbering}
+Another important aspect is the frame hierarchy and the resulting frame numbering since it is used for ciphering as well as channel mapping and synchronisation.
The frame number is broadcasted frequently on the \gls{sch} to keep mobile subscribers in sync and inform subscribers that are about to connect or request a channel for communication.
-Numbering in \gls{gsm} is fairly complex and will be explained bottom up.
Figure \ref{fig:frame_hierarchy} shows complete diagram of the numbering scheme and frame hierarchy for reference.
-The timeslots which have a length of $4.615\text{ ms} \div 8 = 577~\mu\text{s}$ are called Bursts and are numbered from 0 to 7.
-%input for cypher + same every 3 hours
-%synchronisation 3 frames after / timing advance / guard time
-%channel assignment refers back to answering frame
+The timeslots on the lowest level of the hierarchy have a length of $4.615\text{ ms} \div 8 = 577~\mu\text{s}$ are also known as Bursts numbered from 0 to 7.
+Every new \gls{tdma} frame the sequence number is increased by one.
+Since this number cannot be increased endlessly is repeated every 3 h 28 m 53 s and 760 ms.
+This is the largest chunk in the frame hierarchy and is called Hyperframe.
+Superframes and Multiframes are layers in between the Hyperframe and the \gls{tdma} frame.
+As can be seen in the diagram the two variants of Multiframes, the 26-Multiframe containing 26 \gls{tdma} frames transports traffic channels and the respective control channels and the 51-Multiframe containing 51 \gls{tdma} frames respectively which contains only signalling data.
+Superframes wrap these different kinds of Multiframes into packages of the same size.
+So either 51 26-Multiframes can be carried by a Superframe or 51 26-Multiframes yielding a duration of 6 s and 120 ms each.
+Finally 2048 Superframes make up the Hyperframe.
\begin{figure}
\centering
@@ -620,25 +628,178 @@ The timeslots which have a length of $4.615\text{ ms} \div 8 = 577~\mu\text{s}$
\label{fig:frame_hierarchy}
\end{figure}
-
+The frequency number thus is only repeated every 3 hours which makes cracking the cyphering algorithm that has the sequence number as one of its inputs and thus intercepting a call considerably more difficult.
+When a \gls{ms} and \gls{bts} start to communicate the frame number has to be obtained by the \gls{ms} from the \gls{sch} before it can ask for a channel.
+This is important since the frame number is a vital information indicating the chronological order of control channels.
+If the \gls{ms} asks for a channel assignment in frame $n$ and a channel is assigned to the \gls{ms}, the assigned channels refers back to the frame $n$ and thus the \gls{ms} can find its channel amongst the others.
+
+The last task mentioned above was synchronisation.
+Since the mobile station and the transceiver station cannot send at exactly the same time, uplink and downlink of a channel are shifted by three timeslots.
+The time in between uplink and downlink however cannot be fixed for all situations like that.
+During a call a participant may move around and since radio waves travel at the speed of light slight variations in timing need to be dealt with.
+If not data from two participants might overlap and be rendered unusable.
+To avoid this problem each Burst has a Guard Time at the beginning and at the end, where no data is transmitted.
+The complete structure of such a Normal Burst is outlined in Figure \ref{fig:burst_types}.
+However this does not suffice if a subscriber moves away or to a \gls{bts} at considerable speed.
+Therefore a mechanism called Timing Advance is used.
+Basically the farther a subscriber is away from a base station the earlier a burst has to be sent, to compensate for the distance.
+The value for the Timing Advance is determined by the \gls{bsc} after receiving a channel request message from the mobile station and afterwards constantly updated by the respective \gls{bts}.
+The channel request message itself has only little data and large Guard Times since Timing Advance can only be used after this first measurement.
\begin{figure}
\centering
- \caption{Structural Comparison of different Burst types.}
+ \caption{Structural Comparison of different Burst types. After \cite{GSM2009}.}
\label{fig:burst_types}
\end{figure}
+\subsubsection{Burst Types}
+As can be suspected by the paragraph above, there are different kinds of Bursts which are shown in \ref{fig:burst_types} \cite{GSM2009}.
+All Bursts contain the above mentioned Guard Times which separate them from the next Burst.
+In addition to data bits and known fixed bit sequences every frame has has tail bits, which mark the beginning and the end of a frame.
+The training sequence is a fixed bit sequence that appears in conjunction with data bit sequences.
+In a radio transmission procedure the signal can be distorted by shadowing, reflection, an other factors, which would result in data loss.
+But since the training sequence is known, it is possible to reconstruct the original signal by comparing the incoming training sequence with the expected one and thus conserving the data bits.
+\begin{itemize}
+ \item Normal Burst: The basic information transmitting Burst.
+ All information on traffic and control channels is transmitted by this Burst, except for the \gls{rach}.
+ Furthermore this Burst contains the \glspl{sf}.
+ If these are set, the Burst contains important signalling data that has to travel fast over the \gls{facch} however no normal data can be transmitted in this case.
+ \item Frequency Correction Burst: This Burst is sent frequently and is used by \glspl{ms} to fine tune to the frequency of the \gls{bts}.
+ It may also be used for time synchronisation for \gls{tdma} frames by the \gls{ms}.
+ The periodic broadcasting of this frame is also called \gls{fcch} and shares a frequency with the \gls{bcch} as will be shown in the next section.
+ \item Synchronisation Burst: This Burst contains time synchronisation information from the \gls{bts} to the \gls{ms} as well as the running number of the \gls{tdma} frame.
+ Periodic broadcasting of this Burst is called \gls{sch}.
+ \item Dummy Burst: When no other Bursts are sent on the \gls{bcch} this one is sent to ensure that something is sent every time.
+ This way the \gls{ms} can keep up doing measurements even if no data needs to be transmitted.
+ \item Access Burst: The Burst that is used to transmit data on the \gls{rach}.
+ Since everyone can sent on the \gls{rach} without being given a timeslot via Slotted Aloha procedure, the guard times of this Burst are high since this reduces the probability of data colliding.
+\end{itemize}
+The information in this section described the physical properties of the Air Interface also called Layer 1 when referring to the standard ISO/OSI model.
+A short description of the other layers will be presented in Section \ref{sec:layers} for the sake of completeness.
-
-\label{sec:radio}
\subsection{Logical Channels}
\label{sec:channels}
+A logical channel is a virtual construct on top of the physical construct of frames, to group information of the same kind together.
+Since not all information has to be sent all the time, these different information channels, \eg broadcast information about the respective base station, can be multiplexed and sent together.
+\begin{figure}
+ \centering
+ \caption{Example mapping of logical channels. After \cite{protocols1999}.}
+ \label{fig:channels}
+\end{figure}
+The mapping of these channels on the physical interface works in two dimensions.
+The first dimension is the frequency and the second the timeslot as can be seen in Figure \ref{fig:channels}.
+In this way, each timeslot over the course of multiple frames can be regarded as a virtual channel.
+These resulting virtual channels can now be used by a multitude of logical channels to transmit information.
+
+There are two main categories of logical channels distinguished by their usage \cite{kommsys2006}, dedicated channels and common channels.
+Dedicated channels transport data meant for a single subscriber whereas common channels contain information interesting to all subscribers.
+
+\subsubsection{Dedicated Channels}
+As mentioned above, these channels wrap the communication of a single user with the network.
+These are point to point channels.
+\begin{itemize}
+ \item \gls{tch}: A data channels that is used to transmit voice data or data service packages.
+ \item \gls{facch}: A channel for transmission of urgent signalling data, \eg handover signalling.
+ Since this data doesn't have to be send often, it shares a timeslot with the \gls{tch} and uses the stealing flags to insert its own data.
+ \item \gls{sacch}: The uplink of this channel is used by the \gls{ms} to transmit quality measurements of the cell and neighbouring cells to the base station, so the network can do handover decisions accordingly.
+ The downlink is used for Timing Advance data and power management data for the \gls{ms}.
+ \item \gls{sdcch}: On this channel signalling information is sent to a subscriber as long as no \gls{tch} has been assigned during the initialisation of a call.
+ Text messages and Location Updates are also transmitted on this channel.
+\end{itemize}
+
+\subsubsection{Common Channels}
+The common channels contain data interesting to all subscribers, thus having a broadcast nature.
+These are point to multi-point channels.
+\begin{itemize}
+ \item \gls{sch}: When the \gls{ms} is looking for a cell to connect, this channel is used.
+ \item \gls{fcch}: Used by \glspl{ms} to fine tune to the frequency of a certain base station and denotes the start of a 51-Multiframe.
+ \item \gls{bcch}: This channel is used to transmit information about the network and the base station itself through different system information messages.
+ These contain, the netowrk name and cell identification as well as neighbourhood information on cells in the area and much more.
+ This channel will be the main source of information for this project, since it allows harvesting information without actively participating in the network and will thus be discussed in further detail in Section \ref{sec:parameters}.
+ \item \gls{pch}: If a subscriber is not assigned a dedicated channel yet, \ie he/she is not active, they are notified on this channel if there is an incoming call or text.
+ The subscribers are identified by their \gls{tmsi} which has been previously assigned upon entering the network, so the \gls{imsi} does not have to be broadcasted.
+ \item \gls{rach}: A subscriber that has been notified over the \gls{pch} can contact the network and request a \gls{sdcch}.
+ Since this is a channel used by all connected and idle \glspl{ms}, access has to be regulated.
+ As the name implies access is random thus it can happen that two or more \gls{ms} try to send at the same time.
+ Slotted Aloha is used to handle access, meaning there are fixed timeslots on which \glspl{ms} can send data.
+ If collisions occur, the data is discarded and each \gls{ms} has to wait a random time interval before sending again.
+ \item \gls{agch}: This is the channel used to respond to a \gls{ms} if a request has been made on the \gls{rach}.
+ The acknowledgement message also contains information on which \gls{sdcch} to use.
+\end{itemize}
+\subsubsection{Combinations}
+These channels cannot arbitrarily mapped onto timeslots.
+There is a complex multiplexing scheme defined in GSM 05.02 \cite{gsm0502} that explains which channel combinations can be broadcasted inside a Multiframe.
+Since we are mainly interested in the downlink to harvest information from the \gls{bcch} Table \ref{tab:channel_configurations} shows the possible combinations of logical channels inside a Multiframe.
+\begin{table}
+ \centering
+ \begin{tabular}{lccccccccc}
+ \toprule
+ &M1&M2&M3&M4&M5&M6&M7&M8&M9\\
+ \midrule
+ TCH/F &\cellcolor[gray]{0.7}&&&&&&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}\\
+ TCH/H &&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&&&&\\
+ TCH/H &&&\cellcolor[gray]{0.7}&&&&&&\\
+ BCCH &&&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&\\
+ FCCH &&&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&&\\
+ SCH &&&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&&\\
+ CCCH &&&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&\\
+ SDCCH &&&&&\cellcolor[gray]{0.7}&&\cellcolor[gray]{0.7}&&\\
+ SACCH &\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&\cellcolor[gray]{0.7}&&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}\\
+ FACCH &\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&\cellcolor[gray]{0.7}&&&&&\cellcolor[gray]{0.7}&\\
+ \midrule
+ Multiframe Type &26&26&26&51&51&51&51&26&26\\
+ \bottomrule
+ \end{tabular}
+ \caption{Possible combinations of logical channels for the base station. From \cite{GSM2009}.}
+\end{table}
+The mapping of these specific Multiframe-configurations onto timeslots is not arbitrary either.
+Normally TS-0 and TS-1, the first two time slots are used handle channels with signalling information.
+The \gls{bcch} also uses TS-0 of the carrier frequency.
+
+Figure \ref{fig:channel_example} shows an example \cite{kommsys2006} for the downlink of a base station where these channel configurations can be seen.
+As mentioned before, TS-0 and TS-1 are used for signalling purpose where the Multiframe-configurations M5 and M7 can be found respectively.
+The table shows, that these configurations do not contain any traffic channels.
+As for traffic channels, TS-2 through to TS-7 are used with the configuration M1 or M3.
+It cannot be seen from the data, whether full rate or half rate channels are used for transporting voice data, but since half rate channels are not used very often, it is more likely that it resembles M1.
+\begin{figure}
+ \centering
+ \caption{Example of Multiframe-configurations for a base station \cite{kommsys2006}.}
+ \label{fig:channel_example}
+\end{figure}
+
\subsection{Layers}
+\label{sec:layers}
+Design-wise the layers of the $U_m$ interface resemble the layers of the ISO/OSI model reference model specified by the \gls{itu}.
+This section will give a short overview over the first three layers with respect to the air interface \cite{protocols1999}.
+It is important for further understanding to know what functionality can be found on which of the three lower layers, since the framework employed to gather information in this project will directly work on and with those layers.
+
+\paragraph{Physical Layer (Layer 1):} This layer provides the facilities for the actual transmission of data.
+In case of the $U_m$ interface this is the actual radio equipment.
+This layer does not know data types like user or signalling data.
+The data that it receives from Layer 2 are either single bits or an array of bits.
+On the protocol side of the $U_m$ interface the \gls{gmsk} modulation that is used to encode the data of a Burst into radio signals is part of Layer 1.
+
+\paragraph{Data Link (Layer 2):} On Layer 2 packaging is done.
+The notion of data frames is introduced to have chunks of information on which error checking can be performed and potential retransmission of corrupted data.
+The Layer 2 protocol \gls{hdlc} is used as a basis for \gls{ss7} as well as for \gls{lapd}.
+\gls{hdlc} and its derivatives use start/stop markers and checksums to form data frames.
+The Layer 2 format changes through the course of the network, while the data packages of layer 3 stay the same.
+When a transmission from a \gls{ms} to the \gls{bts} is done,\gls{lapdm} is used which is essentially the same as the Layer 2 \gls{isdn} protocol with a few simplifications.
+From the \gls{bts} to the \gls{bsc} \gls{lapdm} converts to \gls{lapd} and afterwards is exchanged to \gls{mtp2}.
+For the air interface \gls{lapdm} along with channel coding and Burst formatting form Layer 2.
+More information about these Layer 2 protocols can be found in the respective Technical Specifications of the \gls{3gpp} \cite{3gpp_ts_0405,3gpp_ts_0406}.
+
+\paragraph{Network (Layer 3):} Layer 3 headers have to provide all the information necessary for the packet to be routed towards its recipient.
+As with Layer 2 information, it may be the case that this header needs to be partially rewritten during the transmission of a package.
+Between the \gls{ms}, \gls{bts}, \gls{bsc} and \gls{msc} the \gls{rr} protocol and the information needed to route a call into the \gls{ss7} subsystem are part of Layer 3.
+This protocol handles configuration and allocation of radio channels as well as managing the dedicated channels to the subscribers.
+Therefore in a strict sense \gls{mm} and \gls{cc} information does not belong to Layer 3 functionality but is only transported via \gls{rr} between \gls{ms} and the \gls{nss} \cite{protocols1999}.
+
\section{IMSI-Catcher}
\label{sec:catcher}
\subsection{Mode of Operation}
\subsection{Possible Attacks}
-\subsection{Law situation in Germany}
+\subsection{Law Situation in Germany}
%germany not plagued by terrorism
%response to 9/11: overreaction (Luftschutzgesetz)
%no definition for terror in german law
diff --git a/Tex/Master/Glossary.tex b/Tex/Master/Glossary.tex
index 8b70972..5afcea6 100644
--- a/Tex/Master/Glossary.tex
+++ b/Tex/Master/Glossary.tex
@@ -73,4 +73,15 @@
\newacronym{facch}{FACCH}{Fast Access Control Channel}
\newacronym{tdma}{TDMA}{Time Division Multiple Access}
\newacronym{fdma}{FDMA}{Frequency Division Multiple Access}
-\newacronym{sch}{SCH}{Signalling Channel} \ No newline at end of file
+\newacronym{sch}{SCH}{Signalling Channel}
+\newacronym{rach}{RACH}{Random Access Channel}
+\newacronym{sf}{SF}{Stealing Flag}
+\newacronym{fcch}{FCCH}{Frequency Correction Channel}
+\newacronym{bcch}{BCCH}{Broadcast Channel}
+\newacronym{gmsk}{GMSK}{Gaussian Minimum Shift Keying}
+\newacronym{hdlc}{HDLC}{High Level Data Link Control}
+\newacronym{lapd}{LAPD}{Link Access Procedure, D Channel}
+\newacronym{lapdm}{LAPD$_m$}{LAPD Mobile}
+\newacronym{mtp2}{MTP 2/SS7}{Message Transfer Part 2/SS7}
+\newacronym{rr}{RR}{Radio Resource}
+\newacronym{mm}{MM}{Mobility Management} \ No newline at end of file
diff --git a/Tex/Master/Master.acn b/Tex/Master/Master.acn
index ccb3b27..6fcce43 100644
--- a/Tex/Master/Master.acn
+++ b/Tex/Master/Master.acn
@@ -109,16 +109,18 @@
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{LA?\glossaryentryfield{la}{\glsnamefont{LA}}{Location Area}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{CC?\glossaryentryfield{cc}{\glsnamefont{CC}}{Call Control}{\relax }|setentrycounter{page}\glsnumberformat}{9}
+\glossaryentry{MM?\glossaryentryfield{mm}{\glsnamefont{MM}}{Mobility Management}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{CC?\glossaryentryfield{cc}{\glsnamefont{CC}}{Call Control}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{PSTN?\glossaryentryfield{pstn}{\glsnamefont{PSTN}}{Public Standard Telephone Network}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
+\glossaryentry{MM?\glossaryentryfield{mm}{\glsnamefont{MM}}{Mobility Management}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{9}
\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{10}
-\glossaryentry{MSISDN?\glossaryentryfield{msisdn}{\glsnamefont{MSISDN}}{Mobile Subscriber Integrated Services Digital Network Number}{\relax }|setentrycounter{page}\glsnumberformat}{11}
+\glossaryentry{MSISDN?\glossaryentryfield{msisdn}{\glsnamefont{MSISDN}}{Mobile Subscriber Integrated Services Digital Network Number}{\relax }|setentrycounter{page}\glsnumberformat}{10}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{11}
\glossaryentry{HLR?\glossaryentryfield{hlr}{\glsnamefont{HLR}}{Home Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{11}
\glossaryentry{VLR?\glossaryentryfield{vlr}{\glsnamefont{VLR}}{Visitor Location Register}{\relax }|setentrycounter{page}\glsnumberformat}{11}
@@ -289,4 +291,91 @@
\glossaryentry{FDMA?\glossaryentryfield{fdma}{\glsnamefont{FDMA}}{Frequency Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{19}
\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{19}
\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{19}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter{page}\glsnumberformat}{19}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{19}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{19}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{20}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{SF?\glossaryentryfield{sf}{\glsnamefont{SF}}{Stealing Flag}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter{page}\glsnumberformat}{21}
+\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{SACCH?\glossaryentryfield{sacch}{\glsnamefont{SACCH}}{Slow Access Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{22}
+\glossaryentry{PCH?\glossaryentryfield{pch}{\glsnamefont{PCH}}{Paging Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{TMSI?\glossaryentryfield{tmsi}{\glsnamefont{TMSI}}{Temporary IMSI}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{PCH?\glossaryentryfield{pch}{\glsnamefont{PCH}}{Paging Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{AGCH?\glossaryentryfield{agch}{\glsnamefont{AGCH}}{Access Grand Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter{page}\glsnumberformat}{23}
+\glossaryentry{ITU?\glossaryentryfield{itu}{\glsnamefont{ITU}}{International Telecomunication Union}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{GMSK?\glossaryentryfield{gmsk}{\glsnamefont{GMSK}}{Gaussian Minimum Shift Keying}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{SS-7?\glossaryentryfield{ss7}{\glsnamefont{SS-7}}{Signaling System 7}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter{page}\glsnumberformat}{24}
+\glossaryentry{ISDN?\glossaryentryfield{isdn}{\glsnamefont{ISDN}}{Integrated Services Digital Network}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{MTP 2/SS7?\glossaryentryfield{mtp2}{\glsnamefont{MTP 2/SS7}}{Message Transfer Part 2/SS7}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{3GPP?\glossaryentryfield{3gpp}{\glsnamefont{3GPP}}{Third Generation Partnership Project}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{RR?\glossaryentryfield{rr}{\glsnamefont{RR}}{Radio Resource}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{SS-7?\glossaryentryfield{ss7}{\glsnamefont{SS-7}}{Signaling System 7}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{MM?\glossaryentryfield{mm}{\glsnamefont{MM}}{Mobility Management}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{CC?\glossaryentryfield{cc}{\glsnamefont{CC}}{Call Control}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{RR?\glossaryentryfield{rr}{\glsnamefont{RR}}{Radio Resource}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter{page}\glsnumberformat}{25}
+\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter{page}\glsnumberformat}{25}
diff --git a/Tex/Master/Master.aux b/Tex/Master/Master.aux
index 939969c..ac42529 100644
--- a/Tex/Master/Master.aux
+++ b/Tex/Master/Master.aux
@@ -17,6 +17,9 @@
\citation{GSM2009}
\citation{protocols1999}
\citation{kommsys2006}
+\citation{GSM2009}
+\citation{protocols1999}
+\citation{kommsys2006}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
@@ -25,6 +28,7 @@
\FN@pp@footnotehinttrue
\citation{protocols1999}
\citation{kommsys2006}
+\citation{GSM2009}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
@@ -141,20 +145,52 @@
\newlabel{sec:Um}{{2.3}{18}}
\@writefile{lof}{\contentsline {figure}{\numberline {2.8}{\ignorespaces The combination of FDMA and TDMA.}}{19}}
\newlabel{fig:fdma_tdma}{{2.8}{19}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{19}}
-\newlabel{fig:frame_hierarchy}{{2.9}{19}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.1}Radio Transmission}{19}}
\newlabel{sec:radio}{{2.3.1}{19}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types.}}{19}}
-\newlabel{fig:burst_types}{{2.10}{19}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{20}}
-\newlabel{sec:channels}{{2.3.2}{20}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.3}Layers}{20}}
-\@writefile{toc}{\contentsline {section}{\numberline {2.4}IMSI-Catcher}{20}}
-\newlabel{sec:catcher}{{2.4}{20}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{20}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.2}Possible Attacks}{20}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.3}Law situation in Germany}{20}}
+\@writefile{toc}{\contentsline {subsubsection}{Frame Numbering}{19}}
+\citation{GSM2009}
+\citation{GSM2009}
+\citation{GSM2009}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{20}}
+\newlabel{fig:frame_hierarchy}{{2.9}{20}}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types. After \cite {GSM2009}.}}{20}}
+\newlabel{fig:burst_types}{{2.10}{20}}
+\@writefile{toc}{\contentsline {subsubsection}{Burst Types}{20}}
+\citation{protocols1999}
+\citation{protocols1999}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{21}}
+\newlabel{sec:channels}{{2.3.2}{21}}
+\citation{kommsys2006}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.11}{\ignorespaces Example mapping of logical channels. After \cite {protocols1999}.}}{22}}
+\newlabel{fig:channels}{{2.11}{22}}
+\@writefile{toc}{\contentsline {subsubsection}{Dedicated Channels}{22}}
+\@writefile{toc}{\contentsline {subsubsection}{Common Channels}{22}}
+\citation{gsm0502}
+\citation{GSM2009}
+\citation{GSM2009}
+\citation{kommsys2006}
+\citation{kommsys2006}
+\citation{kommsys2006}
+\citation{protocols1999}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.12}{\ignorespaces Example of Multiframe-configurations for a base station \cite {kommsys2006}.}}{23}}
+\newlabel{fig:channel_example}{{2.12}{23}}
+\@writefile{toc}{\contentsline {subsubsection}{Combinations}{23}}
+\citation{3gpp_ts_0405}
+\citation{3gpp_ts_0406}
+\@writefile{lot}{\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{24}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.3}Layers}{24}}
+\newlabel{sec:layers}{{2.3.3}{24}}
+\@writefile{toc}{\contentsline {paragraph}{Physical Layer (Layer 1):}{24}}
+\@writefile{toc}{\contentsline {paragraph}{Data Link (Layer 2):}{24}}
+\citation{protocols1999}
+\@writefile{toc}{\contentsline {paragraph}{Network (Layer 3):}{25}}
+\@writefile{toc}{\contentsline {section}{\numberline {2.4}IMSI-Catcher}{25}}
+\newlabel{sec:catcher}{{2.4}{25}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{25}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.2}Possible Attacks}{25}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.3}Law Situation in Germany}{25}}
+\FN@pp@footnotehinttrue
+\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\bibstyle{acm}
\citation{*}
@@ -173,8 +209,6 @@
\bibcite{protocols1999}{12}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\FN@pp@footnotehinttrue
-\FN@pp@footnotehinttrue
\@writefile{toc}{\contentsline {chapter}{Bibliography}{I}}
\bibcite{hsdpa}{13}
\bibcite{hsupa}{14}
diff --git a/Tex/Master/Master.ist b/Tex/Master/Master.ist
index 359a53d..9210594 100644
--- a/Tex/Master/Master.ist
+++ b/Tex/Master/Master.ist
@@ -1,5 +1,5 @@
% makeindex style file created by the glossaries package
-% for document 'Master' on 2012-2-6
+% for document 'Master' on 2012-2-10
actual '?'
encap '|'
level '!'
diff --git a/Tex/Master/Master.lof b/Tex/Master/Master.lof
index df59bd4..cc337f7 100644
--- a/Tex/Master/Master.lof
+++ b/Tex/Master/Master.lof
@@ -9,5 +9,7 @@
\contentsline {figure}{\numberline {2.6}{\ignorespaces Common base station configurations. Compiled from \cite {protocols1999}.}}{15}
\contentsline {figure}{\numberline {2.7}{\ignorespaces Cyphering procedure for one frame of voice data. Adopted from \cite {kommsys2006}.}}{18}
\contentsline {figure}{\numberline {2.8}{\ignorespaces The combination of FDMA and TDMA.}}{19}
-\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{19}
-\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types.}}{19}
+\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{20}
+\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types. After \cite {GSM2009}.}}{20}
+\contentsline {figure}{\numberline {2.11}{\ignorespaces Example mapping of logical channels. After \cite {protocols1999}.}}{22}
+\contentsline {figure}{\numberline {2.12}{\ignorespaces Example of Multiframe-configurations for a base station \cite {kommsys2006}.}}{23}
diff --git a/Tex/Master/Master.log b/Tex/Master/Master.log
index f8b135c..28e1f4e 100644
--- a/Tex/Master/Master.log
+++ b/Tex/Master/Master.log
@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 6 FEB 2012 13:54
+This is pdfTeX, Version 3.1415926-1.40.10 (TeX Live 2009/Debian) (format=pdflatex 2012.1.7) 10 FEB 2012 18:09
entering extended mode
%&-line parsing enabled.
**Master.tex
@@ -911,35 +911,35 @@ File: lstlang1.sty 2004/09/05 1.3 listings language file
\glo@main@file=\write6
\openout6 = `Master.glo'.
-Package glossaries Info: Writing glossary file Master.glo on input line 91.
+Package glossaries Info: Writing glossary file Master.glo on input line 93.
\glo@acronym@file=\write7
\openout7 = `Master.acn'.
-Package glossaries Info: Writing glossary file Master.acn on input line 91.
+Package glossaries Info: Writing glossary file Master.acn on input line 93.
(./Glossary.tex)
(./Master.aux)
\openout1 = `Master.aux'.
-LaTeX Font Info: Checking defaults for OML/cmm/m/it on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Checking defaults for T1/cmr/m/n on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Checking defaults for OT1/cmr/m/n on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Checking defaults for OMS/cmsy/m/n on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Checking defaults for OMX/cmex/m/n on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Checking defaults for U/cmr/m/n on input line 108.
-LaTeX Font Info: ... okay on input line 108.
-LaTeX Font Info: Try loading font information for T1+ptm on input line 108.
+LaTeX Font Info: Checking defaults for OML/cmm/m/it on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for T1/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OT1/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OMS/cmsy/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OMX/cmex/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for U/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Try loading font information for T1+ptm on input line 110.
(/usr/share/texmf-texlive/tex/latex/psnfss/t1ptm.fd
File: t1ptm.fd 2001/06/04 font definitions for T1/ptm.
)
Package scrbase Info: No captions found for `german'
-(scrbase) --> skipped on input line 108.
+(scrbase) --> skipped on input line 110.
Package scrbase Info: No captions found for `ngerman'
-(scrbase) --> skipped on input line 108.
+(scrbase) --> skipped on input line 110.
(/usr/share/texmf-texlive/tex/latex/ucs/ucsencs.def
File: ucsencs.def 2003/11/29 Fixes to fontencodings LGR, T3
@@ -997,17 +997,17 @@ Non-PDF special ignored!
{/var/lib/texmf/fonts/map/pdftex/updmap/pdftex.map} <../Images/unisiegel.pdf>])
LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <10.95> not available
-(Font) Font shape `T1/ptm/b/n' tried instead on input line 118.
+(Font) Font shape `T1/ptm/b/n' tried instead on input line 120.
(../Content/Abstract.tex) [2]
-LaTeX Font Info: Try loading font information for T1+phv on input line 131.
+LaTeX Font Info: Try loading font information for T1+phv on input line 133.
(/usr/share/texmf-texlive/tex/latex/psnfss/t1phv.fd
File: t1phv.fd 2001/06/04 scalable font definitions for T1/phv.
)
LaTeX Font Info: Font shape `T1/phv/bx/n' in size <10.95> not available
-(Font) Font shape `T1/phv/b/n' tried instead on input line 131.
+(Font) Font shape `T1/phv/b/n' tried instead on input line 133.
LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <20.74> not available
-(Font) Font shape `T1/ptm/b/n' tried instead on input line 131.
+(Font) Font shape `T1/ptm/b/n' tried instead on input line 133.
(./Master.lof)
\tf@lof=\write8
\openout8 = `Master.lof'.
@@ -1038,10 +1038,10 @@ Class scrbook Info: You've told me to use the font selection of the element
(scrbook) on input line 4.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 28.
+(scrbook) on input line 36.
Class scrbook Info: You've told me to use the font selection of the element
(scrbook) `sectioning' that is an alias of element `disposition'
-(scrbook) on input line 29.
+(scrbook) on input line 37.
)
\tf@toc=\write10
\openout10 = `Master.toc'.
@@ -1089,7 +1089,31 @@ LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <12> not available
Underfull \vbox (badness 2318) has occurred while \output is active []
[13]
-[14] [15] [16] [17] [18]) [19] [20] (./Master.bbl
+[14] [15] [16] [17] [18] [19] [20] [21]
+
+LaTeX Warning: Reference `sec:parameters' on page 22 undefined on input line 71
+8.
+
+[22]
+
+LaTeX Warning: Citation `gsm0502' on page 23 undefined on input line 731.
+
+
+LaTeX Warning: Reference `tab:channel_configurations' on page 23 undefined on i
+nput line 732.
+
+[23]
+
+LaTeX Warning: Citation `3gpp_ts_0405' on page 24 undefined on input line 790.
+
+
+LaTeX Warning: Citation `3gpp_ts_0406' on page 24 undefined on input line 790.
+
+[24]) [25] [26
+
+
+
+] (./Master.bbl
Underfull \hbox (badness 2818) in paragraph at lines 4--8
[]\T1/ptm/m/n/10.95 Radio ac-cess net-work: Ra-dio trans-mis-sion and re-cep-ti
on. GSM 05.05,
@@ -1140,9 +1164,6 @@ Underfull \hbox (badness 3428) in paragraph at lines 50--53
[1
-
-
-
]) (../Content/Appendix.tex) (./Master.acr [2]
Underfull \hbox (badness 2626) in paragraph at lines 24--24
[]|\T1/ptm/m/n/10.95 Conférence Eu-ropéenne des Ad-min-is-tra-tions des
@@ -1158,29 +1179,33 @@ Underfull \hbox (badness 10000) in paragraph at lines 34--35
-] [4]) [5] (./Master.aux) )
+] [4]) [5] (./Master.aux)
+
+LaTeX Warning: There were undefined references.
+
+ )
Here is how much of TeX's memory you used:
- 22928 strings out of 493848
- 436261 string characters out of 1152824
- 651582 words of memory out of 3000000
- 25616 multiletter control sequences out of 15000+50000
+ 23135 strings out of 493848
+ 439315 string characters out of 1152824
+ 656159 words of memory out of 3000000
+ 25823 multiletter control sequences out of 15000+50000
73378 words of font info for 99 fonts, out of 3000000 for 9000
714 hyphenation exceptions out of 8191
69i,13n,72p,1076b,1342s stack positions out of 5000i,500n,10000p,200000b,50000s
-{/usr/share/texmf-texlive/fonts/enc/dvips/base/8r.en
-c}</usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi10.pfb></usr/sha
-re/texmf-texlive/fonts/type1/public/amsfonts/cm/cmmi12.pfb></usr/share/texmf-te
-xlive/fonts/type1/public/amsfonts/cm/cmmi8.pfb></usr/share/texmf-texlive/fonts/
-type1/public/amsfonts/cm/cmr10.pfb></usr/share/texmf-texlive/fonts/type1/public
-/amsfonts/cm/cmr8.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/
-cmsy10.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmsy8.pfb><
-/usr/share/texmf-texlive/fonts/type1/urw/courier/ucrr8a.pfb></usr/share/texmf-t
-exlive/fonts/type1/urw/times/utmb8a.pfb></usr/share/texmf-texlive/fonts/type1/u
-rw/times/utmr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/utmr8a.pfb>
-</usr/share/texmf-texlive/fonts/type1/urw/times/utmri8a.pfb>
-Output written on Master.pdf (33 pages, 245727 bytes).
+{/usr/share/texmf-texlive/fonts/enc/dvips/base/8r.enc}</usr/share/texmf-texli
+ve/fonts/type1/public/amsfonts/cm/cmmi10.pfb></usr/share/texmf-texlive/fonts/ty
+pe1/public/amsfonts/cm/cmmi12.pfb></usr/share/texmf-texlive/fonts/type1/public/
+amsfonts/cm/cmmi8.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/
+cmr10.pfb></usr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmr8.pfb></u
+sr/share/texmf-texlive/fonts/type1/public/amsfonts/cm/cmsy10.pfb></usr/share/te
+xmf-texlive/fonts/type1/public/amsfonts/cm/cmsy8.pfb></usr/share/texmf-texlive/
+fonts/type1/urw/courier/ucrr8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/ti
+mes/utmb8a.pfb></usr/share/texmf-texlive/fonts/type1/urw/times/utmr8a.pfb></usr
+/share/texmf-texlive/fonts/type1/urw/times/utmr8a.pfb></usr/share/texmf-texlive
+/fonts/type1/urw/times/utmri8a.pfb>
+Output written on Master.pdf (39 pages, 262852 bytes).
PDF statistics:
- 163 PDF objects out of 1000 (max. 8388607)
+ 184 PDF objects out of 1000 (max. 8388607)
0 named destinations out of 1000 (max. 500000)
18 words of extra memory for PDF output out of 10000 (max. 10000000)
diff --git a/Tex/Master/Master.lot b/Tex/Master/Master.lot
index f2d835d..fa75aae 100644
--- a/Tex/Master/Master.lot
+++ b/Tex/Master/Master.lot
@@ -5,3 +5,4 @@
\contentsline {table}{\numberline {2.2}{\ignorespaces Mobile Country and Network Codes. (R) denotes that the MCC is reserved but not operational as of yet, whereas (T) denotes a operational test network.}}{9}
\contentsline {table}{\numberline {2.3}{\ignorespaces Interfaces inside the core network (upper part) and the radio network (lower part)}}{10}
\contentsline {table}{\numberline {2.4}{\ignorespaces Frequencies in the different bands \cite {kommsys2006}.}}{15}
+\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{24}
diff --git a/Tex/Master/Master.pdf b/Tex/Master/Master.pdf
index a585df1..30f0bb0 100644
--- a/Tex/Master/Master.pdf
+++ b/Tex/Master/Master.pdf
Binary files differ
diff --git a/Tex/Master/Master.synctex.gz b/Tex/Master/Master.synctex.gz
index d1f3f0a..45f03b6 100644
--- a/Tex/Master/Master.synctex.gz
+++ b/Tex/Master/Master.synctex.gz
Binary files differ
diff --git a/Tex/Master/Master.tex b/Tex/Master/Master.tex
index 70f6056..2fde9fb 100644
--- a/Tex/Master/Master.tex
+++ b/Tex/Master/Master.tex
@@ -48,6 +48,7 @@
\usepackage{url}
\usepackage{booktabs}
\usepackage{subfigure}
+\usepackage{xcolor}
\usepackage[headsepline, automark]{scrpage2}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
@@ -70,6 +71,7 @@
\newtheorem{example}{Example}
\newcommand{\eg}{e.g.\ }
+\newcommand{\ie}{i.e.\ }
\newcommand{\cf}{cf.\ }
\newcommand{\etc}{etc.\ }
diff --git a/Tex/Master/Master.toc b/Tex/Master/Master.toc
index 4d19a10..529c106 100644
--- a/Tex/Master/Master.toc
+++ b/Tex/Master/Master.toc
@@ -19,11 +19,19 @@
\contentsline {subsubsection}{Transcoding rate and Adaption Unit}{17}
\contentsline {section}{\numberline {2.3}The $U_m$ Interface}{18}
\contentsline {subsection}{\numberline {2.3.1}Radio Transmission}{19}
-\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{20}
-\contentsline {subsection}{\numberline {2.3.3}Layers}{20}
-\contentsline {section}{\numberline {2.4}IMSI-Catcher}{20}
-\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{20}
-\contentsline {subsection}{\numberline {2.4.2}Possible Attacks}{20}
-\contentsline {subsection}{\numberline {2.4.3}Law situation in Germany}{20}
+\contentsline {subsubsection}{Frame Numbering}{19}
+\contentsline {subsubsection}{Burst Types}{20}
+\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{21}
+\contentsline {subsubsection}{Dedicated Channels}{22}
+\contentsline {subsubsection}{Common Channels}{22}
+\contentsline {subsubsection}{Combinations}{23}
+\contentsline {subsection}{\numberline {2.3.3}Layers}{24}
+\contentsline {paragraph}{Physical Layer (Layer 1):}{24}
+\contentsline {paragraph}{Data Link (Layer 2):}{24}
+\contentsline {paragraph}{Network (Layer 3):}{25}
+\contentsline {section}{\numberline {2.4}IMSI-Catcher}{25}
+\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{25}
+\contentsline {subsection}{\numberline {2.4.2}Possible Attacks}{25}
+\contentsline {subsection}{\numberline {2.4.3}Law Situation in Germany}{25}
\contentsline {chapter}{Bibliography}{I}
\contentsline {chapter}{Acronyms}{III}