Zines/phrack/5/9.txt

                                ==Phrack Inc.==

                    Volume One, Issue Five, Phile #9 of 12

                        Mobile Telephone Communications

                              By Phantom Phreaker

                           Presented by The Alliance
                                 (618)667-3825


 Mobile telephone communications is not the same thing as Cellular. Mobile
telephone service is not as advanced as Cellular, and not as efficient. Mobile
telephone service limits the number of customers sharply, while Cellular is
designed to solve the problems of Mobile telephone service.

 The signals for Mobile communications are sent by high-power transmitters and
antennas that provide an area of approx. 20-30 miles with service.

 A base unit of a Mobile communications system transmits and receives on
different frequencies at the same time. Typical power for the radio base
station transmitter is 200-250 watts.

 Mobile telephone facilities tie in with the normal fixed-position telephone
system, however base units can be owned by a Radio Common Carrier (RCC). RCCs
running mobile telephone systems are charged by the telephone company for use
of the normal phone system.

DIAGRAM:
--------
                      ^-Base antenna    Mobile unit
                      |                    |
                      |- - - - - - - - - /-- --\
                      |     ^Signal^    | (Car) |
                   ---------------------------------------
                      ^-------<-20-30 Miles->---|
                      ^                         |-From
                   /===========\                | mobile
                   |Receiver/  |                | antenna
                   |Transmitter|         =============
                   /===========\         |Receiver/  | |-|
                   |Control    |         |Transmitter|-|*|
                   |Terminal   |         ============= |-|
                   \===========/                        ^
                        |                           Handset
                        | <-Telephone
                        | <-Land line
                        |
                    =======                =======
                    | C.O.|                | C.O.|---[-*-]
                    =======                =======    |*|
                        |                      |      -----
                        |                      |      Fixed
                    =========              =========  Phone
                    |Switch |--------------|Switch |
                    |Network| Transmission |Network|
                    =========     Link     =========

                   ---------------------------------------
(Above diagram from 'Understanding Telephone Electronics' chapter 10.)

 As you can see from the above diagram, calls placed from the Fixed position
telephone are routed through a Central Office as normal, through a Switch
Network, to another Switch network, and to another CO. From the second CO
(nearest to the Mobile unit), the signals are sent on a telephone line to the
control terminal, to the receiver, then to the base unit (antenna). From the
base unit, the radio signals are sent to the site of the mobile telephone.
 Calls from the mobile telephone operate in the same manner. An idle radio
channel is selected (like seizure of a trunk for a LD call) and the signals are
sent over the mobile network.
 If no channel is available for use, then a busy indication is triggered
(similar to a re-order). If a channel is available, the customer will be
prompted with a dial tone, similar to normal fixed-position telephone service.
 The area that this would work in is called the subscriber's home area. When a
mobile telephone service subscriber leaves the service area, he is then
referred to as a Roamer. Since the mobile unit is out of the service area,
special preparations have to be made to continue communications to/from that
mobile unit.

SIGNALLING
----------
 Mobile signalling tones are selected (like touch tones) to avoid possible
reproduction of the signalling tone on the voice link, to cause a signalling
mistake. The IMTS (Improved Mobile Telephone Service) uses in band signalling
of tones from 1300Hz-2200Hz. Another method of signalling is the MTS (Mobile
Telephone System). MTS is older than IMTS, and MTS uses in band signalling of
tones from 600Hz-1500Hz, and some use 2805 Hz in manual operation.

CALL COMPLETION
---------------
 In this instance, let's say a call is being placed from a normal telephone to
a Mobile unit. First off, the base station selects one idle channel and places
a 2000Hz idle tone on it. All on hook Mobile units active in that service area
find and lock onto the channel that carries the 2000Hz idle tone. Now each
Mobile unit listens for it's specific number on that channel. When an idle
channel becomes busy, a new channel is selected for use, and the process is
repeated.
 Now the caller's call is sent through the telephone network the same way as a
normal telephone call. When this call reaches the control terminal, the
terminal seizes the already marked idle channel (with every on-hook mobile unit
listening to it) and applies a 1800Hz seize tone. This tone keeps other mobile
units from using it to complete other calls. The called number is outpulsed
over the base station transmitter at ten pulses per second, with idle tone
represented as a mark, and a seize-tone represented as a space.
 Since every idle mobile unit is waiting on that channel, they compare the
number being outpulsed with their own number. If the first digit of the called
mobile unit is three, and a specific mobile unit 'listening' on the channel has
a first digit of four, it stops listening to that channel, and moves to the
next channel with 2000Hz applied.
  When the mobile unit receives the correct destination number, all other
mobile units are no longer listening on that particular channel. When the 7
digit number is received, the mobile supervisory unit turns on the mobile
transmitter and sends an acknowledgement signal (2150Hz guard tone) back to the
control terminal. If this signal isn't received in three seconds after
outpulsing, the seize tone is removed from that channel, and the call is
dropped. If the signal is received at the control terminal, then the mobile
phone will ring (standard two seconds on, four seconds off). If the mobile unit
being called doesn't answer in forty five seconds, the call is also dropped.
 When the person answers the mobile phone and takes it off hook, the mobile
supervisory unit sends a connect tone of 1633Hz, for an answer signal. When
this is received by the control terminal, the ringing stops, and a voice path
between the two phones is established. When the mobile subscriber hangs up, a
disconnect signal is sent which consists of alternating disconnect/guard tone
(1336Hz and 2150Hz respectively) signals. Then the mobile unit begins searching
for another idle channel, and readies itself for more calls.
 For an outgoing call placed by the Mobile subscriber, the mobile unit must
already be locked on the idle channel. If the unit is not, a warning light will
flash advising the user of the problem. This is similar to a re-order signal.
 If the unit is already on an idle channel, the calling number will be sent to
the control terminal for billing purposes.

CELLULAR TELEPHONES
-------------------
 To improve over the problems of mobile telephone service such as low amount of
users, high price, etc. AT&T invented the Cellular Concept, or the AMPS
(Advanced Mobile Phone System). This is the cellular phone concept that is used
in major cities. Los Angeles, Ca. currently has the largest cellular
communication system in the world.

 Calls sent to cellular telephones are sent through the MTSO (Mobile
Telecommunications Switching Office). The MTSO handles all calls to and from
cellular telephones, and handles billing.
 All incoming calls from the MTSO are sent to a Cell site in each cell, to the
actual cellular telephone. The major difference between mobile and cellular is
that cellular can use the same channel many more times than a mobile telephone
system can, providing more customers and making the service less expensive.
 Once a vehicle goes out of range of one cell site, the signal is transferred
immediately, with no signal loss, to another cell site, where the call is
continued without interruption. This is called a Cellular hand-off.
 Cellular communications areas are divided up into several cells, like a
honeycomb.

DIAGRAM
-------
                                      /---\  /---\  /---\
                                     /  *  \/  *  \/  *  \
                        ====         |Cell ||Cell ||Cell  |
                        |CO|         | Site|| Site|| Site |
                        ====    /---\\     /\     /\     /
                         |     /  *  \\---/  \---/  \---/
                         |     |Cell | /---\  /---\
                         |     | Site|/  *  \/  *  \
                         |     \     /|Cell ||Cell  |
                      ======    \---/ | Site|| Site |
                      |MTSO|          \     /\     /
                      ======           \---/  \---/

                    ---------------------------------------
 More cell sites are used for the area they are needed for. The signals are
sent from the MTSO to the each cell site. So if you were travelling in the cell
site to the far left, the signal from the MTSO would be sent to that cell. As
you move, the signal is moved.

 Here is a quote from AT&T's Cellular Telephones pamphlet.

 'AT&T cellular phone transmission sounds as good as your home and office
phone. Basically it's a simple concept. Each metropolitan area is divided into
sectors which form a honeycomb of cells. Each cell incorporates its own
transmitter and receiver which connects to the local phone network.
 As you drive from cell to cell, sophisticated electronic equipment transfers
or 'hands off' the call to another cell site. This automatic sequence maintains
service quality throughout the conversation without interruption.'


 I hope this file has been of some assistance to anyone who is curious about
the more technical aspects of the telephone system.

References
----------
Understanding Telephone Electronics-by Texas Instruments 1983
TELE Magazine issues three and four
AT&T Mobile communications pamphlet
AT&T Cellular concept pamphlet

-End of file-
   4/14/86