Summary

A. Fixed & Short Range

IoT Long Range
Technologies: B. Long Range technologies
Standards 1. Non 3GPP Standards (LPWAN)

2. 3GPP Standards

Sami TABBANE
December 2017

1 2

LONG RANGE TECHNOLOGIES Wide-area M2M technologies and IoT

Non 3GPP Standards 3GPP Standards

LORA 1 1 LTE-M

SIGFOX 2 2 EC-GSM

3 3 NB-IOT
Weightless

4 4 5G
Others

3 H. S. Dhillon et al., “Wide-Area Wireless Communication Challenges for the Internet of Things,” IEEE Communications Magazine, February 2017
4
 LPWAN REQUIREMENTS

Long battery
B. Non 3GPP Standards (LPWAN) life

i. LoRaWAN
Support for a
ii. Sigfox massive Low device
number of cost
devices
iii. RPMA LPWAN
iv. Others
Extended
coverage (10-15 Low cost and
km in rural areas, easy
2-5 km in urban deployment
areas)

5 6

Roadmap

By the end of
2016
Jun 2015

2015 All France territory covered by

LoRaWAN network:Bouygues Telecom
Amsterdam become the first city
2013 Creation of covered by the LoRaWAN
i. LoRaWAN LoRa alliance network
Semtech develop LoRaWAN network
2010

Cycleo developed LoRa technology

Differences between LoRa and LoRaWAN

• LoRa contains only the link layer protocol. LoRa modules are a little cheaper that the
LoRaWAN ones.
• LoRaWAN includes the network layer too so it is possible to send the information to any
Base Station already connected to a Cloud platform. LoRaWAN modules may work in
7 different frequencies by just connecting the right antenna to its socket. 8
 LoRa Alliance
LoRa technology Overview

 LoRaWAN is a Low Power Wide Area Network

International International

Operators
development of
the solution
 LoRa modulation: a version of Chirp Spread Spectrum (CSS)
with a typical channel bandwidth of 125KHz
Appropriate
Integrators and technology and  High Sensitivity (End Nodes: Up to -137 dBm, Gateways: up to
industrialists maintain it over
time -142 dBm)
Manufacturers  Long range communication (up to 15 Km)
of Broadcast end
devices  Strong indoor penetration: With High Spreading Factor, Up to
End-points
20dB penetration (deep indoor)
Manufacturers
of Integrate LoRa
technology
 Occupies the entire bandwidth of the channel to broadcast a
Semiconductors
signal, making it robust to channel noise.

9
 Resistant to Doppler effect, multi-path and signal weakening. 10

Architecture Spread spectrum basics

Modulation LoRa RF (Spread

Spectrum)
Range ~ 15 Km
End Device
Throughput 0.3 to 27 Kbps

End Device
Cloud LoRa
Gateway

Email
End Device LoRa Network TCP/IP SSL
Gateway Server Application
Server

Customer IT

End Device
Type of Traffic Data packet

Payload ~ 243 Bytes Remote

Security AES Encryption Monitoring

11 12
Spectrum Spectrum (Influence of the Spreading Factor)

Far with obstacles:

o Orthogonal sequences: 2 messages, transmitted by 2 different objects, arriving
 High sensitivity required
simultaneously on a GW without interference between them (Code Division Multiple
 The network increases the SF (Spreading Factor) 
Access technique: CDMA , used also in 3G).
Throughput decreases but the connection is maintained
o Spread Spectrum: Make the signal more robust , the more the signal is spread the
Close:
more robust. Less sensitive to interference and selective frequency fadings .
 Low sensitivity sufficient
Gain when recovering the
Amplitude
initial signal
 Decrease of SF (SPREADING FACTOR), increase of throughput
SF 12: High gain, low data rate
Far devices and deep indoor

SF 9: Average gain, average

data rate

SF 7: Low gain , high data

rate
"Spread" signal transmitted
with constant rate Adaptive throughput
Frequency ADR: Adaptive Data Rate

Spectrum: unlicensed, i.e. the 915 MHz ISM band in the US, 868 MHz in Europe

13 14

RSSI and SF versus BW SF, bitrate, sensitivity and SNR for a 125 kHz channel

Spreading factor Bitrate (bit/sec) Sensitivity (dBm) LoRa demodulator SNR

7 (128) 5 469 -124 dBm -7.5 dB

8 (256) 3 125 -127 dBm -10 dB

9 (512) 1 758 -130 dBm -12.5 dB

10 (1024) 977 -133 dBm -15 dB

11 (2048) 537 -135 dBm -17.5 dB

12 (4096) 293 -137 dBm -20 dB

SF and repetition can be either manual (i.e., determined by the end-device) or automatic
(i.e., managed by the network)

15 16
 LoRaWAN: device classes Class A

Gateway
Open 2 windows for DL End Point
Classes Description Intended Use Consumption Examples of Services reception
(acknowledgments, MAC
The most economic commands, application
communication Class •
A Listens only after
end device
transmission
Modules with no
latency constraint
energetically..
Supported by all modules. •
Fire Detection
Earthquake Early
commands...) after
sending a packet One packet sent

(« all ») Adapted to battery powered Detection Listening period: varies according to the
modules 1 sec +/- 20 us
spreading factor SF
Modules with latency R Listening period
Description
The module listens 1st receive window • 5.1 ms at SF7 (outdoor and close devices)
B at a regularly
adjustable
constraints for the
reception of
messages of a few
Consumption optimized.
Adapted to battery powered
modules
• Smart metering
• Temperature rise
X
1 • 10.2 ms at SF8 …
(« beacon ») frequency
seconds 1 sec +/- 20 us • 164 ms at SF12 (deep-indoor or far devices)
R Listening period
Modules with a 2nd receive window X
• Fleet management • Very economic energetically
C Module always
listening
strong reception
latency constraint
(less than one
Adapted to modules on the grid
or with no power constraints • Real Time Traffic
2
• Communication triggered by the
(« continuous ») Management end device
second)

 Any LoRa object can transmit and receive data

17 18

Class B (Synchronized mode) Class C

Gateway Gateway
End Point - Permanent listening
End Point
- Closes the reception window only
• Synchronized with the GTW during transmissions
• Opens listening windows at Packet reception: possible
regular intervals. Beginning tag
Reception window always
open
R
x Listening duration
1

Listening duration: varies according to the SF Packet transmission

Adapted to devices on
T
R
x Listening duration Closed receive window
X
the power grid
Opens N reception windows 2
between the two tags
R
x Listening duration
3
Reception window is open Packet reception: possible
R
x Listening duration
N • Optimized energy consumption
• Communication initiated by the
End tag GTW

19 20
 Identification of an end device in LORA Current state

Amsterdam: was the first city covered by LoRaWAN with only 10 Gateways for the whole city at
 End-device address (DevAddr): $ 1200 per unit. Since then, several cities have followed the trend:

Network identifier network address of the end-device

7 bits 25 bits

 Application identifier (AppEUI): A global application ID in the IEEE EUI64 address space
that uniquely identifies the owner of the end-device.
 Network session key (NwkSKey): A key used by the network server and the end-device
to calculate and verify the message integrity code of all data messages to ensure data
integrity.
 Application session key (AppSKey): A key used by the network server and end-device to
encrypt and decrypt the payload field of data messages.
By the end of 2016 , France will all be covered by LoRa

21 22

Roadmap

Mars By the end of

2013
ii. Sigfox 2012 2014 2016 2016

First fundraising All France San-Francisco Sigfox in

Launch of the
of Sigfox territory is become the first America in
Sigfox
company to covered by US. State covered 100 U.S.
network
cover France Sigfox network by Sigfox cities

23 24
Sigfox Overview Architecture

Frequency Band Ultra Narrow Band

 First LPWAN Technology Range ~ 13 Km
End Device
 The physical layer based on an Ultra-Narrow Throughput ~ 100 bps

band wireless modulation

End Device
 Proprietary system Cloud Sigfox
Gateway
 Low throughput ( ~100 bps)
Email
 Low power End Device
Network TCP/IP SSL
Sigfox
 Extended range (up to 50 km) Server Network
Gateway
Server
 140 messages/day/device
Customer IT
 Subscription-based model
Type of Traffic Data packet
End Device
 Cloud platform with Sigfox –defined API for Payload ~ 12 Bytes

server access Security No security Remote

Time on air Up to 6 seconds Monitoring
 Roaming capability

By default, data is conveyed over the air interface without any encryption. Sigfox gives
25 customers the option to either implement their own end-to-end encryption solutions. 26

Spectrum and access Sigfox transmission

 Narrowband technology • Starts by an UL transmission
 Standard radio transmission method: binary phase-shift keying (BPSK) • Each message is transmitted 3 times
 Takes very narrow parts of spectrum and changes the phase of the carrier radio • A DL message can be sent (option)
wave to encode the data • Maximum payload of UL messages = 12 data bytes
• Maximum payload of DL messages = 8 bytes

Frequency spectrum:
 868 MHz in Europe
 915 MHz in USA

ITU ASP RO

27 28
 Current state

1.6
26 424
million
Countries million
Km²

Covered countries Covered areas End devices

iii. RPMA
 SIGFOX LPWAN deployed in France, Spain, Portugal, Netherlands, Luxembourg, and
Ireland , Germany, UK, Belgium, Denmark, Czech Republic, Italy, Mauritius Island,
Australia, New Zealand, Oman, Brazil, Finland, Malta, Mexico, Singapore and U.S.
Sigfox company objectives:
 Cover China in 2017
 60 countries covered by the end of 2018

29 30

Roadmap INGENU RPMA overview

 Random Phase Multiple Access (RPMA)

technology is a low-power, wide-area
channel access method used exclusively

2008
September 2016 2017 for machine-to-machine (M2M)
2015
communication
 RPMA uses the 2.4 GHz band
 Offer extreme coverage
RPMA was it was renamed RPMA was RPMA will be
invaded in many
developed Ingenu, and implemented in many
others countries: Los
 High capacity
by On-Ramp targets to extend places
Wireless to provide its technology to Austin, Dallas/Ft. Angeles, San
connectivity to oil the IoT and M2M worth, Franscisco-West  Allow handover (channel change)
and gas market Hostton,TX,Phenix,AZ, Bay,CA,Washington,D
actors …. C, Baltimore,MD,  Excellent link capacity
Kanasas City

31 32
 INGENU RPMA Overview Specifications of RPMA Solution
 RPMA is a Direct Sequence Spread Spectrum (DSSS) using:
Convolutional channel coding, gold codes for spreading  Time/Frequency Synchronization
1 MHz bandwidth  Uplink Power Control
Using TDD frame with power control:
• Closed Loop Power Control: the access point/base station measures the  Creating a very tightly power controlled system in free-spectrum and presence of
uplink received power and periodically sends a one bit indication for the interference which reduces the amount of required endpoint transmit power by a
endpoint to turn up transmit power (1) or turn down power (0).
• Open Loop Power Control: the endpoint measures the downlink received factor of >50,000 and mitigates the near-far effect.
power and uses that to determine the uplink transmit power without any  Frame structure to allow continuous channel tracking.
explicit signaling from the access point/base station.
 Adaptive spreading factor on uplink to optimize battery consumption.
 Handover
 Configurable gold codes per access point to eliminate ambiguity of link communication.
 Frequency reuse of 3 to eliminate any inter-cell interference degradation.
 Background scan with handover to allow continuous selection of the best access point

TDD frame

33 34

Specifications of RPMA Solution RPMA a Random multiple access Network

 Downlink Data Rate Optimization

 Very high downlink capacity by use of adaptive downlink spreading factors.
 Open loop forward error correction for extremely reliable firmware download.
 Open loop forward error correction to optimize ARQ signaling. Signaling only needs to
indicate completion, not which particular PDUs are lost.

 Random multiple access is performed by delaying the signal to transmit at each

end-device
 Support up to 1000 end devices simultaneously
 For the uplink, or the downlink broadcast transmission, a unique Gold code is
used.
 For unicast downlink transmission, the Gold code is built with the end-device
ID, such that no other end-device is able to decode the data.

35 36
 INGENU RPMA architecture Uplink Subslot Structure

Frequency Band 2.4 GHZ Uplink Subslot Structure Supporting Flexible Data Rate
Range 5-6 Km
Throughput 624 kb/s (UL) and 156 kb/s (DL)

Access Point Cloud

Access Point

Email
Backhaul
Network TCP/IP SSL
(Ethernet,
Server Network
3G, WiFi, Server
...)
Customer IT
Step 1: Choose Spreading factor from 512 to 8192
Step 2: randomly select subslot
Type of Traffic Data packet Step 3: Randomly select delay to add to subslot start from 0 to 2048 chips
End Device
Payload ~ 16 Bytes (one end point) ~ 1600 Bytes (for Remote
1000 end points Monitoring
Security AES Encryption

37 38

How end point can transfer a data? RPMA security

End Point Access Point

Registration request (how often the EP will communicate)

Message
Message integrity1 Mutual
confidentiality: use of
Assigned a bit on the BCH channel (enable to send or No) Replay protection Authentication
powerful encryption
Send the message (payload 16 bytes)

AP response ( Ack or NACK): Successful transaction

Not OK send again Authentic firmware

Device Anonymity Secure Multicasts
Upgrades
Send the message
Send Acknowledge

39 40
 RPMA’s current and future presence RPMA’s current and future presence

Currently live Coverage Rollout Coverage ROLLOUT Coverage planned

 heavy presence in Texas, with networks in Dallas, Q3 Q4 2016 2017
Austin, San Antonio, Houston, and large white
space areas. • Austin,TX • Columbus, OH • Atlanta,GA • Los Angeles,CA
• Dallas/Ft.worth, • Indianapolis,IN • Jacksonville,FL • San Franscisco-
 Ingenu offer the connectivity to more 50% of the TX • Miami,FL West Bay,CA
Texas state population. • Hostton,TX • Oriando,FL • Washington,DC
• Phenix,AZ • New Orleans,LA • Baltimore,MD
 Three densely populated Texas markets are • Riverside,CA • Charlotte,NC • Kanasas City
served by only 27 RPMA access points • San Antonio,TX • Albuquerque • Greeensboro,NC
• San Diego,CA • Memphis,TN • Las Vegas,NV
 RPMA currently provides more than 100,000 • Nashville,TN EL • Oklahorma City,
square miles of wireless coverage for a host of paso,TX OK
IoT applications. • Salt Lake City,UT • And many more
• Richmound, cities
 Ingenu will be expanding its coverage to dozens • Virginia
of cities in the next few years. beach,VA

41 42

EnOcean
 Based on miniaturized power converters
 Ultra low power radio technology
 Frequencies: 868 MHz for Europe and 315 MHz for the USA
 Power from pressure on a switch or by photovoltaic cell
 These power sources are sufficient to power each module to transmit wireless
and battery-free information.
v. Others  EnOcean Alliance in 2014 = more than 300 members (Texas, Leviton, Osram,
Sauter, Somfy, Wago, Yamaha ...)

43 44
EnOcean ZWave

Architecture
 Low power radio protocol
 Home automation (lighting, heating, ...) applications
 Low-throughput: 9 and 40 kbps
 Battery-operated or electrically powered
 Frequency range: 868 MHz in Europe, 908 MHz in the US
 Range: about 50 m (more outdoor, less indoor)
 Mesh architecture possible to increase the coverage
 Access method type CSMA / CA
 Z-Wave Alliance: more than 100 manufacturers in

45 46

ZWave Summary

Services

A. Fixed & Short Range

B. Long Range technologies

1. Non 3GPP Standards (LPWAN)

2. 3GPP Standards

47 48
 Release-13 3GPP evolutions to address the IoTmarket

 eMTC: LTE enhancements for

MTC, based on Release-12
2. 3GPP Standards (UE Cat 0, new PSM, power
i. LTE-M saving mode)
 NB-IOT: New radio added to
ii. NB-IOT
the LTE platform optimized
iii. EC-GSM
for the low end of the market
iv. 5G and IoT  EC-GSM-IoT: EGPRS
enhancements in
combination with PSM to
make GSM/EDGE markets
prepared for IoT
49 50

Release 14 eMTC enhancements Main eMTC, NB-IoT and EC-GSM-IoT features

Main feature enhancements

• Support for positioning (E-CID and OTDOA)
• Support for Multicast (SC-PTM)
• Mobility for inter-frequency measurements
• Higher data rates
• Specify HARQ-ACK bundling in CE mode A in HD-FDD
• Larger maximum TBS
• Larger max. PDSCH/PUSCH channel bandwidth in connected
mode at least in CE mode A in order to enhance support e.g.
voice and audio streaming or other applications and scenarios
• Up to 10 DL HARQ processes in CE mode A in FD-FDD
• Support for VoLTE (techniques to reduce DL repetitions, new
repetition factors, and adjusted scheduling delays)
51 52
 Comparison of cellular IoT-LPWA

i. LTE-M

53 54

Technology Roadmap

• Evolution of LTE optimized for IoT

• Low power consumption and extended autonomy

• Easy deployment

• Interoperability with LTE networks

• Low overall cost

• Excellent coverage: up to 11 Km • First released in Rel.1in 2 Q4 2014

• Optimization in Rel.13
• Maximum throughput: ≤ 1 Mbps
• Specifications completed in Q1 2016
• Available in 2017 (?)
55 56
 LTE to LTE-M Architecture

3GPP Releases 8 (Cat.4) 8 (Cat. 1) 12 (Cat.0) LTE-M 13 (Cat. 1,4 MHz) LTE-M Present LTE
Downlink peak rate (Mbps)
Architecture
150 10 1 1
Uplink peak rate (Mbps) 50 5 1 1
Number of antennas (MIMO) 2 2 1 1
Duplex Mode Full Full Half Half
UE receive bandwidth (MHz) 20 20 20 1.4
UE Transmit power (dBm) 23 23 23 20

Release 12 Release 13

• New category of UE (“Cat-0”): lower • Reduced receive bandwidth to 1.4 MHz

complexity and low cost devices • Lower device power class of 20 dBm
• Half duplex FDD operation allowed • 15dB additional link budget: better coverage
• Single receiver • More energy efficient because of its extended
• Lower data rate requirement (Max: 1 Mbps) discontinuous repetition cycle (eDRX)

57 58

Architecture Spectrum and access

Frequency Band Narrow Band • Licensed Spectrum

Access LTE-M
Range ~ 11 Km • Bandwidth: 700-900 MHz for LTE
Throughput ~ 1 Mbps
• Some resource blocks allocated for IoT on LTE bands
End Device Email

LTE Access

New
baseband
Customer IT
Software
for LTE-M

End Device
Remote
Monitoring

59 60
 Current status

ii. NB-IOT April

2014
May
2014
Mars
2015
August
2015
November
2015
Jun
2015
2017+

Narrowband 3GPP GSMA 3GPP 1st live pre- Full NB-IoT

proposal to ‘Cellular IoT’ Mobile IoT alignment on standard 3GPP Commercial
Connected Study Item created single NB-IoT Standard rollout
Living standard message Released

Evolution of LTE-M

61 62

NB-IoT main features and advantages Frame and Slot Structure – NB-IoT – 7 symbols per slot

Reuses the LTE design extensively:

numerologies, DL OFDMA, UL SC-FDMA, channel
coding, rate matching, interleaving, etc.
Reduced time to develop:
 Full specifications.
 NB-IoT products for existing LTE equipment
and software vendors.
June 2016: core specifications completed.
Beginning of 2017: commercial launch of
products and services.
63 64
NB-IoT Channels Physical downlink channels

Frame structure
Signals: PSS, SSS - RS
Downlink
Broadcast Channel NPBCH
NPDCCH
Dedicated Channels
NPDSCH

Physical
Layer

Frame structure
Signals: Demodulation reference signals (DMRS)
Uplink
Random Access NPRACH
NPDCCH
Dedicated Channels
NPUSCH
Used for data and
HARQ feedback Maximum Transmission Block Size = 680 bits
65 Inband mode: 100 to 108 symbols – Standalone/Guard band mode: 152 to 160 symbols 66

Downlink Frame Structure UL frame structure

UL frame structure
Single-Tone (mandatory):
To provide capacity in signal-strength-
limited scenarios and dense capacity
• Number of subcarriers: 1
• Subcarrier spacing: 15 kHz or 3.75 kHz
(via Random access)
• Slot duration: 0.5 ms (15 kHz) or 2 ms
(3.75 kHz)
Multi-tone (optional):
To provide higher data rates for devices
in normal coverage
• Number of subcarriers: 3, 6 or 12
signaled via DCI
• Subcarrier spacing: 15 kHz
• Slot duration = 0.5 ms
New UL signals
DMRS (demodulation reference
signals)
New UL channels
• NPUSCH (Physical UL Shared
• Channel)
• NPRACH (Physical Random Access
67 Channel) 68
 NB-IoT Repetitions Repetitions number to decode a NPUSCH
Consists on repeating the same 15 kHz subcarrier spacing.
transmission several times: A transport block test
 Achieve extra coverage (up to word (TW) is transmitted
20 dB compared to GPRS) on two RUs
 Each repetition is self-
decodable
Each RU is transmitted over
 SC is changed for each
3 subcarriers and 8 slots
transmission to help
combination
 Repetitions are ACK-ed just
once
 All channels can use
Repetitions to extend coverage
DL up to 2048 repetitions
UL up to 128 repetitions

Example: Repetitions used in NB-IoT in NPDCCH and NPDSCH channels

69 70

Transmissions scheduling Release 14 enhancements

• OTDOA
• UTDOA positioning is supported under the following conditions:
• It uses an existing NB-IoT transmission
– It can be used by Rel-13 UEs
– Any signal used for positioning needs to have its accuracy, complexity, UE power
consumption performance confirmed
Main feature enhancements:
• Support for Multicast (SC-PTM)
• Power consumption and latency reduction (DL and UL for 2 HARQ
processes and larger maximum TBS)
• Non-Anchor PRB enhancements (transmission of NPRACH/Paging
on a non-anchor NB-IoTPRB)
• Mobility and service continuity enhancements (without the
increasing of UE power consumption)
Subframe
• New Power Class(es) (if appropriate, specify new UE power
class(es), e.g. 14dBm)
71 72
Physical Channels in Downlink Uplink channels
Physical signals and channels in the downlink:
 Narrowband primary synchronization signal (NPSS) and  Narrowband physical random access channel
Narrowband secondary synchronization signal (NSSS): cell
search, which includes time and frequency synchronization, (NPRACH): new channel since the legacy LTE
and cell identity detection
 Narrowband physical broadcast channel (NPBCH) physical random access channel (PRACH)
 Narrowband reference signal (NRS)
 Narrowband physical downlink control channel (NPDCCH)
uses a bandwidth of 1.08 MHz, more than
 Narrowband physical downlink shared channel (NPDSCH) NB-IoT uplink bandwidth
 Narrowband physical uplink shared channel
(NPUSCH)

73 74

NPDCCH/NPDSCH resource mapping example Physical signals and channels and relationship with LTE

75 76
Enhanced DRX for NB-IOT and eMTC Architecture

Frequency Band Ultra Narrow Band

Range ~ 11 Km

Extended C-DRX and I-DRX operation Throughput ~ 150 Kbps

End Device Email

• Connected Mode (C-eDRX):

• Extended DRX cycles of 5.12s and 10.24s are LTE Access

supported
• Idle mode (I-eDRX): New
baseband
Software
Customer IT

• Extended DRX cycles up to ~44min for eMTC

for NB-IoT

• Extended DRX cycles up to ~3hr for NB-IOT End Device

Remote
Monitoring

77 78

Spectrum and access LTE-M to NB-IoT

• Designed with a number of deployment options for GSM , WCDMA or LTE spectrum
12 (Cat.0) 13(Cat. 1,4 MHz) 13(Cat. 200 KHz)
to achieve spectrum efficiency. 3GPP Release
LTE-M LTE-M NB-IoT
• Use licensed spectrum. Stand-alone operation
300 bps to 200
Dedicated spectrum. Downlink peak rate 1 Mbps 1 Mbps
kbps
Ex.: By re-farming GSM channels Uplink peak rate 1 Mbps 1 Mbps 144 kbps
Number of antennas 1 1 1
Guard band operation
Duplex Mode Half Half Half
Based on the unused RB within a LTE
UE receive bandwidth 20 MHz 1.4 MHz 200 kHz
carrier’s guard-band
UE Transmit power (dBm) 23 20 23
In-band operation
Using resource blocks within a normal LTE • Reduced throughput based on single PRB operation
carrier • Enables lower processing and less memory on the modules
• 20dB additional link budget  better area coverage

79 80
 Vodafone announced the commercialization of NB-IoT China Unicom: 800+ Sites Activated NB-IoT in Shanghai

Shanghai Unicom: Network readiness accelerates the

development of vertical customers

Parking operator Gas Utility Fire center

NB-IoT Network
Coverage
 4 countries in Europe  Announced the commercialization of  Madrid, Valencia, Barcelona is
(Germany, Ireland, the NB-IoT on 23rd Jan 17 covered, Plan to cover 6 cities in • 800+ base stations covered Smart Parking Smart Gas Meter Smart Fire
Netherlands and Spain) will  1000 sites activated NB-IoT in Spain by 2017H1
commercially launch NB-IoT in Protection
the end of march 2017 Shanghai in 2016Q4
2017.
 Took just a few hours to deploy NB-IoT
with software upgrade in Valencia Source: Huawei Source: Huawei

81 82

China Telecom: NB-IoT Nationwide Coverage in 2017H1

NB-IoT Pre commercial

NB-IoT Trial commercial

Jie Yang, Board chair

Trial • 2017H1, NB-IoT enabled
Test NB-IoT
commerci in L850 to achieve
al
national wide coverage

iii. EC-GSM
Use cases
• 100 NB-IoT bicycles test in Beijing
• Mar 22 2017, Shenzhen water
University in Q2 2017
• 100K bicycles in Beijing city by
utility announced
September 2017 commercialization;
• China Telecom to provide NB-IoT
• 1200 meters (phase 1)
coverage in whole Beijing by June 2017
Share bicycle running in live network;

Source: Huawei

83 84
 Roadmap EC-GSM

EC-GSM-IoT Objectives: Adapt and leverage existing 2G infrastructure to provide efficient

and reliable IoT connectivity over an extended GSM Coverage
 Long battery life: ~10 years of operation with 5 Wh battery (depending on traffic
pattern and coverage extension)
 Low device cost compared to GPRS/GSM device
 Variable data rates:
• GMSK: ~350bps to 70kbps depending on coverage extension
• 8PSK: up to 240 kbps
 Support for massive number of devices: ~50.000 devices per cell
May 2014 Aug 2015 Sep 2015 Dec 2015 Mars 2016  Improved security adapted to IoT constraint.
 Leverage on the GSM/GPRS maturity to allow fast time to market and low cost
2020: 15% connections excluding cellular IoT will still be on 2G in Europe and 5% in
the US (GSMA predictions).
GPRS is responsible for most of today’s M2M communications

85 86

EC-GSM EC-GSM

Objectives Main PHY features

• Long battery life: ~10 years of operation with 5 Whbattery • New logical channels designed for extended coverage
(depending on traffic pattern and coverage needs) • Repetitions to provide necessary robustness to support up to 164
dB MCL
• Low device cost compared to GPRS/GSM devices • Overlaid CDMA to increase cell capacity (used for EC-PDTCH and EC-
Extended coverage: PACCH)
Other features
• 164 dB MCL for 33 dBmUE, • Extended DRX (up to ~52min)
• 154 dB MCL for 23 dBmUE • Optimized system information (i.e. no inter-RAT support)
Variable rates: • Relaxed idle mode behavior (e.g. reduced monitoring of neighbor
cells)
• GMSK: ~350bps to 70kbps depending on coverage level • 2G security enhancements (integrity protection, mutual
• 8PSK: up to 240 kbps authentication, mandate stronger ciphering algorithms)
• NAS timer extensions to cater for very low data rate in extended
• Support for massive number of devices: at least 50.000 per coverage
cell • Storing and usage of coverage level in SGSN to avoid unnecessary
• Improved security compared to GSM/EDGE 87
repetitions over the air
88
 EC-GSM EC-GSM

 Extended coverage (~ 20 dB compared to GSM coverage)

 Deployment
GSM900 LoRa
Sens de la Liaison
Montante Unités Montante  To be deployed in existing GSM spectrum without any impact on network planning.
Partie Réception BTS GW  EC-GSM-IoT and legacy GSM/GPRS traffic are dynamically multiplexed.
Sensibilité -104 dBm -142
 Reuse existing GSM/GPRS base stations thanks to software upgrade.
Marge de protection 3 dB 0
Perte totale câble et connecteur 4 dB 4
Gain d'antenne (incluant 5 dB de diversité) -17 dBi -6
 Main PHY features:
Marge de masque (90% de la surface) 5 dB 5
 New “EC” logical channels designed for extended coverage
Puissance médiane nécessaire -109 dBm -141
Partie Emission MS Capteur  Repetitions to provide necessary robustness to support up to 164 dB MCL
Puissance d'émission (GSM Classe 2 = 2W) Bilan de
liaison
33 dBm 20  Fully compatible with existing GSM hardware design (Base station and UE)
Affaiblissement maximal 142 dB 161  IoT and regular mobile traffic are share GSM time slot.
Pertes dues au corps humain -3 dB 0
Affaiblissement de parcours (bilan de liaison) 139 dB 161

89 90

EC-GSM EC-GSM

 Other features:
 Coverage Extension: 4 different coverage class

 Support of SMS and Data, but no voice

Channels CC1 CC2 CC3 CC4
 Extended DRX (up to ~52min) [ GSM DRX ~11 min]
MCL(dB) 149 157 161 164
EC-CCCH 1 8 16 32  Optimized system information (i.e. no inter-RAT support)
DL
EC-PACCH 1 4 8 16  Relaxed idle mode behavior (e.g. reduced monitoring of neighbor cells)
EC-PDTCH 1 4 8 16
 2G security enhancements (integrity protection, mutual authentication, mandate
MCL(dB) 152 157 161 164
EC-CCCH 1 4 16 48 stronger ciphering algorithms)
UL
EC-PACCH 1 4 8 16  NAS timer extensions to cater for very low data rate in extended coverage
EC-PDTCH 1 4 8 16
 Storing and usage of coverage level in SGSN to avoid unnecessary repetitions over the
 Beacon and Synchronization channel don’t use coverage class air
 EC-BCCH: always repeated 16 times
 Optional mobility between GSM and EC-GSM
 EC-SCH: always repeated 28 times Mapped on TS 1
 FCCH: legacy FCCH is used.

91 92
 Architecture Architecture

Access EC-GSM
Actual GSM/GPRS Architecture Frequency Band Narrow Band
Range ~ 15 Km
Throughput ~ 10 Kbps

End Device Email

Update for
EC-GSM

GSM
Access
GSM
Mobile UE Access
New
Mobile UE baseband Customer IT
Software
IP
for EC-GSM
Networks

IP
Networks
2G-based NB-IoT networks should come at the end of 2017, with LTE following around 12
End Device
months later
Remote
Monitoring

93 94

Roadmap

ITU-R WP5D

iv. 5G and IoT

• Initial technology submission: Meeting 32 (June 2019)

• Detailed specification submission: Meeting 36 (October 2020)

95 96
Vision of 5G

Cloud
Services

Core network (transport)

Thank you!
Access networks

97 98