Radio communication systems generally provide two-way voice and data communication between remote locations. Examples of such systems are cellular and personal communication system (“PCS”) radio systems, trunked radio systems, dispatch radio networks, and global mobile personal communication systems (“GMPCS”) such as satellite-based systems. Communication in these systems is conducted according to a pre-defined standard. Mobile devices or stations, also known as handsets, portables or radiotelephones, conform to the system standard to communicate with one or more fixed base stations. It is important to determine the location of such a device capable of radio communication especially in an emergency situation. In addition, in 2001 the United States Federal Communications Commission (“FCC”) required that cellular handsets must be geographically locatable. This capability is desirable for emergency systems such as Enhanced 911 (“E-911”). The FCC requires stringent accuracy and availability performance objectives and demands that cellular handsets be locatable within 100 meters 67% of the time for network based solutions and within 50 meters 67% of the time for handset based solutions.
Current generations of radio communication generally possess limited mobile device location determination capability. In one technique, the position of the mobile device is determined by monitoring mobile device transmissions at several base stations. From time of arrival or comparable measurements, the mobile device's position may be calculated. However, the precision of this technique may be limited and, at times, may be insufficient to meet FCC requirements. In another technique, a mobile device may be equipped with a receiver suitable for use with a Global Navigation Satellite System (“GNSS”) such as, but not limited to, the Global Positioning System (“GPS”). GPS is a radio positioning system providing subscribers with highly accurate position, velocity, and time (“PVT”) information.
With GPS, signals from the satellites arrive at a GPS receiver and are conventionally utilized to determine the position of the receiver. GPS position determination is made based on the time of arrival (“TOA”) of various satellite signals. Each of the orbiting GPS satellites 101 broadcasts spread spectrum microwave signals encoded with satellite ephemeris information and other information that allows a position to be calculated by the receiver. Presently, two types of GPS measurements corresponding to each correlator channel with a locked GPS satellite signal are available for GPS receivers. The two carrier signals, L1 and L2, possess frequencies of 1.5754 GHz and 1.2276 GHz, or wavelengths of 0.1903 m and 0.2442 m, respectively. The L1 frequency carries the navigation data as well as the standard positioning code, while the L2 frequency carries the P code and is used for precision positioning code for military applications. The signals are modulated using bi-phase shift keying techniques. The signals are broadcast at precisely known times and at precisely known intervals and each signal is encoded with its precise transmission time. There is also an L2C signal being transmitted by several satellites. The LC2C signal is a second civilian frequency transmitted by GPS satellites. L1 transmits the Coarse Acquisition (“C/A”) code. L2C transmits L2CM (civil-moderate) and L2CL (civil long) codes. These codes allow a device to differentiate between satellites that are all transmitting on the same frequency. The C/A code is 1 milliseconds long, the L2CM is 20 milliseconds long and the L2CL is 1.5 seconds long. The L2C codes provide a more robust cross-correlation performance so that reception of weak GPS signals is less affected by simultaneously received strong GPS signals. The civil navigation message (“CNAV”) is the broadcast model that can be transmitted on the L2C and provides a more accurate and frequent message than the legacy navigation message.
GPS receivers measure and analyze signals from the satellites, and estimate the corresponding coordinates of the receiver position, as well as the instantaneous receiver clock bias. GPS receivers may also measure the velocity of the receiver. The quality of these estimates depends upon the number and the geometry of satellites in view, measurement error and residual biases. Residual biases generally include satellite ephemeris bias, satellite and receiver clock errors, and ionospheric and tropospheric delays. If receiver clocks were perfectly synchronized with the satellite clocks, only three range measurements would be needed to allow a user to compute a three-dimensional position. This process is known as multilateration. However, given the engineering difficulties and the expense of providing a receiver clock whose time is exactly synchronized, conventional systems generally account for the amount by which the receiver clock time differs from the satellite clock time when computing a receiver's position. This clock bias is determined by computing a measurement from a fourth satellite using a processor in the receiver that correlates the ranges measured from each satellite. This process requires four or more satellites from which four or more measurements can be obtained to estimate four unknowns x, y, z, b. The unknowns are latitude, longitude, altitude and receiver clock offset. The amount b, by which the processor has added or subtracted time, is the instantaneous bias between the receiver clock and the satellite clock. It is possible to calculate a location with only three satellites when additional information is available. For example, if the altitude of the handset or mobile device is well known, then an arbitrary satellite measurement may be included that is centered at the center of the earth and possesses a range defined as the distance from the center of the earth to the known altitude of the handset or mobile device. The altitude of the handset may be known from another sensor or from information from the cell location in the case where the handset is in a cellular network.
Assisted-GPS (“A-GPS”) has gained significant popularity recently in light of stringent time to first fix (“TTFF”), i.e., first position determination and sensitivity, requirements of the FCC E-911 regulations. In A-GPS, a communications network and associated infrastructure may be utilized to assist the mobile GPS receiver, either as a standalone device or integrated with a mobile station or device. The general concept of A-GPS is to establish a GPS reference network (and/or a wide-area D-GPS network or a wide area reference network (“WARN”)) including receivers with clear views of the sky that may operate continuously. This reference network may also be connected with the cellular infrastructure, may continuously monitor the real-time constellation status, and may provide data for each satellite at a particular epoch time. For example, the reference network may provide ephemeris information, UTC model information, ionosphere model information, and other broadcast information to the cellular infrastructure. As one skilled in the art would recognize, the GPS reference receiver and its server (or position determining entity) may be located at any surveyed location with an open view of the sky. Typical A-GPS information may include, but is not limited to, data for determining a GPS receiver's approximate position, time synchronization mark, satellite ephemerides, various model information and satellite dopplers. Different A-GPS services may omit some of these parameters; however, another component of the supplied information is the identification of the satellites for which a device or GPS receiver should search. From such assistance data, a mobile device may attempt to search for and acquire satellite signals for the satellites included in the assistance data. If, however, satellites are included in the assistance data that are not measurable by the mobile device (e.g., the satellite is no longer visible, etc.), then the mobile device may waste time and considerable power attempting to acquire measurements for the satellite.
Civilian GPS signals are vulnerable to attacks such as blocking, jamming and spoofing. The goal of such attacks generally is to prevent a position lock (e.g., blocking and jamming) or to feed a receiver false information so that the receiver computes an erroneous time or location (e.g., spoofing). GPS receivers are generally aware when blocking or jamming is occurring because the receivers encounter a loss of signal. Spoofing, however, is a surreptitious attack.
Civilian GPS signals are widely used by government and private industries for important applications, including, but not limited to, public safety services, navigation, geolocation, hiking, surveying, robotics, tracking, etc. Unfortunately, civilian GPS signals are not secure. Since GPS signal strength, measured at the Earth's surface at about −160 dBw (1.times.10.sup.-16 watts), is roughly equivalent to viewing a 25 watt light bulb from a distance of 10,000 miles, GPS signals may be blocked by destroying or shielding a receiver's antenna and may be jammed by a signal of a similar frequency but greater strength. As stated above, however, blocking and jamming are not the greatest security risk. A more pernicious attack involves feeding the receiver fake or forged satellite signals so that the receiver believes it is located somewhere in space and time that it is not. Spoofing may be accomplished by utilizing a GPS satellite simulator. Such simulators are uncontrolled and widely available. To conduct the spoofing attack, an adversary may broadcast a forged satellite signal with a higher signal strength than the true signal, and the GPS receiver believes that the forged signal is actually a true GPS signal. The receiver may then proceed to calculate erroneous position or time information based on this forged signal.
It is also possible for an unscrupulous user or intermediary to alter the software in a wireless device to manipulate satellite measurements thereby causing a location determining system to calculate an incorrect location. This method of spoofing is generally termed as location spoofing. Generally, if satellite measurements are manipulated in a wireless device randomly, it is likely that a resulting position calculation may fail because the position of the respective satellites may be too far away from the actual code phase indicated location; however, a skillful user may calculate required code phases resulting in the calculation of a spoofed or false location by the location determining system.
Generally, spoofing detection has focused on detecting false radio frequency signals arriving at the GPS receiver front-end and/or authenticating location results provided to a third party. There is, however, a need in the art regarding the detection of falsified or spoofed measurements being provided to the respective position calculation function (“PCF”) which may or may not be embedded in an exemplary location server (“LS”). An LS may generally be a node in a wireless network providing GPS assistance data to an A-GPS capable device. The device may utilize the assistance data to lock onto satellites much faster than if no assistance data were available and may also allow the device to lock onto weaker signals reducing TTFF and increasing yield. In a handset-assisted mode, the LS may also determine the location of the device using measurements from the device and/or the respective network. The LS may also require the device to provide true and accurate measurements (rather than falsified measurements) to determined an accurate location for the device. The integrity of the resulting location is important as it may be used by emergency services operators, used to provide value-added services, etc.
Although embodiments of the present subject matter may not prevent spoofing attacks, these embodiments may alert a wireless device user and/or an operator of a location determining system to such suspicious activity thereby decreasing the probability that a spoofing attack succeeds. Further embodiments of the present subject matter may be implemented easily and inexpensively by retrofitting existing GPS receivers and exemplary location determining systems.
Accordingly, there is a need for a method and system for determining falsified satellite measurements and/or falsified locations of a mobile device that would overcome the deficiencies of the prior art. Therefore, an embodiment of the present subject matter provides a method for determining whether an estimated location of a wireless device includes one or more forged location measurements. The method may include determining a first estimated location of the wireless device using a first set of location measurements and determining a second estimated location of the wireless device using a second set of location measurements. The first estimated location may then be compared to the second estimated location. If the comparison between the first estimated location and second estimated location is greater than a predetermined threshold, then one of the determined locations may be identified as having one or more forged location measurements.
Another embodiment of the present subject matter provides a method for determining whether an estimated location of a wireless device includes a forged location measurement. The method may include determining a first estimated location of the wireless device from information or signals provided by a cellular network and determining a second estimated location of the wireless device from signals received from a set of satellites. The first and second estimated locations may then be compared. If the comparison between the first estimated location and second estimated location is greater than a predetermined threshold, then the second estimated location may be identified as having one or more forged signals.
A further embodiment of the present subject matter may provide a system for determining whether an estimated location of a wireless device includes one or more forged location measurements. The system may include circuitry for determining a first estimated location of the wireless device from a first set of location measurements and circuitry for determining a second estimated location of the wireless device from a second set of location measurements. The system may also include circuitry for comparing the first estimated location to the second estimated location and circuitry for identifying one of the determined locations as having one or more forged location measurements if the comparison between the first estimated location and second estimated location is greater than a predetermined threshold.
These embodiments and many other objects and advantages thereof will be readily apparent to one skilled in the art to which the invention pertains from a perusal of the claims, the appended drawings, and the following detailed description of the embodiments.
With reference to the figures where like elements have been given like numerical designations to facilitate an understanding of the present subject matter, the various embodiments of a system and method for location assurance of a mobile device are herein described.
The present disclosure relates to a mobile appliance, handset or device and a location determining system using satellite signals and/or measurements of these satellite signals as well as location measurements from other networks and location technologies. The satellites may be considered as part of a Global Navigation Satellite System (“GNSS”), such as, but not limited to, the U.S. Global Positioning System (“GPS”). While the following description references the GPS system, this in no way should be interpreted as limiting the scope of the claims appended herewith. As is known to those of skill in the art, other GNSS systems operate, for the purposes of this disclosure, similarly to GPS, such as, but not limited to, the European Satellite project, Galileo; the Russian satellite navigation system, GLONASS; the Japanese Quasi-Zenith Satellite System (“QZSS”), the Indian Regional Navigational Satellite System (“IRNSS”), and the Chinese satellite navigation and positioning system called Beidou (or Compass). Therefore, references in the disclosure to GPS and/or GNSS, where applicable, as known to those of skill in the art, apply to the above-listed GNSS systems as well as other GNSS systems not listed above. Further, the terms spoofed, falsified, forged, and various tenses and forms thereof are utilized interchangeably throughout this disclosure and such use should in no way should be interpreted as limiting the scope of the claims appended herewith.
As discussed above, A-GPS devices or handsets may have a low TTFF as the devices are supplied with assistance data from an exemplary communications network to assist in locking onto or acquiring satellites quickly. Exemplary A-GPS devices may include, but are not limited to, a cellular device, text messaging device, computer, portable computer, vehicle locating device, vehicle security device, communication device, and wireless transceiver. These devices may provide satellite measurements back to a location determining system to perform a position calculation. Exemplary network elements that supply the assistance data and/or perform the position calculation may be a location determining system such as a Mobile Location Center (“MLC”), location information server or system (“LIS” or “LS”), or other comparable network element. The location determining system may generally be a node in a wireless network performing or determining the location of a mobile device. The location determining system generally requires a wireless device to provide true and accurate measurements (rather than forged measurements) to determine an accurate location of a device or provide accurate assistance data for the device. The integrity of the resulting location is important as the location may be used by emergency services operators to find an injured person, may be used for location-based services, etc.
In one embodiment of the present subject matter, an exemplary method may be utilized to determine whether a geographic location of a mobile or wireless device (or signals used therefor) has been spoofed or forged. One exemplary A-GPS server in a wireless network according to an embodiment of the present subject matter is shown in
An exemplary SLP 210 may be provided with a connection to a GNSS Reference Server (GRS) 220 to retrieve and/or cache assistance data. The GRS 220 may include a network of reference receivers 222, e.g., GNSS receivers, and a central system adaptable to collate assistance data from any number of satellites 224 so assistance data may be available upon request. The SLP 210 may also be provided with a connection to a time server using Network Time Protocol (NTP) 230 to maintain the correct time thereon. Location requests may be initiated either from the SET 212 (i.e., a SET-initiated transaction) or from the network (i.e., a Network-initiated transaction). In one embodiment, a Network-initiated request may be provided by a Location Based Application (LBA) 240 to the SLP 210 for the location of a target SET 212. In a non-limiting embodiment, the LBA 240 may provide value added services such as a find-a-friend application, an emergency services application, or another location based services application. The SLP 210 may thus perform applicable messaging functions with the SET 212 and may determine a location of the SET 212 before returning that location to the LBA 240.
In one embodiment, when an A-GPS location fix is required for a SET 212, the SLP 210 may determine GPS assistance data specific to an approximate location of the SET 212. For example, when the SET 212 is in a cellular network 250, an approximate location may be provided by the coverage area of the serving cell 252. Of course, the approximate location of the SET 212 may be provided by any number of means and such an example should not limit the claims appended herewith. The SET 212 may then provide an identification of the serving cell 252 (e.g., Cell-ID) to the SLP 210, and the SLP 210 may determine which satellites 224 are in view from the approximate location and provide applicable assistance data for those satellites 224 to the SET 212. Exemplary assistance data may, in one embodiment, depend upon the mode of A-GPS. For example, in a handset-based A-GPS embodiment, the SLP 210 may provide the navigation model, ionosphere model, reference time, and reference location whereby the SET 212 utilizes this information to lock onto satellites 224 and determine its respective location. By way of a further example, in a handset-assisted mode, the SLP 210 may provide acquisition assistance and reference time to allow the SET 212 to lock onto satellites 224 and return the applicable measurements to the SLP 210. The SLP 210 may then, in one embodiment, invoke a PCF 214 to determine the SET's location.
In an exemplary handset-assisted, Network-initiated A-GPS location fix process, the LBA 240 may, in one embodiment, transmit a request to the SLP 210 for the location of a target SET 212. The SLP 210 may then transmit a message to the SET 212 to commence the location determination transaction whereby the SET 212 provides a message in response to the SLP 210 including, for example, the Cell-ID of the serving base station 252. The SLP 210 may then determine the coverage area of the cell and employ this as an initial uncertainty area 254. The SLP 210 may then determine appropriate GPS assistance data utilizing the uncertainty area 254 and may provide the same to the SET 212. The SET 212 would then utilize the assistance data to lock onto a number of satellites 224 and return satellite measurements to the SLP 210. The SLP 210 may then determine the location of the SET 212 utilizing the satellite measurements provided by the SET 212 and provide the determined location of the SET 212 to the LBA 240.
Table 1 below provides fields that may be sent from the SET 212 to the SLP 210 and utilized by the SLP 210 to determine the location of the SET 212. The location of the SET 212 may be determined by the SLP 210 using, for example, code phase measurements (whole chips and fractional chips), Doppler measurements, and/or additional measurements provided by the network, such as, but not limited to, Carrier to Noise ratio (C/N.sub.O), a Multipath indicator, a Pseudorange RMS error, or other measurements that provide information regarding the quality of satellite measurements. Additional data provided by the SET 212 as discussed above may be, but is not limited to, the identification of the serving cell (Cell-ID). The SLP 210 may utilize the Cell-ID to determine appropriate cell information from a database. This cell information may include the location of the cell which can then be employed by the SLP 210 as an initial location to calculate assistance data or may also be utilized as a seed location for an exemplary position calculation.
In a Network-initiated scenario, once the LS (e.g., SLP) determines the location of a SET, the location may be provided to the requesting network entity. If the LS is trusted by the recipient of the location, then the location may be considered to be valid even though the location may not be valid. The integrity of the location calculated by the LS is important as it may be utilized by emergency services operators, may be used to gain restricted access to location based services, etc. Thus, an unscrupulous user or intermediary who successfully spoofs or falsifies one or more location measurements may fraudulently gain access to a broadcast restricted to a particular set of geographically located users, may provide the authorities with an incorrect location to, e.g., a tracked shipment, may disguise criminal activities by deceiving a law-enforcement LBA, etc. The aim of the spoofer may thus be to convince an LS to provide a location that the spoofer desires by falsifying measurement data such that the location provided by the LS is effectively predetermined by the spoofer.
To spoof a location, a user may need the satellite ephemeris which is generally employed to determine the location of the satellites for a given time. The user may determine the range to each satellite in view of the desired location and use these as a basis for determining pseudorange measurements. These measurements are generally converted to pseudoranges by simulating a clock error and/or introducing other errors such as ionosphere, troposphere and other random errors.
Generally, the spoofing SET may require the ephemeris and/or ionosphere model, the GPS time at which to calculate the location (normally the current time), the desired location (WGS 84 latitude, longitude, altitude), and/or a Cell-ID in the vicinity of the desired location. In one embodiment, when the LS is an SLP, messaging between the SLP and the spoofing SET is illustrated in
To calculate a desired location, the spoofing SET may determine the location of all of certain GPS satellites at the time of transmission and determine the elevation of satellites relative to the desired location while discarding any that are below the horizon. The spoofing SET may also determine the ionosphere delay between the desired location and a satellite using, e.g., the Klobuchar ionosphere model and may add applicable delays to the measurements. The spoofing SET may also determine the troposphere delay between the desired location and a satellite using, e.g., the Hopfield troposphere model and add the delay to the measurements. Finally, the spoofing SET may apply a satellite clock correction and group delay to the range which may ultimately result in an LS determining a location for the SET within a meter of the desired location. This type of spoofing, however, may be easily detected by an LS as the receiver clock error provided by the spoofing SET would be very small (e.g., less than 1*10.sup.-10 seconds), the residuals determined as part of the least squares process would be small, and/or the uncertainty ellipse would be small (e.g., less than 1 meter of uncertainty). A more sophisticated spoofer, however, may manipulate the measurements by introducing random errors to each measurement and/or manipulate all of the measurements by a fixed amount thereby simulating a handset clock error. Further, a more sophisticated spoofer may also send a subset of the satellite measurements instead of the complete set of satellites in view. In one embodiment of the present subject matter, a spoofing SET may thus be employed to validate anti-spoofing protection on an LS and may also be used as a verification tool to simulate location measurements from anywhere on the Earth.
By way of another embodiment, for a SET to falsify measurements, several calculations must be performed. First, the location of all of the GPS satellites at the time of transmission of the signal should be determined. The time of transmission may provide the time that a satellite signal took to travel from the satellite to the receiver and hence the range. With knowledge of the time of receipt, it may be noted that the satellite has moved from the location where it was when it transmitted the signal and the time of transmission should be corrected through, in one embodiment, an iterative process whereby at each iteration the range may be re-calculated based upon a respective transmission time until the range between one iteration and the next changes by a small amount. For example, a satellite range may be set to zero and the following steps performed until the range between one iteration and the next changes by a small amount: (i) re-adjust the satellite transmission time by the following relationship: satelliteTransmitTime=spoofedTime−(satellite range/speed of light); (ii) calculate the location of the satellite at the satellite transmit time; (iii) determine the range to the satellite by the following relationship: Range=distance between desired location and satellite location. Satellite locations may be, in one embodiment, determined using the navigation model data as specified in the GPS IS 200 specification or another specifications for other GNSSs. Next, the elevation for each satellite relative to the desired location may be determined and any elevation below the horizon discarded. Once the location of the satellites are determined, then their respective elevation angle relative to the ground at the desired location may be calculated. A mask angle may also be applied to discard satellites that are below a specific angle. Unhealthy satellites may be discarded utilizing health bits in the ephemeris. The remaining set of satellites may now include all possible healthy satellites in view of the desired location. A spoofing SET may then discard a certain number of the satellites to provide measurements for a configured number of satellites or a random number of satellites (e.g., greater than the minimum to calculate a location). As it is uncommon that a normal GPS receiver is able to make range measurements to all possible satellites in view, this may be used by an LS to determine that a SET is spoofing; therefore, the SET may discard a subset of satellites to disguise the fact that it is indeed spoofing its location or respective measurement(s). In another embodiment of the present subject matter, a spoofing SET may thus be utilized to validate anti-spoofing protection on an exemplary LS and/or used as a verification tool to simulate location measurements.
In another embodiment, the following steps may then be performed for each satellite: (i) determine the satellite clock correction (distance in meters) and group delay for each satellite for its time of transmission and store the same; (ii) apply a Geometric range correction to compensate for the rotation of the earth during the predicted time of flight; (iii) re-calculate the range to the satellite from the desired location to the corrected location of the satellite; (iv) determine the ionosphere delay for each satellite between the desired location and the satellite using the Klobuchar ionosphere model and add the delay to the measurement; (v) determine the troposphere delay for each satellite between the desired location and the satellite using the Hopfield troposphere model and add the delay to the measurement; (vi) apply a configurable random error to each measurement; (vii) apply a clock error to each measurement; and (viii) apply the satellite clock correction and group delay to the range using the following relationship: satRange=calculatedRange−satClockCorrectionMeters. Of course, an exemplary spoofing SET according to any embodiment of the present subject matter may be utilized to validate anti-spoofing protection on a respective LS and/or may be used a verification tool to simulate location measurements.
Some protection may be present on an exemplary SLP which may restrict the ability of a spoofing SET to falsify a location anywhere on Earth such as, but not limited to, location assurance and Cell-ID integrity methods. For example, in one embodiment, an exemplary SLP may determine the distance between the location determined from a cell lookup and the GPS-calculated location. If the distance is larger than a predetermined threshold, then the SLP may deem that the measurements are invalid and may not provide the spoofed location to the LBA. An exemplary and non-limiting distance for location assurance protection may be 50 km or less. A spoofing SET may, however, invalidate certain methods of location assurance protection by having a comprehensive cell ID database so the desired location is within the vicinity of one of the cells in the database. Additional integrity checking and location assurance may also be provided in additional embodiments of the present subject matter.
For example, another embodiment of the present subject matter may include an aspect of integrity checking by using a location calculated by alternate location technology methods. For example, the location selected by an exemplary MLC (e.g., the location having the most precise location technology or smallest uncertainty) may be compared with or crosschecked against other calculated locations to thereby improve the integrity of a determined location and to assist in protecting against falsified locations. Generally, the location of a target SET may be determined by multiple location technologies of various accuracy levels. For example, the location of the SET may be determined utilizing Cell-ID followed by A-GPS. Of course, the process may involve any number of other location methods in series or parallel such as, but not limited to, Assisted Global Navigation Satellite System (A-GNSS), Observed Time Difference of Arrival (OTDOA), Enhanced Observed Time Difference (EOTD), Enhanced Cell-ID (e-CID), Angle of Arrival (AOA), Time Difference of Arrival (TDOA), Power Difference of Arrival (PDOA), Power of Arrival (POA), Time of Arrival (TOA), Frequency Difference of Arrival (FDOA), Global Navigation Satellite System (GNSS), Radio Frequency Identification (RFID), Near field communications (NFC), hybrid technologies, proximity location technologies, and combinations thereof. Thus, an embodiment of the present subject matter may check the selected location of a target SET or device against any number or combinations of the other location(s) to determine whether or not they are consistent. Each of these respective locations may have an uncertainty at a given confidence, and the locations may be deemed to be consistent if their boundaries are within a predefined threshold. Of course, additional satellite measurements may also be utilized as a source for detecting location spoofing, such as, but not limited to, GNSS signal strength, satellite identification codes, number of satellite signals received, time intervals, clock bias, code phases, Doppler shift, and combinations thereof.
In an alternative embodiment, Cell-ID integrity may be provided where an exemplary SLP may utilize network signaling to validate and/or check the reported Cell-ID. For example, when the SLP receives a Cell ID from the SET, the SLP may send a message through nodes in the respective network to validate whether the SET is actually attached to that cell. The only way for a spoofing SET to avoid this protection is to utilize the Cell-ID to which the spoofing SET is attached. Thus, if the spoofing SET desires to falsify a location on the other side of the Earth from that cell, assistance data must be retrieved from an external entity such as described above as the SLP may provide assistance data specific to the supplied Cell-ID. If an exemplary SLP has both Cell-ID integrity and location assurance, a spoofing SET is restricted to spoofing locations within the vicinity of that cell thereby providing location assurance protection to a respective server of 50 km or less. The LS may, in one embodiment, include Cell-ID integrity by default. For example, an SMLC in a GERAN network or a SAS in a UTRAN network may provide Cell-IDs rather than the Cell-ID being provided by a SET. Thus, for these networks, a spoofing SET may be restricted to falsifying a location within the vicinity of the cell if location assurance according to embodiments of the present subject matter is enabled.
At step 1030, the first estimated location may be compared to the second estimated location, and at step 1040, one of the determined locations identified as having one or more forged location measurements if the comparison between the first estimated location and second estimated location is greater than a predetermined threshold. In one embodiment, the predetermined threshold may be a function of the uncertainty of the location technology utilized to produce the first and/or second set of location measurements. In another embodiment, step 1030 may include comparing the first estimated location and the first estimated location's uncertainty at a given confidence to the second estimated location and the second estimated location's uncertainty at a given confidence. In an additional embodiment, the method 1000 may include determining a third estimated location of the wireless device from signals using a third set of location measurements, the third set excluding one or more location measurements from the set of location measurements having a forged measurement.
It may be emphasized that the above-described embodiments, particularly any “preferred” embodiments, are merely possible examples of implementations, merely set forth for a clear understanding of the principles of the disclosure. Many variations and modifications may be made to the above-described embodiments of the disclosure without departing substantially from the spirit and principles of the disclosure. All such modifications and variations are intended to be included herein within the scope of this disclosure and the present disclosure and protected by the following claims. Embodiments of the subject matter and the functional operations described in this specification can be implemented in digital electronic circuitry, or in computer software, firmware, or hardware, including the structures disclosed in this specification and their structural equivalents, or in combinations of one or more of them. Embodiments of the subject matter described in this specification can be implemented as one or more computer program products, i.e., one or more modules of computer program instructions encoded on a tangible program carrier for execution by, or to control the operation of a data processing apparatus. The tangible program carrier can be a propagated signal or a computer readable medium. The propagated signal is an artificially generated signal, e.g., a machine-generated electrical, optical, or electromagnetic signal that is generated to encode information for transmission to suitable receiver apparatus for execution by a computer. The computer readable medium can be a machine-readable storage device, a machine-readable storage substrate, a memory device, a composition of matter affecting a machine-readable propagated signal, or a combination of one or more of them.
The term “data processing apparatus” encompasses all apparatus, devices, and machines for processing data, including by way of example a programmable processor, a computer, or multiple processors or computers. The apparatus can include, in addition to hardware, code that creates an execution environment for the computer program in question, e.g., code that constitutes processor firmware, a protocol stack, a database management system, an operating system, or a combination of one or more of them. A computer program (also known as a program, software, software application, script, or code) may be written in any form of programming language, including compiled or interpreted languages, or declarative or procedural languages, and it can be deployed in any form, including as a stand-alone program or as a module, component, subroutine, or other unit suitable for use in a computing environment. A computer program does not necessarily correspond to a file in a file system. A program can be stored in a portion of a file that holds other programs or data (e.g., one or more scripts stored in a markup language document), in a single file dedicated to the program in question, or in multiple coordinated files (e.g., files that store one or more modules, subprograms, or portions of code). A computer program may also be deployed to be executed on one computer or on multiple computers that are located at one site or distributed across multiple sites and interconnected by a communication network.
The processes and logic flows described herein may be performed by one or more programmable processors executing one or more computer programs to perform functions by operating on input data and generating output. The processes and logic flows can also be performed by, and apparatus can also be implemented as, special purpose logic circuitry, e.g., an FPGA (field programmable gate array) or an ASIC (application specific integrated circuit). Processors suitable for the execution of a computer program include, by way of example, both general and special purpose microprocessors, and any one or more processors of any kind of digital computer. Generally, a processor may receive instructions and data from a read only memory or a random access memory or both. The essential elements of a computer are a processor for performing instructions and one or more memory devices for storing instructions and data. Generally, a computer may also include, or be operatively coupled to receive data from or transfer data to, or both, one or more mass storage devices for storing data, e.g., magnetic, magneto optical disks, or optical disks. However, a computer need not have such devices. Moreover, a computer can be embedded in another device, e.g., a mobile telephone, a personal digital assistant (PDA), a mobile audio or video player, a game console, a GNSS receiver, to name just a few.
Computer readable media suitable for storing computer program instructions and data include all forms of non volatile memory, media and memory devices, including by way of example semiconductor memory devices, e.g., EPROM, EEPROM, and flash memory devices; magnetic disks, e.g., internal hard disks or removable disks; magneto optical disks; and CD ROM and DVD-ROM disks. The processor and the memory can be supplemented by, or incorporated in, special purpose logic circuitry. To provide for interaction with a user, embodiments of the subject matter described in this specification can be implemented on a computer having a display device, e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor, for displaying information to the user and a keyboard and a pointing device, e.g., a mouse or a trackball, by which the user can provide input to the computer. Other kinds of devices can be used to provide for interaction with a user as well; for example, input from the user can be received in any form, including acoustic, speech, or tactile input.
Embodiments of the subject matter described in this specification can be implemented in a computing system that includes a back end component, e.g., as a data server, or that includes a middleware component, e.g., an application server, or that includes a front end component, e.g., a client computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the subject matter described is this specification, or any combination of one or more such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication, e.g., a communication network. Examples of communication networks include a local area network (“LAN”) and a wide area network (“WAN”), e.g., the Internet. The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.
While this specification contains many specifics, these should not be construed as limitations on the scope of any invention or of what may be claimed, but rather as descriptions of features that may be specific to particular embodiments of particular inventions. Certain features that are described in this specification in the context of separate embodiments can also be implemented in combination in a single embodiment. Conversely, various features that are described in the context of a single embodiment can also be implemented in multiple embodiments separately or in any suitable sub-combination. Moreover, although features may be described above as acting in certain combinations and even initially claimed as such, one or more features from a claimed combination can in some cases be excised from the combination, and the claimed combination may be directed to a sub-combination or variation of a sub-combination. Similarly, while operations are depicted in the drawings in a particular order, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed, to achieve desirable results. In certain circumstances, multitasking and parallel processing may be advantageous. Moreover, the separation of various system components in the embodiments described above should not be understood as requiring such separation in all embodiments, and it should be understood that the described program components and systems can generally be integrated together in a single software product or packaged into multiple software products.
As shown by the various configurations and embodiments illustrated in
While preferred embodiments of the present subject matter have been described, it is to be understood that the embodiments described are illustrative only and that the scope of the invention is to be defined solely by the appended claims when accorded a full range of equivalence, many variations and modifications naturally occurring to those of skill in the art from a perusal hereof.
The instant application is a divisional of U.S. Ser. No. 13/112,669, filed 20 May 2011; which claims priority of U.S. Provisional Application No. 61/347,225, filed 21 May 2010, entitled: “Handset-Assisted A-GPS Spoofer,” the entirety of which are incorporated herein by reference.
Number | Name | Date | Kind |
---|---|---|---|
3150372 | Groth, Jr. | Sep 1964 | A |
3659085 | Potter et al. | Apr 1972 | A |
4728959 | Maloney et al. | Mar 1988 | A |
4814751 | Hawkins et al. | Mar 1989 | A |
4845504 | Roberts et al. | Jul 1989 | A |
4891650 | Sheffer | Jan 1990 | A |
5056106 | Wang et al. | Oct 1991 | A |
5218618 | Sagey | Jun 1993 | A |
5317323 | Kennedy et al. | May 1994 | A |
5327144 | Stilp et al. | Jul 1994 | A |
5365544 | Schilling | Nov 1994 | A |
5404376 | Dent | Apr 1995 | A |
5423067 | Manabe | Jun 1995 | A |
5465289 | Kennedy, Jr. | Nov 1995 | A |
5506863 | Meidan et al. | Apr 1996 | A |
5506864 | Schilling | Apr 1996 | A |
5508708 | Ghosh et al. | Apr 1996 | A |
5512908 | Herrick | Apr 1996 | A |
5515419 | Sheffer | May 1996 | A |
5519760 | Borkowski et al. | May 1996 | A |
5559864 | Kennedy, Jr. | Sep 1996 | A |
5592180 | Yokev et al. | Jan 1997 | A |
5608410 | Stilp et al. | Mar 1997 | A |
5614914 | Bolgiano et al. | Mar 1997 | A |
5675344 | Tong et al. | Oct 1997 | A |
5736964 | Ghosh et al. | Apr 1998 | A |
5815538 | Grell et al. | Sep 1998 | A |
5825887 | Lennen | Oct 1998 | A |
5870029 | Otto et al. | Feb 1999 | A |
5920278 | Tyler et al. | Jul 1999 | A |
5952969 | Hagerman et al. | Sep 1999 | A |
5959580 | Maloney et al. | Sep 1999 | A |
5960341 | LeBlanc et al. | Sep 1999 | A |
5973643 | Hawkes et al. | Oct 1999 | A |
5987329 | Yost et al. | Nov 1999 | A |
6014102 | Mitzlaff et al. | Jan 2000 | A |
6047192 | Maloney et al. | Apr 2000 | A |
6091362 | Stilp et al. | Jul 2000 | A |
6097336 | Stilp | Aug 2000 | A |
6097709 | Kuwabara | Aug 2000 | A |
6097959 | Yost et al. | Aug 2000 | A |
6101178 | Beal | Aug 2000 | A |
6108555 | Maloney et al. | Aug 2000 | A |
6108558 | Vanderspool, II | Aug 2000 | A |
6115599 | Stilp | Sep 2000 | A |
6115605 | Siccardo et al. | Sep 2000 | A |
6119013 | Maloney et al. | Sep 2000 | A |
6127975 | Maloney | Oct 2000 | A |
6144711 | Raleigh et al. | Nov 2000 | A |
6172644 | Stilp | Jan 2001 | B1 |
6184829 | Stilp | Feb 2001 | B1 |
6188351 | Bloebaum | Feb 2001 | B1 |
6191738 | Pfeil et al. | Feb 2001 | B1 |
6201499 | Hawkes et al. | Mar 2001 | B1 |
6201803 | Munday et al. | Mar 2001 | B1 |
6212319 | Cayrefourcq | Apr 2001 | B1 |
6233459 | Sullivan et al. | May 2001 | B1 |
6246884 | Karmi et al. | Jun 2001 | B1 |
6266013 | Stilp et al. | Jul 2001 | B1 |
6269246 | Rao et al. | Jul 2001 | B1 |
6281834 | Stilp | Aug 2001 | B1 |
6285321 | Stilp et al. | Sep 2001 | B1 |
6288675 | Maloney | Sep 2001 | B1 |
6288676 | Maloney | Sep 2001 | B1 |
6295455 | Fischer et al. | Sep 2001 | B1 |
6311043 | Haardt et al. | Oct 2001 | B1 |
6317081 | Stilp | Nov 2001 | B1 |
6317604 | Kovach, Jr. et al. | Nov 2001 | B1 |
6334059 | Stilp et al. | Dec 2001 | B1 |
6351235 | Stilp | Feb 2002 | B1 |
6366241 | Pack et al. | Apr 2002 | B2 |
6388618 | Stilp et al. | May 2002 | B1 |
6393294 | Perez-Breva et al. | May 2002 | B1 |
6400320 | Stilp et al. | Jun 2002 | B1 |
6407703 | Minter et al. | Jun 2002 | B1 |
6449486 | Rao | Sep 2002 | B1 |
6463290 | Stilp et al. | Oct 2002 | B1 |
6470195 | Meyer | Oct 2002 | B1 |
6477161 | Hudson et al. | Nov 2002 | B1 |
6483460 | Stilp et al. | Nov 2002 | B2 |
6492944 | Stilp | Dec 2002 | B1 |
6501955 | Durrant et al. | Dec 2002 | B1 |
6519465 | Stilp et al. | Feb 2003 | B2 |
6546256 | Maloney et al. | Apr 2003 | B1 |
6553322 | Ignagni | Apr 2003 | B1 |
6563460 | Stilp et al. | May 2003 | B2 |
6571082 | Rahman et al. | May 2003 | B1 |
6591112 | Siccardo et al. | Jul 2003 | B1 |
6603428 | Stilp | Aug 2003 | B2 |
6603761 | Wang et al. | Aug 2003 | B1 |
6640106 | Gutowski et al. | Oct 2003 | B2 |
6646604 | Anderson | Nov 2003 | B2 |
6661379 | Stilp et al. | Dec 2003 | B2 |
6765531 | Anderson | Jul 2004 | B2 |
6771625 | Beal | Aug 2004 | B1 |
6771969 | Chinoy et al. | Aug 2004 | B1 |
6782264 | Anderson | Aug 2004 | B2 |
6782265 | Perez-Breva et al. | Aug 2004 | B2 |
6834234 | Scherzinger et al. | Dec 2004 | B2 |
6839539 | Durrant et al. | Jan 2005 | B2 |
6845240 | Carlson et al. | Jan 2005 | B2 |
6859172 | Powers et al. | Feb 2005 | B2 |
6871077 | Kennedy, Jr. | Mar 2005 | B2 |
6873290 | Anderson et al. | Mar 2005 | B2 |
6876859 | Anderson et al. | Apr 2005 | B2 |
6920329 | Kennedy, Jr. et al. | Jul 2005 | B2 |
6922170 | Alexander, Jr. | Jul 2005 | B2 |
6944465 | Spain et al. | Sep 2005 | B2 |
6952158 | Kennedy, Jr. | Oct 2005 | B2 |
6987979 | Carlsson | Jan 2006 | B2 |
6996392 | Anderson et al. | Feb 2006 | B2 |
7023383 | Stilp et al. | Apr 2006 | B2 |
7116987 | Spain, Jr. et al. | Oct 2006 | B2 |
7167713 | Anderson | Jan 2007 | B2 |
7167714 | Dressler et al. | Jan 2007 | B2 |
7233799 | Spain, Jr. | Jun 2007 | B2 |
7250907 | Krumm et al. | Jul 2007 | B2 |
7257414 | Spain, Jr. et al. | Aug 2007 | B2 |
7271765 | Stilp et al. | Sep 2007 | B2 |
7340259 | Maloney et al. | Mar 2008 | B2 |
7383051 | Spain, Jr. et al. | Jun 2008 | B2 |
7427952 | Bull et al. | Sep 2008 | B2 |
7433652 | Durgin | Oct 2008 | B2 |
7433695 | Gordon et al. | Oct 2008 | B2 |
7440762 | Maloney et al. | Oct 2008 | B2 |
7460505 | Spain | Dec 2008 | B2 |
7593738 | Anderson | Sep 2009 | B2 |
7725111 | Dressler et al. | May 2010 | B2 |
7734298 | Bhattacharya et al. | Jun 2010 | B2 |
7753278 | Spain, Jr. et al. | Jul 2010 | B2 |
7796966 | Bhattacharya et al. | Sep 2010 | B2 |
7848762 | Gordon et al. | Dec 2010 | B2 |
7899467 | Feuerstein et al. | Mar 2011 | B2 |
8013785 | Bhattacharya et al. | Sep 2011 | B2 |
8068802 | Bhattacharya et al. | Nov 2011 | B2 |
8068855 | Dressler et al. | Nov 2011 | B2 |
8106817 | Bhattacharya et al. | Jan 2012 | B2 |
8106818 | Bhattacharya et al. | Jan 2012 | B2 |
8155394 | Allegra et al. | Apr 2012 | B2 |
20020172223 | Stilp | Nov 2002 | A1 |
20030023738 | Boivie et al. | Jan 2003 | A1 |
20030064734 | Stilp et al. | Apr 2003 | A1 |
20030139188 | Chen et al. | Jul 2003 | A1 |
20030190919 | Niemenmaa | Oct 2003 | A1 |
20040043775 | Kennedy et al. | Mar 2004 | A1 |
20040132466 | Kennedy, Jr. | Jul 2004 | A1 |
20040203539 | Benes et al. | Oct 2004 | A1 |
20040203921 | Brumhead et al. | Oct 2004 | A1 |
20040218664 | Kennedy, Jr. et al. | Nov 2004 | A1 |
20040252752 | Kennedy, Jr. et al. | Dec 2004 | A1 |
20050058182 | Kennedy, Jr. et al. | Mar 2005 | A1 |
20050136945 | Kennedy et al. | Jun 2005 | A1 |
20050164712 | Kennedy, Jr. et al. | Jul 2005 | A1 |
20050192026 | Carlson et al. | Sep 2005 | A1 |
20060003695 | Kennedy, Jr. et al. | Jan 2006 | A1 |
20060003775 | Bull et al. | Jan 2006 | A1 |
20060030333 | Ward et al. | Feb 2006 | A1 |
20060116130 | Kennedy, Jr. et al. | Jun 2006 | A1 |
20060125695 | Kennedy, Jr. et al. | Jun 2006 | A1 |
20060141998 | Kennedy, Jr. et al. | Jun 2006 | A1 |
20060154607 | Kennedy, Jr. et al. | Jul 2006 | A1 |
20060240836 | Kennedy, Jr. et al. | Oct 2006 | A1 |
20070087689 | Alles et al. | Apr 2007 | A1 |
20070111746 | Anderson | May 2007 | A1 |
20070155401 | Ward et al. | Jul 2007 | A1 |
20070155489 | Beckley et al. | Jul 2007 | A1 |
20070202885 | Kennedy, Jr. et al. | Aug 2007 | A1 |
20080132244 | Anderson | Jun 2008 | A1 |
20080132247 | Anderson | Jun 2008 | A1 |
20080137524 | Anderson et al. | Jun 2008 | A1 |
20080158059 | Bull et al. | Jul 2008 | A1 |
20080160952 | Bull et al. | Jul 2008 | A1 |
20080160953 | Mia et al. | Jul 2008 | A1 |
20080161015 | Maloney et al. | Jul 2008 | A1 |
20080248811 | Maloney et al. | Oct 2008 | A1 |
20080261611 | Mia et al. | Oct 2008 | A1 |
20080261612 | Mia et al. | Oct 2008 | A1 |
20080261613 | Anderson et al. | Oct 2008 | A1 |
20080261614 | Mia et al. | Oct 2008 | A1 |
20090005061 | Ward et al. | Jan 2009 | A1 |
20090143076 | Wachter et al. | Jun 2009 | A1 |
20100205316 | Xue et al. | Aug 2010 | A1 |
Number | Date | Country |
---|---|---|
06-347529 | Dec 1994 | JP |
WO 2006088472 | Aug 2006 | WO |
Entry |
---|
Argarwal, et al.: “Capacity Analysis of the GSM Short Message Service”, Indian Institute of Technology Bombay, www.csa.iitb.ac.in/˜varsha/allpapers/wireless/ncc03cam.pdf, 2004, pp. 1-5. |
Bard, et al.: “Time Difference of Arrival Dilution of Precision and Applications”, IEEE Transactions on Signal Processing, vol. 47, No. 2, pp. 521-523, Feb. 1999. |
Bell: “A Beginners Guide to Uncertainty of Measurement”, The National Physics Laboratory of the United Kingdom of Great Britain and Northern Ireland, Teddington, Middlesex, UK, 2001, pp. 1-41. |
Caffery, Jr.: “A New Approach to the Geometry of TOA Location”, IEEE, VTC 2000, pp. 1943-1949. |
Caffery, et al.: “Subscriber Location in CDMA Cellular Networks”, IEEE Transactions on Vehicular Technology, vol. 47, No. 2, May 1998, pp. 406-416. |
Caffery, et al. 2: “Overview of Radiolocation in CDMA Cellular Systems”, IEEE Communications Magazine, Apr. 1998, pp. 38-45. |
Chan, et al.: “A Simple and Efficient Estimator for Hyperbolic Location”, IEEE Transactions Signal Processing, vol. 42, No. 8, Aug. 1994, pp. 1905-1915. |
Chen: “A Non-Line-of-Sight Error Mitigation Algorithm in Location Estimation”, Process IEEE Conference on Wireless Communications Networking, vol. 1, 1999, pp. 316-320. |
Chen, et al.: “Joint Angle and Delay Estimation for DS-CDMA with Application to Reduced Dimension Space-Time Rake Receivers”, Mar. 1999, pp. 2933-2936. |
Colman: “A Comparison of the Accuracy of TDOA and TOA Location Algorithms with Equivalent Receiver Geometry”, Defence R&D Canada Technical Memorandum (DREO TM 2001-063), Oct. 2001, pp. 1-53. |
Cong, et al.: “Non-Line-of-Sight Error Mitigation in TDOA Mobile Location”, Process IEEE Global Telecommunications Conference, vol. 1, Sep. 2001, pp. 680-684. |
Drane, et al.: “Positioning GSM Telephones”, IEEE Communications Magazine, Apr. 1998, pp. 46-54, 59. |
Foy: “Position-Location Solutions by Taylor-Series Estimation”, IEEE Transactions Aerospace and Electronic Systems, vol. AES-12, No. 2, Mar. 1976, pp. 187-194. |
Haardt, et al.: “Joint Estimation of 2-D Arrival Angles, Propagation Delays, and Doppler Frequencies in Wireless Communications”, Proc. IEEE Digital Signal Processing Workshop, vol. 1, pp. 1-4, Bryce Canyon National Park, Utah, Aug. 1998. |
Ho, et al.: “An Accurate Algebraic Solution for Moving Source location Using TDOA and FDOA Measurements”, IEEE Transactions on Signal Processing, vol. 52, No. 9, Sep. 2004, pp. 2453-2463. |
Knapp, et al.: “The Generalized Correlation Method for Estimation of Time Delay”, IEEE Transactions on Acoustics, Speech, and Signal Processing, vol. ASSP-24, No. 4, Aug. 1976, pp. 320-327. |
Leshem, et al.: “Array Calibration in the Presence of Multipath”, IEEE Transactions on Signal Processing, vol. 48, No. 1, pp. 53-59, Jan. 2000. |
Mailaender: “On the Geolocation Bounds for Round-Trip Time-of-Arrival and All Non-Line-of-Sight Channels”, EURASIP Journal on Advances in Signal Processing, vol. 2008, pp. 1-10. |
Papadias, et al.: “Space-Time Signal Processing for Wireless Communications: A Survey”, Information Systems Laboratory, Stanford University, Apr. 16-18, 1997, 4 pages. |
Paulraj, et al.: “Space-Time Processing for Wireless Communications”, IEEE Signal Processing Magazine, vol. 11, Nov. 1997, pp. 49-83. |
Rahnema: “Overview of the GSM System and Protocol Architecture”, IEEE Communications Magazine, Apr. 1993, pp. 92-100. |
Rappaport, et al.: “Position Location Using Wireless Communications on Highways of the Future”, IEEE Communications Magazine, Oct. 1996, pp. 33-41. |
Roberts: “Project: IEEE P802.15 Working Group for Wireless Personal Area Networks(WPANS)”, Harris Corporation, Melbourne, FL, Oct. 4, 2004, pp. 1-11. |
Schmidt: “Multiple Emitter Location and Signal Parameter Estimation”, IEEE Transactions on Antennas and Propagation, vol. AP-34, No. 3, Mar. 1986, pp. 276-280. |
Silventoinen, et al.: “Mobile Station Emergency Locating in GSM”, Process IEEE International Conference, Personal Wireless Communications, vol. 1, 1996, pp. 232-238. |
Stansfield: “Statistical Theory of DF Fixing”, Journal IEE 94, Part III A, Oct. 1947, pp. 762-770. |
Stein: “Algorithms for Ambiguity Function Processing”, IEEE Transactions on Acoustics, Speech, and Signal Processing, vol. ASSP-29, No. 3, Jun. 1981, pp. 588-599. |
Thomas, et al.: “Performance of a TDOA-AOA Hybrid Mobile Location System”, 3G Mobile Communication Technologies , Conference Publication No. 477, Mar. 2001, pp. 216-220. |
Torrieri: “Statistical Theory of Passive Location Systems”, IEEE Transactions Aerospace and Electronic Systems, vol. AES-20, No. 2, Mar. 1984, pp. 183-198. |
Vanderveen, et al.: “Joint Angle and Delay Estimation (JADE) for Multipath Signals Arriving at an Antenna Array”, IEEE Communications Letters, vol. 1, No. 1, Jan. 1997, pp, 12-14. |
Wang, et al.: “A TOA-Based Location Algorithm Reducing the Errors Due to Non-Line-of-Sight (NLOS) Propagation”, IEEE Trans. Vehicular Technology, vol. 52, No. 1, Jan. 2003, pp. 112-116. |
Wax: “Position Location from Sensors with Position Uncertainty”, IEEE Transactions Aerospace and Electronic Systems, vol. AES-19, No. 5, Sep. 1983, pp. 658-662. |
Wax, et al.: “On Unique Localization of Multiple Sources by Passive Sensor Arrays”, IEEE Transactions on Acoustics, Speech, and Signal Processing, vol. 37, No. 7, Jul. 1989, pp. 996-1000. |
Wylie, et al.: “The Non-Line of Sight Problem in Mobile Location Estimation”, Process IEEE 5th International Conference on Universal Personal Communications, vol. 2, Oct. 1996, pp. 827-831. |
Yang: “Projection Approximation Subspace Tracking”, IEEE Transactions on Signal Processing, vol. 43, No. 1, Jan. 1995, pp. 95-107. |
Zhao: “Standardization of Mobile Phone Positioning for 3G Systems”, IEEE Communications Magazine, Jul. 2002, pp. 108-116. |
Ziskind, et al.: “Maximum Likelihood Localization of Multiple Sources by Alternating Projection”, IEEE Transaction on Acoustics, Speech, and Signal Processing, vol. 36, No. 10, pp. 1553-1560, Oct. 1988. |
Number | Date | Country | |
---|---|---|---|
20140148202 A1 | May 2014 | US |
Number | Date | Country | |
---|---|---|---|
61347225 | May 2010 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 13112669 | May 2011 | US |
Child | 14168818 | US |