Patent Application
20140075181
This disclosure relates generally to positioning systems. More specifically, but not exclusively, the disclosure relates to systems, methods, and computer program products for controlling access to position information at a receiver based on various considerations, including a requested service, a user, a device, an application, a payment, and/or other characteristics associated with the particular receiver at which the position information is available. Similarly, the disclosure relates to systems, methods, and computer program products for carrying out secure data transmissions intended for a particular application among other applications.
Systems for providing position information are known in the art. For example, radio-bases systems such as LORAN, GPS, GLONASS, and the like have been used to provide position information for persons, vehicles, equipment, and the like. These systems do, however, have limitations associated with factors such as location accuracy, transmitted and received signal levels, radio channel interference and/or channel problems such as multipath, device power consumption, and the like.
Determination of a mobile subscriber's exact location can be quite challenging. If the subscriber is indoors or in an urban area with obstructions, the subscriber's mobile device may not be able to receive signals from GPS satellites and the network may be forced to rely on network-based triangulation/multilateration methods that are less precise. Additionally, if the subscriber is in a multi-story building, knowing only that the subscriber is in the building and not what floor they are on, will result in delays in providing emergency assistance (which could be potentially life-threatening). Clearly, a system that can assist the subscriber's computing device (e.g., a mobile computing device) in speeding up the location determination process, provide more accuracy (including vertical information), and solve some of the challenges of location determination in urban areas and inside buildings is needed.
Moreover, position information transmitted in systems like GPS is readily available to various devices without any option to regulate which device may have access to the position information, or more particularly, which software application on the device may use the position information. Such lack of regulation may place bandwidth burdens on network operators where many applications across many devices are transmitting position information through the network to third party services that are associated with those applications. Having an ability to regulate use of position information would further allow network operators to maintain higher levels of service for its customers while reducing unnecessary bandwidth use.
Accordingly, there is a need for improved positioning systems to address these and/or other problems with existing positioning systems and devices.
In accordance with the present disclosure, systems, methods and computer program products comprising a computer usable medium having a computer readable program code embodied therein that is adapted to be executed to implement a method for providing conditional access to position information at a computing device are described. For example, aspects of this disclosure relate to a system configured to: receive encrypted position information from a transmitter; decrypt, the position information using a system-level decryption key associated with the transmitter; decrypt the position information using a service-level decryption key associated with a location application; process the decrypted position information based on one or more limitations related to a location service provided by the location application; determine a position location estimate of the device based on the processing of the decrypted position information; and provide the position location estimate to the location application.
Various additional aspects, features, and functions are described below in conjunction with the appended Drawings.
The present application may be more fully appreciated in connection with the following detailed description taken in conjunction with the accompanying drawings.
Various aspects of the disclosure are described below. It should be apparent that the teachings herein may be embodied in a wide variety of forms and that any specific structure, function, or both, being disclosed herein is merely representative. Based on the teachings herein one skilled in the art should appreciate that any aspect disclosed may be implemented independently of any other aspects and that two or more of these aspects may be combined in various ways. For example, a system may be implemented or a method may be practiced using any number of the aspects set forth herein.
As used herein, the term “exemplary” means serving as an example, instance or illustration. Any aspect and/or embodiment described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other aspects and/or embodiments.
This disclosure relates generally to positioning systems and methods for providing signaling for position determination and determining high accuracy position/location information using a wide area transmitter array in communication with receivers (also interchangeably referred to herein as user devices or user terminals/UEs) such as in cellular phones or other portable devices. Positioning signaling services associated with certain aspects may utilize broadcast-only beacons/transmitters that are configured to transmit encrypted positioning signals. Receivers having an appropriate chipset may be able to receive and use the positioning signals based on air-link access authentication techniques, including authentication by way of decrypting the position signals using a stored copy of an air-link access certificate (ALAC) during an initial decryption stage. Once decrypted with the ALAC during the initial decryption stage, the receiver may provide, to a software application operating on the receiver, conditional access to the position information based on an additional decryption stage using an authorized service level certificate (ASLC) associated with that particular software application.
Various components within a receiver may be used to carry out the decryption stages. For example, decryption of the broadcast signal may occur at a GPS chip in conjunction with ALACs that are provisioned into firmware of a secure hardware area (e.g., in the GPS chip). By comparison, decryption of the position information using the ASLC may occur at another chip (e.g., a receiver's processor) in conjunction with an ASLC that is not provisioned in firmware (e.g., accessible via a different level of software). Of course, one of skill in the art will appreciate alternative configurations.
Once decrypted, the position information may be processed by a processor (e.g., a positioning engine) in order to compute various positioning signal data units such as Latitude, Longitude and Altitude to varying degrees of accuracy.
The two-stage decryption of position information at the receiver offers several advantages over prior art. For instance, aspects of the two-stage decryption enable the transmitter and/or the receiver to provide positioning signals to authorized receivers and/or authorized software applications (hereafter referred to as “applications”) while denying access to unauthorized receivers and unauthorized applications. Similarly, access to the position information may be controlled based on the user requesting access, or other types of considerations.
Controlling access to position information based on authorization permits a carrier and application developers to offer tiered levels of service that may be purchased based on different business agreements. Tier levels may relate to levels of accuracy, coverage areas, duration of validity, amounts of use, periods of use, or other considerations
The two-stage decryption of position information at the receiver also decreases the likelihood that an unauthorized user (e.g., a hacker) can gain access to and use the positioning information, thereby causing loss of revenue.
Achievement of the above advantages must be balanced against performance requirements of the positioning system. According to certain aspects, the encryption and decryption stages performed in the system may not compromise system performance metrics such as Time to First Fix (TTFF) of a receiver's position and accuracy of any position fix. Additionally, processing associated with the various conditional access methodologies described herein may be limited based on processing power of particular receivers, which may preclude process-intensive cryptographic procedures.
According to other aspects, the conditional access feature may be available on various device platforms and may support the delivery models identified in the use cases described herein.
Other aspects may involve factory-based or consumer-based provisioning of a receiver (in addition to any re-provisioning) to support the conditional access methodologies described herein. By way of example, various provisioning embodiments are described herein.
Importantly, any of the conditional access processes described herein must comply with any E-911 functional requirements.
Various additional aspects, features, and functions are described below in conjunction with the appended Drawings. While the details of the embodiments of the disclosure may vary and still be within the scope of the claims, one of skill in the art will appreciate that the Drawings described herein are not intended to suggest any limitation as to the scope of use or functionality of the inventive aspects. Neither should the Drawings and their description be interpreted as having any dependency or requirement relating to any one or combination of components illustrated in those Drawings.
In the following description, numerous specific details are introduced to provide a thorough understanding of, and enabling description for, the systems and methods described. One skilled in the relevant art, however, will recognize that these embodiments can be practiced without one or more of the specific details, or with other components, systems, and the like. In other instances, well-known structures or operations are not shown, or are not described in detail, to avoid obscuring aspects of the disclosed embodiments.
Additional disclosure regarding various features of disclosure are described in the following co-assigned patent applications which are incorporated by reference in their entirety for any and all purposes: U.S. Utility patent application Ser. No. 13/412,487, entitled WIDE AREA POSITIONING SYSTEMS, filed on Mar. 5, 2012; U.S. Utility patent Ser. No. 12/557,479 (now U.S. Pat. No. 8,130,141), entitled WIDE AREA POSITIONING SYSTEM, filed Sep. 10, 2009; United States Utility patent application Ser. No. 13/412,508, entitled WIDE AREA POSITIONING SYSTEM, filed Mar. 5, 2012; United States Utility patent application Ser. No. 13/296,067, entitled WIDE AREA POSITIONING SYSTEMS, filed Nov. 14, 2011; Application Serial No. PCT/US12/44452, entitled WIDE AREA POSITIONING SYSTEMS, filed Jun. 28, 2011); U.S. patent application Ser. No. 13/535,626, entitled CODING IN WIDE AREA POSITIONING SYSTEMS, filed Jun. 28, 2012; U.S. patent application Ser. No. 13/565,732, entitled CELL ORGANIZATION AND TRANSMISSION SCHEMES IN A WIDE AREA POSITIONING SYSTEM, filed Aug. 2, 2012; U.S. patent application Ser. No. 13/565,723, entitled CELL ORGANIZATION AND TRANSMISSION SCHEMES IN A WIDE AREA POSITIONING SYSTEM, filed Aug. 2, 2012; U.S. patent application Ser. No. 13/831,740, entitled SYSTEMS AND METHODS CONFIGURED TO ESTIMATE RECEIVER POSITION USING TIMING DATA ASSOCIATED WITH REFERENCE LOCATIONS IN THREE-DIMENSIONAL SPACE, filed Mar. 14, 2013; U.S. patent application Ser. No. 13/909,977, entitled SYSTEMS AND METHODS FOR LOCATION POSITIONING of USER DEVICE, filed Jun. 4, 2013. The above applications, publications and patents may be individually or collectively referred to herein as “incorporated reference(s)”, “incorporated application(s)”, “incorporated publication(s)”, “incorporated patent(s)” or otherwise designated. The various aspect, details, devices, systems, and methods disclosed herein may be combined with disclosures in any of the incorporated references.
As shown in exemplary system 100, the beacons may be in the form of a plurality of transmitters 110, and the receiver units may be in the form of one or more user devices 120, which may be any of a variety of electronic communication devices configured to receive signaling from the transmitters 110, as well as optionally be configured to receive GPS or other satellite system signaling, cellular signaling, Wi-Fi signaling, Wi-Max signaling, Bluetooth, Ethernet, and/or other data or information signaling as is known or developed in the art. The receiver units 120 may be in the form of a cellular or smart phone, a tablet device, a PDA, a notebook or other computer system, and/or similar or equivalent devices. In some embodiments, the receiver unit 120 may be a standalone location/positioning device configured solely or primarily to receive signals from the transmitters 110 and determine location/position based at least in part on the received signals. As described herein, receiver units 120 may also be denoted herein as “User Equipment” (UE), handsets, smart phones, tablets, and/or simply as a “receiver.”
The transmitters 110 (which may also be denoted herein as “towers”) are configured to send transmitter output signals to multiple receiver units 120 (a single receiver unit 120 is shown in
One or more receivers 120 may receive signaling from multiple transmitters 110 via corresponding communication links 113 from each of the transmitters 110. In addition, as shown in
In an exemplary embodiment, the transmitters 110 of system 100 are configured to operate in an exclusively licensed or shared licensed/unlicensed radio spectrum; however, some embodiments may be implemented to provide signaling in unlicensed shared spectrum. The transmitters 110 may transmit signaling in these various radio bands using novel signaling as is described subsequently herein. This signaling may be in the form of a proprietary signal configured to provide specific data in a defined format advantageous for location and navigation purposes. For example, as described subsequently herein, the signaling may be structured to be particularly advantageous for operation in obstructed environments, such as where traditional satellite position signaling is attenuated and/or impacted by reflections, multipath, and the like. In addition, the signaling may be configured to provide fast acquisition and position determination times to allow for quick location determination upon device power-on or location activation, reduced power consumption, and/or to provide other advantages.
Various embodiments of WAPS may be combined with other positioning systems to provide enhanced location and position determination. Alternately, or in addition, a WAPS system may be used to aid other positioning systems. In addition, information determined by receiver units 120 of WAPS systems may be provided via other communication network links 163, such as cellular, Wi-Fi, Pager, and the like, to report position and location information to a server system or systems 130, as well as to other networked systems existing on or coupled to network infrastructure 170. For example, in a cellular network, a cellular backhaul link 165 may be used to provide information from receiver units 120 to associated cellular carriers and/or others (not shown) via network infrastructure 170. This may be used to quickly and accurately locate the position of receiver 120 during an emergency, or may be used to provide location-based services or other functions from cellular carriers or other network users or systems.
It is noted that, in the context of this disclosure, a positioning system is one that localizes one or more of latitude, longitude, and altitude coordinates, which may also be described or illustrated in terms of one, two, or three dimensional coordinate systems (e.g., x, y, z coordinates, angular coordinates, etc.). In addition, it is noted that whenever the term ‘GPS’ is referred to, it is done so in the broader sense of Global Navigation Satellite Systems (GNSS) which may include other existing satellite positioning systems such as GLONASS as well as future positioning systems such as Galileo and Compass/Beidou. In addition, as noted previously, in some embodiments other positioning systems, such as terrestrially based systems, may be used in addition to or in place of satellite-based positioning systems.
Embodiments of WAPS include multiple towers or transmitters, such as multiple transmitters 110 as shown in
In a positioning system that uses time difference of arrival or trilateration, the positioning information typically transmitted includes one or more of precision timing sequences and positioning signal data, where the positioning signal data includes the location of transmitters and various timing corrections and other related data or information. In one WAPS embodiment, the data may include additional messages or information such as notification/access control messages for a group of subscribers, general broadcast messages, and/or other data or information related to system operation, users, interfaces with other networks, and other system functions. The positioning signal data may be provided in a number of ways. For example, the positioning signal data may be modulated onto a coded timing sequence, added or overlaid over the timing sequence, and/or concatenated with the timing sequence.
Data transmission methods and apparatus described herein may be used to provide improved location information throughput for the WAPS. In particular, higher order modulation data may be transmitted as a separate portion of information from pseudo-noise (PN) ranging data. This may be used to allow improved acquisition speed in systems employing CDMA multiplexing, TDMA multiplexing, or a combination of CDMA/TDMA multiplexing. The disclosure herein is illustrated in terms of wide area positioning systems in which multiple towers broadcast synchronized positioning signals to UEs and, more particularly, using towers that are terrestrial; however, the embodiments are not so limited and other systems within the spirit and scope of the disclosure may also be implemented.
In an exemplary embodiment, a WAPS uses coded modulation sent from a tower or transmitter, such as transmitter 110, called spread spectrum modulation or pseudo-noise (PN) modulation, to achieve wide bandwidth. The corresponding receiver unit, such as receiver or user device 120, includes one or more modules to process such signals using a despreading circuit, such as a matched filter or a series of correlators, for example. Such a receiver produces a waveform which, ideally, has a strong peak surrounded by lower level energy. The time of arrival of the peak represents the time of arrival of the transmitted signal at the UE. Performing this operation on a multiplicity of signals from a multiplicity of towers, whose locations are accurately known, allows determination of the receivers location via trilateration. Various additional details related to WAPS signal generation in a transmitter, such as transmitter 110, along with received signal processing in a receiver, such as receiver 120, are described subsequently herein.
In one embodiment, a WAPS may use binary coded modulation as the spreading method. The WAPS signals of an exemplary embodiment may include two specific types of information: (1) a high precision ranging signal (which may be delivered quickly relative to other signals), and (2) location data such as transmitter ID and position, time of day, health, environmental conditions such as pressure data, etc. WAPS may, similar to GPS, transmit location information by modulating a high speed binary pseudorandom ranging signal with a lower rate information source. In addition to this application, the incorporated applications disclose embodiments of methods that use a pseudorandom ranging signal and a modulating information signal, both of which may utilize higher order modulations, such as quaternary or octonary modulation. In one embodiment, the ranging signal is binary phase modulated, and location information is provided in a separate signal using higher order modulation.
Conventional systems use a format of a position location signal (e.g., used in a Time Division Multiplexing arrangement) in which each slot transmission comprises a pseudorandom ranging signal followed by various types of location data. These conventional systems also include a synchronization, or sync, signal, which may be deleted if the pseudorandom ranging signal is used also as the sync signal. However, as with other earlier systems, the location data of these conventional systems is binary, which limits throughput. These systems also transmit a large number of binary bits during the interval in which the location data is transmitted.
To address these limitations, in exemplary embodiments, a binary, or quaternary, pseudorandom signal may be transmitted in a particular slot followed by a very higher order modulated data signal. For example, in a given slot one or more location information symbols may be transmitted using differential 16-phase modulation, in order to transmit four bits of information per slot. This represents a four-fold throughput improvement versus the one bit typically transmitted when binary phase modulation is imposed upon the pseudorandom carrier. Other types of modulation of location information may also be utilized, such as 16 QAM, etc. In addition certain error control modulation methods may be used for the higher level modulation, such as the use of Trellis codes. These modulation methods generally reduce error rates.
The positioning system 240 may generate and make available ASLCs to the manufacturer 210, the user device 220, the service provider 230, and/or the external entities 250 (e.g., an application developer or provider). The ASLCs maybe serialized to include a unique device identifier like IMEI, MAC-Address etc.
The positioning system 240 may generate and administer developer keys, SDKs and APIs for external entities 250 that are looking to incorporate position information into downloadable applications. Each developer key may have several associated ASLCs based on the service levels of an associated application. Each application ASLC may contain the developer key as unique identifier, and may also contain other unique IDs. The positioning system 240 may also maintain a server to process requests from deployed applications in the field (i.e., on user device 220) for dynamic transmissions of ASLCs to the user device 220.
The manufacturer 210 may image one or more ALACs and ASLCs (e.g., obtained from the positioning system 240, or independently created and maintained) onto the receiver along with requisite firmware (“FW”) and software (“SW”). The manufacturer 210 may also load the libraries as an image. Manufacturer 210s may include chipset suppliers, device OEMs, OS vendors. By comparison the same ALAC may be used for all transmissions from all transmitters, while a different ASLC may be used for each application on each receiver, and based on particular user accounts. Both the ASLC and the ALAC may be encrypted or otherwise protected from unauthorized access at the UE.
The service provider 230 may provide various services to the user device 220, including cellular services and web-based services. Additional services may include any wireless or wired delivery of content (e.g., video content, audio content, image content, text content, etc.). The service provider 230 may store ASLCs associated with applications it provides to the user device 220. The service provider 230 also enables Control-Plane (c-Plane) messaging flow for E-911 and network management when applicable. The service provider 230 may further enable User-Plane (u-Plane), via SUPL messaging flows for in-house LBS.
The external entities 250 may include vendors that provide various location services to users via the user's receiver. For example, external entities 250 may include PSAPs, location-based ad networks, and LBS application developers/publishers, among others. The positioning system 240 and service provider 230 may serve an external entity 250 with a range of services, including location assistance, ASLC verification and provisioning, value-added-services, billing services and audit services.
A user device 220 may include a smartphone, tablet, and a connected computing device. The user device 220 may be configured to control access to position information by individual applications (e.g., e-911, network management (NW), or LBS). Control of the access may be accomplished using ASLCs that are imaged on firmware or downloaded after the user device 220 is manufactured and enters the stream of commerce. As shown, a driver and a library layer may assist in the managing of ASLCs for multiple applications and users on device, in the decryption of position information, and in limiting the use of the decrypted position information by an application based on permissions indicated by the ASLC. For example, the library may be capable of associating an ASLC to its relevant application (e.g., E911, Network Management, LBS, etc.), and to provide arbitrate delivery of appropriate position information to the application.
Various system features have been described above, including transmitters and receivers.
Although not shown in
Transmitter 300 may also include one or more transmitter modules (e.g., RF transmission block 370) for generating and sending transmitter output signals as described subsequently herein. A transmitter module may also include various elements as are known or developed in the art for providing output signals to a transmit antenna, such as analog or digital logic and power circuitry, signal processing circuitry, tuning circuitry, buffer and power amplifiers, and the like. Signal processing for generating the output signals may be done in the a processing module (not shown) which, in some embodiments, may be integrated with another module described in relation to
One or more memories (not shown) may be coupled with a processing module (not shown) to provide storage and retrieval of data and/or to provide storage and retrieval of instructions for execution in the processing module. For example, the instructions may be instructions for performing the various processing methods and functions described subsequently herein, such as for determining location information or other information associated with the transmitter, such as local environmental conditions, as well as to generate transmitter output signals to be sent to the user devices 120 as shown in
Transmitter 300 may further include one or more environmental sensing modules (not shown) for sensing or determining conditions associated with the transmitter, such as, for example, local pressure, temperature, or other conditions. In an exemplary embodiment, pressure information may be generated in the environmental sensing module and provided to a processing module for integration with other data in transmitter output signals as described subsequently herein. One or more server interface modules (not shown) may also be included in transmitter 300 to provide an interface between the transmitter and server systems, such as server system 130 as shown in
Each transmitter 300 may send data at the physical layer at an adjustable number of bits per second per slot (e.g., 96 bits per second per slot or greater), and each transmitter may be independent of the others, including its position information. Transmitter 300 may include various modules to generate, encrypt, protect, modulate and transmit data. For example, transmitter 300 may include a data generation block 310 to generate position information, an encryption block 320 to encrypt the position information based on a particular air-link access certificate (ALAC), an access certificate storage block 330 to store the ALAC, and other blocks—e.g., a packet ID/CRC block 340, an encoding, puncturing and interleaving block 350, a modulation block 360, and an RF transmission block 370, among others not shown. Blocks 340 and 350 may provide forward error correction (FEC) and CRC schemes, along with other data formatting schemes to reduce the effects of fading, path loss, and other environmental conditions. Block 360 provides modulation on data.
Although modulation and signal structure may vary, it is contemplated that 190 bits per frame are available for transmissions from the transmitter 300. After encoding overhead, 102 data bits are available, of which 7 bits are reserved for unencrypted framing information, which leaves 95 bits for encrypted position information. It is preferred that encryption be minimally used to maintain low overhead. By way of example, one encryption rate may be about 95 bits every 3 seconds. Transmissions may repeat themselves for a few cycles (e.g., 10 cycles or 30 seconds) before data changes. Various payloads are contemplated, including: latitude, longitude, altitude, pressure, temperature, transmission correction, and transmission quality. Additional payloads may include security information, service ID, conditional access data (e.g., ASLC information). These various payload packets can be segmented over multiple slots. One of skill will appreciate other payloads known in the art.
In some cases, there is a need for an n-bit indicator to denote the type of packet that is being transmitted, which type of information will be transmitted over several packets, or how multiple packets of the same information relate to each other. Packet structures may include this n-bit indicator at any point in the packet.
As shown in
Attention is now turned to
Receiver 400 may include one or more GPS/modules 480 for receiving GPS signals and providing location information and/or other data, such as timing data, dilution of precision (DOP) data, or other data or information as may be provided from a GPS or other positioning system, to a processing module (not shown). Of course, other Global Navigation Satellite Systems (GNSS) are contemplated, and it is to be understood that disclosure relating to GPS may apply to these other systems. It is noted that while receiver 400 is shown in
Receiver 400 may also include one or more cellular modules 490 for sending and receiving data or information via a cellular or other data communications system. Alternately, or in addition, receiver 400 may include communications modules (not shown) for sending and/or receiving data via other wired or wireless communications networks, such as Wi-Fi, Wi-Max, Bluetooth, USB, or other networks.
Receiver 400 may include one or more position/location modules 420 for receiving signals from terrestrial transmitters, such as transmitters 110 as shown in
One or more memories 430 may be coupled with processing module (not shown) and other modules to provide storage and retrieval of data and/or to provide storage and retrieval of instructions for execution in the processing module. For example, the instructions may perform the various processing methods and functions described herein, such as for decrypting position information and determining location information. Accordingly, certain blocks (e.g., 421,-424) shown in position module 420 may perform processing of position information, decryption keys, and/or other information described herein. Some or all of that processing may alternatively be performed at a stand-alone processor (not shown).
Receiver 400 may further include one or more environmental sensing modules (not shown) for sensing or determining conditions associated with the receiver, such as, for example, local pressure, temperature, or other conditions, that may be used to determine the location of the receiver 400. In an exemplary embodiment, pressure information may be generated in such an environmental sensing module for use in determining location/position information in conjunction with received transmitter, GPS, cellular, or other signals.
Receiver 400 may further include various additional user interface modules, such as a user input module (not shown), which may be in the form of a keypad, touchscreen display, mouse, or other user interface element. Audio and/or video data or information may be provided on an output module (not shown), such as in the form or one or more speakers or other audio transducers, one or more visual displays, such as touchscreens, and/or other user I/O elements as are known or developed in the art. In an exemplary embodiment, such an output module may be used to visually display determined location/position information based on received transmitter signals, and the determined location/position information may also be sent to cellular module 490 to an associated carrier or other entity.
As shown in
The first cryptography block 422 may be configured to at least decrypt the position information based on an ALAC stored in the memory 430. Block 422 may also, upon receiving an indication that an emergency 911 call has been initiated, output the decrypted position information to an appropriate processing block associated with an E-911 procedure.
The position module 420 may further comprise a second cryptography block 423 that is configured to decrypt some or all of the position information based on an appropriate ASLC stored in the memory 430. The ASLC may be determined by which application has requested the position information or a location fix. For example, ASLC's may be associated with LBS applications or E-911 applications on the receiver 400.
Once the position information is decrypted by the second cryptography block 423, the decrypted position information is output to a data unit output block 424 that determines discrete data units of the position information (e.g., latitude, longitude, altitude, pressure, temperature, system time, timing correction, and/or transmitter ID). Specific data units of the position information may then be transmitted to the position engine 440 based on service levels indicated by the ASLC for the application that requested access to the position information.
The position engine 440 may be configured to process the position information (and, in some cases, GPS data, cell data, and/or LAN data) in order to determine the location of the receiver 400 within certain bounds (e.g., accuracy levels, etc.). Once determined, location information may be provided to the applications 450. One of skill in the art will appreciate that the position engine 440 may signify any processor capable of determining location information, including a GPS position engine or other position engine. Locations of the various components shown in
As disclosed elsewhere herein, and repeated here for clarity, each application on the receiver 400 may need its own ASLC to access position information in order to determine the location of the receiver 400. With respect to some aspects, one ASLC may be used by multiple applications, and multiple ASLCs may be used by one application but for different users or under different circumstances. The ASLCs may be used to limit use of particular position information during particular time periods and in particular service areas.
E-911, Network Support and LBS applications/services may be handled separately from each other, where their respective ASLCs may be loaded into firmware of the receiver 400 or uploaded to memory after manufacture of the receiver 400. Each ASLC may be used to provide each application/service its own feed of the position information. Separate processing pathways may be used to further separate these applications/services.
The receiver 400 may have limited hardware/software capabilities dedicated for location determinations. The total footprint available for the conditional access features described herein may be on the order of 32 kilobytes, although other footprints are contemplated.
Position information may be processed at a GPS processor, an application processor or at an external server. In accordance with one aspect, features described herein may be carried out on or in association with a GPS integrated circuit (IC) on the receiver. For example, a host processor at the receiver may be used to communicate with a GPS IC via a bi-directional serial link. Latitude and longitude, along with other information may be transmitted using this serial link. The serial link may be used for certificate exchanges (e.g., ASLCs) to the GPS IC. It is contemplated that the GPS IC comprises a signal processing section that searches for transmitters (e.g., through correlation with PN sequences) and demodulates signals received from transmitters to retrieve physical layer payload, which may be (and is, according to certain embodiments described herein) in encrypted form. A decryption engine can the decrypt the data before providing the data to the next processing layer, which may be the position engine. The position engine may use the decrypted data to compute receiver location. The various engines may be provisioned in the GPS IC, or in other receiver circuitry.
At stage 501, the positioning system 240 may create and maintain information used to control access by receivers to position information. By way of example, the positioning system 240 may create air-link access certificates (ALACs) and authorized service level certificates (ASLCs) that are later used by the UE 220 to decrypt position information received from the network (e.g., from the service provider 230 and/or the positioning system 240) before using that position information based on restrictions specified by the ASLC for a particular application on the receiver that has requested the position information. At stage 502, the created ALACs and ASLCs are provided to the manufacturer 210, and the manufacturer 210 provisions the UE 220 with the ALACs/ASLCs (e.g., by imaging them in firmware) at stage 503.
At stage 504 (e.g., after a user purchases the UE 220), the UE 220 launches an application or initiates an emergency 911 call. Prior to step 504, although not explicitly shown, the application may be downloaded to the UE 220. Stage 505 is unnecessary in cases where an ASLC associated with the application has been provisioned by the manufacturer. Otherwise, the UE 220 sends a developer key associated with the application to the network. The routing of the developer key may pass through the service provider 230, the positioning system 240 and/or the developer of the application as an external entity 250 (routing not shown). After receiving and verifying the developer key, the network may then transmit an ASLC for that application to the UE 220, which may then store the ASLC.
At stage 506, the UE 220 retrieves position information from the network. The position information may be obtained from a broadcast signal originating at the positioning system 240, and/or may be obtained through the service provider 230. Similarly, the UE 220 may request the position information, or may monitor broadcasts for the position information.
At stages 507-508, the UE 220 may decrypt the position information using an ALAC (e.g., an ALAC associated with the transmitter that broadcasted the position information) and an ASLC that is associated with the application on the receiver that is requesting the position information.
At stages 509-510, the decrypted position information is processed and location information relating to the location of the UE 220 is determined (e.g., at a position engine on the UE 220).
In the case of a 911 call, at stages 511-512, the position information, the location information, and/or information used to determine position (e.g., such as pseudoranges and information about transmitters for which the pseudoranges were computed) are transmitted to the service provider 230 and/or the PSAP operating as an external entity 250. Otherwise, at stage 512, for LBS-based applications, the location information may remain at the UE 220 to carry out location based services and/or may be transmitted to an LBS entity operating as an external entity for aiding the provision of location based services from that LBS entity. Another alternative for an E-911 call is for the receiver to send an encrypted packet to a server along with raw TOA information. The encrypted packet may be decrypted to extract the information required to compute a position solution at the server.
As previously described, encrypted positioning signal data may be transmitted to a receiver (e.g., receiver 400 of
Additional encryption may be applied to safeguard use of position information by authorized applications and users based on various parameters (e.g., validity of payment associated with application, current location of user, whether a fixed amount of position requests by the user or application has been exceeded, time period during which position information may be accessed, and others). This second layer of encryption and decryption that controls distribution of position information to certain applications while restricting access to that position information by other applications is a key feature of various embodiments described herein, because it allows a network operator, carrier, application vendor/developer, or other entity shown in
At stage 620, the receiver obtains a copy of the ASLC from the network.
At stage 630, encrypted positioning signal arrives at the receiver from network. The positioning signal may be broadcasted by a transmitter, or may arrive over other communication pathways (e.g., cellular pathways, web-based pathways, local area network pathways). At stage 640, the receiver initially processes the positioning signal. Sub-stages associated with stage 640 are illustrated in
At stage 650, the positioning signal arrives at the first cryptography block 422, where it is decrypted using a copy of the ALAC that is stored in memory 430. Then, at stage 660, some or all of the position data from the decrypted positioning signal is decrypted by the second cryptography block 423 using an ASLC associated with the first application. The ASLC may be retrieved from memory 430, or from the network (as described in relation to stage 620 and
Finally, at stage 670, position engine 440 may receive the decrypted position data along with position pseudorange information to calculate the receiver's position on behalf of the first application. Calculation of the position may be determined based on a service level indicated by the ASLC for the first application.
At stage 710, the UE 220 retrieves a developer key associated with an application. The developer key may be stored on the UE 220 after the application is downloaded to the UE 220. An association of the developer key and an ASLC may be stored at the network (e.g., the service provider 230, the positioning system 240 or an external entity 250). The ASLC may be specific to not only the application, but also a access level of the UE 220. At stage 720, the developer key is transmitted to the network for processing (e.g., to the service provider 230, the positioning system 240, and/or the developer or application provider 250).
At stage 730, in response to transmitting the developer key, the UE 220/receiver 400 receives an ASLC related to the developer key/application over the network. At stage 740, the ASLC may be stored for future use. Alternatively, the ASLC may not be stored so that stages 710 through 730 are repeated the next time the application requests location information (which requires an ASLC associated with the application, under the two-stage decryption model illustrated in
At stage 810, positioning signal received from a transmitter through RF module 410 may be used to estimate raw TOA (e.g., at ddigital processing block 421a). The raw TOA estimate may then be converted to raw positioning pseudorange information at Pseudorange generation block 421b.
At stage 820, positioning signal may be decoded at block 421c. Then, at stage 830, block 421c may perform error detection on the positioning signal data before sending it to the first cryptography block 422 for decryption.
Service type may relate to accuracy levels in up to three dimensions, including high-range accuracy (e.g., 3 meters), mid-range accuracy (25-50 meters), and low-range accuracy (400 meters). Service type may also relate to coverage levels, including localized, regional, nationwide, and global, among others. Service type may further relate to time of validity levels involving expirations of access privileges in terms of one-time, monthly, yearly, or life-time, among other periods of validity. Service type may also relate to usage levels, including metered and unlimited. Various combinations of these levels may be utilized.
Similar decryption on a location application basic for non-cellular devices is also contemplated. For example, E-911 calls through VoIP applications (e.g., Skype™), cameras/camcorders, and the like could have ASLCs imaged into their firmware or otherwise downloaded into memory.
Various types of computing devices and their connectivity states are contemplated, including devices that are nearly always connected, mostly connected, or rarely (if ever connected) to a cellular network, positioning network, local area network, or other network. Additional consideration is given to processing capabilities of each of these computing devices.
Types of connectivity includes cellular (e.g., 3G/4G, pre-paid), Wi-Fi, wired (e.g., USB, Ethernet), and other connectivity.
Types of computing devices include smartphones, other cellular phones, tablets, laptops, connected TVs, VoIP phones, STBs, DMAs, appliances, security systems, PGD, PNDs, DSC, M2M applications, geo-fencing of assets, and others. Connected receivers are devices such as cell phones, tablets and laptops that have an active data pipe available (e.g., Cellular and Wi-Fi/wired Ethernet). Mostly connected receivers are devices such as tablets and laptops that have access to non-cellular means like Wi-Fi/wired Ethernet. Unconnected receivers or receivers with limited connectivity include receivers that are rarely (if ever) connected to the Internet, and have no cellular connectivity
It is contemplated that the unconnected receivers may be manufactured with a pre-authorized set of ALACs and ASLCs programmed for the lifetime of the receiver. Key updates beyond this initial period could be delivered either via a firmware update to the device (e.g., using a USB connection) or by connecting the device temporarily to a data network. Such unconnected receivers could determine their location with an appropriate RF receiver that receives the encrypted position information (e.g., a GPS chip).
Systems and methods described herein may track the position computing devices or other things to provide position information and navigation with or to such devices and things. It is noted that the term “GPS” may refer any Global Navigation Satellite Systems (GNSS), such as GLONASS, Galileo, and Compass/Beidou. Transmitters may transmit positioning data in a signal received by a user device. Positioning data may include “timing data” that can be used to determine propagation time of a signal (e.g., time-of-arrival (TOA)), which can be used to estimate a distance between a user device and transmitter (e.g., pseudorange) by multiplying the propagation time of the signal by the speed of the signal.
The various illustrative systems, methods, logical blocks, modules, circuits, and algorithm steps described herein may be implemented or performed directly in hardware, in software executed by a processor (also referred to as a “processing device”), or both. A processor may perform any of the processing, computational and other method steps or other system functionality relating to the processes and systems disclosed herein. A processor may include a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof. A processor may be a conventional processor, microprocessor, controller, microcontroller, or state machine. A processor can also refer to a chip, where that chip includes various components (e.g., a microprocessor and other components). The term “processor” may refer to one, two or more processors of the same or different types. It is noted that the terms “computer” or “computing device” or “user device” or the like may refer to devices that include a processor. Software may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium. A “memory” may be coupled to a processor such that the processor can read information from and write information to the memory. The storage medium may be integral to the processor. Software may be stored on or encoded as one or more instructions or code on a computer-readable medium. Computer-readable media be any available storage media, including non-volatile media (e.g., optical, magnetic, semiconductor) and carrier waves that transfer data and instructions through wireless, optical, or wired signaling media over a network using network transfer protocols. Aspects of systems and methods described herein may be implemented as functionality programmed into any of a variety of circuitry, including. Aspects may be embodied in processors having software-based circuit emulation, discrete logic, custom devices, neural logic, quantum devices, PLDs, FPGA, PAL, ASIC, MOSFET, CMOS, ECL, polymer technologies, mixed analog and digital, and hybrids thereof. Data, instructions, commands, information, signals, bits, symbols, and chips that may be referenced throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof. Computing networks may be used to carry out aspects and may include hardware components (servers, monitors, I/O, network connection). Application programs may carry out aspects by receiving, converting, processing, storing, retrieving, transferring and/or exporting data, which may be stored in a hierarchical, network, relational, non-relational, object-oriented, or other data source. “Data” and “information” may be used interchangeably. The words “comprise,” “comprising,” “include,” “including” and the like are to be construed in an inclusive sense (i.e., not limited to) as opposed to an exclusive sense (i.e., consisting only of). Words using the singular or plural number also include the plural or singular number respectively. The words “or” or “and” cover any of the items and all of the items in a list. “Some” and “any” and “at least one” refers to one or more. The term “device” may comprise one or more components (e.g., a processor, a memory, a screen), and “module” may refer to hardware or software. The disclosure is not intended to be limited to the aspects shown herein but is to be accorded the widest scope understood by a skilled artisan, including equivalent systems and methods. The protection afforded the pdisclosure should only be limited in accordance with the following claims.
This application claims priority under 35 U.S.C. §119(e) to co-pending U.S. Provisional Patent Application Ser. No. 61/699,800, filed Sep. 11, 2012, entitled SYSTEMS AND METHODS FOR PROVIDING CONDITIONAL ACCESS TO TRANSMITTED INFORMATION, the content of which is hereby incorporated by reference herein in its entirety for all purposes.
| Number | Date | Country | |
|---|---|---|---|
| 61699800 | Sep 2012 | US |
