KR20150054849A - Systems and methods for providing conditional access to transmitted information - Google Patents

Abstract

The present invention may be implemented in a receiver or receiver based on various considerations including a requested service type, a user type, a device type, a type of software application, a payment, and / or other features associated with a particular software application, Methods, computer program products, and means for controlling access to location information in another external device. The present invention also relates to systems, methods, computer program products and means for performing secure data transfer for specific applications among other applications.

Description

[0001] SYSTEM AND METHODS FOR PROVIDING CONDITIONAL ACCESS TO TRANSFERED INFORMATION [0002]

The present invention relates to a positioning system and method. In particular, but not exclusively, the present invention is directed to a system and method for controlling access to location information.

Systems for providing location information are known in the art. For example, wireless-based systems such as LORAN, GPS, GLONASS, etc. have been used to provide location information for people, vehicles, equipment, and the like. However, these systems are subject to factors associated with such factors as location accuracy, channel conditions such as transmitted and received signal levels, radio channel interference and / or multipath, and device power consumption.

Determining the exact location of a mobile subscriber is a very difficult problem. If the subscriber is indoors or in a downtown area with a disability, the subscriber's mobile device may not be able to receive a signal from GPS satellites or the network may be dependent on a less accurate network-based triangulation / multispectral method. Also, if a subscriber is in a multi-story building, knowing that such a subscriber is in a building, and not knowing where they are located, will cause delays in providing emergency assistance (potentially life-threatening). Obviously, it is important to assisting the subscriber's computing device (e.g., a mobile computing device), to provide more accuracy (including vertical information), and to addressing the problem of location in cities and buildings We need a system that can solve. Location information transmitted from a system such as a GPS can also be immediately used in various devices without the option to specify which device can access the location information, in particular, which software application can use the location information in the device. The absence of such regulations imposes a bandwidth burden on network operators, where many applications on many devices transmit their location information over a network to third party services associated with these applications. Having the ability to stipulate the use of location information allows network operators to maintain a better level of service for their customers while reducing unnecessary bandwidth usage. In addition, providing better control to the network operator would allow for every level of application to the user device or at the application level or service level for each user of the user device. Accordingly, there is a need for an improved position determination system to address these and / or other problems with existing positioning systems and devices.

A system, method, and computer program product comprising a computer usable medium having computer readable program code that is adapted to execute a method for providing conditional access to location information for a computing device. For example, certain features of this disclosure relate to systems, methods, and computer program products for controlling access to location information by one or more applications. Such systems, methods, computer program products and means may decrypt a first set of encrypted location signals received from a network of terrestrial transmitters using a first key. Such systems, methods, computer program products and means further determine location information from the first set of decrypted location signals and identify the first set of location information, wherein the first set of location information is stored in a first application Based on the first level of service associated with the first level. Such systems, methods, computer program products and means further encrypt the first set of location information using the second key and provide the encrypted first set of location information to the first application. Various additional features and functions are described in detail below with reference to the accompanying drawings.

In the following description, the present invention will be described in detail with reference to the accompanying drawings.
1 illustrates details of a terrestrial location / positioning system in which an embodiment is realized;
2 illustrates specific details of an embodiment of a terrestrial location / positioning system in which embodiments are implemented;
Figure 3 shows a transmitter / beacon;
4A is a diagram illustrating details of one embodiment of a receiver;
4B is a diagram illustrating details of one embodiment of a receiver / user device and other components located external to the receiver / user device;
4C is a diagram illustrating details of another embodiment of a receiver and other components located external to the receiver / user device;
5A is a diagram illustrating processing for determining location information associated with a receiver and controlling access to such location information in a reception;
Figure 5B is a diagram for describing processing for distributing location information for an E-911 call;
FIG. 5C is a view for explaining processing for a key not provided; FIG.
FIG. 5D is a view for explaining a process for a key not provided; FIG.
6 is a diagram illustrating an approach for providing conditional access to location information;
7 is a view for explaining processing for providing conditional processing proof;
8 is a view for explaining processing for processing position information;
9 illustrates data types for a user during a conditional access process;
10A is a diagram illustrating a packet structure;
10B is a diagram illustrating a series of bits for use according to certain features;
11 is a diagram illustrating a process for providing conditional access to location information at a receiver / user device;

Various features of the present invention are described next. The techniques herein may be practiced in a wide variety of forms, and any specific structure, function, or all of the features introduced herein are merely representative examples. Based on the teachings herein, those skilled in the art will appreciate that any feature herein may be practiced independently of other features, and that two or more of these features may be combined in various ways. For example, one system may be realized or some method implemented using some of the features disclosed herein.

As used herein, the term "exemplary" is used as an example, instance, or illustration. The features and / or embodiments described herein as "exemplary " are not necessarily to be construed as preferred or advantageous over other features and / or embodiments.

survey

The present disclosure provides signaling for position determination using a wide array of transmitters that communicate with a receiver (such as a user device, user terminal / UE, or similar terminology) such as a cellular phone or other portable device, / ≪ / RTI > positioning system and method for determining position information. A positioning signaling service associated with a scheduling feature may use a broadcast-only beacon / transmitter configured to transmit an encrypted positioning signal. A receiver with the appropriate chipset can receive and use the positioning signal based on the air-link access authentication technique, which can be used to decrypt the location signal using a stored copy of the air-link access certificate (ALAC) . Once decrypted with the ALAC during the initial decryption phase, the receiver can use the authenticated service level certificate (ASLC) associated with the particular software application to determine, based on additional decryption steps, Can provide a conditional approach to.

Various components within the receiver may be used to perform the decryption step. For example, decoding of broadcast signals can occur in a GPS chip (for example, in a GPS chip) in cooperation with ALAC provided as a form of secure hardware area. On the other hand, the decoding of location information using the ASIC can occur in another chip (e.g., a processor at the receiver) in cooperation with an ASIC that is not provided as a formware (e.g., via another level of software Accessible). Of course, other alternative configurations will be apparent to those skilled in the art.

Once decoded, the location information can be processed by a processor (e.g., a location engine) to calculate various location signal data such as latitude, longitude, and altitude with respect to variable accuracy. An example of altitude calculation is filed on November 14, 2011 in U.S. Patent Application No. 13 / 296,067 entitled " WIDE AREA POSITIONING SYSTEMS ", which is incorporated herein by reference. Two-step decoding of location information at the receiver provides several advantages over the prior art. For example, a feature of both decryption allows the transmitter and / or receiver to provide positioning signals to an authenticated receiver and / or an authenticated software application (hereinafter referred to as "application"), Deny access to unauthorized applications. Similarly, access to location information can be adjusted based on the user requesting access, or other kinds of considerations.

Coordinating access to location information based on authentication allows carriers and application developers to provide several level-level services that can be purchased based on other business agreements. Several levels of levels are associated with the level of accuracy, coverage, expiration, usage, duration of use, or other considerations.

The two-step decryption of location information at the receiver also reduces the likelihood that an unauthorized user (eg, a hacker) will access and use location information to cause loss of revenue.

The achievement of this advantage must be balanced with the performance requirements of the positioning system. Depending on certain characteristics, the encryption and decryption steps performed in the system may not include system performance metrics such as Time to First Fix (TTFF) of the receiver location or accuracy for any location fixes. Thus, the various conditional approaches described herein may be limited based on the processing capabilities of a particular receiver, which may exclude the process-intensive encryption process.

According to another feature, the conditional access feature can be used in various device platforms and can support the delivery model identified in the use cases described herein. Other features may include producer-based or consumer-based receiver provisioning (in addition to re-provisioning) and support the conditional approach described herein. For example, various delivery embodiments are described herein. Importantly, any of the conditional access procedures described in this specification must conform to the E-911 functional requirements.

Various additional aspects, features, and functions are described with reference to the accompanying drawings. It will be understood by those skilled in the art that the drawings illustrated herein are not intended to suggest any limitation as to the scope of use or functionality of the features of the invention. These drawings and their descriptions are not to be construed as having any dependency or claim relating to any one or combination of components described in such figures.

In the following description, various specific details are introduced to provide a description of the system and a possible explanation of the described method and a detailed understanding thereof. However, those skilled in the art will appreciate that these embodiments may be practiced without one or more of the specific details, or with other components, systems, and the like. In addition, well-known structures or operations are not shown or described in detail, in order to avoid obscuring the features of the embodiments.

System Features

1 is a diagram illustrating details of a position / position determination system 100 in which various embodiments are implemented. A positioning system, also referred to as a Wide Area Positioning System (WAPS), or simply a "system ", is typically used to acquire and track signals provided from a beacon (also referred to as a" transmitter "), (Also referred to simply as a receiver device or receiver), which is configured by a satellite system such as a satellite positioning system (GPS) and / or other satellite or terrestrial based positioning system . The receivers optionally include a location calculation engine to determine location / location information from signals received from the beacon and / or satellite system, and the system 100 may further include a server system in communication with various other systems , The various other systems include network infrastructure such as the Internet, cellular networks, wide area or local networks and / or other networks, beacons, and / or other networks. The server system may include various system-related information such as a tower index, a billing interface, one or more encryption algorithm processing components, the encryption algorithm being based on one or more proprietary encryption algorithms, And / or other processing components to facilitate location, movement and / or positioning for a user of the system.

The beacon may be in the form of multiple transmitters 110 and the receiver unit may be in the form of one or more user equipments 120 which may provide signaling from the transmitter 110 Receive and / or receive GPS or other satellite system signaling, cellular signaling, Wi-Fi signaling, Wi-Max signaling, Bluetooth, Ethernet, and / or other data or information signals known or developed in the art And / or < / RTI > The receiver unit 120 may be in the form of a cellular or smart phone, a tablet device, a PDA, a notebook or other computer system, a digital camera, an asset tracking tag and an ankle bracelet and / or similar or equivalent device. In certain embodiments, the receiver unit 120 may be an independent location / position determination device configured to receive a signal from the transmitter 110 only and preferentially to determine the location / location based on the at least partially received signal. As described above, the receiver unit 120 may also be referred to herein as a "user equipment" (UE), a handset, a smartphone, a tablet, and / or a "receiver".

(Which may also be denoted as "tower") is coupled to a plurality of receiver units 120 (only a single receiver unit 120 in FIG. 1 for purposes of illustration) However, a typical system would be configured to support a large number of receiver units within a defined coverage area). The transmitter 110 may also be coupled to the server system 130 via a communication link 133 and may be connected to the server system 130 via a wired connection, a cellular data connection, a Wi-Fi, Wi-Max, 170 may have another communication connection (not shown).

One or more receivers 120 may receive signaling from each of the transmitters 110 via the corresponding communications link 113. 1, the receiver 120 may also receive cellular network signals from the cellular base station (also known as NodeB, eNB, or base station) over the communication link 163, , A pager network signal, or other signal, such as other wired or wireless connection signaling, and satellite signaling over the satellite communication link 153, such as a GPS or other satellite positioning system. The satellite positioning signaling shown in the exemplary embodiment of FIG. 1 is shown to be provided from GPS system satellite 150, and in other embodiments, such signaling is provided from another satellite system, and in another embodiment, A terrestrial-based wired / wireless positioning system or other data communication system.

In an exemplary embodiment, the transmitter 110 of the system 100 is configured to operate with an exclusive license or a shared license / unlicensed radio spectrum; However, certain embodiments may be implemented to provide signaling with an unlicensed shared spectrum. Transmitter 110 may be implemented to provide signaling to these various radio bands using novel signaling as described later in this disclosure. Such signaling may be in the form of proprietary signals configured to provide specific data in a predetermined format beneficial for location and navigation purposes. For example, as described herein, such signaling is particularly desirable for operation in an obstructed environment, such as where conventional satellite position signaling is attenuated and / or impacted by reflections, multipaths, and the like. In addition, such signaling can be configured to provide quick acquisition and positioning to provide quick positioning, power consumption reduction, and other benefits when power is connected to the device or when position activation is enabled.

Various embodiments of the WAPS may be combined with other positioning systems to provide improved positioning and positioning. Alternatively, or in addition, the WAPS system may be used to assist other positioning systems. The information determined by the receiver unit 120 of the WAPS system may also be provided through another communication network link 163 such as a cellular, Wi-Fi, pager, etc. to provide location and location information to the server system (s) , And other network systems that are present or connected to the network infrastructure 170. For example, in a cellular network, a cellular backhaul network link 165 may be used to provide information from the receiver unit 120 to the associated cellular carrier and / or other device (not shown) via the network infrastructure 170 . This may be used to locate the receiver 120 accurately and quickly in an emergency, or may be used to provide location-based services or other functions from a cellular carrier or other network user or system.

In connection with this disclosure, the positioning system is to determine the location of one or more latitude, longitude, and altitude coordinates, which may be in one, two, or three dimensional coordinate system (e.g., x, y, z coordinate, angular coordinate, etc.). Also, when the term "GSP" is cited, it is understood to mean 'Global Navigation Satellite System', which means that other conventional satellite positioning systems such as GLONASS and future positioning systems such as Galileo and Compass / Beidou System. Also, as noted above, in certain embodiments, other positioning systems, such as terrestrial-based systems, may be used in addition to or in place of the satellite-based positioning system.

The WAPS embodiment includes multiple towers or transmitters, such as multiple transmitters 110 as shown in FIG. 1, which transmit WAPS data location information and / or other data or information to receiver 120 as a transmitter output signal. . Such a positioning signal can be adjusted to be synchronized across all transmitters in a particular system or area coverage area and can use a trained GPS clock source for timing synchronization. The WAPS data location transmission may include transmission of data necessary for triangulation, notification to the subscriber / subscriber group, message broadcasting, and / or WAPS data transmission, including designated communication channel resources (e.g., time, code and / or frequency) Thereby facilitating general operation. The contents of the WAPS data location transmission are disclosed in the related application.

In a position determination system using differences in reach or triangulation, the same positioning information transmitted includes one or more precise timing sequences and positioning signal data, such positioning signal data being indicative of the position and variety Timing correction, and other related data or information. In one WAPS embodiment, the data may include notifications / access control messages for a group of subscribers, general broadcast messages, and / or other data or information related to system operations, users, interfaces with other networks, Such as additional messages or information. The positioning signal data may be provided in a number of ways. For example, the positioning signal data may be modulated in a coded timing sequence, an added or overlapped timing sequence, and / or an associated timing sequence.

The data transmission method and apparatus described herein can be used to provide improved location information throughput for WAPS. In particular, higher dimensional modulated data may be transmitted as pseudo-noise (PN) range data as a separate part of the information. This can be used to allow improved acquisition rates in systems that use a combination of CDMA multiplexing, TDMA multiplexing, or CDMA / TDMA multiplexing. The disclosure herein is described in the context of a global positioning system in which multiple towers broadcast synchronized positioning signals to the UE, and in particular use terrestrial towers; However, the embodiments are not so limited, and other systems may be implemented within the spirit and scope of the present invention.

In an exemplary embodiment, the WAPS uses coded modulation sent from a tower or transmitter, called spread spectrum modulation or pseudo-noise (PN) modulation, to achieve wide bandwidth. A corresponding receiver unit, such as a receiver or user device 120, includes one or more components for processing such signals using, for example, a matched filter or a despreading circuit, such as a series of correlators. Such a receiver ideally generates a waveform with a strong peak surrounded by a lower level energy. The arrival time of the peak represents the arrival time of the transmitted signal at the UE. Performing this operation for multiple signals from multiple towers whose locations are known exactly allows determination of the receiver location via triangulation. Various additional details relating to the generation of a WAPS signal at a transmitter, such as the transmitter 110, with signal processing received at a receiver, such as receiver 120, are described in detail below.

In one embodiment, the WAPS may use binary encrypted variables as a spreading method. The WAPS signal of the exemplary embodiment can include two specific types of information: (1) a high precision range signal (which can be delivered faster than other signals), and (2) Environmental conditions such as location data, time of day, health, and atmospheric information (eg, pressure, temperature, humidity, wind direction and intensity, etc.). The WAPS transmits position information by modulating a high-speed binary pseudo-random ranging signal to a low-speed information source, similar to GPS. In addition to such an application, the integrated application discloses an embodiment of a method of using a pseudo-random ranging signal and a modulated information signal, all of which use a higher dimensional modulation such as a fourth order or eighth order modulation. In one embodiment, such a ranging signal is a modulated binary number stage, and the position information is provided as a separate signal using a higher dimensional modulation.

Conventional systems use the format of a location location signal (e.g., used in a Time Division Multiplexer (TDMA)), where each slot transmission includes a pseudo-random ranging signal followed by various types of location data. These conventional systems also include a sync. Signal, which may be erased if a pseudo-random ranging signal is used as the sync signal. However, as in other prior systems, the location data of these conventional systems is binary, which limits throughput. These systems also transmit a large number of binary bits while the location data is being transmitted.

To handle these limitations, in an exemplary embodiment, a binary or quaternary, pseudo-random signal may be transmitted in a particular slot and may be followed by a very high-dimensional modulated data signal. For example, one or more than two position information symbols in a given slot may be transmitted using differential 16-step modulation to transmit 4 bits of information per slot. This is indicative of a 1-bit to 4x throughput improvement typically transmitted when binary phase modulation is imposed on the pseudorandom carrier. Other types of location information modulation, such as 16 QAM, may also be used. A constant error control modulation method such as a Trellis code can also be used for higher level modulation. These modulation methods generally reduce the error rate.

Figure 2 illustrates certain features of the position determination system 240 configured to perform the conditional access processing described herein. As shown in FIG. 2, such a positioning system 240 can perform various functions. For example, such a positioning system 240 may produce and make available ALACs and may be used by producers and / or service providers in an ALAC block for addition to a user device 220 (e.g., a GPS FW image) And may be generated and provided to the mobile terminal 230 separately. The ALAC can be implemented in a device-specific manner and provides an additional layer of protection for the ALAC, including the use of device identifiers and device-specific algorithms. Such a position determination system 240 may further operate the billing and auditing system to track the use of the positioning functions provided by the position determination system 240 and to charge for such use.

The positioning system 240 generates an ASLC and sends an ASLC to the producer 210, the user device 220, the service provider 230, and / or the external entity 250 (e.g., an application developer or provider) Can be used. The ASLC may be serialized to include unique device identifiers such as IMEI, MAC-Address, and the like.

Such a location system 240 can generate and manage a developer key, SDK, and API for external entities that want to include location information in the downloadable application. Each of the developer keys may have several associated ASLCs based on the service level of the associated application. Each application ASLC may include the developer as a unique identifier, and may also include other unique IDs. Such a position determination system 240 may also maintain a server to process requests from applications used in fields (e.g., user device 220) for dynamic transmission of ASLC to user device 220 .

Producer 210 may be configured to communicate with one or more ALACs and ASLCs (e.g., obtained from positioning system 240 or independently generated and maintained) in the required formware ("FW") and software Together, you can send the image to the receiver. The producer 210 may also load the library as an image. The producer 210 may include a chipset supplier, a device OEM, and an OS provider. By comparison, the same ALAC can be used for all transmissions from all transmitters, and a different ASLC can be used for each application in each receiver and based on a particular user account. Both ASLC and ALAC can be encrypted or otherwise protected from unauthorized access by the UE.

The server provider 230 may provide various services to the user device 220, including cellular services and web-based services. Additional services include wireless or wired delivery of content (e.g., video content, audio content, image content, textual content, other content). The service provider 230 may store the ASLC associated with the application that it provides to the user device 220. The service provider 230 may also enable a Control-Plane (c-plane) messaging flow for E-911 and network management when applicable. The service provider 230 may further enable User-Plane (u-plane) through the SUPL messaging flow for the in-house LBS.

The external entity 250 may include a provider that provides various location services to a user through a user's receiver. For example, the external entity 250 may include a PSAP, a location-based ad network, and an LBS application developer / publisher. Such a location system 240 and service provider 230 may provide the external entity 250 with a range of services, including location assistance, ASLC authentication and provisioning, value-added services, billing services, and auditing services.

User device 220 may include a smartphone, a tablet, and a connected computing device. User device 220 may be configured to control access to location information by a separate application (e. G., E-911, Network Management (NW), or LBS). Control of such an approach can be accomplished using an ASLC that is imaged and downloaded in the formware after the user device 220 is produced and commercially used. As shown, the driver and library layer manage the ASLC for multiple applications and users in the device, decode the location information, and limit the use of location information decrypted by the application based on the permissions indicated by the ASLC It can be helpful. For example, the library may associate an ASLC with an associated application (e.g., E911, network management, LBS, etc.) and may pass appropriate location information to the application or mediate such delivery.

Various system features have been described above, including a transmitter and a receiver. 3 and 4A, 4B and 4C described above provide a more detailed description of the implementation of the transmitter and the receiver.

3 is a diagram illustrating one embodiment (300) details of a beacon / transmitter system, The following location / positioning signals are sent from the same system. The transmitter embodiment 300 communicates with the transmitter 110 shown in FIG. The transmitter embodiment 300 includes various components for performing related signal reception and / or processing; However, in other embodiments, these components are otherwise combined or otherwise adjusted to provide similar or equivalent signal processing, signal generation, and signal transmission.

3, the transmitter / beacon embodiment 300 receives the GPS signals and receives location information and / or timing data, precision interference (DOP) data, or processing components (not shown) from a GPS or other location system, Lt; RTI ID = 0.0 > GPS < / RTI > Although the transmitter 300 is shown as having a GPS component in FIG. 3, other components for receiving satellite or terrestrial signals and providing similar or equivalent output signals, or other information, may optionally be used in various embodiments. GPS or other timing signals may be used for fine timing operation within the transmitter and / or for timing correction in a WAPS network.

Transmitter 300 may also include one or more transmitter components (e.g., RF transmit component 370) for generating and transmitting transmitter output signals as described below. The transmitter component may also include various elements known or developed in the art for providing an output signal to a transmit antenna, including analog or digital logic and power circuits, signal processing circuits, tuning circuits, buffers, and power amplifiers, do. Signal processing for generating an output signal may be performed in a processing component (not shown), which in some embodiments may be combined with another component described in connection with FIG. 3, and in other embodiments, Processing and / or other computational functions.

One or more memories (not shown) may be coupled to one processing component (not shown) to provide storage and retrieval of data and / or store and retrieve execution instructions from the processing component. For example, such an instruction may be an instruction to perform various processing methods and functions described below, and may be an instruction to determine location information and other information associated with the transmitter, Condition, and may be a command to generate a transmitter output signal to be sent to the user device 120 as shown in FIG.

The transmitter 300 may include one or more environmental sensing components (e. G., ≪ / RTI > for example) for sensing or determining conditions associated with a transmitter, such as, for example, local pressure, temperature, humidity, wind or other (collective or individual, (Not shown). In an exemplary embodiment, ambient (e.g., pressure) information may be generated at the environmental sensing component and provided to the processing component for integration with other data in the transmitter output signal, as described below. One or more server interface components (not shown) may also be included in the transmitter 300 and provide an interface between the transmitter and the server system to a network infrastructure, such as the network infrastructure 170 shown in FIG. 1 , The server system is the same as the server system 130 shown in FIG. For example, the system 130 may send data or information related to the location system and / or the user equipment to the transmitter 300 via the interface component of the transmitter.

Each of the transmitters 300 may send data at a physical layer with an adjustable number of bits per second per slot (e.g., 96 bits per slot or more per second) and each transmitter may transmit data to another transmitter Can be independent. Transmitter 300 may include various components for generating, encrypting, protecting, modulating and transmitting data. For example, the transmitter 300 may include a data generating component 310 for generating location information, an encryption component 320 for encrypting location information based on the specific air-link access credentials (ALAC) Access proof storage component 330 and other components such as packet ID / CRC component 340, encoding, puncturing and interleaving component 350, modulation component 360, and RF transmission component 370 . The components 340 and 350 provide forward error correction (FEC) and CRC methods along with other data formatting methods to reduce the effects of fading, path loss, and other environmental conditions. The component 360 provides modulation in the data.

190 bits per frame may be used for transmission from the transmitter 300, even though the modulation and signal structure may change and the number of bits varying per frame may be used. For example, 102 data bits may be used after encoding the overhead, of which 7 bits are reserved for decoded frame information, which leaves 95 bits for the encrypted location information. Encryption should be minimized so that low overhead is maintained. For example, one encryption rate may be about 95 bits every 3 seconds. The transmission repeats itself for several cycles (10 cycles or 30 seconds) before the data is changed. Various payloads are expected, including: latitude, longitude, altitude, pressure, temperature, transmission correction and transmission quality. Additional payloads may include security information, service IDs, conditional access data (e.g., ASLC, information). These various payloads are divided into segments through a plurality of slots. One technique is to know the different payloads, the number of different bits, and the various ways to package payloads.

In some cases, what kind of information will be transmitted over several packets, or a requirement for an n-bit indicator to indicate the type of packet being transmitted, such as how many packets are associated with the same information, . The packet structure includes such an n-bit indicator at some point in the packet. FIG. 10A shows an example of a packet structure showing four packet type indicator bits and other bits, and FIG. 10B illustrates an example of a series of packets using a 4-bit packet type indicator.

As shown in FIGS. 10A and 10B, 4 bits represent the packet type and the main packet payload may include 98 bits. The 4 bits can be decrypted, the packet type of '0' can be decrypted, and the packet type of '1' can be decrypted. For example, in the case of a packet type other than '0' or '1', for example, the fifth bit may be an encrypted bit, indicating whether such a packet is encrypted or not. Such bits can be decoded. The sixth bit may be a start bit, which may indicate whether to start a new packet (1) or a previous packet (0). Such bits can be decoded. The seventh bit may be a stop bit, indicating whether this is the last packet (1) or not (0). Such bits can be decoded. The next 95 bits include the main packet payload, which can be encrypted if the encryption bit is one, and not encrypted if the encryption bit is zero. Such a payload may optionally include an index of the current packet and / or a total number of packets expected to be the currently transmitted information.

4A is now described. 4A shows a characteristic of a receiver 400, in which a transmitter signal is received and processed at a receiver to determine location / location information (e.g., on behalf of an E-911 or LBS application).

The receiver embodiment 400 communicates with a user device 120 as shown in FIG. 1 and includes one or more GPS components 480 to receive GPS signals and provide location information and / or other data . Where the location information and / or other data are such as timing data, precision interfering (DOP) data, or other data or information provided from a GPS or other location system to a processing component (not shown). Of course, it should be understood that other global navigation satellite systems (GNSS) may be envisaged, and that the GPS related disclosures also apply to these other systems. Although receiver 400 is shown in FIG. 4A with a GPS component, other components for receiving satellite or terrestrial signals and providing similar or equivalent output signals, data, or other information may be used interchangeably in various embodiments. Of course, all location processors may be adapted to receive and process the location information described herein.

The receiver 400 may also include one or more cellular components 490 for sending and receiving data or information via a cellular or other data communication system. Alternatively, or in addition, the receiver 400 may include a communication component (not shown) for sending and / or receiving data over other wired or wireless communication networks such as Wi-Fi, Wi-Max, Bluetooth, USB, ).

The receiver 400 includes one or more components indicated by a dashed boundary 420 (hereinafter "component 420") and is configured to receive a signal from a terrestrial transmitter, such as the transmitter 110 shown in FIG. 1 , And processes the signal to determine location / location information as described herein. The component 420 shares resources such as antenna, RF circuitry, and the like with other components shown in FIG. 4A. For example, component 420 and GPS component 480 share some or all of the radio front end (FRE) components and / or processing elements. A processing component (not shown, but referred to as having a processing capability in the receiver 400) may incorporate some or all of the components or may include some or all of the components 420 and / or the GPS component 480 and resources To determine location / location information, and / or to perform other processing functions as described herein. Similarly, the cellular component 490 may share RF and / or processing functionality with the RF component 410 and / or the component 420. Network component 460 is also shown, which represents a local, wide area, or other network using any type of wired or wireless communication path. The components 410, 420, 460, 480, and 490 each pass data to the location engine 440, which uses the data to determine the estimated location of the receiver 400. The position engine 400 may be implemented as is known in the art or may be developed later in the art and includes an implementation that includes a processor configured to calculate a predicted location.

For example, in one embodiment, the component 490 conveys the positioning data securely through the control plane or the user plane, or the data can be obtained directly via the Internet link. Data through the interface between the component 490 and the cellular modem may also be protected through a specific interface encryption / decryption to the receiver 400.

One or more of the memory 430 is coupled with a processing component (not shown) and other components to provide storage and retrieval of data and to provide storage and retrieval of instructions for execution in the processing component. For example, such an instruction may perform various processing methods and functions described herein, including decrypting location information and determining location information. Thus, certain components (e.g., components 421-424) included in component 420 may perform processing of location information, decryption keys, and / or other information described. Some and all such processes can be performed alternately in a standalone processor (not shown).

Location data used for remote location calculation or location data including information may be transmitted using an industry standard protocol such as control-plane signaling or user plane (SUPL) signaling or Internet / data protocol or a combination thereof And transmitted to these remote components.

The receiver 400 may include one or more environmental sensing components (not shown) to determine conditions associated with the receiver, such as, for example, conditions related to local pressure, temperature, humidity, or other conditions used to determine the location of the receiver To be detected or determined. In an exemplary embodiment, pressure information may be generated at an environmental sensing component and used to determine location / location information in cooperation with a received transmitter, GPS, cellular or other signal.

The receiver 400 further includes various additional user interface components, such as user input components (not shown), which may be in the form of a keypad, a touch screen display, a mouse, or other user interface element. The audio and / or video data or information may be provided at an output component (not shown), which may include one or more speakers or other audio transducers, one or more visual displays such as a touch screen, and / May be in the form of other user I / O elements known or developed. In an exemplary embodiment, such an output component may be used to visually display the determined location / location information based on the received transmitter signal, and the determined location / location information may also be associated with the cellular component 490 associated carrier or other device .

The receiver 400 may include various other components configured to perform various features in the detailed description, including the processing described in Figures 5A, 6, 7 and 8. For example, such a component 420 may include a digital processing component 421a configured to modulate the RF signal received from the RF component 410 and to estimate the time of arrival (TOA) for later use to determine the location ). The signal processing component 421 may further include a pseudorange generating component 421b and a data processing component 421c. Such pseudorange generation component 421b generates "raw" positioning pseudorange data from the evaluated TOA, modifies the pseudorange data, and sends such pseudorange data to the positioning engine 440. [ As shown in FIG. The positioning engine uses the pseudo range data to determine the location of the receiver 400. [ The data processing component 421c is configured to decrypt the decrypted location information, extract the encrypted packet data from the encrypted location information, and perform error correction (e.g., CRC) on the data. Such a data processing component 421c outputs the encrypted packet data to the first encryption component 422. [

The first encryption component 422 is configured to at least decode location information from the encrypted packet data based on the ALAC stored in the memory 430. [ Multiple ALACs are stored in the receiver 400, only one of which is applicable at a given time, allowing the first encryption block 422 to use various features to determine the calibration ALAC key to use. The data packet itself may have a CRC / Digest field that passes the check only when the calibration ALAC key is applied. When the CRC / Digest field is not present due to packet content restrictions, the individual fields of the decrypted packet are checked against the expected range of values of the field. Also, since the receiver can obtain packet data from multiple transmitters near the receiver, the location information from multiple transmitters can be used only when the correct ALAC key is selected, the distance to the transmitter, the region identifier, The same consistency check will pass. The first encryption component 422 may also receive an indication that an emergency 911 call has begun and output the decrypted location information to the appropriate processing component associated with the E-911 procedure.

4A, the component 420 further includes a second encryption component 423 that is configured to decrypt some or all of the location information based on the appropriate ASLC stored in the memory 430. [ The ASLC can be determined by which application requests location information or location fix. For example, an ASLC may be associated with an LBS application or E-911 at a receiver 400. [

Once the location information is decrypted by the second encryption component 423, the decrypted location information may be stored in the location information (e.g., latitude, longitude, altitude, pressure, temperature, humidity, system time, ID) < / RTI > Specific data units of the location information may then be transmitted to the location engine 440 based on the service level indicated by the ASLC for the application that subsequently requested access to the location information.

 Such location engine 440 may be configured to process location information (and, in some cases, GPS data, cell data, and / or other network data) 400). Once determined, location information is provided to the application 450. Those skilled in the art will appreciate that the location engine 440 is meant to be any processor capable of determining location information, including a GPS location engine or other location engine. The location of the various components shown in FIG. 4A may be in different chip spaces within the receiver.

As described elsewhere herein, and as will be described again herein, each of the applications at the receiver 400 needs its own ASLC to access the location information, to determine the location of the receiver 400 do. With respect to some features, an ASLC may be used by multiple applications and multiple ASLCs may be used by an application, but this is the case for other users or under different circumstances. ASLC can also be used to limit the use of certain location information for a specific time and in a specific service area.

 E-911, network support and LBS applications / services are handled separately from each other, and each of these ASLCs is loaded into the form of the receiver 400 or loaded into memory after the manufacture of the receiver 400. [ Each ASLC provides its own location information provision to each of the applications / services. Separate processing paths are used to further isolate these applications / services.

Receiver 400 may have limited hardware / software capabilities specified for location. The total space available for the conditional access feature described herein may be about 32 kilobytes. Other whole spaces are also considered.

The location information may be processed by a GPS processor, an application processor, or an external server. According to one aspect, the features described herein are performed in a receiver or in cooperation with a GPS integrated circuit (IC). For example, a host processor may be used at the receiver to communicate with the GPS IC via a bi-directional serial link. Latitude and longitude can be transmitted using this same serial link with other information. The serial link may be used for certificate exchange (e.g. ASLC) to the GPS IC. The GPS IC can demodulate the received signal from the transmitter to probe the transmitter (e.g., via correlation with the PN sequence) and obtain the physical layer payload, wherein the received signal is in an encrypted form (In accordance with the embodiment described herein). The decryption engine may decrypt the data before providing the data to the next processing layer, and such an engine may be a location engine. Such a location engine can use the decrypted data to calculate the receiver position. Various engines are provided in the GPS IC, or in other receiver circuits.

4B which now illustrates a receiver 400 at a first location, which further illustrates components at other locations away from the location of the receiver 400. [ The receiver 400 and other components can determine location information based on the processing of the transmitter signal, collectively or separately. Certain features of FIG. 4A are also shown in FIG. 4B. Thus, the description of these features with respect to FIG. 4A also extends to these features in FIG. 4B, but not all of these features are identical.

As shown in Figure 4B, the receiver 400 includes an interface (I / F) encryption / decryption (also referred to as "scramble / descrambling") component, Or when data is communicated over an unprotected communication channel. In some cases, these I / F components may operate through I / F keys generated independently by each of the receivers 400. [

4B provides a position calculation at the receiver 400 prior to the second cipher component 423a which may be used to determine the position of the application 400 in the receiver 400, And provides it to the application 499a. Alternatively, the location calculation may be performed by a remote component (e. G., A remote location engine 440b of the server) that uses the location data received from the receiver 400, 400, or may be used by the remote application 499b.

Data transfer between components shown in phantom in Figure 4B may be performed directly between these components or may be performed through an intermediate component (e.g., RF component 410 or network component 460) Do. The dotted line represents an optional implementation. For example, the application manager 498a may receive location data from the second encryption component 423a and thereafter the application manager 498a causes the location data to be delivered to the remote application service 499a For example, network component 460, or RF component 410, or other component in receiver 400). The remote application service 499a then uses the location data (e.g., location estimate) to provide e911 or LBS services in connection with the receiver 400. [

In another embodiment, application manager 498a receives data directly from data unit output component 424 or performs data through an intermediate component (e.g., an I / F encryption component) The manager 498b may cause such location data to be communicated to the remote location engine 440b that computes the evaluated location of the receiver 400 (e.g., latitude, longitude, altitude of the receiver 400). The remote location engine 440b may provide such location assessment to the second encryption component 423a (e.g., via the network component 460, or the RF component 423b, or other components in the receiver 400) And to the second encryption component 423b for further processing in the component. For example, the second encryption component 423b may communicate with one or more application services 499b or an application 450 (e.g., a network component 460 or an RF component 410) running in the receiver 400 (Via delivery of a position estimate via other components in the receiver 400). The remote application service 499b or application 450 then uses the location evaluation to provide the e911 or LBS service associated with the receiver 400. [ All of the remote components may be co-located or located in different geographic locations.

In Figure 4B, the first cryptographic component 422 receives the decrypted location information from a discrete data unit (e.g., latitude, longitude, altitude, pressure, temperature, other atmospheric information or measurements of location information, And / or a transmitter ID). These data units are then transmitted to the location engine 440a or 440b. Such a location engine 440a or 440b may be configured to process location information (and in some cases GPS data, cell data, and / or other network data) to provide a certain limit (e.g., To determine the position of the receiver 400. Once determined, location information may be provided to application 450 via second level encryption 423a or 423b (and possibly through other intermediate components). Those skilled in the art will appreciate that the location engine 440a or 440b is meant to be any processor capable of determining location information, including a GPS location engine or other location engine.

The second encryption component 423a is configured to encrypt certain data using a session key for a particular application or group of applications with a particular service level. The service level may grant access to a subset of data units (e.g., latitude, longitude, altitude, accuracy, etc.) for a given application.

After the encryption data (e.g., using the session key), the second encryption component 423a may enable the encrypted data to be used for the application 450, and may be periodically can be changed. When a single session key is used for a group of applications, such a session key can be changed when the ASLC validity period is terminated for an application, thus causing the application group to request a new session key.

In one embodiment, the second encryption component 423 enables the ASLC for a particular application before exchanging the session key with the application so that the same application can decrypt the data for that application. The second encryption component 423 may initially receive an ASLC from the application, or may be instructed to look for an ASLC in memory 430 or elsewhere. Certain cryptographic data units for location information may then be accessible to such applications.

The ASLC indicates service-level acknowledgments for such applications. To manage access to only authorized data for a particular application, the second encryption component 423a exchanges the session key with the application and sends the encrypted data according to the authorization indicated on the ASLC for that application.

For the remote application 499a, the remote application manager 499a provides a communication interface for transporting the ASLC and the session key between the remote application and the second encryption component 423a.

4C will now be described. Figure C illustrates various aspects of the present disclosure relating to receivers and other components that send data to a receiver or receive data from a receiver. As shown in Fig. 4C, a position signal is obtained from the transmitter (e.g., using signal processing to find the transmitter through correlation with the PN). The signal processing may also modulate the signal to obtain a raw arrival time (TOA) for each of the transmitters and a physical layer payload. These signals can be acquired and tracked by various hardware (HW), formware (FW), and / or software (SW) components. For example, in a GPS chip, the FW and / or HW may operate to decode the packets from one of the various sub-frames of the signal transmission and to prove the ARC. Optionally, the host processor can decrypt and verify the CRC.

Tracking the HW / FW / SW may be operative to generate raw TOA data and to transmit the original encrypted data (e.g., packets) to the decryption component. In certain implementations, the packet ID is not encrypted for all packet types. The original encrypted data can be decrypted using the ALAC key in a specific HW / FW (e.g., HW / FW specific to WAPS). The ALAC may be encrypted or otherwise wrapped based on a device ID that is specific to each device or device class. The device specific ID may be used for authorization of a WAPS location service in the device.

ALAC decryption, and / or decryption FW / HW / SW varies from provider to provider at chip-level, receiver / handset-level, or carrier-level. The original decrypted data is then scrambled (e.g., using a scrambling algorithm and a device generated key) with raw TOA measurements, and the scrambled data is then executed on the GPS chip itself through protected or unprotected data scrambles Or executed in a host processor, or both. Scrambling is not required when decoding and location libraries operate on the same HW / FW (eg, GPS chip).

The location library may then descramble the raw data and TOA measurements for further use in the library. For example, such descrambled data may be assembled into data units DU 1 through 5 as follows: DU1 (transmitter latitude, longitude, altitude (LLA)); DU2 (transmitter pressure / temperature); DU3 (timing correction for transmitter); DU4 (time of transmitter network (WAPS time)); And DU5 (identifier for the transmitter).

A fine TOA is generated using raw and timing calibration from DU3. The positioning engine may use various data units (e.g., DU1, DU2, DU5) with fine TOA and pressure sensor readings to compute the receiver's LLA. DU4 may be used by a positioning engine configured to generate a timing signal (e.g., used when the receiver is operating to synchronize with another receiver).

Either the LLA of the receiver or DUl through DU5 is encrypted based on the parameters specified by the ASLC for the requesting application or a group of applications to which the requesting application belongs. Encryption is performed using a variety of techniques, including random or pre-defined session keys, another key defined by the ASLC, or other encryption methods known in the art. Various implementations can be envisaged, including implementations involving service-level encryption and decryption in a single application case or multiple other application cases.

In one embodiment, the encrypted data can only contain data that can be used in a requesting application specified by the service level of the same application. For example, an LLA evaluation of a receiver within a certain accuracy level can be used (e.g., accurate LLA within 100 meters, accurate LLA within 10 meters). In such an implementation, the processor at the receiver can analyze a known LLA with accuracy at x meters and then generate another LLA with accuracy at y meters according to service level authentication. Such an implementation is advantageous when the other paid-for service level is associated with a variable level of positioning accuracy.

The location engine can generate the best estimate of the reference pressure using the pressure and temperature readings received at DU2 for each of the multiple transmitters. Such a reference pressure may be sent to the positioning engine in an encrypted form and such a positioning engine may use the reference pressure and the pressure sensor reading of the receiver to calculate an altitude as described in the included reference.

In a constant SW architecture, the location engine may include additional measurements from other sources in a hybrid implementation using signals from Wi-Fi, GPS, WAPS, and other transmitters. Such a hybrid location engine may operate in cooperation with the host processor after service-level decryption of the encrypted receiver LLA or other encrypted data (e. G., DU1 through DU5). Optionally, the hybrid positioning engine is operative prior to service-level encryption so that accessing the resulting data from such a hybrid positioning engine is limited to an authorized application.

The discussion above with respect to FIG. 4C can be applied with MS-assist (MS-A), MS-based (MS-B), or standalone user plane call flows. Raw or fine TOA / pseudo distance type data and advanced evaluation (in the case of MS-S mode) or LLA behavior data of the receiver (MS-based) in the case of a control plane call flow (for example E-911) Mode) is sent to a location determination entity (PDE), a serving mobile location center (SMLC), or other device for location calculation and forwarding to the PSAP. Such transmissions are generated through one or more control plane channels of the cellular system.

Although not desired, location assistance data may be provided to the location engine using selective communication means such as web-based paths, local network paths, wide area network paths, and other network paths beyond the RF path. This transmission may be necessary when there is a low signal condition between the receiver and the transmitter network. When transmitted using the optional communication means, the assistance data may be encrypted using a key associated with the ALAC, or using an optional key specific to the communication means. Optionally, when no ALAC is used or a similar key is used, service-level encryption and decryption may be used.

Although FIG. 4C shows different components in different HW / FW / SWs, other embodiments may include the various components of FIG. 4C in one or more hardware components such as a host processor, a GPS chip, or both.

Features related to methodology

5A is a diagram illustrating network processing details for controlling to determine location information associated with a receiver and controlling access to such location information at a receiver according to certain characteristics. Reference is made to Fig. 2 while illustrating the process shown in Fig. 5A. It will be understood by those skilled in the art that the process flow shown in FIG. 5A is for illustrative purposes, and not the content of the invention in the order of steps shown in FIG. 5A. Thus, steps may be removed or rearranged, and additional steps not described may be performed within the scope of the present invention.

In step 501, the positioning system 240 may generate and maintain information used by the receiver to control access to location information. As an example, the location system 240 may generate an air-link access certificate (ALAC) (or a "system-level key / certificate") and an authenticated service-level certificate (ASLC) (E. G., Service provider 230 and / or < / RTI > service provider) before using the location information, based on the limit specified by the ASLC for the particular application at the receiver, (E.g., the positioning system 240). At step 502 the thus generated ALAC and ASLC are provided to the manufacturer 210 and the manufacturer 210 provides ALAC / ASLC to the UE 220 at step 503 (e.g., By imaging them into a formware).

At step 504 (e.g., after the user purchases the UE 220), the UE 220 installs the application or initiates an emergency 911 call. Prior to step 504, such an application is downloaded to the UE 220, although not fully illustrated. Step 505 is not necessary if an ASLC associated with such an application is provided by the manufacturer. Otherwise, the UE 220 sends the developer key associated with the application to the network. The routing of such a developer key is passed as an external entity 250 through the service provider 230, the positioning system 240, and / or the developer of the application (route assignment is not shown). After receiving and verifying the developer key, the network may then send an ASLC for such application to UE 220, and the UE may store the ASLC.

At step 506, the UE 220 obtains location information from the network. Such position information may be obtained from the broadcast signal generated in the position determination system 240, and / or may be obtained via the service provider 230. Similarly, the UE 220 may request location information or monitor a broadcast for location information.

At steps 507-508, the UE 220 decrypts the location information using the ASLC associated with the application at the ALAC (e.g., the ALAC associated with the transmitter that broadcasted the location information) and at the receiver requesting such location information can do.

In steps 509-510, the decrypted location information is processed and location information associated with the location of the UE 220 is determined (e.g., at the location engine).

In the case of a 911 call, at steps 511-512, information used to determine location information, location information, and / or location (e.g., pseudoranges and information about the transmitter for which pseudoranges are calculated) Is transmitted to the PSAP operating as the service provider 230 and / or the external entity 250. Otherwise, at step 512, for LBS-based applications, location information may remain in the UE 220 to perform location-based services, and an external entity Lt; RTI ID = 0.0 > LBS < / RTI > Another choice for an E-911 call is that the receiver sends an encrypted packet to the server along with the raw TOA information. This encrypted packet can be decrypted to extract the information needed to compute the location solution at the server.

Figure 5B illustrates a process for distributing location information associated with a network application or E-911. ASLC may or may not be used in E911 transactions. For example, if an ASLC is used in an E-911 call, a special ASLC can be installed for use in an emergency call with the highest service level and no expiration date.

Figure 6 is a diagram illustrating details of a process for providing additional access to location information at a receiver in accordance with certain features. Referring to FIG. 2 and FIGS. 4A-C while illustrating the process shown in FIG.

As described above, the encrypted positioning signal data may be transmitted to the receiver (e.g., the receiver 400 of Figures 4A-C. Encrypting the positioning signal data may be securely delivered to an authenticated receiver, Reliable encryption techniques are not feasible with limitations in bandwidth limitations and processing power at the receiver. [0004] Encryption is therefore required to be used while minimizing the use of data / It is necessary to protect the transmitted data without requesting decryption, where the receiver typically does not have the processing power to perform reliable decryption for a short time.

The additional encryption may be based on various parameters (e.g., whether the payment associated with the application is valid, the user's current location, whether a fixed amount of location request by the user or application is exceeded, the time the location information was accessed, ), And to securely use the location information by the user. This second layer of encryption and decryption, which controls the distribution of location information for certain applications while restricting access to such location information by other applications, is a key feature of the various embodiments described herein, An operator, a carrier, an application provider / developer, or other entity shown in FIG. 2 may be able to monetize the distribution of location information. The second layer of encryption and decryption also frustrates various potential attempts by unauthorized users (e. G., Hackers) to access location information for use with unauthorized applications.

Figure 6 illustrates two steps of decryption in relation to one feature. Those skilled in the art will appreciate that the changes in Figure 6 are within the scope of the present invention. In step 610, the receiver starts a first application (e.g., in response to a user input, in response to a automatically desired condition). The receiver then determines whether a copy of the ASLC associated with the first application has been stored in the memory of the receiver (e.g., memory 430 of Figures 4A-C). If such a copy exists, the receiver is provided with an ASLC and step 630 is performed. Otherwise, "not provided" to the receiver, step 620 is performed.

In step 620, the receiver obtains a copy of the ASLC from the network. FIG. 7 details the sub-steps of step 620. FIG. Those skilled in the art will appreciate that step 620 may be performed after the other steps shown in FIG. 6 (e.g., after another step prior to step 660).

In step 630, the encrypted location determination signal reaches the receiver from the network. Such a positioning signal may be broadcast by the transmitter or may be reached via another communication path (e.g., a cellular path, a web-based path, a local network path). In step 640, the receiver processes the first position determination signal. The sub-steps associated with step 640 are shown in FIG.

In step 650, the location signal reaches the first encryption component 422, where it is decrypted using a copy of the ALAC stored in memory 430. [ Next, at step 660, some or all of the location data from the decrypted location signal is decrypted by the second encryption component 423 using the ASLC associated with the first application. The ASLC may be obtained from memory 430 or from a network (described in connection with step 620 and FIG. 7).

Finally, at step 670, the location engine 440 receives the decoded location data or pseudo-range information along location TOA to calculate the location of the receiver on behalf of the first application. The calculation of the location may be determined based on the service level indicated by the ASIC for the first application.

FIG. 7 shows a diagram detailing the processing for providing conditional access credentials at a receiver in accordance with certain features of FIG. 6 and step 620. FIG. It is possible to refer to FIG. 2 while explaining the process described in FIG.

At step 710, the UE 220 obtains a developer key associated with the application. The developer key is stored in the UE 220 after the application is downloaded to the UE 220. [ The association of the developer key with the ASLC is stored in the network (e.g., service provider 230, positioning system 240, or external entity 250). The ASLC is specific to the application as well as to the access level of the UE 220. At step 720, the developer key is transmitted to the network (e.g., service provider 230, positioning system 240, and / or developer or application provider 250) for processing.

In step 730, in response to transmitting the developer key, the UE 220 / receiver 400 receives the ASLC associated with the developer key / application over the network. In step 740, the ASLC is stored for future use. Optionally, the ASLC is not stored so that steps 710 through 730 are repeated after the application requests the location information (as described in the two-step decryption model shown in FIG. 6 and described elsewhere herein) Gt; ASLC < / RTI >

8 is a diagram illustrating details of a process for processing positioning signal data according to certain features and step 640 of FIG. Reference is made to Figs. 4A-C while describing the process described in Fig. By way of example, step 640 may be performed by the signal processing component 421 in Figures 4A-C.

In step 810, the positioning signal received from the transmitter to the RF component 410 is used to evaluate the raw TOA (e.g., in the digital processing component 421a). Such a raw TOA evaluation is then transformed into raw positioning pseudorange information at pseudorange generating component 421b.

In step 820, such a positioning signal is decoded in the data processing component 421c. In step 830, the data processing component 421c performs error detection on the positioning signal before sending it to the first encryption component 422 for decryption.

FIG. 11 shows the decoding of the first stage, the decoding of the second stage, and the decoding of the third stage. Those skilled in the art will appreciate that the changes in Figure 11 are within the scope of the present invention. The certain steps shown in Figure 11 are omitted or reordered in other implementations. The following description is generally for a receiver. However, this description may be extended to one or more processors to perform some or all of the functions specified below.

In step 1110, the first application is initiated (e.g., in response to an automatically determined condition, in response to a user input, or in response to another event or environment). The application particularly begins at the receiver or at a receiver away from the server. Such a server may take various forms including those shown in Figures 4B-C.

At step 1120, the receiver obtains a copy of the ASLC associated with the first application. The receiver may obtain ASLC from memory in the receiver, from the first application, or from an external source. The ASLC specifies parameters that determine what information can be provided / accessed by the first application. And when and how this can be provided / accessed by the first application. It may also be thought of as being able to be used in place of such an ASLC, including the use of data in the ASLC without using the proof.

In step 1130, the encrypted positioning signal reaches the receiver from the transmitter. Each of the positioning signals is broadcast from each transmitter and is reached via other communication paths (e.g., cellular path, web-based path, local network path), or both.

In step 1140, the receiver initially processes the position determination signal.

In step 1150, the position determination signal is decoded using a key stored in the receiver or otherwise accessible by the receiver from an external source (e.g., as specified by ALAC).

In step 1160, the receiver may identify or determine position information from the position determination signal. Such positional information may be obtained from a variety of sources including, but not limited to, raw and fine TOA measurements, data units DU described elsewhere herein, estimated position coordinates of the receiver calculated based on the data of the positioning signals, Modified position coordinates, or other data. The modified position coordinates are determined based on the parameters from step 1120. Such a parameter indicates that the application is allowed to receive position coordinates within a given accuracy level for the position coordinates being evaluated. In this case, the processor may generate new position coordinates based on the accuracy level (e.g., Changing the latitude so that it is within the measurement range of the x unit from the estimated latitude and changing the latitude to 0 so that only two dimensions are provided) Providing less accurate location information may enable subscription services on an application- .

Some or all of the location information is encrypted in step 1170 using a key generated based on the ASLC or data from that data from step 1120 or such data. The selection of location information for encryption can be controlled by the service level condition specified by the ASLC. These service level conditions specify which data can be accessed by the first application and can be determined from the data described elsewhere herein and include some or all of the data described in connection with FIG.

In step 1180, the encrypted location information is decrypted for use by the first application. The processor executing the first application may have knowledge of the key used to encrypt the location information. Such knowledge may be obtained by accessing an ASLC (e.g., where ASLC specifies an algorithm for determining a key or key), or otherwise by obtaining a key (e.g., , Where a session identifier is used).

Data related features

Figure 9 illustrates data for use during conditional access processing according to certain features. The data may include, but is not limited to, application type (e.g., E-911, network management, law enforcement), UE ID or UE type, service type Unit), a service provider type, a manufacturer type, a developer type, a user ID or a user type, a request type, and other types of information that can be used as parameters for determining a service level for an application When such information is provided, it identifies and provides information on how such information can be provided and where such location can be provided. GPS or other times may also be sent to monitor usage based on time limit. Some or all of these data may be included in the ASLC for a particular application and / or UE and may be accessed by a processing component to identify location information that may be encrypted before being sent to an application close to or remote from the receiver do. Each of the data is used by the processor at the receiver to filter certain decrypted location information before providing certain location information to the application, device or user in an encrypted form. In other words, the data determines what location information is available, when it is available, and how long it is available. The ASLC also includes a cryptographic key or algorithm (e.g., an algorithm for using cryptographic keys using real-time data or other data distributed in a protected environment or made available during the encryption and decryption phases) to generate cryptographic keys .

The service type may be associated with accuracy levels ranging from high-range accuracy (e.g., 3 meters), mid-range accuracy (25-50 meters), and low-range accuracy (400 meters). The service type may also be associated with a cover level that includes region, region, national, and global. The service type is more related to the time-of-day level, which includes the disappearance of access privileges in relation to once, monthly, yearly, or lifetime or other validity period. The type of service may also be associated with usage levels, including, but not limited to, metric. Various level combinations may be used.

Similar decoding of location applications for non-cellular devices may also be envisaged. For example, an E-911 call via a VoIP application (e.g., Skype?), A camera / camcorder, etc., may have ASLC imaged into the form or downloaded into memory.

Features related to use case

Various types of computing devices and their connection states are contemplated and include devices that are almost always connected, mostly connected, or nearly non-connected to a cellular network, a location network, a local network, or other network. Additional considerations are provided for the processing capabilities of each of these computing devices.

Connection types include cellular (eg, 3G / 4G, prepaid), Wi-Fi, wired (eg, USB, Ethernet), and other connections.

Types of computing devices include smartphones, other cellular phones, tablets, laptops, connected TVs, VoIP phones, STBs, DMAs, consumer electronics, security systems, PGDs, PNDs, DSCs, M2M applications and asset geofancers. Connected receivers are devices such as cell phones, tapes, and laptops (eg, cellular and Wi-Fi / wired Ethernet) with active data pipes available. Most connected receivers are devices such as tablets and laptops that have access to non-cellular means such as Wi-Fi / wired ethernet. Unconnected receivers or receivers with limited connections include receivers that are hardly connected to the Internet and have no cellular connections.

An unconnected receiver may be fabricated to have a pre-approved set of programmed ALAC and ASLC for the lifetime of the receiver. After such initial period, the key update may be delivered to the device via a formware update (e.g., using a USB connection) or temporarily connected to the device by connecting the device to the data network. Such unconnected receivers may determine their location with an appropriate RF receiver that receives the encrypted location information (e.g., a GPS chip).

Additional features

One or more aspects relate to a system, method and computer program product for controlling access to location information by one or more applications. The system includes a processing component operable to execute the method. A computer program product includes a non-volatile computer readable medium having computer readable program code executed to perform a method.

The method comprising: using a first key, decrypting a first set of encrypted location signals received from a terrestrial transmitter network; Determine location information from the first set of decrypted location signals; Identifying a first set of location information, wherein a first set of location information is identified based on a first level of service associated with the first application; Encrypt the location information of the first set using a second key; And provides the encrypted first set of location information to the first application.

According to an aspect of the invention, the first set of position information includes one or more position information, timing correction, and atmospheric measurements of one or more transmitters from the terrestrial transmitter network.

According to one aspect of the invention, the method may further be operative to calculate the estimated coordinates of the position of the receiver using the decoded position signal, wherein the first set of position information includes the estimated coordinates of the receiver do.

According to an aspect of the invention, the decoded position signal includes data specifying atmospheric measurements at each of the terrestrial transmitters, and wherein the estimated coordinates are calculated at the receiver using one or more atmospheric measurements and a decoded position signal Includes elevation coordinates.

According to one aspect of the invention, the method further calculates the estimated coordinates of the position of the receiver using the decoded position signal; And to calculate received coordinates based on the evaluated coordinates based on the accuracy level allowed for the first application, wherein the modified coordinates are less accurate than the evaluated coordinates in specifying the position of the receiver , And the coordinates of the first set of position information are modified.

According to one aspect of the invention, the method further identifies a second set of location information, wherein the second set of location information is identified based on a second level of service associated with the second application, The predetermined position information included in the set is not included in the second set; Encrypt the location information of the second set using a third key; And provides the second set of location information to the second application.

According to one aspect of the invention, the method further decrypts a second set of encrypted position signals received from the network of terrestrial transmitters using a first key or a third key, wherein a first set of encrypted locations A signal is received at a first location of the receiver and a second set of encrypted location signals is received at a second location of the receiver; Determine additional location information from the second set of decrypted location signals; Identifying a second set of additional location information, wherein a second set of additional location information is identified based on a second level of service associated with the second application; Encrypt the location information of the second set using a fourth key; And provides the second set of location information to the second application.

According to one aspect of the invention, before the method step identifies the first set of location information, further determining whether information specifying a first level of service is stored in the receiver; Accessing a first developer key associated with the first application and sending the first developer key to a server when determining that information specifying a first level of service is not stored in the receiver; And receives information specifying a first level of service in response to sending the first developer key to the server.

According to an aspect of the invention, information specifying a first level of service is included in a first authenticated service-level certificate associated with the first application, and such proof is associated with the developer key .

According to one aspect of the invention, a first level of service specifies a time period, during which a second key may be used to encrypt the first set of location information followed by a set of location information.

According to an aspect of the invention, the second key is a session key generated after the location signal is decrypted.

According to an aspect of the invention, a first application is run through a remote server, and a first set of location information is provided to the remote server.

According to one aspect of the invention, the method further determines a first level of service based on parameters specified in the first proof associated with the first application.

According to an aspect of the invention, the method further scrambles such location information before the location information is sent over an unprotected communication path; And scrambles the scrambled position information before identifying the first set.

According to an aspect of the invention, the method further scrambles the evaluated coordinates before the evaluated coordinates are sent over unprotected communication paths; And unscrambles the scrambled estimated color space before encrypting the first set.

According to an aspect of the invention, the method further selects a first key among a plurality of keys, wherein the CRC field of the encrypted location signal is used to decrypt the first set of encrypted location signals using the first key Only pass the check.

According to an aspect of the invention, the method further comprises selecting a first key among a plurality of keys, wherein the data of the decrypted position signal is such that the first key is used to decrypt the first set of encrypted position signals The value of the expected range is matched.

According to an aspect of the invention, the method further comprises selecting a first key among a plurality of keys, wherein only when a first key is used to decrypt the first set of encrypted position signals, The data passes one or more consistency checks and the first set of encrypted position signals includes packet data from multiple transmitters.

Other features

Additional features relating to various aspects of the invention are set forth in the following co-pending patent applications, which are incorporated herein by reference:

U.S. Patent Application No. 13 / 412,487, entitled WIDE AREA POSITIONING SYSTEMS, submitted March 5, 2012; U.S. Patent Application No. 12 / 557,479 (now U.S. Patent No. 8,130,141), entitled WIDE AREA POSITIONING SYSTEM, filed September 10, September 10, 2009; U.S. Patent Application No. 13 / 412,508, entitled WIDE AREA POSITIONING SYSTEMS, filed March 5, submitted March 5, 2012; U.S. Patent Application No. 13 / 296,067, entitled WIDE AREA POSITIONING SYSTEMS, filed November 14, 2011; Application No. PCT / US12 / 44452, entitled WIDE AREA POSITIONING SYSTEMS, submitted June 28, 2011); U.S. Patent Application No. 13 / 535,626, entitled CODING IN WIDE AREA POSITIONING SYSTEMS, filed June 28, 2012; U.S. Patent Application No. 13 / 536,051, entitled CODING IN WIDE AREA POSITIONING SYSTEMS (WAPS), filed June 28, 2012; U.S. Patent Application No. 13 / 565,614 entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System (WAPS), filed on August 2, 2012; U.S. Patent Application No. 13 / 565,732, entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System, filed on August 2, 2012; U.S. Patent Application No. 13 / 565,723, entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System, filed on August 2, 2012; U.S. Patent Application No. 13 / 831,740, entitled SYSTEM AND METHODS FOR DETERMINING RECEIVER POSITION USING TIMING DATA ASSOCIATED WITH SIMPLE BASIC LOCATION IN THREE-DIMENSIONAL SPACES in Three-Dimensional Space, submitted March 14, 2013; U.S. Patent Application No. 13 / 909,977, entitled SYSTEMS AND METHODS FOR LOCATION POSITIONING OF USER DEVICE, FOR REFERENCE TO USE DEVICE, filed June 4, 2013; NEXN-009-201 (U.S. Patent Application Serial No. 14 / 010,437), entitled SYSTEMS AND METHODS FOR PROVIDING CONDITIONAL ACCESS TO TRANSMITTED INFORMATION, 26 days; U.S. Patent Application No. 14 / 011,277, entitled METHODS AND APPARATUS FOR PSEUDO-RANDOM CODING IN A WIDE AREA POSITIONING SYSTEM (WAPS) FOR Pseudo-Random Coating in a Wide Area Positioning System, 27th of month. The above applications, publications and patents are referred to individually or collectively as "included references," " included applications, " Various features, details, apparatus, systems, and methods herein are combined with the teachings of any of the incorporated references.

The systems and methods disclosed herein may track location calculation devices and the like, provide location information, and provide navigation to or with such devices. "GPS" refers to global navigation satellite systems (GNSS) such as GLONASS, Galileo, and Compass / Bayidou. The transmitter may transmit the positioning data to the signal received by the user equipment. The positioning data may include "timing data" used to determine the signal propagation time (e.g., time of arrival (TOA)) and may be calculated by multiplying the propagation time of the signal by the rate of such signal May be used to evaluate the distance between the user equipment and the transmitter (e.g., pseudorange).

Various architectures of GPS receivers are contemplated. For example, the local function of a GPS receiver can be divided into two sections: (1) signal processing and (2) position calculation. The signal processing function is implemented in hardware and the position calculation can be implemented in formware / software. These functions can be performed in the GPS ASIC "chip " with the DSP hardware block and in the ARM-processor subsystem managing the DSP hardware and computing its location. These GPS chips usually generate final latitude, longitude, and altitude in the form of NMEA messages. Optionally, location calculations are performed at the apps processor in the handset to add additional location information and build a comprehensive location solution. The present invention applies to both implementations (in addition to other configurations for signal processing and position computation).

A variety of systems, methods, logic features, blocks, modules, components, circuits, and algorithm steps have been described above and may be implemented by suitable software known or known in the art or by a processor (also referred to as a " Or controlled by software executed by, for example, or both. The processor may perform any of the processing, calculation, method steps, or other system functions associated with the processing / methodology and system disclosed herein, including data analysis, manipulation, transformation or generation, or other data operations. The processor may include a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, do. The processor may be a conventional processor, microprocessor, controller, microcontroller, or state machine. A processor may also be referred to as a chip, which includes various components (e.g., microprocessors and other components). A "processor" refers to one, two or more processors of the same or different type. The term " computer "or" computing device "or" user device "or the like refers to an apparatus that includes a processor, or to the processor itself. The software may be in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium. A "memory" can be coupled to the processor to read information from the processor and write information to the memory. The storage medium may be integrated into the processor. The software may be stored or encoded with one or more instructions or code on a computer-readable medium. The computer readable medium can be any available storage medium and includes non-volatile media (e.g., optical, magnetic, semiconductor) and can be coupled via a network using a network transmission protocol to wireless, Or wired signaling media. The features of the systems and methods described herein may be realized in various circuit programmed features and include: software-based circuit emulation, discrete logic, user devices, neural logic, quantum devices, PLDs, FPGAs , PAL, ASIC, MOSFET, CMOS, ECL, analog and digital mixed polymer technologies, and processors with hybrids of these. Data, instructions, instructions, information, signals, chips that may be referenced throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof. The computing network may be used to perform features and may include hardware components (server, monitor, I / O, network connection). An application program performs the functions by receiving, transforming, processing, sorting, sorting, retrieving, transmitting and / or exporting data and may be stored in a layer, network, relationship, non-relationship, object- . "Data" and "information" are used interchangeably. The word "include" is not interpreted as an exclusive meaning (ie, consisting of bare), but is interpreted as a generic meaning (ie, without limitation). Words using the singular or plural number also include a plurality or a singular number, respectively. The words "or " or" and "include any and all of the items in the list. The term "device" includes one or more components (e.g., processor, memory, screen). The terms "module," Block, "" feature, " or "component" means hardware or software, or a combination of hardware and software, and is configured to perform or achieve functions associated with these modules, The lines connecting these two figures illustrate the transfer of data between these features. Such transfer may be made directly or not shown between these features. If there is no line connecting the two features, then data transfer between such features is not possible. It is to be understood that these lines are illustrative of certain features but are not to be construed as limiting.

The description so far is not to be limited to the features shown, but is to be accorded the widest scope by those skilled in the art and includes equivalent systems and methods. The protection provided in the present invention is limited only by the following claims.

Claims (36)

A system for controlling access to location information by one or more applications,
Decrypting the first set of encrypted position signals received from the network of terrestrial transmitters using a first key;
Determine position information from the first set of decrypted position signals;
Identifying a first set of location information, wherein a first set of location information is identified based on a first level of service associated with the first application;
Encrypt the location information of the first set using a second key; And
And one or more processors capable of operating to provide an encrypted first set of location information to a first application. 2. The system of claim 1, wherein the first set of position information comprises one or more position information, timing correction, and atmospheric measurements of one or more transmitters from a terrestrial transmitter network. 2. The apparatus of claim 1,
And further operable to calculate the estimated coordinates for the location of the receiver using the decoded location signal, wherein the first set of location information includes the estimated coordinates of the receiver. 4. The method of claim 3, wherein the decoded position signal comprises data specifying an atmospheric measurement at each of the terrestrial transmitters, wherein the estimated coordinates are at one or more atmospheric measurements at the receiver and at an altitude coordinate calculated using the decoded position signal ≪ / RTI > 2. The apparatus of claim 1,
Calculate the estimated coordinates for the location of the receiver using the decoded location signal; And
And to calculate received coordinates based on the evaluated coordinates based on the accuracy level allowed for the first application, wherein the modified coordinates are less accurate than the evaluated coordinates in specifying the location of the receiver, Wherein the first set of position information includes the modified coordinates. 2. The apparatus of claim 1,
Identifying a second set of location information, wherein the second set of location information is identified based on a second level of service associated with the second application, and wherein the location information included in the first set is included in the second set ;
Encrypt the location information of the second set using a third key; And
And to provide the second set of location information to the second application. The apparatus of claim 1,
Decrypting the second set of encrypted position signals received from the network of terrestrial transmitters using a first key or a third key wherein a first set of encrypted position signals are received at a first location of the receiver, Two sets of encrypted position signals are received at a second location of the receiver;
Determine additional location information from the second set of decrypted location signals;
Identifying a second set of additional location information, wherein a second set of additional location information is identified based on a second level of service associated with the second application;
Encrypt the location information of the second set using a fourth key; And
And to provide the second set of location information to the second application. 2. The apparatus of claim 1,
Prior to identifying the first set of location information, determining whether information specifying a first level of service is stored in the receiver;
Upon determining that information specifying a first level of service is not stored in the receiver, a first developer key associated with the first application is accessed,
Sending the first developer key to a server; And
And to receive information specifying a first level of service in response to sending the first developer key to the server. 9. The method of claim 8, wherein the information specifying the first level of service is included in a first authorized service-level certificate associated with the first application and the proof is associated with the developer key The system features. 2. The method of claim 1 wherein the first level of service specifies a time period during which a second key may be used to encrypt a first set of location information followed by a subsequent set of location information system. 2. The system of claim 1, wherein the second key is a session key generated after the location signal is decrypted. 2. The system of claim 1, wherein the first application is run through a remote server and a first set of location information is provided to the remote server. 2. The apparatus of claim 1,
And is further operable to determine a first level of service based on the parameters specified in the first proof associated with the first application. 2. The apparatus of claim 1,
Scrambling such location information before it is sent over an unprotected communication path; And
And is further operable to unscramble the scrambled position information before identifying the first set. 4. The apparatus of claim 3,
Scrambling the evaluated coordinates before the evaluated coordinates are sent over an unprotected communication path; And
And is further operable to unscramble the scrambled evaluated color space before encrypting the first set. 2. The apparatus of claim 1,
The CRC field of the encrypted location signal is further operable to pass the check only when the first key is used to decrypt the first set of encrypted location signals, . 2. The apparatus of claim 1,
Selecting a first key among a plurality of keys, wherein the data of the decrypted position signal is used to match a value of an expected range only when the first key is used to decrypt the first set of encrypted position signals Wherein the system is operable. 2. The method of claim 1, wherein the first set of encrypted position signals comprises packet data from a plurality of transmitters,
Selecting a first key among a plurality of keys, wherein only when the first key is used to decrypt the first set of encrypted position signals, the packet data from the multiple transmitters is passed through one or more consistency checks Wherein the system is operable. A computer-implemented method for controlling access to location information by one or more applications,
Decrypting the first set of encrypted position signals received from the network of terrestrial transmitters using a first key;
Determine position information from the first set of decrypted position signals;
Identifying a first set of location information, wherein a first set of location information is identified based on a first level of service associated with the first application;
Encrypt the location information of the first set using a second key; And
And providing the encrypted first set of location information to the first application. 20. The computer-implemented method of claim 19, wherein the first set of location information comprises one or more location information, timing correction, and atmospheric measurements of one or more transmitters from a terrestrial transmitter network. 20. The apparatus of claim 19,
And using the decoded location signal to calculate estimated coordinates for the location of the receiver, wherein the first set of location information includes the estimated coordinates of the receiver. 22. The method of claim 21, wherein the decrypted position signal comprises data specifying an atmospheric measurement at each angle of a terrestrial transmitter, and wherein the estimated coordinates are at one or more atmospheric measurements at a receiver and altitude coordinates calculated using a decoded position signal The computer-implemented method comprising the steps of: 20. The method of claim 19,
Calculate the estimated coordinates for the location of the receiver using the decoded location signal; And
Calculating received coordinates based on the evaluated coordinates based on the accuracy level allowed for the first application, wherein the modified coordinates are less accurate than the evaluated coordinates in specifying the location of the receiver, And wherein the first set of position information includes the modified coordinates. 20. The apparatus of claim 19,
Identifying a second set of location information, wherein the second set of location information is identified based on a second level of service associated with the second application, and wherein the location information included in the first set is included in the second set ;
Encrypt the location information of the second set using a third key; And
And to provide the second set of location information to the second application. 20. The apparatus of claim 19,
Decrypting the second set of encrypted position signals received from the network of terrestrial transmitters using a first key or a third key wherein a first set of encrypted position signals are received at a first location of the receiver, Two sets of encrypted position signals are received at a second location of the receiver;
Determine additional location information from the second set of decrypted location signals;
Identifying a second set of additional location information, wherein a second set of additional location information is identified based on a second level of service associated with the second application;
Encrypt the location information of the second set using a fourth key; And
And to provide the second set of location information to the second application. 20. The apparatus of claim 19,
Prior to identifying the first set of location information, determining whether information specifying a first level of service is stored in the receiver;
Upon determining that information specifying a first level of service is not stored in the receiver, a first developer key associated with the first application is accessed,
Sending the first developer key to a server; And
Wherein the computer-readable medium is further operable to receive information specifying a first level of service in response to sending the first developer key to the server. 27. The method of claim 26, wherein information specifying a first level of service is included in a first authorized service-level certificate associated with the first application and the proof is associated with the developer key Characterized by a computer-implemented method. The method of claim 9, wherein the first level of service specifies a time period, during which the second key is used to encrypt the first set of location information followed by a subsequent set of location information Computer - realization method. 20. The computer-implemented method of claim 19, wherein the second key is a session key generated after the location signal is decrypted. 20. The computer-implemented method of claim 19, wherein the first application is executed via a remote server, and a first set of location information is provided to the remote server. 20. The method of claim 19,
And determining a first level of service based on the parameters specified in the first proof associated with the first application. 20. The method of claim 19,
Scrambling such location information before it is sent over an unprotected communication path; And
And causing the scramble location information to be unscrambled prior to identifying the first set. 4. The method of claim 3,
Scrambling the evaluated coordinates before the evaluated coordinates are sent over an unprotected communication path; And
And unscrambling the scrambled estimated color space before encrypting the first set. 2. The method of claim 1,
Selecting a first one of the plurality of keys, wherein the CRC field of the encrypted position signal includes passing the check only when the first key is used to decrypt the first set of encrypted position signals The method comprising the steps of: 2. The method of claim 1,
Selecting a first key among a plurality of keys, wherein the data of the decrypted position signal is used to match a value of an expected range only when the first key is used to decrypt the first set of encrypted position signals The computer-implemented method comprising the steps of: 20. The method of claim 19, wherein the first set of encrypted position signals comprises packet data from a plurality of transmitters,
Selecting a first key among a plurality of keys and using the first key to decrypt the first set of encrypted position signals so that the packet data from the multiple transmitters pass the one or more consistency checks The computer-implemented method comprising the steps of:

Images