Network-assisted positioning without service request procedure

Abstract

Techniques for determining the location of a user equipment (UE) are provided. An example of a method for providing positioning information to a network server includes: receiving a paging message requesting positioning information about a user equipment (UE) from the network server; transmitting an over-the-air paging message for the UE; receiving a response message from the UE; determining the positioning information based at least in part on the response message; and providing the positioning information to the network server.

Description

[0001] background

[0002] Wireless communication systems have evolved over several generations, including first generation analog wireless telephone service (1G), second generation (2G) digital wireless telephone service (including transitional 2.5G and 2.75G networks), third generation (3G) high-speed data wireless service with Internet capabilities, fourth generation (4G) service (e.g., Long Term Evolution (LTE) or WiMax), and fifth generation (5G) service (e.g., 5G New Radio (5G NR)). There are many different types of wireless communication systems in use today, including cellular and personal communications service (PCS) systems. Examples of known cellular systems include the cellular analog Advanced Mobile Phone System (AMPS), and digital cellular systems based on code division multiple access (CDMA), frequency division multiple access (FDMA), time division multiple access (TDMA), global system for mobile access (GSM) TDMA variants, and the like.

[0003] It is often desirable to know the location of a user equipment (UE) (e.g., a cellular phone), where the terms "location" and "positioning" are synonymous herein and may be used interchangeably. A location service (LCS) client may desire to know the location of the UE and may communicate with a location center to request the location of the UE. The location center and the UE may exchange messages as appropriate to obtain a location estimate for the UE. The location center may return the location estimate to the LCS client, for example, for use in one or more applications. The over-the-air (OTA) messages required to obtain positioning information require additional radio bandwidth and may cause the UE to utilize power to send and receive these messages.

[0004] Obtaining the location of a mobile device accessing a wireless network can be useful for many applications, including, for example, emergency calling, personal navigation, asset tracking, locating friends or family members, etc. Existing positioning methods include methods based on measuring radio signals transmitted from various devices, including satellite vehicles and terrestrial radio sources in wireless networks (such as base stations and access points).

[0005] Overview

[0006] An example of a method for responding to an over-the-air paging message with a user equipment (UE) according to the present disclosure includes: receiving the over-the-air paging message indicating dedicated resources for performing access; performing access using the dedicated resources; and receiving an acknowledgement message in response to performing access.

[0007] Implementations of such methods may include one or more of the following features. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

[0008] An example of a method for transmitting an over-the-air paging message using a base station according to the present disclosure includes: transmitting the over-the-air paging message indicating dedicated resources to perform access; and receiving a response via the dedicated resources.

[0009] Implementations of such methods may include one or more of the following features. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

[0010] An example of a method for responding to an over-the-air paging message using a user equipment (UE) according to the present disclosure includes: receiving the over-the-air paging message; performing access using shared resources; and receiving an acknowledgment message in response to performing the access, the acknowledgment message including an indication to remain in an idle state.

[0011] Implementations of such methods may include one or more of the following features. The acknowledgment message may include a random access response media access control layer protocol data unit. The acknowledgment message may include a media access control subheader in the random access response media access control layer protocol data unit. The indication to remain in an idle state may be included in a media access control payload in the random access response media access control layer protocol data unit.

[0012] An example of a method for transmitting an over-the-air paging message using a base station according to the present disclosure includes: transmitting the over-the-air paging message to a user equipment (UE); receiving a response via a common resource; and transmitting an acknowledgment message including an indication to keep the UE in an idle state.

[0013] Implementations of such methods may include one or more of the following features. The acknowledgment message may include a random access response media access control layer protocol data unit. The acknowledgment message may include a media access control subheader in the random access response media access control layer protocol data unit. The indication to keep the UE in an idle state may be included in a media access control payload in the random access response media access control layer protocol data unit.

[0014] An example of a method for providing positioning information to a network server according to the present disclosure includes: receiving a paging message that requests positioning information about a user equipment (UE) from the network server; transmitting an over-the-air paging message to the UE; receiving a response message from the UE; determining the positioning information based at least in part on the response message; and providing the positioning information to the network server.

[0015] Implementation of such a method may include one or more of the following features. A paging message requesting positioning information may include requesting a cell ID, a timing advance, and an angle of arrival. An air paging message for a UE may include an indication of dedicated resources for the UE to use to provide a response message. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel. The response message received from the UE may be a security message. Providing the positioning information to a network server may include providing a security response message received from the UE to the network server. The network server may be an access and mobility management function (AMF) server configured to verify the security message before sending the positioning information to a location management function (LMF) server. Determining the positioning information may include determining a cell ID, a timing advance, and an angle of arrival based on the response message. Providing the positioning information to the network server may include providing the cell ID, the timing advance, and the angle of arrival in an initial UE message. An access completion message may be transmitted to the UE. The access completion message may include a random access response media access control layer protocol data unit. The access complete message may include an acknowledgment in a media access control subheader in a random access response media access control layer protocol data unit. The access complete message may include an indication to keep the UE in an idle state. The indication to keep the UE in an idle state may be included in a media access control payload in a random access response media access control layer protocol data unit.

[0016] An apparatus according to the present disclosure includes a memory, at least one transceiver, and at least one processor, the at least one processor being communicatively coupled to the memory and the at least one transceiver and configured to: receive an over-the-air paging message with the at least one transceiver, the over-the-air paging message indicating dedicated resources for performing access; perform access using the dedicated resources; and receive an acknowledgment message with the at least one transceiver in response to performing access.

[0017] Implementations of such apparatus may include one or more of the following features. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

[0018] An example apparatus according to the present disclosure includes a memory, at least one transceiver, and at least one processor, the at least one processor being operably coupled to the memory and the at least one transceiver and configured to: transmit an over-the-air paging message with the at least one transceiver, the over-the-air paging message indicating dedicated resources for performing access; and receive a response with the at least one transceiver via the dedicated resources.

[0019] Implementations of such apparatus may include one or more of the following features. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

[0020] An example apparatus according to the present disclosure includes: a memory, at least one transceiver, and at least one processor, the at least one processor being communicatively coupled to the memory and the at least one transceiver and configured to: receive an over-the-air paging message with the at least one transceiver; perform access using shared resources; and receive an acknowledgment message with the at least one transceiver in response to performing the access, the acknowledgment message including an indication to remain in an idle state.

[0021] Implementations of such apparatus may include one or more of the following features. The acknowledgment message may include a random access response media access control layer protocol data unit. The acknowledgment message may include a media access control subheader in the random access response media access control layer protocol data unit. The indication to remain in an idle state may be included in a media access control payload in the random access response media access control layer protocol data unit.

[0022] An example apparatus according to the present disclosure includes: a memory, at least one transceiver, and at least one processor, the at least one processor being communicatively coupled to the memory and the at least one transceiver and configured to: transmit an over-the-air paging message to a user equipment (UE) with the at least one transceiver; receive a response via a shared resource with the at least one transceiver; and transmit an acknowledgment message with the at least one transceiver, the acknowledgment message including an indication to keep the UE in an idle state.

[0023] Implementations of such apparatus may include one or more of the following features. The acknowledgment message may include a random access response media access control layer protocol data unit. The acknowledgment message may include a media access control subheader in the random access response media access control layer protocol data unit. The indication to keep the UE in an idle state may be included in a media access control payload in the random access response media access control layer protocol data unit.

[0024] An example apparatus according to the present disclosure includes: a memory, at least one transceiver, and at least one processor, the at least one processor being communicatively coupled to the memory and the at least one transceiver and configured to: receive a paging message with the at least one transceiver, the paging message requesting positioning information about a user equipment (UE) from a network server; transmit an over-the-air paging message to the UE with the at least one transceiver; receive a response message from the UE with the at least one transceiver; determine positioning information based at least in part on the response message; and provide the positioning information to the network server.

[0025] Implementation of such an apparatus may include one or more of the following features. A paging message requesting positioning information may include requesting a cell ID, a timing advance, and an angle of arrival. An air paging message for a UE may include an indication of dedicated resources for the UE to use to provide a response message. The dedicated resources may include a preamble for transmission on a random access channel. The dedicated resources may include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel. The response message received from the UE may be a security message. The at least one processor may be further configured to provide a security response message received from the UE to a network server. The network server may be an access and mobility management function (AMF) server configured to verify the security message before sending positioning information to a location management function (LMF) server. The at least one processor may be further configured to determine a cell ID, a timing advance, and an angle of arrival based on the response message. The at least one processor may be further configured to provide the cell ID, the timing advance, and the angle of arrival in an initial UE message. The at least one processor may be further configured to transmit an access completion message to the UE using the at least one transceiver. The access complete message may include a random access response media access control layer protocol data unit. The access complete message may include an acknowledgement in a media access control subheader in the random access response media access control layer protocol data unit. The access complete message may include an indication to keep the UE in an idle state. The indication to keep the UE in an idle state may be included in a media access control payload in the random access response media access control layer protocol data unit.

[0026] An example device for responding to an over-the-air paging message with a user equipment (UE) according to the present disclosure includes: a device for receiving the over-the-air paging message indicating dedicated resources for performing access; a device for performing access using the dedicated resources; and a device for receiving an acknowledgment message in response to performing access.

[0027] An example apparatus for transmitting an over-the-air paging message using a base station according to the present disclosure includes: means for transmitting the over-the-air paging message indicating dedicated resources to perform access; and means for receiving a response via the dedicated resources.

[0028] An example device for responding to an over-the-air paging message using a user equipment (UE) according to the present disclosure includes: a device for receiving the over-the-air paging message; a device for performing access using shared resources; and a device for receiving an acknowledgment message in response to performing the access, the acknowledgment message including an indication to remain in an idle state.

[0029] An example device for transmitting an over-the-air paging message using a base station according to the present disclosure includes: a device for transmitting the over-the-air paging message to a user equipment (UE); a device for receiving a response via a shared resource; and a device for transmitting an acknowledgment message, the acknowledgment message including an indication to keep the UE in an idle state.

[0030] An example device for providing positioning information to a network server according to the present disclosure includes: a device for receiving a paging message that requests positioning information about a user equipment (UE) from the network server; a device for transmitting an over-the-air paging message to the UE; a device for receiving a response message from the UE; a device for determining the positioning information based at least in part on the response message; and a device for providing the positioning information to the network server.

[0031] An example non-transitory processor-readable storage medium including processor-readable instructions configured to cause one or more processors to respond to an over-the-air paging message using a user equipment (UE) according to the present disclosure includes: code for receiving the over-the-air paging message indicating dedicated resources for performing access; code for performing access using the dedicated resources; and code for receiving an acknowledgment message in response to performing access.

[0032] An example non-transitory processor-readable storage medium including processor-readable instructions configured to cause one or more processors to utilize a base station to transmit an over-the-air paging message according to the present disclosure includes: code for transmitting the over-the-air paging message indicating dedicated resources for performing access; and code for receiving a response via the dedicated resources.

[0033] An example non-transitory processor-readable storage medium including processor-readable instructions configured to cause one or more processors to respond to an over-the-air paging message using user equipment (UE) according to the present disclosure includes: code for receiving the over-the-air paging message; code for performing access using shared resources; and code for receiving an acknowledgment message in response to performing the access, the acknowledgment message including an indication to remain in an idle state.

[0034] An example non-transitory processor-readable storage medium including processor-readable instructions configured to cause one or more processors to utilize a base station to transmit an over-the-air paging message according to the present disclosure includes: code for transmitting the over-the-air paging message to a user equipment (UE); code for receiving a response via a shared resource; and code for transmitting an acknowledgment message including an indication to keep the UE in an idle state.

[0035] An example non-volatile processor-readable storage medium according to the present disclosure including processor-readable instructions configured to cause one or more processors to provide positioning information to a network server includes: code for receiving a paging message requesting positioning information about a user equipment (UE) from the network server; code for transmitting an over-the-air paging message to the UE; code for receiving a response message from the UE; code for determining the positioning information based at least in part on the response message; and code for providing the positioning information to the network server.

[0036] The items and / or technologies described herein may provide one or more of the following capabilities and other capabilities not mentioned. A server on a communication network may request positioning information about a UE from one or more base stations. The requested positioning information may include a cell identifier (cell ID) of the base station serving the UE, a timing advance (TA) associated with the UE, and an angle of arrival (AoA) associated with the UE. The one or more base stations may transmit an over-the-air (OTA) paging message. The OTA message may include an indication of dedicated resources on which the UE can respond. The UE may respond to the paging message on a shared resource or a dedicated resource (if provided in the paging message). The response from the UE may be sent as a safety message. The base station may determine the TA and AoA based on the UE's response message. The base station may provide an access completion message to the UE, which indicates that the UE should remain in idle mode. The base station may also provide the cell ID, TA, and AoA to the server. Other capabilities may be provided, and not every implementation according to the present disclosure must provide any of the capabilities discussed, let alone all capabilities. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 is a simplified diagram of an example wireless communication system.

[0039] Figure 2 yes Figure 1 0046] A block diagram of components of an example user equipment is shown in FIG.

[0040] Figure 3 yes Figure 1 A block diagram of components of an example transmit / receive point is shown in FIG.

[0041] Figure 4 yes Figure 1 A block diagram of the components of the example server shown in .

[0042] Figure 5 is a message diagram of an example network-assisted positioning procedure.

[0043] Figure 6 is an example message diagram of an improved network-assisted positioning procedure.

[0044] Figure 7 yes Figure 6 Message diagram of the network-assisted positioning procedure with example security features.

[0045] Figure 8 is a block diagram of an example medium access control packet data unit.

[0046] Fig.9A is a block flow diagram of an example method for responding to a paging message on dedicated resources with user equipment.

[0047] Fig. 9B is a block flow diagram of an example methodology for transmitting a paging message indicating dedicated resources to a user equipment.

[0048] Fig. 9C is a block flow diagram of an example methodology for receiving an acknowledgement message indicating that user equipment will remain in an idle state.

[0049] Fig.9D is a block flow diagram of an example method for transmitting an acknowledgement message indicating that user equipment will remain in an idle state.

[0050] Fig.10 is a flow chart of an example method for providing positioning information to a network server.

[0051] Detailed Description

[0052] This document discusses techniques for determining the location of a user equipment (UE). In general, a network-assisted positioning procedure includes obtaining measurements associated with the UE location from a base station, such as a fifth generation (5G) next generation (NG) RAN node (NG-RAN). The network-assisted positioning procedure may include a network-triggered service request, which includes an access and mobility management function (AMF) paging the UE via (all) NG-RAN nodes. The UE may move from an idle state (e.g., CM idle, RRC idle) to a connected state (e.g., RRC connected) involving a random access procedure on a serving NG-RAN node. The network may then establish a signaling connection between the UE and the AMF and a data connection between the UE and a user plane function (UPF). Placing the UE in a connected state may increase the power consumption of the UE and increase the OTA bandwidth required between the UE and the NG-RAN. In addition, the required signaling connection and data connection may increase the processing load on the network, thereby increasing the consumption of signaling resources between network nodes.

[0053] As described herein, UE power consumption and OTA bandwidth may be reduced for some positioning techniques. For example, the UE may be configured to perform a random access procedure when in an idle state (i.e., without moving to a connected state). The same positioning techniques may be used to eliminate the need to establish signaling and data connections between the UE and the AMF and UPF, respectively. Eliminating the need to place the UE in a connected state (as described herein) provides savings in the form of reduced UE power consumption. The corresponding messaging also reduces the consumption of resources by the OTA, thereby reducing the required signaling between network nodes. These techniques and configurations are examples, and other techniques and configurations may be used.

[0054] Reference Figure 1 , an example of a communication system 100 includes a UE 105, a radio access network (RAN) 135 (here a fifth generation (5G) next generation (NG) RAN (NG-RAN)), and a 5G core network (5GC) 140. The UE 105 may be, for example, an IoT device, a location tracker device, a cellular phone, or other device. A 5G network may also be referred to as a new radio (NR) network; the NG-RAN 135 may be referred to as a 5G RAN or an NR-RAN node; and the 5GC 140 may be referred to as an NG core network (NGC). Standardization of the NG-RAN and the 5GC is being conducted in the 3rd Generation Partnership Project (3GPP). Accordingly, the NG-RAN 135 and the 5GC 140 may follow current or future standards from the 3GPP for 5G support. The NG-RAN 135 may be another type of RAN, for example, a 3G RAN, a 4G Long Term Evolution (LTE) RAN, etc. The communication system 100 may utilize information from a constellation 185 of satellite vehicles (SVs) 190, 191, 192, 193 of a satellite positioning system (SPS), such as a global navigation satellite system (GNSS), such as the Global Positioning System (GPS), the Global Navigation Satellite System (GLONASS), Galileo, or BeiDou, or some other local or regional SPS, such as the Indian Regional Navigation Satellite System (IRNSS), the European Geostationary Navigation Overlay Service (EGNOS), or the Wide Area Augmentation System (WAAS). Additional components of the communication system 100 are described below. The communication system 100 may include additional or alternative components.

[0055] like Figure 1As shown in FIG. 1 , the NG-RAN 135 includes NR Node Bs (gNBs) 110a, 110b and a next generation evolved Node B (ng-eNB) 114, and the 5GC 140 includes an access and mobility management function (AMF) 115, a session management function (SMF) 117, a location management function (LMF) 120, and a gateway mobile location center (GMLC) 125. The gNBs 110a, 110b, and the ng-eNB 114 may be communicatively coupled to each other, each configured for bidirectional wireless communication with the UE 105, and each communicatively coupled to the AMF 115 and configured for bidirectional communication with the AMF 115. The AMF 115, the SMF 117, the LMF 120, and the GMLC 125 are communicatively coupled to each other, and the GMLC is communicatively coupled to the external client 130. The SMF 117 may serve as an initial contact point for a service control function (SCF) (not shown) to create, control, and delete media sessions.

[0056] Figure 1 A generalized explanation of the various components is provided, any or all of which may be utilized as appropriate, and each component may be repeated or omitted as desired. Specifically, although only one UE 105 is illustrated, many UEs (e.g., hundreds, thousands, millions, etc.) may be utilized in the communication system 100. Similarly, the communication system 100 may include a larger (or smaller) number of SVs (i.e., more or less than the four SVs 190-193 shown), gNBs 110a, 100b, ng-eNBs 114, AMFs 115, external clients 130, and / or other components. The illustrated connections connecting the various components in the communication system 100 include data and signaling connections, which may include additional (intermediate) components, direct or indirect physical and / or wireless connections, and / or additional networks. In addition, the components may be rearranged, combined, separated, replaced, and / or omitted depending on the desired functionality.

[0057] Although Figure 1A 5G-based network is illustrated, but similar network implementations and configurations may be used for other communication technologies, such as 3G, Long Term Evolution (LTE), etc. Implementations described herein (which are for 5G technologies and / or for one or more other communication technologies and / or protocols) may be used to transmit (or broadcast) directional synchronization signals, receive and measure directional signals at a UE (e.g., UE 105), and / or provide location assistance to UE 105 (via GMLC 125 or other location server), and / or calculate the location of UE 105 at a device with location capabilities (such as UE 105, gNB 110a, 110b, or LMF 120) based on measurement parameters received at UE 105 for such directional transmitted signals. The gateway mobile location center (GMLC) 125, the location management function (LMF) 120, the access and mobility management function (AMF) 115, the SMF 117, the ng-eNB (eNodeB) 114 and the gNB (gNodeB) 110a, 110b are examples and may be replaced by or include various other location server functionalities and / or base station functionalities, respectively, in various embodiments.

[0058] UE 105 may include and / or may be referred to as a device, a mobile device, a wireless device, a mobile terminal, a terminal, a mobile station (MS), a terminal (SET) enabled with secure user plane location (SUPL), or some other name. In addition, UE 105 may correspond to a cellular phone, a smart phone, a laptop, a tablet device, a PDA, a tracking device, a navigation device, an Internet of Things (IoT) device, an asset tracker, a health monitor, a security system, a smart city sensor, a smart meter, a wearable tracker, or some other portable or mobile device. Typically, although not necessarily, UE 105 may support the use of one or more radio access technologies (RATs) (such as Global System for Mobile Communications (GSM), Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA), LTE, High Rate Packet Data (HRPD), IEEE 802.11 WiFi (also known as Wi-Fi), (BT), Worldwide Interoperability for Microwave Access (WiMAX), 5G New Radio (NR) (e.g., using NG-RAN 135 and 5GC 140), etc.) for wireless communication. UE 105 may support wireless communication using a wireless local area network (WLAN), which may use, for example, a digital subscriber line (DSL) or packet cable to connect to other networks (e.g., the Internet). Using one or more of these RATs may allow UE 105 (e.g., via elements ( Figure 1125), or possibly via GMLC 125) to communicate with external client 130 and / or allow external client 130 to receive location information about UE 105 (e.g., via GMLC 125).

[0059] UE 105 may include a single entity or may include multiple entities, such as in a personal area network, where users may employ audio, video, and / or data I / O (input / output) devices, and / or body sensors and separate wired or wireless modems. The estimate of the location of UE 105 may be referred to as a location, location estimate, location fix, fix, position fix, position estimate, or position fix, and may be geographic, providing location coordinates (e.g., latitude and longitude) about UE 105, which may or may not include an altitude component (e.g., height above sea level; height above or depth below ground level, floor level, or basement level). Alternatively, the location of UE 105 may be expressed as a municipal location (e.g., expressed as a postal address or a designation of a point or smaller area in a building (such as a specific room or floor)). The location of UE 105 may be expressed as an area or volume (geographically or municipally defined) within which UE 105 is expected to be located with a certain probability or confidence level (e.g., 67%, 95%, etc.). The location of the UE 105 may be expressed as a relative location including, for example, a distance and direction from a known location. The relative location may be expressed as relative coordinates (e.g., X, Y (and Z) coordinates) defined relative to a certain origin at a known location, which may be, for example, geographically, in municipal form, or with reference to a point, area, or volume indicated, for example, on a map, floor plan, or building plan. In the description contained herein, the use of the term location may include any of these variants unless otherwise indicated. When calculating the location of the UE, local x, y, and possibly z coordinates are typically solved, and then (if necessary) the local coordinates are converted into absolute coordinates (e.g., with respect to latitude, longitude, and altitude above or below mean sea level).

[0060] UE 105 may be configured to communicate with other entities using one or more of a variety of technologies. UE 105 may be configured to be indirectly connected to one or more communication networks via one or more device-to-device (D2D) peer-to-peer (P2P) links. D2D P2P links may use any appropriate D2D radio access technology (RAT) such as LTE Direct (LTE-D), WiFi Direct (WiFi-D), One or more UEs in a group of UEs utilizing D2D communication may be within a geographic coverage area of ​​a transmit / receive point (TRP), such as one or more of gNB 110a, 110b and / or ng-eNB 114. Other UEs in the group may be outside such geographic coverage area or may be unable to receive transmissions from the base station for other reasons. A group of UEs communicating via D2D communication may utilize a one-to-many (1:M) system, where each UE may transmit to other UEs in the group. The TRP may facilitate the scheduling of resources for D2D communication. In other cases, D2D communication may be performed between UEs without involving a TRP.

[0061] Figure 1 The base stations (BS) in the NG-RAN 135 shown in FIG. 1 include NR B nodes (referred to as gNBs 110a and 110b). Each pair of gNBs 110a, 110b in the NG-RAN 135 may be connected to each other via one or more other gNBs. Access to the 5G network is provided to the UE 105 via wireless communications between the UE 105 and one or more of the gNBs 110a, 110b. The gNBs 110a, 110b may provide wireless communications access to the 5GC 140 on behalf of the UE 105 using 5G. Figure 1 , it is assumed that the serving gNB for UE 105 is gNB 110a, but another gNB (e.g., gNB 110b) may serve as the serving gNB if UE 105 moves to another location, or may serve as a secondary gNB to provide additional throughput and bandwidth to UE 105.

[0062] Figure 1 The base stations (BSs) in the NG-RAN 135 shown in FIG. 1 may include an ng-eNB 114 (also referred to as a next generation evolved Node B). The ng-eNB 114 may be connected to one or more of the gNBs 110a, 110b in the NG-RAN 135 (possibly via one or more other gNBs and / or one or more other ng-eNBs). The ng-eNB 114 may provide LTE wireless access and / or evolved LTE (eLTE) wireless access to the UE 105. One or more of the gNBs 110a, 110b and / or ng-eNB 114 may be configured to function as a positioning-only beacon, which may transmit signals to assist in determining the location of the UE 105, but may not be able to receive signals from the UE 105 or other UEs.

[0063] BSs 110a, 110b, 114 may each include one or more TRPs. For example, each sector within a cell of the BS may include a TRP, but multiple TRPs may share one or more components (e.g., sharing a processor but having separate antennas). System 100 may include only macro TRPs, or system 100 may have different types of TRPs, such as macro, micro, and / or femto TRPs. A macro TRP may cover a relatively large geographic area (e.g., a radius of several thousand meters) and may allow unrestricted access by terminals with service subscriptions. A micro TRP may cover a relatively small geographic area (e.g., a micro cell) and may allow unrestricted access by terminals with service subscriptions. A femto or home TRP may cover a relatively small geographic area (e.g., a femto cell) and may allow restricted access by terminals associated with the femto cell (e.g., terminals of users in a residence).

[0064] As mentioned, although Figure 1 Nodes configured to communicate according to a 5G communication protocol are depicted, but nodes configured to communicate according to other communication protocols (such as, for example, an LTE protocol or an IEEE 802.11x protocol) may also be used. For example, in an evolved packet system (EPS) that provides LTE wireless access to UE 105, the RAN may include an evolved universal mobile telecommunications system (UMTS) terrestrial radio access network (E-UTRAN), which may include base stations including evolved Node Bs (eNBs). The core network for the EPS may include an evolved packet core (EPC). The EPS may include the E-UTRAN plus the EPC, where the E-UTRAN corresponds to the UE 105. Figure 1 NG-RAN 135 in and the EPC corresponds to Figure 1 5GC 140 in.

[0065] The gNBs 110a, 110b, and ng-eNB 114 may communicate with the AMF 115; for positioning functionality, the AMF 115 communicates with the LMF 120. The AMF 115 may support mobility of the UE 105, including cell changes and handovers, and may participate in supporting signaling connections to the UE 105 and possibly data and voice bearers for the UE 105. The LMF 120 may communicate directly with the UE 105, for example, via wireless communications. The LMF 120 may support positioning of the UE 105 when the UE 105 accesses the NG-RAN 135, and may support various positioning procedures / methods, such as Assisted GNSS (A-GNSS), Observed Time Difference of Arrival (OTDOA), Real-Time Kinematics (RTK), Precise Point Positioning (PPP), Differential GNSS (DGNSS), Enhanced Cell ID (E-CID), Angle of Arrival (AOA), Angle of Departure (AOD), and / or other positioning methods. The LMF 120 may process location service requests for the UE 105, for example, received from the AMF 115 or the GMLC 125. The LMF 120 may be connected to the AMF 115 and / or the GMLC 125. The LMF 120 may be referred to by other names, such as a location manager (LM), a location function (LF), a commercial LMF (CLMF), or a value-added LMF (VLMF). A node / system implementing the LMF 120 may additionally or alternatively implement other types of location support modules, such as an enhanced serving mobile location center (E-SMLC) or a secure user plane location (SUPL) location platform (SLP). At least a portion of the positioning functionality (including the derivation of the location of the UE 105) may be performed at the UE 105 (e.g., using signal measurements obtained by the UE 105 for signals transmitted by wireless nodes (such as gNBs 110a, 110b and / or ng-eNBs 114), and / or assistance data provided to the UE 105, for example, by the LMF 120).

[0066] The GMLC 125 may support a location request for the UE 105 received from the external client 130, and may forward the location request to the AMF 115 for forwarding by the AMF 115 to the LMF 120, or may forward the location request directly to the LMF 120. A location response (e.g., containing a location estimate of the UE 105) from the LMF 120 may be returned to the GMLC 125 directly or via the AMF 115, and the GMLC 125 may then return the location response (e.g., containing the location estimate) to the external client 130. The GMLC 125 is shown as being connected to both the AMF 115 and the LMF 120, but in some implementations the 5GC 140 may support only one of these connections.

[0067] like Figure 1 As further explained in , LMF 120 may communicate with gNB 110a, 110b and / or ng-eNB 114 using a new radio positioning protocol A (which may be referred to as NPPa or NRPPa), which may be defined in 3GPP Technical Specification (TS) 38.455. NRPPa may be the same as, similar to, or an extension of LTE Positioning Protocol A (LPPa) defined in 3GPP TS 36.455, wherein NRPPa messages are communicated between gNB 110a (or gNB 110b) and LMF 120, and / or between ng-eNB 114 and LMF 120 via AMF 115. Figure 1 As further explained in 3GPP TS 36.355, the LMF 120 and the UE 105 may communicate using the LTE Positioning Protocol (LPP), which may be defined in 3GPP TS 36.355. The LMF 120 and the UE 105 may additionally or alternatively communicate using a new radio positioning protocol (which may be referred to as NPP or NRPP), which may be the same as, similar to, or an extension of the LPP. Here, LPP and / or NPP messages may be communicated between the UE 105 and the LMF 120 via the AMF 115 and the serving gNB 110a, 110b or the serving ng-eNB 114 of the UE 105. For example, the LPP and / or NPP messages may be communicated between the LMF 120 and the AMF 115 using the 5G Location Services Application Protocol (LCS AP), and may be communicated between the AMF 115 and the UE 105 using the 5G Non-Access Stratum (NAS) protocol. The LPP and / or NPP protocols may be used to support positioning of UE 105 using UE-assisted and / or UE-based positioning methods such as A-GNSS, RTK, OTDOA, and / or E-CID. The NRPPa protocol may be used to support positioning of UE 105 using network-based positioning methods such as E-CID (e.g., in conjunction with measurements obtained by gNB 110a, 110b, or ng-eNB 114) and / or may be used by LMF 120 to obtain location-related information from gNB 110a, 110b, and / or ng-eNB 114, such as parameters defining directional SS transmissions from gNB 110a, 110b, and / or ng-eNB 114.

[0068] Using UE-assisted positioning methods, UE 105 may obtain location measurements and send these measurements to a location server (e.g., LMF 120) for use in calculating a location estimate for UE 105. For example, the location measurements may include one or more of: received signal strength indication (RSSI), round trip signal propagation time (RTT), reference signal time difference (RSTD), reference signal received power (RSRP), and / or reference signal received quality (RSRQ) of gNB 110a, 110b, ng-eNB 114, and / or WLAN AP. The location measurements may additionally or alternatively include measurements of GNSS pseudoranges, code phases, and / or carrier phases of SVs 190-193.

[0069] Using the UE-based positioning method, UE 105 can obtain position measurements (e.g., which can be the same or similar to position measurements for UE-assisted positioning methods) and can calculate the position of UE 105 (e.g., with the aid of auxiliary data received from a location server (such as LMF 120) or broadcast by gNB 110a, 110b, ng-eNB 114 or other base stations or APs).

[0070] Using network-based positioning methods, one or more base stations (e.g., gNBs 110a, 110b and / or ng-eNB 114) or APs may obtain location measurements (e.g., measurements of RSSI, RTT, RSRP, RSRQ, or time of arrival (TOA) of signals transmitted by UE 105) and / or may receive measurements obtained by UE 105. The one or more base stations or APs may send these measurements to a location server (e.g., LMF 120) for use in calculating a location estimate for UE 105.

[0071] The information provided to LMF 120 by gNB 110a, 110b and / or ng-eNB 114 using NRPPa may include timing and configuration information for directional SS transmissions and location coordinates. LMF 120 may provide some or all of this information to UE 105 as assistance data in LPP and / or NPP messages via NG-RAN 135 and 5GC 140.

[0072] The LPP or NPP message sent from LMF 120 to UE 105 may instruct UE 105 to do any of a variety of things, depending on the desired functionality. For example, the LPP or NPP message may include instructions for UE 105 to obtain measurements for GNSS (or A-GNSS), WLAN, E-CID, and / or OTDOA (or some other positioning method). In the case of E-CID, the LPP or NPP message may instruct UE 105 to obtain one or more measurement parameters (e.g., beam ID, beam width, average angle, RSRP, RSRQ measurements) of directional signals transmitted within a particular cell supported by one or more of gNBs 110a, 110b, and / or ng-eNB 114 (or supported by some other type of base station, such as an eNB or WiFi AP). The UE 105 may send these measurement parameters back to the LMF 120 in an LPP or NPP message (e.g., within a 5G NAS message) via the serving gNB 110a (or serving ng-eNB 114) and the AMF 115.

[0073] As mentioned, although the communication system 100 is described with respect to 5G technology, the communication system 100 may be implemented to support other communication technologies (such as GSM, WCDMA, LTE, etc.) that are used to support and interact with mobile devices (such as UE 105) (e.g., to implement voice, data, positioning, and other functionality). In some such embodiments, the 5GC 140 may be configured to control different air interfaces. For example, the non-3GPP interworking function (N3IWF, Figure 1115) connects the 5GC 140 to the WLAN. For example, the WLAN may support IEEE 802.11 WiFi access for the UE 105 and may include one or more WiFi APs. Here, the N3IWF may be connected to the WLAN and other elements in the 5GC 140, such as the AMF 115. In some embodiments, both the NG-RAN 135 and the 5GC 140 may be replaced by one or more other RANs and one or more other core networks. For example, in the EPS, the NG-RAN 135 may be replaced by an E-UTRAN including an eNB, and the 5GC 140 may be replaced by an EPC including a mobility management entity (MME) replacing the AMF 115, an E-SMLC replacing the LMF 120, and a GMLC that may be similar to the GMLC 125. In such an EPS, the E-SMLC may use LPPa instead of NRPPa to send location information to and receive location information from the eNBs in the E-UTRAN, and may use LPP to support positioning of the UE 105. In these other embodiments, positioning of UE 105 using directional PRS may be supported in a manner similar to that described herein for 5G networks, with the difference that the functions and procedures described herein for gNB 110a, 110b, ng-eNB 114, AMF 115, and LMF 120 may in some cases be applied alternatively to other network elements, such as eNBs, WiFi APs, MMEs, and E-SMLCs.

[0074] As mentioned, in some embodiments, positioning functionality may be implemented at least in part using directional SS beams transmitted by base stations (such as gNBs 110a, 110b and / or ng-eNB 114) that are located at a UE (e.g., Figure 1 In some instances, the UE may use directional SS beams from multiple base stations (such as gNB 110a, 110b, ng-eNB 114, etc.) to calculate the positioning of the UE.

[0075] Also refer to Figure 2UE 200 is an example of UE 105 and includes a computing platform including a processor 210, a memory 211 including software (SW) 212, one or more sensors 213, a transceiver interface 214 for a transceiver 215, a user interface 216, a satellite positioning system (SPS) receiver 217, a camera 218, and a positioning (motion) device 219. The processor 210, the memory 211, the sensor(s) 213, the transceiver interface 214, the user interface 216, the SPS receiver 217, the camera 218, and the positioning (motion) device 219 can be communicatively coupled to each other via a bus 220 (which can be configured, for example, for optical communication and / or electrical communication). One or more of the devices shown (e.g., the camera 218, the positioning (motion) device 219, and / or one or more of the sensors 213, etc.) can be omitted from UE 200. The processor 210 may include one or more intelligent hardware devices (e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc.). The processor 210 may include multiple processors, including a general / application processor 230, a digital signal processor (DSP) 231, a modem processor 232, a video processor 233, and / or a sensor processor 234. One or more of the processors 230-234 may include multiple devices (e.g., multiple processors). For example, the sensor processor 234 may include, for example, a processor for radar, ultrasonic wave, and / or laser radar, etc. The modem processor 232 may support dual SIM / dual connectivity (or even more SIMs). For example, one SIM (subscriber identity module or subscriber identification module) may be used by an original equipment manufacturer (OEM), and another SIM may be used by an end user of the UE 200 to obtain connectivity. The memory 211 is a non-transitory storage medium, which may include a random access memory (RAM), a flash memory, a disk memory, and / or a read-only memory (ROM), etc. The memory 211 stores software 212, which may be processor-readable, processor-executable software code containing instructions that are configured to cause the processor 210 to perform various functions described herein when executed. Alternatively, the software 212 may not be directly executable by the processor 210, but may be configured (e.g., when compiled and executed) to cause the processor 210 to perform various functions. The present description may only refer to the processor 210 performing a function, but this includes other implementations, such as implementations in which the processor 210 executes software and / or firmware. The present description may refer to the processor 210 performing a function as a shorthand for one or more of the processors 230-234 performing the function. The present description may refer to the UE 200 performing a function as a shorthand for one or more appropriate components of the UE 200 performing the function. The processor 210 may include a memory with stored instructions as a supplement and / or alternative to the memory 211.The functionality of processor 210 is discussed more fully below.

[0076] Figure 2 The configuration of UE 200 shown in is an example and does not limit the present invention (including claims), and other configurations may be used. For example, an example configuration of UE includes one or more of processors 230-234 in processor 210, memory 211, and wireless transceiver 240. Other example configurations include one or more of processors 230-234 in processor 210, memory 211, wireless transceiver 240, and one or more of the following: (all) sensor 213, user interface 216, SPS receiver 217, camera 218, PMD 219, and / or wired transceiver 250.

[0077] UE 200 may include a modem processor 232 that may be capable of performing baseband processing of signals received and down-converted by transceiver 215 and / or SPS receiver 217. Modem processor 232 may perform baseband processing of signals to be up-converted for transmission by transceiver 215. Additionally or alternatively, baseband processing may be performed by processor 230 and / or DSP 231. However, other configurations may be used to perform baseband processing.

[0078] UE 200 may include sensor(s) 213, which may include, for example, an inertial measurement unit (IMU) 270, one or more magnetometers 271, and / or one or more environmental sensors 272. IMU 270 may include one or more inertial sensors, such as, for example, one or more accelerometers 273 (e.g., which collectively respond to acceleration of UE 200 in three dimensions) and / or one or more gyroscopes 274. Magnetometer(s) may provide measurements to determine orientation (e.g., relative to magnetic north and / or true north) that may be used for any of a variety of purposes (e.g., to support one or more compass applications). Environmental sensor(s) 272 may include, for example, one or more temperature sensors, one or more barometric pressure sensors, one or more ambient light sensors, one or more camera imagers, and / or one or more microphones, etc. Sensor(s) 213 may generate analog and / or digital signals, indications of which may be stored in memory 211 and processed by DSP 231 and / or processor 230 to support one or more applications (such as, for example, applications involving positioning and / or navigation operations).

[0079] The sensor(s) 213 may be used for relative position measurement, relative position determination, motion determination, etc. The information detected by the sensor(s) 213 may be used for motion detection, relative displacement, dead reckoning, sensor-based position determination, and / or sensor-assisted position determination. The sensor(s) 213 may be used to determine whether the UE 200 is fixed (stationary) or mobile and / or whether to report certain useful information related to the mobility of the UE 200 to the LMF 120. For example, based on the information obtained / measured by the sensor(s) 213, the UE 200 may notify / report to the LMF 120 that the UE 200 has detected movement or that the UE 200 has moved, and report the relative displacement / distance (e.g., via dead reckoning implemented by the sensor(s) 213, or sensor-based position determination, or sensor-assisted position determination). In another example, for relative positioning information, the sensor / IMU may be used to determine the angle and / or orientation of another device relative to the UE 200, etc.

[0080] IMU 270 may be configured to provide measurements of the direction of motion and / or speed of motion of UE 200, which may be used for relative position determination. For example, one or more accelerometers 273 and / or one or more gyroscopes 274 of IMU 270 may detect the linear acceleration and rotational speed of UE 200, respectively. The linear acceleration measurements and rotational speed measurements of UE 200 may be integrated over time to determine the instantaneous direction of motion and displacement of UE 200. The instantaneous direction of motion and displacement may be integrated to track the position of UE 200. For example, a reference position of UE 200 at a certain moment may be determined, for example, using SPS receiver 217 (and / or by some other means), and measurements obtained from (all) accelerometers 273 and (all) gyroscopes 274 after that moment may be used for dead reckoning to determine the current position of UE 200 based on the movement (direction and distance) of UE 200 relative to the reference position.

[0081] The magnetometer(s) 271 may determine the magnetic field strength in different directions, which may be used to determine the orientation of the UE 200. For example, the orientation may be used to provide a digital compass for the UE 200. The magnetometer(s) 271 may include a two-dimensional magnetometer configured to detect and provide an indication of the magnetic field strength in two orthogonal dimensions. Additionally or alternatively, the magnetometer(s) 271 may include a three-dimensional magnetometer configured to detect and provide an indication of the magnetic field strength in three orthogonal dimensions. The magnetometer(s) 271 may provide a device for sensing a magnetic field and providing a magnetic field indication, for example, to the processor 210.

[0082] The transceiver 215 may include a wireless transceiver 240 and a wired transceiver 250 configured to communicate with other devices via wireless connections and wired connections, respectively. For example, the wireless transceiver 240 may include a transmitter 242 and a receiver 244 coupled to one or more antennas 246 for transmitting (e.g., on one or more uplink channels) and / or receiving (e.g., on one or more downlink channels) wireless signals 248 and converting signals from the wireless signals 248 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 248. Thus, the transmitter 242 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the receiver 244 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 240 may be configured to communicate signals (e.g., with the TRP and / or one or more other devices) according to various radio access technologies (RATs), such as 5G New Radio (NR), GSM (Global System for Mobile Communications), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), Zigbee, etc. The new radio may use millimeter wave frequencies and / or sub-6 GHz frequencies. The wired transceiver 250 may include a transmitter 252 and a receiver 254 configured for wired communication (e.g., with the NG-RAN 135) to, for example, send communications to and receive communications from the gNB 110a. The transmitter 252 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the receiver 254 may include multiple receivers that may be discrete components or combined / integrated components. The wired transceiver 250 may be configured, for example, for optical communication and / or electrical communication. The transceiver 215 may be communicatively coupled to the transceiver interface 214 (e.g., via an optical connection and / or an electrical connection). The transceiver interface 214 may be at least partially integrated with the transceiver 215.

[0083] The user interface 216 may include one or more devices in a number of devices (such as, for example, a speaker, a microphone, a display device, a vibration device, a keyboard, a touch screen, etc.). The user interface 216 may include any device more than one of these devices. The user interface 216 may be configured to enable a user to interact with one or more applications hosted by the UE 200. For example, the user interface 216 may store an indication of an analog and / or digital signal in the memory 211 in response to an action from the user to be processed by the DSP 231 and / or the general processor 230. Similarly, the application hosted on the UE 200 may store an indication of an analog and / or digital signal in the memory 211 to present an output signal to the user. The user interface 216 may include an audio input / output (I / O) device, which includes, for example, a speaker, a microphone, a digital-to-analog circuit system, an analog-to-digital circuit system, an amplifier and / or a gain control circuit system (including any device more than one of these devices). Other configurations of audio I / O devices may be used. Additionally or alternatively, the user interface 216 may include one or more touch sensors that respond to touch and / or pressure on, for example, a keyboard and / or a touch screen of the user interface 216 .

[0084] The SPS receiver 217 (e.g., a global positioning system (GPS) receiver) may be capable of receiving and acquiring the SPS signal 260 via the SPS antenna 262. The antenna 262 is configured to convert the wireless signal 260 into a wired signal (e.g., an electrical signal or an optical signal) and may be integrated with the antenna 246. The SPS receiver 217 may be configured to process the acquired SPS signal 260 in whole or in part to estimate the position of the UE 200. For example, the SPS receiver 217 may be configured to determine the position of the UE 200 by performing trilateration using the SPS signal 260. The general purpose processor 230, the memory 211, the DSP 231, and / or one or more dedicated processors (not shown) may be utilized in conjunction with the SPS receiver 217 to process the acquired SPS signal in whole or in part, and / or calculate the estimated position of the UE 200. The memory 211 may store indications (e.g., measurements) of the SPS signal 260 and / or other signals (e.g., signals obtained from the wireless transceiver 240) for use in performing positioning operations. The general processor 230, the DSP 231, and / or one or more dedicated processors, and / or the memory 211 may provide or support a location engine for processing measurements to estimate the location of the UE 200.

[0085] UE 200 may include a camera 218 for capturing still or moving images. Camera 218 may include, for example, an imaging sensor (e.g., a charge coupled device or CMOS imager), a lens, analog-to-digital circuitry, a frame buffer, etc. Additional processing, conditioning, encoding, and / or compression of signals representing captured images may be performed by general purpose processor 230 and / or DSP 231. Additionally or alternatively, video processor 233 may perform conditioning, encoding, compression, and / or manipulation of signals representing captured images. Video processor 233 may decode / decompress stored image data for presentation on a display device (not shown) (e.g., of user interface 216).

[0086] Positioning (motion) device (PMD) 219 may be configured to determine the location and possible motion of UE 200. For example, PMD 219 may be in communication with, and / or include some or all of, SPS receiver 217. PMD 219 may additionally or alternatively be configured to use ground-based signals (e.g., at least some of signals 248) for trilateration, assist in obtaining and using SPS signals 260, or both to determine the location of UE 200. PMD 219 may be configured to determine the location of UE 200 using one or more other techniques (e.g., which rely on the UE's self-reported location (e.g., a portion of the UE's location beacon)), and may use a combination of techniques (e.g., SPS and ground-based positioning signals) to determine the location of UE 200. The PMD 219 may include one or more sensors 213 (e.g., gyroscope(s), accelerometer(s), magnetometer(s), etc.) that may sense the orientation and / or motion of the UE 200 and provide an indication of the orientation and / or motion, which the processor 210 (e.g., processor 230 and / or DSP 231) may be configured to use to determine the motion (e.g., velocity vector and / or acceleration vector) of the UE 200. The PMD 219 may be configured to provide an indication of uncertainty and / or error in the determined position and / or motion.

[0087] Also refer to Figure 3, an example of a TRP 300 for BSs 110a, 110b, 114 includes a computing platform including a processor 310, a memory 311 including software (SW) 312, a transceiver 315, and (optionally) an SPS receiver 317. The processor 310, the memory 311, the transceiver 315, and the SPS receiver 317 may be communicatively coupled to each other via a bus 320 (which may be configured, for example, for optical communication and / or electrical communication). One or more of the devices shown (e.g., a wireless interface and / or an SPS receiver 317) may be omitted from the TRP 300. The SPS receiver 317 may be configured similarly to the SPS receiver 217 to be able to receive and acquire an SPS signal 360 via an SPS antenna 362. The processor 310 may include one or more intelligent hardware devices (e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc.). The processor 310 may include multiple processors (e.g., including, for example, Figure 4 ). The memory 311 is a non-volatile storage medium that may include random access memory (RAM), flash memory, disk storage, and / or read-only memory (ROM), etc. The memory 311 stores software 312, which may be a processor-readable, processor-executable software code containing instructions that are configured to cause the processor 310 to perform the various functions described herein when executed. Alternatively, the software 312 may not be directly executable by the processor 310, but may be configured (for example, when compiled and executed) to cause the processor 310 to perform various functions. The present description may refer only to the processor 310 performing a function, but this includes other implementations, such as implementations in which the processor 310 executes software and / or firmware. The present description may refer to the processor 310 performing a function as a shorthand for one or more processors included in the processor 310 performing the function. The description may refer to TRP 300 performing a function as shorthand for one or more appropriate components of TRP 300 (and thereby one of BSs 110a, 110b, 114) performing that function. Processor 310 may include a memory with stored instructions in addition to and / or in lieu of memory 311. The functionality of processor 310 is discussed more fully below.

[0088] The transceiver 315 may include a wireless transceiver 340 and a wired transceiver 350 configured to communicate with other devices via wireless connections and wired connections, respectively. For example, the wireless transceiver 340 may include a transmitter 342 and a receiver 344 coupled to one or more antennas 346 for transmitting (e.g., on one or more uplink channels) and / or receiving (e.g., on one or more downlink channels) wireless signals 348 and converting signals from the wireless signals 348 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 348. Thus, the transmitter 342 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the receiver 344 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 340 may be configured to communicate in accordance with various radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobile Communications), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), Zigbee, etc.) to communicate signals (e.g., with UE 200, one or more other UEs, and / or one or more other devices). The wired transceiver 350 may include a transmitter 352 and a receiver 354 configured for wired communication (e.g., with the network 140) to, for example, send communications to and receive communications from the LMF 120. The transmitter 352 may include a plurality of transmitters that may be discrete components or combined / integrated components, and / or the receiver 354 may include a plurality of receivers that may be discrete components or combined / integrated components. The wired transceiver 350 may be configured, for example, for optical communication and / or electrical communication.

[0089] Figure 3 The configuration of TRP 300 shown in is an example and is not intended to limit the present invention (including the claims), and other configurations may be used. For example, the description herein discusses that TRP 300 is configured to perform or that TRP 300 performs several functions, but one or more of these functions may be performed by a networked server and / or UE 200 (i.e., server 400 and / or UE 200 may be configured to perform one or more of these functions).

[0090] Also refer to Figure 4, an example of server 400 includes a computing platform including a processor 410, a memory 411 including software (SW) 412, and a transceiver 415. Server 400 may be a network node, such as LMF 120, AMF 115, SMF 117, and GMLC 125. Processor 410, memory 411, and transceiver 415 may be communicatively coupled to each other via a bus 420 (which may be configured, for example, for optical communication and / or electrical communication). One or more of the devices shown (e.g., a wireless interface) may be omitted from server 400. Processor 410 may include one or more intelligent hardware devices (e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc.). Processor 410 may include multiple processors (e.g., including, for example, Figure 4 410 ). The memory 411 is a non-volatile storage medium that may include random access memory (RAM), flash memory, disk storage, and / or read-only memory (ROM), etc. The memory 411 stores software 412, which may be a processor-readable, processor-executable software code containing instructions that are configured to cause the processor 410 to perform various functions described herein when executed. Alternatively, the software 412 may not be directly executable by the processor 410, but may be configured (for example, when compiled and executed) to cause the processor 410 to perform various functions. The present description may only refer to the processor 410 performing a function, but this includes other implementations, such as implementations in which the processor 410 executes software and / or firmware. The present description may refer to the processor 410 performing a function as a shorthand for one or more processors included in the processor 410 performing the function. The present description may refer to the server 400 performing a function as a shorthand for one or more appropriate components of the server 400 performing the function. Processor 410 may include memory with stored instructions in addition to and / or in lieu of memory 411. The functionality of processor 410 is discussed more fully below.

[0091] The transceiver 415 may include a wireless transceiver 440 and a wired transceiver 450 configured to communicate with other devices via wireless connections and wired connections, respectively. For example, the wireless transceiver 440 may include a transmitter 442 and a receiver 444 coupled to one or more antennas 446 for transmitting (e.g., on one or more uplink channels) and / or receiving (e.g., on one or more downlink channels) wireless signals 448 and converting signals from the wireless signals 448 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 448. Thus, the transmitter 442 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the receiver 444 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 440 may be configured to communicate in accordance with various radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global Mobile System), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), Zigbee, etc.) to communicate signals (e.g., with UE 200, one or more other UEs, and / or one or more other devices). The wired transceiver 450 may include a transmitter 452 and a receiver 454 configured for wired communication (e.g., with NG-RAN 135) to, for example, send communications to TRP 300 and receive communications from TRP 300. The transmitter 452 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the receiver 454 may include multiple receivers that may be discrete components or combined / integrated components. The wired transceiver 450 may be configured, for example, for optical communication and / or electrical communication.

[0092] Figure 4 The configuration of the server 400 shown in is an example and is not intended to limit the present invention (including the claims), and other configurations may be used. For example, the wireless transceiver 440 may be omitted. Additionally or alternatively, the description herein discusses that the server 400 is configured to perform several functions or that the server 400 performs several functions, but one or more of these functions may be performed by the TRP 300 and / or the UE 200 (i.e., the TRP 300 and / or the UE 200 may be configured to perform one or more of these functions).

[0093] Reference Figure 5 , and further refer to Figure 1-4, shows a message diagram of an example network-assisted positioning procedure. The network includes one or more UEs 502 and one or more NG-RAN nodes 504. Figure 5 Only one UE 502 and only one NG-RAN node 504 are depicted, but multiple UEs 502 and NG-RAN nodes 504 may be used in an operating network. Figure 2 The NG-RAN node 504 is an example of a UE 200 as described in FIG. Figure 1 The gNB 110a or ng-eNB 114 described in Figure 3 The network also includes AMF 506 and LMF 508, which are also in Figure 1 (ie, AMF 115 and LMF 120). Figure 5 Depicted are procedures that may be used by the LMF 508 to support network-assisted positioning and network-based positioning. The procedures between the LMF 508 and the NG-RAN node 504 may be based on the NRPPa protocol in 3GPP TS 38.455.

[0094] In operation, the LMF 508 is configured to invoke a Namf communication N1N2 message transmission service operation 510 to the AMF 506 to request the transmission of a network positioning message to the serving NG-RAN node 504 (e.g., gNB or ng-eNB) of the UE 502. The service operation 510 may include a network positioning message and an LCS correlation identifier. The network positioning message may request location information about the UE 502 from the NG-RAN node 504. If the UE 502 is in an RCC idle state, the AMF 506 may initiate a network triggered service request procedure 512 (such as defined in 3GPP TS 38.455) to establish a signaling connection with the UE 502. In general, the term CM idle defines a state when the UE 502 does not have signaling with the AMF 506, while RRC idle is a state when the UE 502 is in CM idle and moves across different cells controlled by mobility based on cell reselection. CM idle and RRC idle are used interchangeably herein to illustrate lower power consumption compared to when the UE 502 is in a connected state. The AMF 506 is configured to forward the network location message to the serving NG-RAN node 504 in the N2 transfer request message 514. The AMF 506 may include a routing identifier in the N2 transfer request message 514 to identify the LMF 508 (e.g., a global address of the LMF 508). The serving NG-RAN node 504 is configured to obtain location information about the UE 502 based on the content of the N2 transfer message 514. The serving NG-RAN node 504 is configured to return the location information obtained at stage 516 to the AMF 506 in a network location message included in the N2 transfer response message 518. The serving NG-RAN node 504 is configured to also include the routing identifier provided in the N2 transfer request message 514. The AMF 506 may be configured to invoke the Namf communication N2 information notification service 520 to the LMF 508 indicated by the routing identifier provided in the N2 transport response message 518. The service 520 includes the network location message and the LCS correlation identifier received in the N2 transport response message 518. The process includes: Steps 1 to 6 may be repeated to request further location information and further NG-RAN capabilities.

[0095] In general, in current LTE and 5G procedures, when the AMF 506 receives a network positioning message 510 from the LMF 508 (which includes the UE ID according to 3GPP TS38.455), the AMF 506 contacts all NG-RAN nodes 504 that may be in communication with the UE 502. For example, the AMF 506 may utilize a network-triggered service request procedure 512 as defined in Section 4.2.3.3 of 3GPP TS 23.502. The procedure includes: the AMF 506 sends a paging message to all NG-RAN nodes 504, and these NG-RAN nodes 504 are then configured to send an over-the-air (OTA) paging message to the UE in their respective coverage areas. The UE 502 responds, and the corresponding NG-RAN node 504 provides the response to the AMF 506 within the procedure 512. The AMF 506 is configured to subsequently establish a dedicated connection between the NG-RAN node 504 and the AMF 506, which will be used to further signal messages to the UE 502. User Plane Function (UPF) ( Figure 5 502) may also have a connection with the NG-RAN node 504 to transfer user data to and from the UE 502. The UE 502 transitions to a connected state (e.g., RRC connected), which will use more battery when communicating. The UE 502 may also utilize OTA resources set up by the NG-RAN node 504 while in the connected state. In general, when the network-triggered service request procedure 512 is triggered, there will be subsequent data and / or signaling exchanges between the network and the UE 502. A dedicated backhaul connection between the AMF 506 and the LMF 508 (and UPF) is established to facilitate the data and signaling exchanges.

[0096] When the network triggered service request 512 is completed, the network location message 510 that was waiting at the AMF 506 may be sent to the NG-RAN node 504 via an N2 transfer request message 514. The NG-RAN node 504 then determines which measurements are required from the UE 502 and obtains those measurements at stage 516. The NG-RAN node 504 responds to the AMF 506 with an N2 transfer response message 518, and the AMF 506 then transmits this information to the LMF 508 using a network location message 520.

[0097] Reference Figure 6 , and further refer to Figure 1-5 , shows an example message diagram of the improved network-assisted positioning procedure. Figure 5 , Figure 6The network in the embodiment includes one or more UEs 602 and one or more NG-RAN nodes 604. A plurality of UEs 602 and NG-RAN nodes 604 may be used in the operating network. UE 602 is Figure 2 The example of UE 200 described in FIG. 1 and the NG-RAN node 604 is Figure 1 The gNB 110a or ng-eNB 114 described in Figure 3 The network also includes AMF 606 and LMF 608, which are also in Figure 1 In one embodiment, the AMF 115 and LMF 120 are described in Figure 6 The positioning measurements used in the network-assisted procedure of the LMF 608 are based on the enhanced cell ID (ECID). The location of the UE 602 can be determined based on the identity of the serving NG-RAN node 604 (cell ID), the distance between the serving NG-RAN node 604 and the UE 602 (as measured by the timing advance (TA) value), and the angle of arrival (AoA) of the transmission from the UE 602 to the NG-RAN node 604. These measurements (i.e., cell ID, TA, AoA) are sufficient for the LMF 608 to determine the location of the UE 602.

[0098] In operation, the LMF 608 is configured to invoke a Namf communication N1N2 message transmission service operation 610 to the AMF 606 to request transmission of a network positioning message to a serving NG-RAN node 604 (e.g., gNB 110a, 110b or ng-eNB 114) of the UE 602. The service operation 610 includes a network positioning message and an LCS correlation identifier. The network positioning message may request location information about the UE 602 from the NG-RAN node 604. The network positioning message in the service operation 610 requests a cell ID, timing advance (TA), and angle of arrival (AoA) measurements for UE 602 location determination. Figure 5 In contrast to the message diagram in FIG. 5 , if the UE 602 is in the CM Idle state, the AMF 606 does not trigger the network-triggered service request 512. Specifically, the AMF 606 is configured to perform Figure 6 The procedures provided in obtain the requested positioning measurements.

[0099] In step 2a, the AMF 606 forwards the network location message in the service operation 610 (or some aspects thereof) to the NG-RAN node 604 in a paging message 612. In step 2b, the NG-RAN node 604 is configured to transmit an over-the-air (OTA) paging message 614 for the UE 602. In an example, the NG-RAN node 604 may include an indication of dedicated resources for the UE 602 to transmit Msg1 616. In step 2c, the UE 602 is configured to transmit Msg1 616 on any random access procedure or dedicated resources (if provided). The NG-RAN node 604 is configured to receive from Msg1 the cell ID of the cell (i.e., the serving NG-RAN node 604) on which the TA and AoA measurements are obtained and on which the UE 602 performs access. In step 2d, the serving NG-RAN node 604 transmits Msg2 618 to confirm the receipt of Msg1 616. In one example, Msg2 618 may additionally include an indication of access complete to instruct UE 602 to maintain or return to idle mode operation. In step 3, the serving NG-RAN node 604 returns the location measurement obtained in step 2c to the AMF 606 in a network location message included in the initial UE message 620 (or similar message(s)). The serving NG-RAN node 604 is configured to include the routing identifier received in the paging message 612 in the initial UE message 620. In step 4, the AMF 606 invokes the Namf communication N2 information notification service 622 to the LMF 608 indicated by the routing identifier included in the initial UE message 620. The service operation 622 includes the network location message received from the initial UE message 620 and the LCS correlation identifier. Steps 1 to 4 may be repeated to request further location information and further NG-RAN capabilities.

[0100] In one example, the NG-RAN node 604 may utilize the Initial UE Message 620 (or similar message) to transmit the positioning measurements to the AMF 606. No signaling connection is established between the NG-RAN node 604 and the AMF 606. Additionally, since there may be no user data, the NG-RAN 604 node communicates with the user plane function (UPF), Figure 6 This allows the signaling overhead between network nodes to be reduced.

[0101] In one example, the paging message 612 from the AMF 606 to the NG-RAN node 604 may be enhanced to include a network location message. Other message formats may be used, but enhancing existing paging procedures and paging messages may reduce implementation impact. In one example, the paging message 614 from the NG-RAN node 604 to the UE 602 may be enhanced to include dedicated resources for the UE 602 to transmit Msg1616. In general, providing dedicated resources to the UE 602 in the paging message 614 may eliminate contention for resources to be used for random access. In one example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH). In one example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH) and a UL grant for transmission on a physical uplink shared channel (PUSCH). Including dedicated resources in the paging message 614 is optional. When dedicated resources are not provided in the paging message 614, the UE 602 may perform a contention-based random access procedure.

[0102] In one embodiment, Msg2 618 may include an indication to cause UE 602 to remain in (or return to) RRC idle mode operation. It may not be necessary to cause UE 602 to transition to RRC connected mode because the necessary positioning measurements have been obtained when Msg1 616 is received at NG-RAN node 604. Enabling UE 602 to remain in or return to RRC idle provides battery savings at UE 602 and reduces OTA resource consumption. In some examples, Msg2 618 includes a random access response media access control (MAC) layer protocol data unit (PDU). Msg2 618 may include an acknowledgment in a portion of a MAC subheader in a random access response MAC PDU. In one example, the indication to cause UE 602 to remain in RRC idle state is part of the MAC payload in the random access response MAC PDU.

[0103] Reference Figure 7 , showing Figure 6 Message diagram of the network-assisted positioning procedure with example security features. Figure 7 The security features provided in the 616 reduce the possibility of session hijacking by a malicious UE. For example, in a contention-based random access procedure, if Msg1 616 only includes a random access preamble transmission, it may be impossible for the network to identify UE 602 upon receipt of Msg1 616. In such a case, UE 602 may transmit its identity in Msg3, and the network may include an indication in Msg4 that UE 602 returns to RRC idle mode operation. Figure 6Msg3 and Msg4 are not shown in the figure. In 5G NR, the OTA paging message 614 is not secure (i.e., not encrypted or integrity protected). This means that any UE with a strong enough signal can decode and interpret the paging message 614. Figure 6 The unsecured procedure shown in does not require UE 602 to transmit any secure messages. While this may be desirable from the perspective of UE battery conservation and OTA resource consumption, it may be insecure because a malicious UE can decode paging message 614 and transmit Msg1 616. In this example, the network cannot distinguish whether Msg1 616 is sent by the intended UE (i.e., UE 602) or by a malicious UE ( Figure 6 716 (not shown). In one example, to protect against malicious UEs, UE 602 may be required to transmit a security message to verify its identity. The security message may be transmitted as part of Msg1 716 (contention-free access or contention-based access) or included in Msg3 (contention-free access or contention-based access). The message from UE 602 may be protected using a non-access stratum (NAS) security context available at UE 602. When UE 602 transmits Msg3 ( Figure 7 (not shown) - including its identity and / or including security messages - the network may include a security message in Msg4 ( Figure 7 (not shown) transmits an instruction to return UE 602 to RRC idle mode operation. Figure 7 In the exemplary procedure with security shown in , the security message is transmitted as part of Msg1 716, and the indication to return to RRC idle mode operation is transmitted in Msg2 618.

[0104] In one example, the UE 602 may be required to transmit a security message to verify its identity, and the NG-RAN 604 is configured to forward the security message received in Msg1 716 to the AMF 606 in the Initial UE Message 720 for security verification. If the verification is successful, the AMF 606 may proceed to Figure 6 and Figure 7 Otherwise, AMF 606 may start again from step 2. In case of repeated security verification failure, AMF 606 may notify LMF 608 that an error occurred in obtaining the requested positioning measurements.

[0105] Reference Figure 8 , and further refer to Figure 6 and Figure 7, a block diagram of an example media access control packet data unit (MAC PDU) 800 is shown. The MAC PDU 800 is described in 3GPP TS38.321. As used herein, a MAC sub-PDU 802 may be included in a Msg2 618 transmitted from a NG-RAN node 604 to a UE 602. The MAC sub-PDU 802 includes a RAPID sub-header block 804 and a MAC random access response (RAR) block 806. As used in Msg2, the NG-RAN 604 is configured to include a preamble received in Msg1 (e.g., 616, 716) in the RAPID sub-header block 804, which is used as an acknowledgement in Msg2. The payload in the MAC RAR block 806 may include an indication for the UE 602 to remain in or return to an idle mode of operation (e.g., RCC idle).

[0106] Reference Fig.9A , and further refer to Figure 1-8 , a method 900 for responding to a paging message on a dedicated resource using user equipment includes the stages shown. However, the method 900 is only an example and is not intended to be limiting. The method 900 may be modified, for example, by causing stages to be added, removed, rearranged, combined, performed concurrently, and / or causing a single stage to be split into multiple stages. For example, one or more stages may occur during Fig.9A Prior to the stages shown in , and / or one or more stages may occur Fig.9A After the stages shown in .

[0107] At stage 902, method 900 includes receiving an over-the-air (OTA) paging message indicating dedicated resources to perform access. The transceiver 215 in UE 200 is a means for receiving an OTA paging message. Figure 6 , the NG-RAN node 604 is configured to generate a paging message 614 that includes dedicated resources for the UE 602 to perform access. In one example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH). In another example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH) and a UL grant for transmission on a physical uplink shared channel (PUSCH).

[0108] At step 904, method 900 includes performing access using the dedicated resources. Processor 230 and transceiver 215 in UE 200 are means for performing access. UE 602 is configured to provide Msg1 616 to NG-RAN node 604 using dedicated resources. In an example, UE 602 may include a security message in Msg1 716 and provide the security message to NG-RAN node 604 using dedicated resources.

[0109] At stage 906, method 900 includes receiving an acknowledgment message in response to performing access. The transceiver 215 in UE 200 is a means for receiving an acknowledgment message. In an example, the NG-RAN node 604 is configured to provide Msg2 618 to UE 602, the Msg2 618 including an acknowledgment. The acknowledgment may utilize a portion of a MAC subheader PDU 802. In an example, the acknowledgment may be included in a RAPID subheader block 804. In an example, the acknowledgment message may optionally include an indication to keep UE 602 in an idle state.

[0110] Reference Fig. 9B , and further refer to Figure 1-8 , a method 920 for transmitting a paging message indicating dedicated resources includes the stages shown. However, the method 920 is only an example and is not intended to be limiting. The method 920 may be modified, for example, by having stages added, removed, rearranged, combined, performed concurrently, and / or having a single stage split into multiple stages. For example, one or more stages may occur during Fig. 9B Prior to the stages shown in , and / or one or more stages may occur Fig. 9B After the stages shown in .

[0111] At stage 922, method 920 includes transmitting an over-the-air (OTA) paging message indicating dedicated resources for user equipment to access. Transceiver 315 in TRP 300 is a means for transmitting an OTA paging message. Figure 6 , the NG-RAN node 604 is configured to transmit a paging message 614 including dedicated resources for the UE 602 to perform access. In one example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH). In another example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH) and a UL grant for transmission on a physical uplink shared channel (PUSCH).

[0112] At stage 924, method 920 includes receiving a response via the dedicated resource. Transceiver 315 in TRP 300 is a means for receiving a response. UE 602 is configured to provide Msg1 616 to NG-RAN node 604 using dedicated resources. In an example, UE 602 may include a security message in Msg1 716 and provide the security message to NG-RAN node 604 using dedicated resources.

[0113] Reference Fig. 9C , and further refer to Figure 1-8 , a method 940 for receiving an acknowledgement message indicating that the user equipment will remain in an idle state includes the stages shown. However, the method 940 is only an example and is not limiting. The method 940 may be modified, for example, by having stages added, removed, rearranged, combined, performed concurrently, and / or having a single stage split into multiple stages. For example, one or more stages may occur at Fig. 9C Prior to the stages shown in , and / or one or more stages may occur Fig. 9C After the stages shown in .

[0114] At stage 942, method 940 includes receiving an over-the-air (OTA) paging message. The transceiver 215 in UE 200 is a means for receiving an OTA paging message. Figure 6 In one example, the NG-RAN node 604 may be configured to generate a paging message 614 without an indication of dedicated resources. The paging message 614 may be similar to a known paging strategy, such as described in 3GPP TS 23.502, Section 4.2.3.3.

[0115] At stage 944, method 940 includes performing access using common resources. Processor 230 and transceiver 215 in UE 200 are means for performing access. UE 602 is configured to provide Msg1 616 to NG-RAN node 604 using common resources. For example, the common resources may be a contention-based random access procedure, and Msg1 616 may include a random access preamble transmission.

[0116] At stage 946, the method 940 includes receiving an acknowledgment message in response to performing the access, the acknowledgment message including an indication to remain in an idle state. The transceiver 215 in the UE 200 is a means for receiving the acknowledgment message. In an example, the NG-RAN node 604 is configured to provide a Msg2 618 to the UE 602, the Msg2 618 including an acknowledgment. The acknowledgment may utilize a portion of the MAC subheader PDU 802. In an example, the acknowledgment may be included in the RAPID subheader block 804, and the indication to keep the UE 602 in an idle state may be provided in the MAC RAR 806. The indication may be a bit, character, or other symbol in the payload of the MAC RAR 806. Other frames or subframes in the Msg2 618 may also be used to notify the UE 602 to remain in an idle state (e.g., CM idle, RRC idle).

[0117] Reference Fig.9D , and further refer to Figure 1-8 , a method 960 for transmitting an acknowledgement message indicating that the user equipment will remain in an idle state includes the stages shown. However, the method 960 is only an example and is not limiting. The method 960 may be modified, for example, by having stages added, removed, rearranged, combined, performed concurrently, and / or having a single stage split into multiple stages. For example, one or more stages may occur at Fig.9D Prior to the stages shown in , and / or one or more stages may occur Fig.9D After the stages shown in .

[0118] At stage 962, method 960 includes transmitting an over-the-air (OTA) paging message to the user equipment. The transceiver 315 in the TRP 300 is a means for transmitting an OTA paging message. Figure 6 In an example, the NG-RAN node 604 may be configured to generate a paging message 614 without an indication of dedicated resources. The paging message 614 may be similar to known paging strategies, such as described in 3GPP TS 23.502 Section 4.2.3.3.

[0119] At stage 964, method 960 includes receiving a response via the common resource. Transceiver 315 in TRP 300 is a means for receiving a response. In an example, UE 602 is configured to provide Msg1 616 to NG-RAN node 604 using the common resource. For example, the common resource may be a contention-based random access procedure, and Msg1 616 may include a random access preamble transmission.

[0120] At stage 966, method 960 includes transmitting an acknowledgment message including an indication to keep the user equipment in an idle state. The transceiver 315 in the TRP 300 is a means for transmitting an acknowledgment message. The NG-RAN node 604 is configured to provide a Msg2 618 to the UE 602, the Msg2 618 including an acknowledgment. In an example, the acknowledgment message may utilize a portion of the MAC subheader PDU 802 (e.g., the RAPID subheader block 804). The indication to keep the UE 602 in an idle state may be provided in the MAC RAR 806 of the MAC subheader PDU 802. The indication may be a bit, character, or other symbol in the payload of the MAC RAR 806. Other frames or subframes in the Msg2 618 may also be used to notify the UE 602 to remain in or change to an idle state (e.g., CM idle, RRC idle).

[0121] Reference Fig.10 , and further refer to Figure 1-8 , method 1000 for providing location information to a network server includes the stages shown. However, method 1000 is exemplary and not limiting. Method 1000 may be modified, for example, by having stages added, removed, rearranged, combined, performed concurrently, and / or having a single stage split into multiple stages. For example, one or more stages may occur during Fig.10 Prior to the stages shown in , and / or one or more stages may occur Fig.10 After the stages shown in .

[0122] At stage 1002, method 1000 includes receiving a paging message requesting positioning information about a user equipment from a network server. The wired transceiver 315 in the TRP 300 is a device for receiving a paging message. In an example, the NG-RAN node 604 is configured to receive a paging message 612 from the AMF 606. The paging message 612 may indicate that ECID positioning information (such as a cell ID (of the serving NG-RAN node 604)) and a TA and AoA associated with a transmission received by the NG-RAN node 604 from the UE 602 are required. Other positioning information may be included in the paging message 612.

[0123] At stage 1004, method 1000 includes transmitting an over-the-air (OTA) paging message for a user equipment. The wireless transceiver 340 in the TRP 300 is a means for transmitting an OTA paging message. The NG-RAN node 604 is configured to transmit an OTA paging message 614. The paging message 614 may be similar to a known paging strategy, such as described in Section 4.2.3.3 of 3GPP TS 23.502. In an example, the paging message 614 may optionally include an indication of dedicated resources for the UE 602 to use for transmitting Msg1 616. Providing an indication of dedicated resources to the UE 602 may eliminate contention for resources to be used by the UE 602 for random access. In an example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH). In an example, the dedicated resources may constitute a preamble for transmission on a random access channel (RACH) and an UL grant for transmission on a physical uplink shared channel (PUSCH).

[0124] At stage 1006, method 1000 includes receiving a response message from the user equipment. The wireless transceiver 340 in the TRP 300 is a device for receiving a response message. In one example, the UE 602 is configured to provide Msg1 616 to the NG-RAN node 604 using common resources. For example, the common resources may be a random access procedure based on contention, and the Msg1 616 may include a random access preamble transmission. In another example, the UE 602 is configured to provide Msg1 616 to the NG-RAN node 604 using dedicated resources. The dedicated resources may constitute a preamble for transmission on a random access channel (RACH), or the dedicated resources may constitute a preamble for transmission on a random access channel (RACH) and an UL grant for transmission on a physical uplink shared channel (PUSCH). In another example, the UE 602 may include a security message in Msg1 716 and provide the security message to the NG-RAN node 604 using dedicated resources.

[0125] At stage 1008, method 1000 includes determining positioning information based at least in part on the response message. Processor 310 and wireless transceiver 340 in TRP 300 are means for determining positioning information. UE 602 provides the response message (i.e., Msg1 616) to NG-RAN node 604. The TA value may be based on the uplink and downlink timing in Msg1 616. For example, in 5G timing advance, an uplink frame for transmission from UE 602 may be T before the start of a corresponding downlink frame at UE 602. TA =(N TA +N TA偏移 )*Tc, where N TA偏移Depends on the frequency band. AoA may be determined by the NG-RAN node 604 based on a receiver beamforming process. The NG-RAN node 604 may be configured to generate receive beams across the coverage area and utilize one or more of these receive beams to detect Msg1 616. AoA may be determined based on the angle of the receive beam and the corresponding signal strength in the respective receive beam. Other beamforming techniques may also be used to determine AoA. The NG-RAN node 604 is configured to provide positioning information to the network, which includes the cell ID, TA, and AoA.

[0126] At stage 1010, method 1000 includes transmitting an access complete message to the user equipment. The transceiver 315 in the TRP 300 is a means for transmitting the access complete message. The NG-RAN node 604 is configured to provide a Msg2 618 to the UE 602, the Msg2 618 including an acknowledgment. The Msg2 618 may utilize a portion of the MAC subheader PDU 802, and the acknowledgment may be included in the RAPID subheader block 804. In an example, an indication to keep the UE 602 in an idle state may be provided in the MAC RAR 806 of the MAC subheader PDU 802. The indication may be a bit, character, or other symbol in the payload of the MAC RAR 806. Other frames or subframes in the Msg2 618 may also be used to notify the UE 602 to remain in an idle state (e.g., CM idle, RRC idle).

[0127] At stage 1012, method 1000 includes providing positioning information to a network server. The wired transceiver 350 in the TRP 300 is a means for providing positioning information. The NG-RAN node 604 is configured to provide the cell ID, TA, and AoA values ​​to the AMF 606 via an initial UE message 620 or a similar message. The initial UE message 620 reduces or eliminates the need to signal a connection established between the NG-RAN node 604 and the AMF 606, and thus can reduce the signaling overhead required between network nodes. In an example, the NG-RAN node 604 may provide the positioning information in a security message (such as the initial UE message 720), and the AMF 606 may be configured to confirm the security message.

[0128] Other examples and implementations fall within the scope and spirit of the present disclosure and the appended claims. For example, due to the nature of software and computers, the above functions can be implemented using software, hardware, firmware, hard wiring, or any combination thereof executed by a processor. Features that implement the functions can also be physically located in various locations, including being distributed so that parts of the functions are implemented at different physical locations. For example, one or more functions or one or more parts thereof that occur in the server 400 discussed above can be performed outside the server 400 (such as by the TRP 300).

[0129] As used herein, the singular forms "a", "an", and "the" also include the plural forms, unless the context clearly indicates otherwise. For example, "a processor" may include one processor or multiple processors. As used herein, the terms "comprises", "having", "includes" and / or "contains" specify the presence of stated features, integers, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0130] Similarly, as used herein, “or” used in a list of items followed by “at least one of” or followed by “one or more of” indicates a disjunctive list, so that, for example, a list of “at least one of A, B, or C” or a list of “one or more of A, B, or C” means A or B or C or AB or AC or BC or ABC (i.e., A and B and C), or a combination having more than one feature (e.g., AA, AAB, ABBC, etc.).

[0131] As used herein, unless otherwise stated, a recitation that a function or operation is “based on” an item or condition means that the function or operation is based on the recited item or condition, and may be based on one or more items and / or conditions other than the recited item or condition.

[0132] Furthermore, an indication that information is sent or transmitted "to" an entity, or a statement that information is sent or transmitted "to" an entity, is not required to complete the communication. Such indications or statements include situations where information is passed from a transmitting entity but does not reach the intended recipient of the information. An intended recipient may be referred to as a receiving entity, e.g., a receiving execution environment, even if the information is not actually received. Furthermore, an entity configured to send or transmit information "to" an intended recipient is not required to be configured to complete the delivery of the information to the intended recipient. For example, the entity may provide information with an indication of the intended recipient to another entity that is capable of forwarding the information and the indication of the intended recipient.

[0133] A wireless communication system is a system in which at least some communications are transmitted wirelessly, for example, by electromagnetic waves and / or sound waves propagating through atmospheric space rather than through wires or other physical connections. A wireless communication network may not enable all communications to be transmitted wirelessly, but may be configured to enable at least some communications to be transmitted wirelessly. In addition, the term "wireless communication device" or similar terms does not require that the functionality of the device is exclusively or uniformly primarily used for communication, or that the device is a mobile device, but rather indicates that the device includes wireless communication capabilities (unidirectional or bidirectional), for example, including at least one radio (each radio is part of a transmitter, receiver or transceiver) for wireless communication.

[0134] Substantial modifications may be made depending on specific requirements. For example, customized hardware may also be used, and / or specific elements may be implemented in hardware, software (including portable software, such as applets, etc.), or both. In addition, connections to other computing devices (such as network input / output devices) may be employed.

[0135] As used herein, the terms "processor-readable medium," "machine-readable medium," and "computer-readable medium" refer to any medium that participates in providing data that causes a machine to operate in a particular manner. Using a computer system, various computer-readable media may be involved in providing instructions / codes for execution to the processor(s), and / or may be used to store and / or carry such instructions / codes (e.g., as signals). In many implementations, computer-readable media are physical and / or tangible storage media. Such media may take many forms, including, but not limited to, non-volatile media and volatile media. Non-volatile media include, for example, optical disks and / or magnetic disks. Volatile media include, but are not limited to, dynamic memory.

[0136] Common forms of physical and / or tangible computer readable media include, for example: a floppy disk, a flexible disk, a hard disk, a magnetic tape, or any other magnetic medium, a CD-ROM, any other optical medium, a RAM, a PROM, an EPROM, a FLASH-EPROM, any other memory chip or memory cartridge, a carrier wave as described hereinafter, or any other medium from which a computer can read instructions and / or code.

[0137] Various forms of computer-readable media may be involved in carrying one or more sequences of one or more instructions to one or more processors for execution. By way of example only, the instructions may initially be carried on a magnetic disk and / or optical disc of a remote computer. The remote computer may download the instructions into its dynamic memory and send the instructions as signals over a transmission medium for receipt and / or execution by the computer system.

[0138] The methods, systems, and devices discussed above are examples. Various configurations may appropriately omit, replace, or add various procedures or components. For example, in an alternative configuration, the methods may be performed in an order different from the order described, and various steps may be added, omitted, or combined. In addition, the features described with respect to certain configurations may be combined in various other configurations. Different aspects and elements of the configurations may be combined in a similar manner. In addition, technology may evolve, and thus, many elements are examples, without limiting the scope of the present disclosure or claims.

[0139] Specific details are given in this description to provide a thorough understanding of example configurations (including implementations). However, these configurations can be practiced without these specific details. For example, well-known circuits, processes, algorithms, structures, and techniques have been shown without unnecessary details to avoid confusing these configurations. This description only provides example configurations without limiting the scope, applicability, or configuration of the claims. On the contrary, the previous description of the configuration provides a description for implementing the technology. Various changes can be made to the function and arrangement of the elements without departing from the spirit or scope of the present disclosure.

[0140] Each configuration may also be described as a process depicted as a flow chart or block diagram. Although each flow chart or block diagram may describe the operation as a sequential process, some operations may be performed in parallel or simultaneously. In addition, the order of the operations may be rearranged. The process may have additional stages and functions that are not included in the accompanying drawings. In addition, examples of these methods may be implemented by hardware, software, firmware, middleware, microcode, hardware description language, or any combination thereof. When implemented in software, firmware, middleware, or microcode, the program code or code segment for performing the task may be stored in a non-transient computer-readable medium (such as a storage medium). The processor may perform one or more of the described tasks.

[0141] Components shown in the drawings and / or discussed herein as being connected, coupled (e.g., communicatively coupled), or in communication with each other (functionally or otherwise) are operatively coupled. That is, they can be connected directly or indirectly by wire and / or wirelessly to enable signal transmission between them.

[0142] Several example configurations have been described, and various modifications, alternative constructions, and equivalents may be used without departing from the spirit of the present disclosure. For example, the above elements may be components of a larger system, in which other rules may take precedence over the application of the present invention or otherwise modify the application of the present invention. In addition, several operations may be taken before, during, or after considering the above elements. Accordingly, the above description does not limit the scope of the claims.

[0143] "About" and / or "about" as used herein in reference to a measurable value (such as an amount, a duration of time, etc.) encompasses deviations of ±20% or ±10%, ±5%, or +0.1% from the specified value, as is appropriate in the context of the systems, devices, circuits, methods, and other implementations described herein. "Substantially" as used herein in reference to a measurable value (such as an amount, a duration of time, a physical property (such as a frequency), etc.) also encompasses deviations of ±20% or ±10%, ±5%, or +0.1% from the specified value, as is appropriate in the context of the systems, devices, circuits, methods, and other implementations described herein.

[0144] A statement that a value exceeds (or is greater than or higher than) a first threshold is equivalent to a statement that a value meets or exceeds a second threshold that is slightly greater than the first threshold, e.g., the second threshold is one value higher than the first threshold in the resolution of the computing system. A statement that a value is less than (or within or below) a first threshold is equivalent to a statement that a value is less than or equal to a second threshold that is slightly lower than the first threshold, e.g., the second threshold is one value lower than the first threshold in the resolution of the computing system.

[0145] Furthermore, more than one invention may be disclosed.

Claims

1. A method for responding to an over-the-air paging message with a user equipment (UE), wherein the over-the-air paging message is based on a network positioning message for determining the location of the UE with a base station, the method comprising: receiving, while in an idle state, the over-the-air paging message indicating dedicated resources to perform access, wherein the over-the-air paging message is based on a network location message; generating, while in the idle state, an encrypted security message including identification information associated with the UE; performing access and providing the encrypted security message using the dedicated resources while in the idle state, wherein providing the encrypted security message comprises transmitting the encrypted security message to the dedicated resources to determine the location of the UE with the base station; as well as An acknowledgement message is received in response to performing an access while in the idle state.

2. The method of claim 1, wherein the dedicated resources include a preamble for transmission on a random access channel.

3. The method of claim 1, wherein the dedicated resources include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

4. A method for transmitting an over-the-air paging message using a base station, wherein the over-the-air paging message is based on a network positioning message used to determine a location of a user equipment (UE) using the base station, the method comprising: transmitting the over-the-air paging message indicating dedicated resources to perform access to the UE in an idle state, wherein the over-the-air paging message is based on a network location message; receiving, via the dedicated resources, a response including a cryptographically secured message from the UE in the idle state; as well as The location of the UE is determined according to the response.

5. The method of claim 4, wherein the dedicated resources include a preamble for transmission on a random access channel.

6. The method of claim 4, wherein the dedicated resources include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

7. A device comprising: Memory; at least one transceiver; at least one processor communicatively coupled to the memory and the at least one transceiver and configured to: receiving, with the at least one transceiver while in an idle state, an over-the-air paging message indicating dedicated resources to perform access, wherein the over-the-air paging message is based on a network location message used to determine a location of a user equipment (UE) with a base station; generating, while in the idle state, an encrypted security message including identification information associated with the device; performing access and providing the encrypted security message using the dedicated resources while in the idle state, the at least one processor being configured to provide the encrypted security message by: transmitting the encrypted security message to the dedicated resources to determine the location of the UE using the base station; as well as An acknowledgement message is received with the at least one transceiver in response to performing an access while in the idle state.

8. The apparatus of claim 7, wherein the dedicated resources include a preamble for transmission on a random access channel.

9. The apparatus of claim 7, wherein the dedicated resources include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

10. An apparatus comprising: Memory; at least one transceiver; at least one processor operably coupled to the memory and the at least one transceiver and configured to: transmitting, with the at least one transceiver, an over-the-air paging message to a user equipment (UE) in an idle state, the over-the-air paging message indicating dedicated resources to perform access, wherein the over-the-air paging message is based on a network location message used to determine a location of the user equipment (UE) with a base station; receiving, with the at least one transceiver via the dedicated resources, a response including a cryptographically secure message from the UE in the idle state; as well as The location of the UE is determined according to the response.

11. The apparatus of claim 10, wherein the dedicated resources include a preamble for transmission on a random access channel.

12. The apparatus of claim 10, wherein the dedicated resources include a preamble for transmission on a random access channel and an uplink grant for transmission on a physical uplink shared channel.

13. An apparatus for responding to an over-the-air paging message with a user equipment (UE), wherein the over-the-air paging message is based on a network positioning message for determining the location of the UE with a base station, the apparatus comprising: means for receiving, while in an idle state, the over-the-air paging message indicating dedicated resources to perform access, wherein the over-the-air paging message is based on a network location message; means for generating, while in the idle state, an encrypted security message comprising identification information associated with the UE; means for performing access using the dedicated resources and providing the encrypted security message while in the idle state, wherein providing the encrypted security message comprises transmitting the encrypted security message to the dedicated resources to determine a location of the UE with the base station; as well as means for receiving an acknowledgement message in response to performing an access while in the idle state.

14. An apparatus for transmitting an over-the-air paging message using a base station, wherein the over-the-air paging message is based on a network positioning message used to determine a location of a user equipment (UE) using the base station, the apparatus comprising: means for transmitting the over-the-air paging message indicating dedicated resources to perform access to the UE in an idle state, wherein the over-the-air paging message is based on a network location message; means for receiving, via the dedicated resources, a response including a cryptographically secured message from the UE in the idle state; as well as means for determining a location of the UE based on the response.

15. A non-transitory processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to respond to an over-the-air paging message with a user equipment (UE), wherein the over-the-air paging message is based on a network location message for determining a location of the UE with a base station, the processor-readable instructions comprising: code for receiving, while in an idle state, the over-the-air paging message indicating dedicated resources to perform access, wherein the over-the-air paging message is based on a network location message; code for generating, while in the idle state, an encrypted security message comprising identification information associated with the UE; code for performing access using the dedicated resources and providing the encrypted security message while in the idle state, wherein providing the encrypted security message comprises transmitting the encrypted security message to the dedicated resources to determine a location of the UE with the base station; as well as Code for receiving an acknowledgement message in response to performing an access while in the idle state.

16. A non-transitory processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to utilize a base station to transmit an over-the-air paging message, wherein the over-the-air paging message is based on a network location message for determining a location of a user equipment (UE) utilizing the base station, the processor-readable instructions comprising: code for transmitting the over-the-air paging message indicating dedicated resources to perform access to the UE in an idle state, wherein the over-the-air paging message is based on a network location message; code for receiving, via the dedicated resources, a response including a cryptographically secured message from the UE in the idle state; as well as Code for determining a location of the UE based on the response.

Images