Security enhancements for ranging using external infrastructure

Abstract

A first wireless device may receive a plurality of positioning signals from a second wireless device and a third wireless device during a plurality of time domains. The first wireless device may measure the plurality of positioning signals. The first wireless device may calculate a plurality of location attributes corresponding to the plurality of time domains based on the measured plurality of positioning signals. The first wireless device may transmit a report message that includes a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of the calculated plurality of location attributes corresponding to the plurality of time domains.

Description

[0001] Cross-reference to related applications

[0002] This application claims the benefit of Greek patent application No. 20230100636, filed on July 31, 2023, entitled “SECURITY ENHANCEMENTS FORRANGING USING EXTERNAL INFRASTRUCTURE”, the entire contents of which are expressly incorporated herein by reference. Technical Field

[0003] This disclosure relates generally to communication systems, and more specifically to security infrastructure for positioning systems. Background Technology

[0004] Wireless communication systems are widely deployed to provide a variety of telecommunications services, such as telephone, video, data, messaging, and broadcasting. Typical wireless communication systems may employ multiple access technologies capable of supporting communication with multiple users by sharing available system resources. Examples of such multiple access technologies include Code Division Multiple Access (CDMA) systems, Time Division Multiple Access (TDMA) systems, Frequency Division Multiple Access (FDMA) systems, Orthogonal Frequency Division Multiple Access (OFDMA) systems, Single Carrier Frequency Division Multiple Access (SC-FDMA) systems, and Time Division Synchronous Code Division Multiple Access (TD-SCDMA) systems.

[0005] These multiple access technologies have been adopted in various telecommunications standards to provide a common protocol that enables different wireless devices to communicate at the city, national, regional, and even global levels. An example telecommunications standard is 5G New Radio (NR). 5G NR is part of the Continuous Evolution of Mobile Broadband (CEM) program issued by the 3rd Generation Partnership Project (3GPP) to meet new requirements associated with latency, reliability, security, scalability (e.g., with the Internet of Things (IoT),) and other requirements. 5G NR includes services associated with enhanced mobile broadband (eMBB), massive machine-type communications (mMTC), and ultra-reliable low-latency communications (URLLC). Some aspects of 5G NR can be based on the 4G Long Term Evolution (LTE) standard. Further improvements to 5G NR technology are needed. Furthermore, these improvements can also be applied to other multiple access technologies and telecommunications standards that adopt these technologies. Summary of the Invention

[0006] The following is a simplified summary of one or more aspects to provide a basic understanding of these aspects. This summary is not a comprehensive overview of all conceived aspects. It neither identifies key or essential elements of all aspects nor describes the scope of any or all aspects. Its sole purpose is to present some concepts of one or more aspects in a simplified form as a prelude to the more detailed descriptions that follow.

[0007] In one aspect of this disclosure, a method, computer-readable medium, and apparatus are provided. The apparatus may include a first wireless device. The apparatus may receive multiple location signals from a second and a third wireless device during multiple time domains. The apparatus may measure the multiple location signals. The apparatus may calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. The apparatus may send a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains.

[0008] In some respects, the calculated location attributes may include at least one of the following: time of arrival (ToA), angle of arrival (AoA), reference signal strength indicator (RSSI), channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location.

[0009] In some respects, the multiple positioning signals may include at least one of the following: Bluetooth Low Energy (BLE) signal, Ultra Wideband (UWB) signal, Wi-Fi signal, or sidelink signal.

[0010] In some respects, these multiple time domains may include a set of periodically equal time domains.

[0011] In some aspects, the device can calculate a reliability metric for each of the plurality of time domains. The report message may include at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the plurality of time domains based on the reliability metric for each of the plurality of time domains.

[0012] In some aspects, the device may calculate the reliability metric for each of the plurality of time domains by: calculating the reliability metric for each of the plurality of time domains based on at least one of the following: histograms of the plurality of location attributes, Gaussian models of the plurality of location attributes, standard deviations of the plurality of location attributes, signal-to-interference-plus-noise ratio (SINR) corresponding to each of the plurality of location signals, or intensity indicators of peak values ​​in the corresponding channel response associated with each of the plurality of location signals.

[0013] In some aspects, the device may receive a set of reporting messages from a set of wireless devices. Each reporting message in the set may include a second set of location attributes corresponding to the multiple time domains. The device may identify the abnormal transmission based on the multiple location attributes and each of the second set of location attributes.

[0014] In some respects, the device may identify the anomalous transmission by: calculating the location of the second wireless device or the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a second location other than the calculated location.

[0015] In some respects, the device may identify the anomalous transmission by: calculating the distance between the second wireless device and the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a device that is at a second distance from at least one of the second wireless device and the third wireless device, the second distance being different from the calculated distance.

[0016] In some respects, the device may identify an abnormal reporting message in the group of reporting messages based on each of the plurality of location attributes and the second plurality of location attributes; and may ignore subgroups of the group of reporting messages associated with the abnormal reporting message in response to the identification of the abnormal reporting message.

[0017] In some aspects, the second wireless device and the third wireless device can conduct a location session based on the plurality of location signals. In other words, the second wireless device and the third wireless device can conduct a location session relative to each other based on at least one of the following: the second wireless device sends a location signal to the third wireless device; or the third wireless device sends a location signal to the second wireless device. The plurality of location attributes can be associated with at least one of the second wireless device or the third wireless device.

[0018] In some aspects, the device may include an access point (AP). In some aspects, the second wireless device may include a first user equipment (UE). In some aspects, the third wireless device may include a second UE.

[0019] In one aspect of this disclosure, a method, computer-readable medium, and apparatus are provided. The apparatus may include a first wireless device. The apparatus may receive a set of location signals from a second wireless device during multiple time domains. The apparatus may receive a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of multiple location attributes corresponding to the multiple time domains. The apparatus may measure the set of location signals. The apparatus may select a subgroup of the measured set of location signals based on at least one of the first indicator or the second indicator. The apparatus may calculate the location of the second wireless device based on the subgroup of the measured set of location signals.

[0020] In some respects, the plurality of location attributes may include at least one of the following: time of arrival (ToA), angle of arrival (AoA), reference signal strength indicator (RSSI), channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location.

[0021] In some respects, the set of location signals may include at least one of the following: Bluetooth Low Energy (BLE) signal, Ultra Wideband (UWB) signal, Wi-Fi signal, or sidelink signal.

[0022] In some respects, these multiple time domains may include a set of periodically equal time domains.

[0023] In some aspects, the report message may include at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of the plurality of time domains based on a sorted list of the reliability metrics for each of the plurality of time domains. The device may select the subgroup of the measured set of positioning signals by further selecting the subgroup of the measured set of positioning signals based on at least one of the third or fourth indicators.

[0024] In some aspects, the device may receive the report message by receiving it from a third wireless device. The device may also receive a second report message from a fourth wireless device. The second report message may include a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains. The device may select the subgroup of the measured set of location signals by further selecting the subgroup of the measured set of location signals based on at least one of the third or fourth indicator.

[0025] In some respects, the third wireless device may include a first access point (AP). The fourth wireless device may include a second AP.

[0026] In some aspects, the device may include a first user equipment (UE). The second wireless device may include a second UE. Attached Figure Description

[0027] Figure 1 This is a diagram illustrating an example of a wireless communication system and an access network.

[0028] Figure 2A This is an illustration of an example of the first frame according to various aspects of this disclosure.

[0029] Figure 2B This is a diagram illustrating examples of downlink (DL) channels within a subframe according to various aspects of this disclosure.

[0030] Figure 2C This is an illustration of an example of a second frame according to various aspects of this disclosure.

[0031] Figure 2D This is a diagram illustrating examples of uplink (UL) channels within a subframe according to various aspects of this disclosure.

[0032] Figure 3 This is a diagram illustrating examples of base stations and user equipment (UEs) in an access network.

[0033] Figure 4 This is a diagram illustrating an example of positioning based on reference signal measurements.

[0034] Figures 5A to 5B This is a diagram illustrating an example of location tracking in the presence of malicious devices that could interfere with the tracking process.

[0035] Figures 6A to 6B This is an illustration of an example of location in the presence of a monitoring device that can identify abnormal transmissions sent by a malicious device.

[0036] Figure 7 This is a connection flowchart illustrating an example of location in the presence of a set of monitoring devices that can identify an abnormal transmission sent by a malicious device.

[0037] Figure 8 This is a flowchart of a wireless communication method.

[0038] Figure 9 This is a flowchart of a wireless communication method.

[0039] Figure 10 This is a flowchart of a wireless communication method.

[0040] Figure 11 This is a flowchart of a wireless communication method.

[0041] Figure 12This is a flowchart of a wireless communication method.

[0042] Figure 13 These are illustrations of examples of hardware implementations of example devices and / or network entities.

[0043] Figure 14 This is a diagram illustrating an example of the hardware implementation of a sample network entity.

[0044] Figure 15 This is a diagram illustrating an example of the hardware implementation of a sample network entity. Detailed Implementation

[0045] The following description relates to examples intended to illustrate the innovative aspects of this disclosure. However, those skilled in the art will recognize that the teachings herein can be applied in numerous ways. Some or all of the examples described can be applied in Bluetooth systems that meet the requirements of the Institute of Electrical and Electronics Engineers (IEEE) 802.11, IEEE 802.15, or Bluetooth as defined by the Bluetooth Special Interest Group (SIG). ® The described examples can be implemented in any device, system, or network capable of transmitting and receiving radio frequency (RF) signals according to one or more of the following standards, or those published by the 3rd Generation Partnership Project (3GPP): Long Term Evolution (LTE), 3G, 4G, or 5G (New Radio (NR)). The examples described can be implemented in any device, system, or network capable of transmitting and receiving RF signals according to one or more of the following technologies or techniques: Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal FDMA (OFDMA), Single Carrier FDMA (SC-FDMA), Space Division Multiple Access (SDMA), Rate Split Multiple Access (RSMA), Multi-User Shared Access (MUSA), Single-User (SU) Multiple-Input Multiple-Output (MIMO), and Multi-User (MU) MIMO. The examples described can also be implemented using other wireless communication protocols or RF signals suitable for use in one or more of the following wireless personal area networks (WPAN), wireless local area networks (WLAN), wireless wide area networks (WWAN), wireless metropolitan area networks (WMAN), or Internet of Things (IoT) networks.

[0046] The overall scope involves the authentication of location signals. Some aspects more specifically involve enhancing the security of location sessions using infrastructure external to the device performing the location. In some examples, a first wireless device may receive multiple location signals from a second and a third wireless device over multiple time domains. The first wireless device may measure these multiple location signals. The first wireless device may calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. The first wireless device may send a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains.

[0047] In some examples, a first wireless device may receive a set of location signals from a second wireless device over multiple time domains. The first wireless device may receive a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of multiple location attributes corresponding to the multiple time domains. The first wireless device may measure the set of location signals. The first wireless device may select a subgroup of the measured set of location signals based on at least one of the first or second indicators. The first wireless device may calculate the location of the second wireless device based on the subgroup of the measured set of location signals.

[0048] In some aspects, the system may passively validate distance estimates (e.g., round-trip time (RTT) or round-trip phase (RTP)) and notify users using environmental wireless infrastructure such as access points (APs) when a security breach occurs. In some aspects, one or more APs may be configured to monitor ranging measurements exchanged between nodes (e.g., UEs, TRPs) and may compare these measurements with the AP's own ranging calculations based on differential time of arrival (DTOA) and / or differential angle of arrival (DAOA) to detect security breaches in time slots. In some aspects, the AP may indicate one or more nodes in a breached time slot. In some aspects, the AP may provide time slot ordering based on reliability. In response, the initiating node may discard one or more measurements based on an indicator. In some aspects, one or more wireless devices (e.g., APs and / or servers) may aggregate measurements from multiple measurements to jointly calculate a distance estimate, an uncertainty associated with the calculated distance estimate, and provide this uncertainty to one or more nodes. One or more nodes may authenticate ranging measurements based on this uncertainty. In some respects, collaborative localization using anchor node-target node and target node-target node combinations can be used to improve the overall localization estimation accuracy of target nodes.

[0049] Specific aspects of the subject matter described in this disclosure can be implemented to achieve one or more of the following potential advantages. In some examples, the described techniques can be used to identify transmissions from malicious devices by sending a reporting message that includes an indicator of anomalous transmission or an indicator that can be used to identify location attributes of anomalous transmissions. For example, the described techniques can be used to identify phase-flip manipulation, where a malicious node may exploit spoofing effects to induce a phase flip against a genuine reference signal. Since typical spoofing devices may not be able to consistently spoof many location signals over time, the described techniques can identify such spoofed measurements by offloading computation to infrastructure outside the location session, such as access point (AP) infrastructure. Such external infrastructure can provide security checks that can be passively performed in the background. Methods based on the strength of the received signal transmitted can be robust to such attacks. Furthermore, such external infrastructure can also detect spoofing.

[0050] The detailed descriptions following, illustrated with reference to the accompanying drawings, describe various configurations and do not represent the only configurations in which the concepts described herein can be practiced. To provide a thorough understanding of the various concepts, the detailed descriptions include specific details. However, these concepts can be practiced without these specific details. In some instances, well-known structures and components are shown in block diagram form to avoid obscuring these concepts.

[0051] Various apparatuses and methods are presented with reference to several aspects of a telecommunications system. These apparatuses and methods are described in detail below and illustrated in the accompanying drawings by various blocks, components, circuits, processes, algorithms, etc. (collectively, “elements”). These elements can be implemented using electronic hardware, computer software, or any combination thereof. Whether these elements are implemented as hardware or software depends on the specific application and the design constraints imposed on the system as a whole.

[0052] As an example, an element, any part of an element, or any combination of elements may be implemented as a "processing system" including one or more processors. When multiple processors are implemented, the multiple processors may perform functions individually or in combination. Examples of processors include microprocessors, microcontrollers, graphics processing units (GPUs), central processing units (CPUs), application processors, digital signal processors (DSPs), reduced instruction set computing (RISC) processors, system-on-a-chip (SoCs), baseband processors, field-programmable gate arrays (FPGAs), programmable logic devices (PLDs), state machines, gate logic, discrete hardware circuits, and other suitable hardware configured to perform the various functionalities described throughout this disclosure. One or more processors in a processing system may execute software. Whether referred to as software, firmware, middleware, microcode, hardware description language, or other terms, software should be broadly interpreted as instructions, instruction sets, code, code segments, program code, programs, subroutines, software components, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, or any combination thereof.

[0053] Therefore, in one or more example aspects, specific implementations, and / or use cases, the described functionality may be implemented in hardware, software, or any combination thereof. If implemented in software, the functionality may be stored or encoded as one or more instructions or code on a computer-readable medium. Computer-readable media include computer storage media. Storage media can be any available medium that can be accessed by a computer. By way of example, such computer-readable media may include random access memory (RAM), read-only memory (ROM), electrically erasable programmable ROM (EEPROM), optical disc storage devices, magnetic disk storage devices, other magnetic storage devices, combinations of these types of computer-readable media, or any other medium that can be used to store computer-executable code in the form of instructions or data structures accessible by a computer.

[0054] While aspects, implementations, and / or use cases are described herein by way of example, additional or different aspects, implementations, and / or use cases may arise in many different arrangements and scenarios. The aspects, implementations, and / or use cases described herein can be implemented across many different platform types, devices, systems, shapes, sizes, and package arrangements. For example, aspects, implementations, and / or use cases may arise via integrated chip implementations and other devices based on non-modular components (e.g., end-user devices, vehicles, communication devices, computing devices, industrial equipment, retail / purchasing devices, medical devices, AI-enabled devices, etc.). While some examples may or may not be specific to a use case or application, the described examples may exhibit broad applicability. Aspects, implementations, and / or use cases can range from chip-level or modular components to non-modular, non-chip-level implementations, and further to aggregated, distributed, or original equipment manufacturer (OEM) devices or systems incorporating one or more of the technologies described herein. In some practical settings, devices incorporating the described aspects and features may also include additional components and features for implementing and practicing the claimed and described aspects. For example, the transmission and reception of wireless signals necessarily involve multiple components for analog and digital purposes (e.g., hardware components including antennas, RF chains, power amplifiers, modulators, buffers, processors, interleavers, adders / summers, etc.). The techniques described herein can be practiced in a wide variety of devices, chip-level components, systems, distributed arrangements, aggregated or decomposed components, end-user equipment, etc., of various sizes, shapes, and configurations.

[0055] The deployment of communication systems such as 5G NR systems can be arranged in a variety of ways using various components or parts. In a 5G NR system or network, network nodes, network entities, network mobility elements, radio access network (RAN) nodes, core network nodes, network elements or network equipment (such as base stations (BS)) or one or more units (or components) performing base station functions can be implemented in aggregated or decomposed architectures. For example, BSs (such as Node B (NB), evolved NB (eNB), NR BS, 5G NB, access point (AP), transmit / receive point (TRP), or cell, etc.) can be implemented as aggregated base stations (also known as standalone BS or monolithic BS) or decomposed base stations.

[0056] Aggregated base stations can be configured to utilize a radio protocol stack that is physically or logically integrated within a single RAN node. Decomposed base stations can be configured to utilize a protocol stack that is physically or logically distributed across two or more units, such as one or more central or centralized units (CUs), one or more distributed units (DUs), or one or more radio units (RUs). In some respects, the CU may be implemented within a RAN node, and one or more DUs may co-located with the CU, or alternatively, may be geographically or virtually distributed across one or more other RAN nodes. DUs may be implemented to communicate with one or more RUs. Each of the CU, DU, and RU may be implemented as a virtual unit, namely a virtual central unit (VCU), a virtual distributed unit (VDU), or a virtual radio unit (VRU).

[0057] Base station operation or network design can take into account the aggregation characteristics of base station functionality. For example, decomposed base stations can be utilized in Integrated Access Backhaul (IAB) networks, Open Radio Access Networks (O-RAN (such as network configurations initiated by the O-RAN Alliance)), or Virtualized Radio Access Networks (vRAN, also known as Cloud Radio Access Networks (C-RAN)). Decomposition can include distributing functionality across two or more units in various physical locations, as well as virtually distributing the functionality of at least one unit, which enables flexibility in network design. The various units of a decomposed base station or decomposed RAN architecture can be configured to communicate wirelessly with at least one other unit.

[0058] Figure 1 Figure 100 illustrates an example of a wireless communication system and access network. The illustrated wireless communication system includes a decomposed base station architecture. The decomposed base station architecture may include one or more CUs 110, which may communicate directly with the core network 120 via a backhaul link, or indirectly with the core network 120 via one or more decomposed base station units, such as a near real-time (near-RT) RAN Intelligent Controller (RIC) 125 via an E2 link, or a non-real-time (non-RT) RIC 115 associated with a Service Management and Orchestration (SMO) framework 105, or both. CUs 110 may communicate with one or more DUs 130 via a corresponding midhaul link (such as an F1 interface). DUs 130 may communicate with one or more RUs 140 via a corresponding fronthaul link. RUs 140 may communicate with a corresponding UE 104 via one or more radio frequency (RF) access links. In some implementations, a UE 104 may be served simultaneously by multiple RUs 140.

[0059] Each of the units (i.e., CU 110, DU 130, RU 140, and near-RT RIC 125, non-RT RIC 115, and SMO frame 105) may include or be coupled to one or more interfaces configured to receive or transmit signals, data, or information (collectively, signals) via wired or wireless transmission media. Each of the units, or an associated processor or controller providing instructions to the communication interfaces of these units, may be configured to communicate with one or more other units via transmission media. For example, these units may include wired interfaces configured to receive signals or transmit signals to one or more other units via wired transmission media. Additionally, these units may include wireless interfaces that may include receivers, transmitters, or transceivers (such as RF transceivers) configured to receive signals via wireless transmission media and / or transmit signals to one or more other units.

[0060] In some aspects, the CU 110 can host one or more higher-level control functions. Such control functions may include Radio Resource Control (RRC), Packet Data Convergence Protocol (PDCP), Serving Data Adaptation Protocol (SDAP), etc. Each control function can be implemented using an interface configured to signal to other control functions hosted by the CU 110. The CU 110 can be configured to handle user plane functionality (i.e., Central Unit-User Plane (CU-UP)), control plane functionality (i.e., Central Unit-Control Plane (CU-CP)), or a combination thereof. In some implementations, the CU 110 may be logically split into one or more CU-UP units and one or more CU-CP units. When implemented in an O-RAN configuration, the CU-UP units can communicate bidirectionally with the CU-CP units via an interface such as an E1 interface. The CU 110 may be implemented to communicate with the DU 130 for network control and signaling as needed.

[0061] DU 130 may correspond to a logic unit that includes one or more base station functions for controlling the operation of one or more RU 140s. In some aspects, DU 130 may at least partially host one or more of the Radio Link Control (RLC) layer, Media Access Control (MAC) layer, and one or more high physical (PHY) layers (such as modules for forward error correction (FEC) encoding and decoding, scrambling, modulation and demodulation, etc.) according to functional splits (such as those defined by 3GPP). In some aspects, DU 130 may also host one or more low PHY layers. Each layer (or module) may be implemented using an interface configured to communicate signaling with other layers (and modules) hosted by DU 130 or with control functions hosted by CU 110.

[0062] Lower-layer functionality can be implemented by one or more RU 140s. In some deployments, an RU140 controlled by a DU 130 may correspond to a logical node that hosts RF processing functions or low-PHY layer functions (such as performing Fast Fourier Transform (FFT), Inverse FFT (iFFT), digital beamforming, Physical Random Access Channel (PRACH) extraction and filtering, or both, based at least in part on functional decomposition (such as lower-layer functional decomposition). In such architectures, the RU 140 may be implemented to handle over-the-air (OTA) communications with one or more UEs 104. In some specific implementations, the real-time and non-real-time aspects of control plane and user plane communications with the RU 140 may be controlled by the corresponding DU 130. In some scenarios, this configuration enables the implementation of the DU 130 and CU 110 in cloud-based RAN architectures such as vRAN architectures.

[0063] SMO framework 105 can be configured to support RAN deployment and provisioning of both non-virtualized and virtualized network elements. For non-virtualized network elements, SMO framework 105 can be configured to support the deployment of dedicated physical resources for RAN coverage requirements, which can be managed via operation and maintenance interfaces such as the O1 interface. For virtualized network elements, SMO framework 105 can be configured to interact with a cloud computing platform such as Open Cloud (O-Cloud) 190 to perform network element lifecycle management (such as instantiating virtualized network elements) via a cloud computing platform interface such as the O2 interface. Such virtualized network elements may include, but are not limited to, CU 110, DU 130, RU 140, and near-RT RIC 125. In some implementations, SMO framework 105 can communicate with the hardware aspects of the 4G RAN (such as Open eNB (O-eNB) 111) via the O1 interface. Additionally, in some implementations, SMO framework 105 can communicate directly with one or more RU 140s via the O1 interface. SMO framework 105 may also include a non-RT RIC 115 configured to support the functionality of SMO framework 105.

[0064] The non-RT RIC 115 can be configured to include logical functions enabling non-real-time control and optimization of RAN elements and resources, including artificial intelligence (AI) / machine learning (ML) workflows for model training and updates, or policy-based guidance for applications / features in the near-RT RIC 125. The non-RT RIC 115 can be coupled to or communicate with the near-RT RIC 125, such as via an A1 interface. The near-RT RIC 125 can be configured to include logical functions enabling near real-time control and optimization of RAN elements and resources via an interface, such as an E2 interface, through data collection and actions, connecting one or more CU 110s, one or more DU 130s, or both, and O-eNBs to the near-RT RIC 125.

[0065] In some implementations, to generate AI / ML models to be deployed in the near-RT RIC 125, the non-RT RIC 115 may receive parameters or external enrichment information from an external server. This information can be utilized by the near-RT RIC 125 and may be received from non-network data sources or network functions at the SMO framework 105 or the non-RT RIC 115. In some examples, the non-RT RIC 115 or the near-RT RIC 125 may be configured to tune RAN behavior or performance. For example, the non-RT RIC 115 may monitor long-term trends and patterns of performance and employ AI / ML models to perform corrective actions via the SMO framework 105 (such as reconfiguration via O1) or by creating RAN management policies (such as A1 policies).

[0066] At least one of CU 110, DU 130, and RU 140 may be referred to as base station 102. Therefore, base station 102 may include one or more of CU 110, DU 130, and RU 140 (each component is indicated by a dashed line to indicate that each component may or may not be included in base station 102). Base station 102 provides UE 104 with an access point to core network 120. Base station 102 may include macro cells (high-power cellular base stations) and / or small cells (low-power cellular base stations). Small cells include femtocells, picocells, and microcells. A network that includes both small cells and macro cells may be referred to as a heterogeneous network. A heterogeneous network may also include an evolved home node B (eNB) (HeNB), which can provide service to a restricted group referred to as a closed subscriber group (CSG). The communication link between RU 140 and UE 104 may include uplink (UL) transmission (also known as reverse link) from UE 104 to RU 140 and / or downlink (DL) transmission (also known as forward link) transmission from RU 140 to UE 104. The communication link may utilize multiple-input multiple-output (MIMO) antenna techniques, including spatial multiplexing, beamforming, and / or transmit diversity. The communication link may use one or more carriers. For each carrier allocated in a carrier aggregation of up to Yx MHz (x component carriers) for transmission in each direction, base station 102 / UE 104 may use a spectrum with a bandwidth of up to Y MHz (e.g., 5MHz, 10MHz, 15MHz, 20MHz, 100MHz, 400MHz, etc.). Carriers may be adjacent to each other or may not be adjacent to each other. Carrier allocation may be asymmetric with respect to DL and UL (e.g., more or fewer carriers may be allocated to DL compared to UL). Component carriers may include primary component carriers and one or more secondary component carriers. The primary component carrier can be referred to as the primary cell (PCell) and the secondary component carrier can be referred to as the secondary cell (SCell).

[0067] Some UEs 104 can communicate with each other using device-to-device (D2D) communication link 158. D2D communication link 158 can use DL / UL wireless wide area network (WWAN) spectrum. D2D communication link 158 can use one or more sidelink channels, such as Physical Sidelink Broadcast Channel (PSBCH), Physical Sidelink Discovery Channel (PSDCH), Physical Sidelink Shared Channel (PSSCH), and Physical Sidelink Control Channel (PSCCH). D2D communication can be performed through various wireless D2D communication systems, such as Bluetooth. ™ (Bluetooth is a trademark of the Bluetooth Special Interest Group (SIG), and is based on the IEEE 802.11 standard for Wi-Fi.) ™(Wi-Fi is a trademark of the Wi-Fi Alliance), LTE, or NR.

[0068] The wireless communication system may also include a Wi-Fi AP 150, which communicates with the UE 104 (also referred to as a Wi-Fi station (STA)) via a communication link 154, for example, in an unlicensed spectrum such as 5 GHz. When communicating in unlicensed spectrum, the UE 104 / AP 150 may perform a free channel assessment (CCA) to determine whether a channel is available before communication.

[0069] The electromagnetic spectrum is typically subdivided into various categories, bands, channels, etc., based on frequency / wavelength. In 5G NR, two initial operating bands have been designated as frequency ranges FR1 (410MHz to 7.125GHz) and FR2 (24.25GHz to 52.6GHz). Although a portion of FR1 is greater than 6GHz, FR1 is generally (interchangeably) referred to as the "sub-6GHz" band in various documents and articles. Similar naming issues sometimes occur with FR2, which is generally (interchangeably) referred to as the "millimeter wave" band in documents and articles, although this is distinct from the Extremely High Frequency (EHF) band (30GHz to 300GHz) designated as "millimeter wave" by the International Telecommunication Union (ITU).

[0070] The frequencies between FR1 and FR2 are generally referred to as mid-band frequencies. Recent 5G NR studies have identified the operating bands used for these mid-band frequencies as the frequency range designation FR3 (7.125 GHz to 24.25 GHz). Bands falling within FR3 can inherit FR1 and / or FR2 characteristics, thus effectively extending the features of FR1 and / or FR2 to mid-band frequencies. Furthermore, higher frequency bands are currently being explored to extend 5G NR operation beyond 52.6 GHz. For example, three higher operating bands have been identified as the frequency range designations FR2-2 (52.6 GHz to 71 GHz), FR4 (71 GHz to 114.25 GHz), and FR5 (114.25 GHz to 300 GHz). Each of these higher frequency bands falls within the EHF band.

[0071] In view of the above, unless otherwise specified, the term "below 6 GHz" as used herein can broadly refer to frequencies less than 6 GHz, within FR1, or including intermediate frequency band frequencies. Furthermore, unless otherwise specified, the term "millimeter wave" as used herein can broadly refer to frequencies that can include intermediate frequency band frequencies, within FR2, FR4, FR2-2 and / or FR5, or within the EHF band.

[0072] Base station 102 and UE 104 may each include multiple antennas (such as antenna elements, antenna panels, and / or antenna arrays) to facilitate beamforming. Base station 102 may transmit beamformed signals 182 to UE 104 in one or more transmit directions. UE 104 may receive beamformed signals from base station 102 in one or more receive directions. UE 104 may also transmit beamformed signals 184 to base station 102 in one or more transmit directions. Base station 102 may receive beamformed signals from UE 104 in one or more receive directions. Base station 102 / UE 104 may perform beamforming training to determine the optimal receive and transmit directions for each of base station 102 / UE 104. The transmit and receive directions of base station 102 may be the same or different. The transmit and receive directions of UE 104 may be the same or different.

[0073] Base station 102 may include and / or be referred to as gNB, Node B, eNB, access point, transceiver base station, radio base station, radio transceiver, transceiver function, basic service set (BSS), extended service set (ESS), TRP, network node, network entity, network equipment, or some other suitable terminology. Base station 102 may be implemented as an integrated access and backhaul (IAB) node, relay node, sidelink node, aggregated (monolithic) base station with baseband units (BBU) (including CU and DU) and RU, or may be implemented as a decomposed base station including one or more of CU, DU, and / or RU. A collection of base stations that may include decomposed base stations and / or aggregated base stations may be referred to as Next Generation (NG) RAN (NG-RAN).

[0074] The core network 120 may include Access and Mobility Management Function (AMF) 161, Session Management Function (SMF) 162, User Plane Function (UPF) 163, Unified Data Management (UDM) 164, one or more location servers 168, and other functional entities. AMF 161 is the control node that handles signaling between UE 104 and the core network 120. AMF 161 supports registration management, connection management, mobility management, and other functions. SMF 162 supports session management and other functions. UPF 163 supports packet routing, packet forwarding, and other functions. UDM 164 supports authentication and key agreement (AKA) credential generation, user identity processing, access authorization, and subscription management. One or more location servers 168 are exemplified as including a Gateway Mobile Location Center (GMLC) 165 and a Location Management Function (LMF) 166. However, generally, one or more location servers 168 may include one or more location / positioning servers, which may include one or more of GMLC 165, LMF 166, Position Determination Entity (PDE), Serving Mobile Location Center (SMLC), Mobile Location Center (MPC), etc. GMLC 165 and LMF 166 support UE location services. GMLC 165 provides an interface for clients / applications (e.g., emergency services) to access UE location information. LMF 166 receives measurement and auxiliary information from NG-RAN and UE 104 via AMF 161 to calculate the location of UE 104. NG-RAN may use one or more positioning methods to determine the location of UE 104. Positioning UE 104 may involve signal measurement, location estimation, and optional rate calculation based on these measurements. Signal measurement may be performed by UE 104 and / or base station 102 serving UE 104. The measured signals may be based on one or more of the following: Satellite Positioning System (SPS) 170 (e.g., one or more of Global Navigation Satellite System (GNSS), Global Positioning System (GPS), Non-Terrestrial Network (NTN) or other satellite positioning / location systems), LTE signals, Wireless Local Area Network (WLAN) signals, Bluetooth signals, Terrestrial Beacon System (TBS), sensor-based information (e.g., barometric pressure sensor, motion sensor), NR Enhanced Cell ID (NR E-CID) method, NR signals (e.g., multiple round-trip time (multiple RTT), DL departure angle (DL-AoD), DL time difference of arrival (DL-TDOA), UL time difference of arrival (UL-TDOA), and UL angle of arrival (UL-AoA) positioning) and / or other systems / signals / sensors.

[0075] Examples of UE 104 include cellular phones, smartphones, Session Initiation Protocol (SIP) phones, laptops, personal digital assistants (PDAs), satellite radios, GPS devices, multimedia devices, video devices, digital audio players (e.g., MP3 players), cameras, game consoles, tablets, smart devices, wearable devices, vehicles, electricity meters, air pumps, large or small kitchen appliances, healthcare devices, implants, sensors / actuators, displays, or any other similarly functional device. Some UEs in UE 104 may be referred to as IoT devices (e.g., parking meters, air pumps, toasters, vehicles, heart monitors, etc.). UE 104 may also be referred to as a station, mobile station, subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, mobile phone, user agent, mobile client, client, or some other suitable terminology. In some scenarios, the term UE may also be applied to one or more companion devices, such as in a device constellation arrangement. One or more of these devices may access the network together and / or individually.

[0076] Refer again Figure 1In some aspects, base station 102 may have a location signal monitoring component 199, which is configured to receive multiple location signals from a second and a third wireless device during multiple time domains. The location signal monitoring component 199 is configured to measure the multiple location signals. The location signal monitoring component 199 is configured to calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. The location signal monitoring component 199 is configured to send a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains. In some aspects, UE 104 may have a location signal authentication component 198, which is configured to receive a set of location signals from a second wireless device during multiple time domains. The location signal authentication component 198 is configured to receive a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the multiple location attributes corresponding to the multiple time domains. Location signal authentication component 198 can be configured to measure the set of location signals. Location signal authentication component 198 can be configured to select a subgroup of the measured set of location signals based on at least one of the first indicator or the second indicator. Location signal authentication component 198 can be configured to calculate the location of the second wireless device based on the subgroup of the measured set of location signals. In other words, location signal monitoring component 199 can monitor multiple location signals to calculate multiple location attributes associated with a device transmitting the multiple location signals in multiple time domains. Location signal monitoring component 199 can send a report message with indicators of the calculated multiple location attributes, allowing location signal authentication component 198 to determine abnormal transmission based on whether a transmission transmitted during a time domain deviates from the calculated multiple location attributes corresponding to multiple time domains. On the other hand, location signal monitoring component 199 can determine the abnormal transmission and send a report message with an indicator of abnormal transmission to location signal authentication component 198. Location signal authentication component 198 can then exclude the abnormal transmission from consideration, thereby maintaining transmission security.

[0077] Figure 2A Figure 200 illustrates an example of the first subframe within a 5G NR frame structure. Figure 2B Figure 230 illustrates an example of a DL channel within a 5G NR subframe. Figure 2C Figure 250 is an example of a second subframe within a 5G NR frame structure. Figure 2DFigure 280 illustrates an example of a UL channel within a 5G NR subframe. The 5G NR frame structure can be Frequency Division Duplex (FDD) (where subframes within a specific set of subcarriers (carrier system bandwidth) are dedicated to either DL or UL) or Time Division Duplex (TDD) (where subframes within a specific set of subcarriers (carrier system bandwidth) are dedicated to both DL and UL). Figure 2A , Figure 2C In the provided example, the 5G NR frame structure is assumed to be TDD, where subframe 4 is configured with slot format 28 (most of which are DL), where D is DL, U is UL, and F is flexible and can be used between DL / UL, and subframe 3 is configured with slot format 1 (all of which are UL). Although subframes 3 and 4 are shown as having slot formats 1 and 28 respectively, any particular subframe can be configured with any of the various available slot formats 0-61. Slot formats 0 and 1 are both DL and UL, respectively. Other slot formats 2-61 include a mixture of DL, UL, and flexible symbols. The UE is configured using the slot format via the received Slot Format Indicator (SFI) (dynamically configured via DL Control Information (DCI) or semi-statically / statically configured via Radio Resource Control (RRC) signaling). Note that the following description also applies to the 5G NR frame structure as TDD.

[0078] Figures 2A to 2D The frame structure is illustrated, and aspects of this disclosure are applicable to other wireless communication technologies that may have different frame structures and / or different channels. A frame (10 ms) can be divided into 10 equal-sized subframes (1 ms). Each subframe may include one or more time slots. Subframes may also include micro-time slots, which may include 7, 4, or 2 symbols. Each time slot may include 14 or 12 symbols, depending on whether the cyclic prefix (CP) is normal or extended. For normal CP, each time slot may include 14 symbols, and for extended CP, each time slot may include 12 symbols. Symbols on the DL may be CP Orthogonal Frequency Division Multiplexing (OFDM) (CP-OFDM) symbols. Symbols on the UL may be CP-OFDM symbols (for high-throughput scenarios) or Discrete Fourier Transform (DFT) Extended OFDM (DFT-s-OFDM) symbols (for power-constrained scenarios; limited to single-stream transmission). The number of time slots within a subframe is based on the CP and a parameter set. The parameter set defines the subcarrier spacing (SCS) (see Table 1). Symbol length / duration can be scaled with 1 / SCS.

[0079]

[0080] Table 1: Parameter Set, SCS, and CP

[0081] For a normal CP (14 symbols / slot), different parameter sets µ 0 through 4 allow 1, 2, 4, 8, and 16 slots per subframe, respectively. For an extended CP, parameter set 2 allows 4 slots per subframe. Therefore, for a normal CP and parameter set µ, there are 14 symbols / slot and 2... µ One time slot / subframe. Subcarrier spacing can be equal to ,in The parameter sets are 0 to 4. Therefore, the subcarrier spacing is 15 kHz for parameter set µ=0 and 240 kHz for parameter set µ=4. The symbol length / duration is negatively correlated with the subcarrier spacing. Figures 2A to 2D Examples of a normal frequency division multiplexing (CP) with 14 symbols per time slot and a parameter set of µ=2 with 4 time slots per subframe are provided. The time slot duration is 0.25 ms, the subcarrier spacing is 60 kHz, and the symbol duration is approximately 16.67 μs. Within the frame set, there may be one or more distinct bandwidth portions (BWPs) of frequency division multiplexing (see [link to relevant documentation]). Figure 2B Each BWP can have a specific set of parameters and CP (normal or extended).

[0082] A resource grid can be used to represent the frame structure. Each time slot consists of a resource block (RB) extending for 12 consecutive subcarriers (also known as a physical RB (PRB)). The resource grid is divided into multiple resource elements (REs). The number of bits carried by each RE depends on the modulation scheme.

[0083] like Figure 2A As illustrated, some of the REs carry reference (pilot) signals (RS) for the UE. RS may include demodulation RS (DM-RS) (indicated as R for a particular configuration, but other DM-RS configurations are possible) and channel state information reference signals (CSI-RS) for channel estimation at the UE. RS may also include beam measurement RS (BRS), beam refinement RS (BRRS), and phase tracking RS (PT-RS).

[0084] Figure 2BExamples of various DL channels within a subframe of a frame are illustrated. The Physical Downlink Control Channel (PDCCH) carries the DCI within one or more Control Channel Elements (CCEs) (e.g., 1, 2, 4, 8, or 16 CCEs), each CCE comprising six RE Groups (REGs), each REG comprising 12 consecutive REs in the OFDM symbol of the RB. A PDCCH within a BWP can be referred to as a Control Resource Set (CORESET). The UE is configured to monitor PDCCH candidates in the PDCCH search space (e.g., the common search space, the UE-specific search space) during PDCCH monitoring timing on the CORESET, where the PDCCH candidates have different DCI formats and different aggregation levels. Additional BWPs may be located at higher and / or lower frequencies on the channel bandwidth. The Primary Synchronization Signal (PSS) may be located within symbol 2 of a specific subframe of the frame. The PSS is used by the UE 104 to determine subframe / symbol timing and physical layer identification. The Secondary Synchronization Signal (SSS) may be located within symbol 4 of a specific subframe of the frame. The SSS is used by the UE to determine the Physical Layer Cell Identifier Group Number and radio frame timing. Based on the Physical Layer Identifier and the Physical Layer Cell Identifier Group Number, the UE can determine the Physical Cell Identifier (PCI). Based on the PCI, the UE can determine the location of the DM-RS. The Physical Broadcast Channel (PBCH), carrying the Master Information Block (MIB), can be logically grouped with the PSS and SSS to form a Synchronization Signal (SS) / PBCH block (also known as an SS block (SSB)). The MIB provides the System Frame Number (SFN) and the number of Restricted Frames (RBs) in the system bandwidth. The Physical Downlink Shared Channel (PDSCH) carries user data, broadcast system information not transmitted via the PBCH (such as System Information Blocks (SIBs)), and paging messages.

[0085] like Figure 2C As illustrated, some REs in the REs carry DM-RS (indicated as R for one particular configuration, but other DM-RS configurations are possible) for channel estimation at the base station. The UE can transmit DM-RS for the Physical Uplink Control Channel (PUCCH) and DM-RS for the Physical Uplink Shared Channel (PUSCH). The PUSCH DM-RS can be transmitted in the first or first two symbols of the PUSCH. Depending on whether a short or long PUCCH is transmitted and depending on the specific PUCCH format used, the PUCCH DM-RS can be transmitted in different configurations. The UE can transmit a Sounding Reference Signal (SRS). The SRS can be transmitted in the last symbol of a subframe. The SRS can have a comb structure, and the UE can transmit the SRS on one of the comb teeth. The SRS can be used by the base station for channel quality estimation to enable frequency-dependent scheduling of the UL.

[0086] Figure 2DExamples of various UL channels within a subframe of a frame are illustrated. The PUCCH may be located as indicated in one configuration. The PUCCH carries uplink control information (UCI), such as scheduling requests, channel quality indicators (CQI), pre-decoding matrix indicators (PMI), rank indicators (RI), and hybrid automatic repeat request (HARQ) acknowledgment (ACK) (HARQ-ACK) feedback (i.e., one or more HARQ ACK bits indicating one or more ACKs and / or negative ACKs (NACKs)). The PUCCH carries data and may additionally be used to carry buffer status reports (BSR), power clearance reports (PHR), and / or UCIs.

[0087] Figure 3 This is a block diagram illustrating communication between base station 310 and UE 350 in the access network. In the DL, Internet Protocol (IP) packets can be provided to controller / processor 375. Controller / processor 375 implements Layer 3 and Layer 2 functionality. Layer 3 includes the Radio Resource Control (RRC) layer, and Layer 2 includes the Service Data Adaptation Protocol (SDAP) layer, Packet Data Convergence Protocol (PDCP) layer, Radio Link Control (RLC) layer, and Media Access Control (MAC) layer. The controller / processor 375 provides RRC layer functionality associated with broadcasting system information (e.g., MIB, SIB), RRC connection control (e.g., RRC connection paging, RRC connection establishment, RRC connection modification, and RRC connection release), inter-Radio Access Technology (RAT) mobility, and measurement configuration for UE measurement reporting; PDCP layer functionality associated with header compression / decompression, security (encryption, decryption, integrity protection, integrity verification), and handover support functions; RLC layer functionality associated with the delivery of upper-layer packet data units (PDUs), error correction via ARQ, concatenation, segmentation, and reassembly of RLC service data units (SDUs), resegmentation of RLC data PDUs, and reordering of RLC data PDUs; and MAC layer functionality associated with mapping between logical channels and transport channels, multiplexing of MAC SDUs onto transport blocks (TBs), demultiplexing of MAC SDUs from TBs, scheduling information reporting, error correction via HARQ, priority handling, and logical channel priority ordering.

[0088] Transmit (TX) processor 316 and receive (RX) processor 370 implement Layer 1 functionality associated with various signal processing functions. Layer 1 (which includes the physical (PHY) layer) may include error detection on the transport channel, forward error correction (FEC) decoding / decoding of the transport channel, interleaving, rate matching, mapping to the physical channel, modulation / demodulation of the physical channel, and MIMO antenna processing. TX processor 316 processes the mapping to the signal constellation based on various modulation schemes (e.g., binary phase shift keying (BPSK), quadrature phase shift keying (QPSK), M-order phase shift keying (M-PSK), M-order quadrature amplitude modulation (M-QAM)). The decoded and modulated symbols can then be divided into parallel streams. Each stream can then be mapped to OFDM subcarriers, multiplexed with a reference signal (e.g., a pilot) in the time and / or frequency domains, and then combined using inverse fast Fourier transform (IFFT) to produce a physical channel carrying a stream of time-domain OFDM symbols. The OFDM stream undergoes spatial pre-decoding to generate multiple spatial streams. Channel estimates from channel estimator 374 can be used to determine decoding and modulation schemes, as well as for spatial processing. Channel estimates can be derived from reference signals and / or channel state feedback transmitted by UE 350. Each spatial stream can then be provided to a different antenna 320 via a separate transmitter 318Tx. Each transmitter 318Tx can utilize the corresponding spatial stream to modulate a radio frequency (RF) carrier for transmission.

[0089] At UE 350, each receiver 354Rx receives signals via its corresponding antenna 352. Each receiver 354Rx recovers the information modulated onto the RF carrier and provides that information to the receive (RX) processor 356. The TX processor 368 and RX processor 356 implement Layer 1 functionality associated with various signal processing functions. The RX processor 356 can perform spatial processing on the information to recover any spatial stream destined for UE 350. If multiple spatial streams are destined for UE 350, the RX processor 356 can combine them into a single OFDM symbol stream. The RX processor 356 then uses a Fast Fourier Transform (FFT) to transform the OFDM symbol stream from the time domain to the frequency domain. The frequency domain signal consists of a separate OFDM symbol stream for each subcarrier of the OFDM signal. The symbols and reference signals on each subcarrier are recovered and demodulated by determining the most probable signal constellation points transmitted by base station 310. These soft decisions can be based on channel estimates calculated by channel estimator 358. The soft decision is then decoded and deinterleaved to recover the data and control signals originally transmitted by base station 310 on the physical channel. The data and control signals are then provided to controller / processor 359, which implements layer 3 and layer 2 functionality.

[0090] The controller / processor 359 may be associated with at least one memory 360 storing program code and data. The at least one memory 360 may be referred to as a computer-readable medium. In the UL, the controller / processor 359 provides demultiplexing, packet reassembly, decryption, header decompression, and control signal processing between transport and logical channels to recover IP packets. The controller / processor 359 is also responsible for error detection using ACK and / or NACK protocols to support HARQ operation.

[0091] Similar to the functionality described in conjunction with DL transmission performed by base station 310, controller / processor 359 provides RRC layer functionality associated with system information (e.g., MIB, SIB) acquisition, RRC connectivity, and measurement reporting; PDCP layer functionality associated with header compression / decompression and security (encryption, decryption, integrity protection, integrity verification); RLC layer functionality associated with upper-layer PDU delivery, error correction via ARQ, concatenation, segmentation, and reassembly of RLC SDUs, resegmentation of RLC data PDUs, and reordering of RLC data PDUs; and MAC layer functionality associated with mapping between logical channels and transport channels, multiplexing of MAC SDUs onto TBs, demultiplexing of MAC SDUs from TBs, scheduling information reporting, error correction via HARQ, priority handling, and logical channel priority ordering.

[0092] The TX processor 368 can use the reference signal transmitted from the base station 310 or the channel estimate derived from feedback by the channel estimator 358 to select an appropriate decoding and modulation scheme and facilitate spatial processing. The spatial stream generated by the TX processor 368 can be provided to different antennas 352 via individual transmitters 354Tx. Each transmitter 354Tx can use the corresponding spatial stream to modulate an RF carrier for transmission.

[0093] UL transmission is processed at base station 310 in a manner similar to that described in conjunction with the receiver function at UE 350. Each receiver 318Rx receives signals via its corresponding antenna 320. Each receiver 318Rx recovers the information modulated onto the RF carrier and provides that information to RX processor 370.

[0094] The controller / processor 375 may be associated with at least one memory 376 storing program code and data. The at least one memory 376 may be referred to as a computer-readable medium. In the UL, the controller / processor 375 provides demultiplexing, packet reassembly, decryption, header decompression, and control signal processing to recover IP packets between transport and logical channels. The controller / processor 375 is also responsible for error detection using ACK and / or NACK protocols to support HARQ operation.

[0095] At least one of the TX processor 368, RX processor 356, and controller / processor 359 can be configured to combine Figure 1 The positioning signal authentication component 198 performs various functions.

[0096] At least one of the TX processor 316, RX processor 370, and controller / processor 375 can be configured to combine Figure 1 The positioning signal monitoring component 199 performs various functions.

[0097] Figure 4 Figure 400 illustrates an example of positioning of a wireless device based on reference signal measurements. Wireless device 402 can be a UE (User Equipment). The UE can be a Positioning Reference Unit (PRU). The PRU can be a UE with a known location used for calibration purposes. Wireless device 402 can be a base station, such as a TRP (Telematics Reference Unit) or an AP (Access Point). Wireless device 406 can be a base station, such as a TRP or an AP. Wireless devices 402, 404, and 406 can be configured to send and receive positioning signals to each other. These positioning signals can be sent using any wireless technology protocol, such as Bluetooth, UWB, Wi-Fi, or sidelinks (e.g., NR sidelinks).

[0098] For example, wireless device 404 can be in time T SRS_TX Send UL-SRS 412, and at time T PRS_RX Receives DL Positioning Reference Signal (PRS) (DL-PRS) 410. Wireless device 406 can receive the DL positioning reference signal (PRS) at time T. SRS_RX Receive UL-SRS 412, and at time T PRS_TX Send DL-PRS 410. Wireless device 404 may receive DL-PRS 410 before sending UL-SRS 412, or may send UL-SRS 412 before receiving DL-PRS 410. In both cases, the location server (e.g., location server 168) or wireless device 404 may base its communication on ||T SRS_RX – T PRS_TX | – |T SRS_TX – T PRS_RX || to determine RTT 414. Therefore, multi-RTT positioning can utilize the UE Rx-Tx time difference measurement (i.e., |T) of downlink signals received from multiple radio devices 402, 406 and measured by radio device 404. SRS_TX – T PRS_RX |) and DL-PRS reference signal received power (RSRP) (DL-PRS-RSRP), and the TRP Rx-Tx time difference measurement (i.e., |T) of the uplink signal transmitted from wireless device 404 at multiple wireless devices 402, 406. SRS_RX– T PRS_TX |) and UL-SRS-RSRP. Wireless device 404 uses auxiliary data received from the location server to measure the UE Rx-Tx time difference (and optionally the DL-PRS-RSRP of the received signal), and wireless devices 402 and 406 use auxiliary data received from the location server to measure the gNB Rx-Tx time difference (and optionally the UL-SRS-RSRP of the received signal). These measurements can be used at the location server or wireless device 404 to determine the RTT, which is used to estimate the location of wireless device 404. Other methods for determining the RTT are possible, such as, for example, using DL-TDOA and / or UL-TDOA measurements.

[0099] DL-AoD positioning utilizes the measured DL-PRS-RSRP of downlink signals received at wireless device 404 from multiple wireless devices 402, 406. Wireless device 404 uses auxiliary data received from a positioning server to measure the DL-PRS-RSRP of the received signals, and the resulting measurement, along with the azimuth departure (A-AoD), zenith departure (Z-AoD), and other configuration information, is used to locate wireless device 404 relative to neighboring wireless devices 402, 406.

[0100] DL-TDOA positioning can utilize the DL Reference Signal Time Difference (RSTD) (and optionally DL-PRS-RSRP) of downlink signals received at wireless device 404 from multiple wireless devices 402, 406. Wireless device 404 uses auxiliary data received from a positioning server to measure the DL RSTD (and optionally DL-PRS-RSRP) of the received signals, and the resulting measurement, along with other configuration information, is used to locate wireless device 404 relative to neighboring wireless devices 402, 406.

[0101] UL-TDOA positioning can utilize the UL relative time of arrival (RTOA) (and optionally UL-SRS-RSRP) of the uplink signal transmitted from wireless device 404 at multiple wireless devices 402, 406. Wireless devices 402, 406 use auxiliary data received from a positioning server to measure the UL-RTOA (and optionally UL-SRS-RSRP) of the received signal, and the resulting measurements, along with other configuration information, are used to estimate the location of wireless device 404.

[0102] UL-AoA positioning utilizes the azimuth angle (A-AoA) and zenith angle (Z-AoA) measured at multiple wireless devices 402 and 406 from the uplink signal transmitted from wireless device 404. Wireless devices 402 and 406 use auxiliary data received from a positioning server to measure the A-AoA and Z-AoA of the received signal, and the resulting measurements, along with other configuration information, are used to estimate the position of wireless device 404.

[0103] Additional positioning methods can be used to estimate the location of the wireless device 404, such as, for example, UE-side UL-AoD and / or DL-AoA. It should be noted that data / measurements from various technologies can be combined in various ways to increase accuracy, determine and / or enhance certainty, supplement / improve measurements, and / or replace / provide missing information.

[0104] A sequence of instructions that configures a wireless device to transmit a location signal (e.g., SRS, PRS, CSI-RS, SSB) and another wireless device to measure the location signal to calculate location attributes associated with each other with respect to the wireless device can be called a location session.

[0105] Carrier phase-based positioning (e.g., ranging) can be performed using any suitable wireless technology, such as Bluetooth, UWB, Wi-Fi, or sidelinks (e.g., NR sidelinks). In other words, the positioning signal can include Bluetooth Low Energy (BLE) signals, Ultra Wideband (UWB) signals, Wi-Fi signals, and / or sidelink signals. For example, the sidelink signal can be NR or cellular. Different wireless technologies offer different levels of accuracy. For instance, when using BLE signals for positioning, decimeter-level accuracy can be achieved when positioning calculations are performed based on BLE signals. This makes BLE-based positioning an attractive option for use cases such as proximity-based access control (e.g., a digital car key unlocking a car within the range of the key, or using a digital key within the range of a building's doors) and asset tracking (e.g., tracking the location of assets within an area). Utilizing such high-accuracy signals for ranging can also be referred to as High Accuracy Distance Measurement (HADM) measurements. However, security concerns may arise for such use cases. Carrier-based positioning methods can be susceptible to phase-flip manipulation, where malicious devices may exploit ambiguity to induce a phase flip of the true reference signal. Malicious nodes (e.g., a third device eavesdropping on signals exchanged between a first and a second device, or a compromised node that is part of a network operating through a security vulnerability in that compromised node) may corrupt the exchanged data.

[0106] Figures 5A to 5B This is an illustration of an example of location tracking in the presence of malicious devices that could interfere with the tracking process. (Relative to...) Figure 5A Figure 500 illustrates wireless communication between positioning device 502 and positioning device 504. Positioning device 502 can be a wireless device capable of communicating with another wireless device via wireless technologies such as BLE, UWB, Wi-Fi, or sidelinks. Positioning device 502 can be a UE, such as UE 104. Positioning device 504 can be a wireless device capable of communicating with another wireless device via wireless technologies such as BLE, UWB, Wi-Fi, or sidelinks. Positioning device 504 can be a UE, such as UE 104. Positioning device 502 can estimate its distance to positioning device 504 by exchanging positioning signals with it, and vice versa. For example, positioning device 502 can send a set of positioning signals 508 to positioning device 504. Positioning device 504 can receive the set of positioning signals 508 from positioning device 502. Positioning device 504 can measure the set of positioning signals 508 and calculate the distance between positioning device 502 and positioning device 504 based on the set of positioning signals 508. Similarly, positioning device 504 can send a set of positioning signals 510 to positioning device 502. Positioning device 502 can receive the set of positioning signals 510 from positioning device 504. Positioning device 502 can measure the set of positioning signals 510 and calculate the distance between positioning device 502 and positioning device 504 based on the set of positioning signals 510.

[0107] In some respects, malicious device 506 may attempt to interfere with the location session between location device 502 and location device 504. For example, malicious device 506 may send a set of transmissions 512 to forge location signals or to spoof measurements taken between real devices, such as location device 502 and location device 504. Such a scenario may also be referred to as a man-in-the-middle (MITM) scenario.

[0108] Compared to Figure 5B Figure 550 illustrates wireless communication between positioning devices 502 and 504 and a malicious device 506. The malicious device 506 can be a malicious node that intrudes into the network and actively forges measurements with real nodes (such as positioning devices 502 and 504) by impersonating a trusted node within the network. The malicious device 506 can be a real node that has been compromised by a hacker, or it can be a device disguised as another device. For example, the malicious device 506 can impersonate positioning device 502 relative to positioning device 504, and the malicious device 506 can impersonate positioning device 504 relative to positioning device 502.

[0109] In other words, positioning device 502 can send a set of positioning signals 552, believing they are being received and measured by positioning device 504. Malicious device 506 can receive this set of positioning signals 552 and, in response, impersonate positioning device 502 to send a set of positioning signals 554 to positioning device 504. Similarly, positioning device 504 can send a set of positioning signals 556, believing they are being received and measured by positioning device 502. Malicious device 506 can receive this set of positioning signals 556 and, in response, impersonate positioning device 502 to send a set of positioning signals 558 to positioning device 504. This type of scenario can be referred to as an intra-network scenario.

[0110] In some respects, the use of round-trip time (RTT) measurements along with carrier phase measurements can be used for security. RTT can be used to measure coarse distances to prevent phase-flip manipulation because RTT measurements are relatively robust to phase-flip manipulation compared to carrier phase measurements. Special probe sequences (SS) similar to RTT measurements can also be used to detect MITM scenarios. For example, channel sounding (CS) events can include synchronization blocks, RTT blocks, round-trip phase (RTP) blocks, and SS blocks. However, RTT efficiency can be low because if the signal uses a bandwidth of 1 MHz to 2 MHz, coarse distance estimation using RTT can have an error range on the order of tens of meters. Therefore, such RTTs may not be useful for adequately validating carrier-based ranging (CBR) estimation errors when the expected link distance is a few meters. Furthermore, RTT measurements can also be spoofed, for example, via preamble injection, early detection, or late submission manipulation. Using such accompanying signals makes it more difficult for malicious nodes to successfully launch MITM attacks.

[0111] Figures 6A to 6B This is a diagram illustrating an example of location in the presence of a monitoring device that can identify abnormal transmissions sent by a malicious device. Relative to... Figure 6AFigure 600 illustrates wireless communication between positioning device 602 and positioning device 604. Positioning device 602 can engage in a positioning session with positioning device 604. Positioning device 602 can be a wireless device capable of communicating with another wireless device via wireless technologies such as BLE, UWB, Wi-Fi, or sidelinks. Positioning device 602 can be a UE, such as UE 104. Positioning device 604 can be a wireless device capable of communicating with another wireless device via wireless technologies such as BLE, UWB, Wi-Fi, or sidelinks. Positioning device 604 can be a UE, such as UE 104. Positioning device 602 can estimate its distance to positioning device 604 by exchanging positioning signals with it, and vice versa. For example, positioning device 602 can send a set of positioning signals 608 to positioning device 604. Positioning device 604 can receive the set of positioning signals 608 from positioning device 602. Positioning device 604 can measure the set of positioning signals 608 and calculate the distance between positioning device 602 and positioning device 604 based on the set of positioning signals 608. Similarly, positioning device 604 can send a set of positioning signals 610 to positioning device 602. Positioning device 602 can receive the set of positioning signals 610 from positioning device 604. Positioning device 602 can measure the set of positioning signals 610 and calculate the distance between positioning device 602 and positioning device 604 based on the set of positioning signals 610.

[0112] Malicious device 606 may attempt to interfere with the positioning session between positioning device 602 and positioning device 604. For example, malicious device 606 may send a set of transmissions 612 to forge positioning signals or to forge measurements performed between real devices, such as positioning device 602 and positioning device 604. In other words, malicious device 606 may attempt to interfere with the positioning session between positioning device 602 and positioning device 604 by sending a set of transmissions 612 in a MITM scenario.

[0113] A set of monitoring devices (such as monitoring devices 622 and 624) can monitor positioning signals sent by positioning devices 602 and 604 to help identify malicious transmissions, such as the set of transmissions 612 from malicious device 606. For example, when positioning device 602 sends a set of positioning signals 608 to positioning device 604 for a positioning session, monitoring devices 622 and / or 624 can also receive the set of positioning signals 608. Similarly, when positioning device 604 sends a set of positioning signals 610 to positioning device 602 for a positioning session, monitoring devices 622 and / or 624 can also receive the set of positioning signals 610. The monitoring devices can monitor the set of positioning signals 608 and 610 to calculate multiple location attributes. For example, the set of monitoring devices can calculate Time of Arrival (ToA), Angle of Arrival (AoA), Reference Signal Strength Indicator (RSSI), Channel Energy Response, the ratio of the maximum value to the median associated with the Channel Energy Response, distance, and / or location. These multiple location attributes can be associated with location devices. For example, these multiple location attributes can be used to estimate the location of location device 602 and the location of location device 604. Each of these multiple location attributes can be associated with multiple time domains. In other words, each of these multiple location attributes can be associated with the location of location device 602 and the location of location device 604 at different times. Therefore, over time, the group of monitoring devices can understand the location of location device 602 and location device 604. When malicious device 606 sends a set of transmissions 612 from a location different from the location of location device 602 and location device 604, the group of monitoring devices can subsequently understand that the set of transmissions 612 was sent from a location different from the location of location device 602 and location device 604.

[0114] Compared to Figure 6B Figure 650 illustrates wireless communication between positioning devices 602 and 604 and a malicious device 606. Positioning device 602 may attempt to establish a positioning session with positioning device 604. Malicious device 606 may be a malicious node that intrudes into the network and actively forges measurements with real nodes (such as positioning devices 602 and 604) by impersonating a trusted node within the network. Malicious device 606 may be a real node that has been compromised by a hacker, or it may be a device disguised as another device. For example, malicious device 606 may impersonate positioning device 602 relative to positioning device 604, and malicious device 606 may impersonate positioning device 604 relative to positioning device 602.

[0115] In other words, location device 602 can send a set of location signals 652, believing they are being received and measured by location device 604. Malicious device 606 can receive this set of location signals 652 and, in response, impersonate location device 604 to send a set of signals 654 to location device 602. Similarly, location device 604 can send a set of location signals 656, believing they are being received and measured by location device 602. Malicious device 606 can receive this set of location signals 656 and, in response, impersonate location device 602 to send a set of signals 658 to location device 604. This type of scenario can be referred to as an intra-network scenario.

[0116] A set of monitoring devices (such as monitoring devices 622 and 624) can monitor positioning signals transmitted by positioning devices 602 and 604 to help identify malicious transmissions, such as the set of transmissions 654 and / or 658 from malicious device 606. For example, when positioning device 602 transmits a set of positioning signals 652 to positioning device 604 for a positioning session, monitoring devices 622 and / or 624 can also receive the set of positioning signals 652. Similarly, when positioning device 604 transmits a set of positioning signals 656 to positioning device 602 for a positioning session, monitoring devices 622 and / or 624 can also receive the set of positioning signals 656. The monitoring devices can monitor the set of positioning signals 652 and 656 to calculate multiple location attributes. For example, the set of monitoring devices can calculate ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, and / or location. These multiple location attributes can be associated with location devices. For example, these multiple location attributes can be used to estimate the location of location device 602 and the location of location device 604. Each of these multiple location attributes can be associated with multiple time domains. In other words, each of these multiple location attributes can be associated with the location of location device 602 and the location of location device 604 at different times. Therefore, over time, the group of monitoring devices can understand the location of location device 602 and location device 604. When malicious device 606 sends a set of transmissions 654 and / or a set of transmissions 658 from a location different from the location of location device 602 and location device 604, the group of monitoring devices can then understand that the set of transmissions 654 and / or the set of transmissions 658 were sent from a location different from the location of location device 602 and location device 604.

[0117] Although Figure 6A Figure 600 and Figure 6B Figure 650 shows two monitoring devices, but fewer or more monitoring devices can be used to monitor location signals from a group of wireless devices performing positioning on each other.

[0118] Such schemes can robustly verify CBR measurements by using additional existing infrastructure to monitor positioning signals transmitted by positioning devices performing ranging on each other. This additional existing infrastructure can be, for example, an access point (AP) in a building that receives, measures, and monitors transmitted wireless signals such as Wi-Fi, BLE, UWB, or sidelinks. Typical spoofing devices may not be able to consistently spoof positioning signals over time (e.g., HADM measurements). A group of monitoring devices (such as...) Figure 6A and Figure 6B Monitoring devices 622 and 624 can identify such spoofed measurements by offloading computation to an external infrastructure that provides security checks. These security checks can be performed passively in the background. Methods based on received signal strength (e.g., RSSI) can be robust against such attacks. Such external infrastructure can detect spoofing by monitoring for spoofed transmissions with unexpectedly strong received signal strength.

[0119] Both positioning and monitoring devices can be part of a shared ecosystem, such as for proprietary asset tracking scenarios. Measurements can also be performed using different technologies (e.g., both BLE and UWB, or both UWB and sidelink) to detect spurious signals. A connected intelligent edge (CIE) can coordinate the entire process between monitoring and positioning devices. For example, a CIE can jointly process measurements performed by multiple positioning devices. In one aspect, a CIE can implement an outlier rejection algorithm to identify outliers based on positioning data from multiple positioning devices. The CIE can apply such an algorithm to input data to send indicators of spurious transmissions. Such external infrastructure can be used to monitor positioning (e.g., ranging) using different wireless signals (such as BLE, UWB, Wi-Fi, and / or sidelink signals). Positioning devices can use any type of positioning estimation method, such as RTT or RTP, to estimate ranging.

[0120] In some respects, a set of monitoring devices can be configured to passively verify range estimates and identify erroneous and / or spurious measurements. In other words, monitoring devices (such as access points) can passively detect security vulnerabilities and report them to a set of location devices. For example, Figure 6APositioning devices 602 and 604 can use BLE signals to perform ranging. Monitoring devices 622 and 624 can passively listen for CBR or RTP measurements exchanged between positioning devices 602 and 604. This group of monitoring devices can use various methods to measure the distance between the group of positioning devices. For example, monitoring device 622 can convert a differential ToA measurement into a differential distance. Monitoring device 622 can measure the time it takes for the set of positioning signals 608 to arrive at monitoring device 622 from positioning device 602, and can measure the time it takes for the set of positioning signals 610 to arrive at monitoring device 622 from positioning device 604, to calculate the differential distance between positioning devices 602 and 604. In other words, monitoring device 622 can calculate the UL-TDoA. In another example, monitoring device 622 can calculate a differential AoA measurement based on the difference between the UL-AoA measured relative to the set of positioning signals 608 sent from positioning device 602 and the set of positioning signals 610 sent from positioning device 604. Such calculations may be useful for signals with small bandwidth (e.g., BLE signals) because when the bandwidth is small, ToA measurements may be less accurate, and the AP can be equipped with a superior antenna array for robust AoA estimation (compared to the antenna array on a mobile UE performing positioning).

[0121] After the group of monitoring devices passively monitors location attributes (e.g., differential ToA and / or differential AoA) over time, at least one of the monitoring devices in the group can receive and identify anomalous transmissions that indicate potential security vulnerabilities in one or more time slots. At least one of the monitoring devices in the group can notify the group of positioning devices (e.g., the initiating node of the positioning session) that one or more measurements are invalid. Such determination can be made by the monitoring devices using a time-domain variation threshold for the measurements. In other words, if the estimate of differential ToA / AoA fluctuates over time, and the measurement fluctuates to reach or exceed a threshold, a report message can be sent. In some aspects, at least one of the monitoring devices in the group can provide a priority list and / or sorting list of time slots. For example, each time slot may correspond to an associated BLE channel used in an HADM session. Some of these measurements may be more reliable than others (e.g., within the threshold range). Quality metrics can be calculated based on histograms of location attributes, Gaussian models of location attributes, standard deviations of location attributes, signal-to-interference-plus-noise ratio (SINR) corresponding to the location signal transmission, and / or intensity indicators of peak values ​​(e.g., spurious peaks in the channel response) associated with the location signal transmission. Each monitoring device in the group can passively verify the distance estimate. Each monitoring device in the group can identify malfunctioning and / or spurious measurements.

[0122] For example, monitoring device 622 may generate a histogram and / or Gaussian fit for a set of measurements of the set of location signals 608 taken over a time slot range (i.e., multiple time domains). Monitoring device 622 may define the time domain variation threshold as a certain interquartile range (e.g., for histogram fitting, the first 10% / last 10%), or as an integer multiple of the standard deviation (e.g., for Gaussian fitting, deviation from the mean by 2 standard deviations). Measurements of the set of location signals 608 may include, for example, ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, and / or location. Although there may be some statistically independent changes in the channel of monitoring device 622 relative to location device 602 over time, monitoring device 622 may detect spoofing activity, such as a set of transmissions 612 from malicious device 606. In fact, both monitoring device 622 and monitoring device 624 may detect such spoofing activity simultaneously or in the same time domain. In other words, the measurements associated with this group of transmissions 612 from malicious device 606 may exceed different time-domain variation thresholds at each of monitoring devices 622 and 624. In some aspects, another threshold may be defined for both monitoring devices 622 and 624 where measurements are observed to exceed a first threshold. In response to exceeding a second threshold, the group of monitoring devices may consider the corresponding time domain to be spoofed. In some aspects, the reliability of each time domain may be ranked according to the degree to which measurements during that time domain exceed a threshold.

[0123] In some aspects, a group of monitoring devices (such as monitoring devices 622 and 624) may collectively derive distance estimates for a group of positioning devices (such as positioning devices 602 and 604). One of the monitoring devices in this group may be configured (e.g., by an LMF or CIE) to perform collective processing, or a dedicated server (e.g., a CIE) may perform such collective processing by collecting report messages from the group of monitoring devices. Such collective processing may include outlier rejection algorithms. For example, the device performing the collective processing may select an appropriate subgroup of monitoring devices, or a suitable set of time domains. Such collective processing may include using UL-RSSI measurements to calculate estimated locations for the group of positioning devices (such as positioning devices 602 and 604). Such collective processing may include using the estimated locations to estimate distances between the group of positioning devices (such as positioning devices 602 and 604). The device performing the collective processing may also calculate uncertainties associated with the estimates (such as location estimates or distance estimates) and may provide an indicator of these uncertainties to the group of positioning devices (e.g., the initiating node of the positioning session). The device performing collective processing can also provide a threshold that allows the positioning device to authenticate positioning measurements using a threshold calculated by analyzing positioning signal measurements over time. This threshold could be, for example, the probability that a distance estimate deviates from a distance estimate given by the group of monitoring devices within a specific time domain.

[0124] In response to receiving one or more report messages, at least one positioning device in the group of positioning devices (e.g., the initiating node) may discard one or more measurements. If a positioning device receives multiple report messages (e.g., one report message from monitoring device 622 and another report message from monitoring device 624), the positioning device may use the multiple report messages to form an aggregated priority list and / or sorted list, and may subsequently discard one or more measurements based on the aggregated list.

[0125] Although Figures 600 and 650 show a group of positioning devices as two positioning devices (positioning device 602 and positioning device 604) and a group of monitoring devices as two monitoring devices (monitoring device 622 and monitoring device 624), the group of positioning devices and / or the group of monitoring devices may include a larger number of them. For example, multiple positioning devices among three or more positioning devices may use BLE signals to perform positioning relative to each other to calculate the distance between the positioning devices. Similarly, multiple monitoring devices among three or more monitoring devices may monitor BLE signals and may communicate with some of the positioning devices via other technologies (e.g., Wi-Fi signals). The group of positioning devices may perform cooperative positioning, such as as a cluster of packages and / or pallets inside a warehouse or retail store, or a group of users with mobile phones. By performing cooperative positioning, the positioning devices can improve the overall accuracy of positioning estimates among these positioning devices. Each monitoring device in the group of monitoring devices may monitor positioning signals from a subgroup of the group of positioning devices and may send report messages to help identify which positioning signal measurements may be discarded based on association with fraudulent or malicious indicators. Future collaborative location sessions can be updated to remove fraudulent / malicious nodes, preventing the remaining legitimate nodes from performing and / or reporting any further measurements with these fraudulent / malicious nodes.

[0126] Figure 7 This is a connection flowchart 700 illustrating an example of positioning between positioning device 704 and positioning device 706. A group of monitoring devices 702 can identify a set of transmissions 720 sent by malicious device 708 as a set of anomalous transmissions. Positioning device 704 may include a UE. Positioning device 706 may include a UE. Positioning devices 704 and 706 may be configured to perform positioning on each other, such as calculating the distance between these devices. The group of monitoring devices 702 may include a base station, such as an AP or TRP.

[0127] Positioning device 704 may send a set of positioning signals 710 to positioning device 706. Positioning device 706 may receive the set of positioning signals 710 from positioning device 704. Positioning device 704 may be configured to periodically send the set of positioning signals 710 according to a schedule (e.g., a schedule that schedules positioning sessions at regular intervals). At 716, positioning device 706 may perform positioning on the set of positioning signals 710, for example, by measuring the set of positioning signals 710 and by calculating a set of location attributes associated with positioning device 704 based on these measurements. The set of positioning signals 710 may include BLE signals, UWB signals, Wi-Fi signals, or sidelink signals.

[0128] Similarly, positioning device 706 may send a set of positioning signals 712 to positioning device 704. Positioning device 704 may receive this set of positioning signals 710 from positioning device 706. Positioning device 706 may be configured to periodically send the set of positioning signals 712 according to a schedule (e.g., a schedule that schedules positioning sessions at regular intervals). At 714, positioning device 704 may perform positioning on the set of positioning signals 712, for example, by measuring the set of positioning signals 712 and by calculating a set of location attributes associated with positioning device 706 based on these measurements. The set of positioning signals 712 may include BLE signals, UWB signals, Wi-Fi signals, or sidelink signals. The set of location attributes may include ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, and / or location.

[0129] The monitoring device 702 can also monitor the positioning signal 710 and the positioning signal 712. In other words, the monitoring device 702 can also receive the positioning signal 710 from the positioning device 704. The monitoring device 702 can also receive the positioning signal 712 from the positioning device 706.

[0130] At 717, the monitoring device 702 can measure the set of positioning signals 710 and 712. For example, the monitoring device 702 can measure ToA, AoA, RSSI, channel energy response, or the ratio of the maximum value to the median associated with the channel energy response. At 718, the monitoring device 702 can calculate location attributes based on these measurements. These location attributes may include the measurements acquired at 717, or may include attributes based on these measurements. The set of location attributes may include ToA, TDoA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, and / or location. The monitoring device 702 can calculate a set of location attributes for each of positioning devices 704 and 706, such as the AoA of positioning device 704 and the AoA of positioning device 706. In other words, the monitoring device 702 can calculate multiple location attributes, one location attribute for each positioning device being monitored by the monitoring device 702. The monitoring device 702 can associate multiple location attributes with a time domain. For example, if the monitoring device 702 measures the set of location signals 710 and 712 in four different time domains (e.g., four equal location signal timings that repeat periodically), the monitoring device 702 can associate each of the multiple location attributes associated with each device in the set of location devices with a different time domain.

[0131] The monitoring device 702 can calculate a reliability metric for each time domain. This reliability metric indicates how reliable a measurement acquired in that time domain might be, for example, whether a transmission in that time domain reaches or exceeds a threshold, or the extent to which a transmission in that time domain deviates from the average value. In some aspects, the monitoring device 702 can calculate a sorted list of time domains, thereby ranking some time domains as having higher reliability than others. To calculate the reliability metric for each time domain, the monitoring device 702 can calculate the reliability metric based on at least one of the following: a histogram of the plurality of location attributes, a Gaussian model of the plurality of location attributes, the standard deviation of the plurality of location attributes, the SINR corresponding to each of the measured location signals, or an intensity indicator of the peak value in the corresponding channel response associated with each of the measured location signals. To calculate the reliability metric for each time domain, the monitoring equipment 702 can calculate the positioning of positioning device 704 and positioning device 706, and subsequently mark these transmissions as unreliable when transmitting a calculated positioning that differs from the calculated positioning of positioning device 704 or positioning device 706. Similarly, to calculate the reliability metric for each time domain, the monitoring equipment 702 can calculate the distance of positioning device 704 relative to the measurement monitoring equipment and the distance of positioning device 706 relative to the measurement monitoring equipment, and subsequently mark these transmissions as unreliable when transmitting a calculated distance that differs from the calculated relative distance of positioning device 704 or positioning device 706.

[0132] In some aspects, at least one of the monitoring devices in the group 702 can calculate a coarse boundary region based on the environment surrounding the positioning devices 704 and 706. For example, the network infrastructure can be programmed to know the walls associated with the topology of the store where the positioning devices 704 and 706 are located, or the network infrastructure can be programmed to know fixed furniture (e.g., shelves in a warehouse) that limits the possible locations of the positioning devices 704 and 706, or the locations that the positioning devices 704 and 706 can travel to. The group of monitoring devices 702 may include a set of access points (APs) specific to the topology associated with the positioning devices 704 and 706. Because the group of monitoring devices 702 can be configured with a coarse boundary region associated with the positioning devices 704 and 706 and a reference true location for the group of monitoring devices 702, the group of monitoring devices 702 can define possible calculated ToA values ​​or calculated differential ToA values ​​based on the coarse boundary region, by means of minimum and maximum values. Such boundaries can be calculated based on the geometric distance between the boundaries of a coarse area associated with positioning devices 704 and 706 (e.g., geometric distance divided by the speed of light). In some aspects, at least one of the monitoring devices 702 can receive an indicator of the store layout or a map of the building, which can be used to calculate the coarse boundary area. The monitoring devices 702 can calculate specific areas where positioning devices 704 and 706 may be located (e.g., in a retail store aisle, on a warehouse shelf). In addition to the set of positioning signals 710 and 712, the monitoring devices 702 can also calculate such coarse boundary areas or coarse movement paths based on such prior knowledge of the environment associated with positioning devices 704 and 706.

[0133] At some point, malicious device 708 may send a set of transmissions 720. This set of transmissions 720 may pertain to a MITM scenario or an intra-network scenario. This set of transmissions 720 may be received by location device 704. This set of transmissions 720 may be received by location device 706. This set of transmissions may be received by the same group of monitoring devices 702. In some aspects, location device 704 may be configured to periodically transmit this set of location signals 710 in an equal time domain. Therefore, this set of location signals 710 may be transmitted during or after malicious device 708 transmits this set of transmissions 720. Similarly, in some aspects, location device 706 may be configured to periodically transmit this set of location signals 712 in an equal time domain. Therefore, this set of location signals 712 may be transmitted during or after malicious device 708 transmits this set of transmissions 720. In other words, although the connection flowchart 700 may show the group of positioning signals 710 as being sent before the group of positioning signals 712, and the group of positioning signals 712 as being sent before the group of transmissions 720, the group of positioning signals 710, the group of positioning signals 712, and / or the group of transmissions 720 may be sent in any order, or may be sent concurrently with each other. At 717, the group of monitoring devices 702 may measure the group of transmissions 720, and at 718, the group of monitoring devices 702 may calculate location attributes based on these measurements, similar to the group of positioning signals 710 from positioning device 704 and the group of positioning signals 712 from positioning device 706.

[0134] At 722, the group of monitoring devices 702 can be configured to identify a set of anomalous transmissions based on calculated location attributes, such as by calculating a reliability metric associated with measuring the group of transmissions 720. For example, the group of monitoring devices 702 could detect that a transmission claiming to originate from a positioning device is being sent from outside a calculated coarse boundary area, or that the positioning device has moved "across" the boundary, such as a store wall or warehouse shelf, or that the calculated positioning / location jumps to a remote location by a minimum threshold distance and then jumps back to the positioning device's original location, or that the positioning device travels from one location to another at a speed greater than a threshold. One of the monitoring devices in the group of monitoring devices 702 can identify transmissions received during a time domain period as having a measurement value greater than or equal to a threshold (e.g., RSSI or ToA). This threshold can be calculated based on a histogram or Gaussian fit of historical measurements (e.g., the top 10% of the histogram fit, or two standard deviations from the mean). Transmissions received during this time period can be identified as potentially anomalous transmissions, or can be assigned a lower reliability metric based on such calculations.

[0135] In some aspects, the monitoring device 702 may send a set of report messages 724 to positioning devices 704 and / or 706. Positioning devices 704 and / or 706 may receive the set of report messages 724. In some aspects, the set of report messages 724 may include indicators of multiple location attributes, enabling the receiving positioning device to identify anomalous transmissions based on these indicators. In some aspects, the set of report messages 724 may include indicators of anomalous transmissions, such as a reliability measure for each of the multiple time domains, a reliability list ranking the reliability of each of the multiple time domains relative to each other, or a list of time domains already identified as potentially anomalous transmissions.

[0136] One or more monitoring devices in the group of monitoring devices 702 may send the report message 724 to one or more other monitoring devices in the group of monitoring devices 702. In other words, any monitoring device in the group of monitoring devices 702 may aggregate reports from at least some of the other monitoring devices in the group of monitoring devices 702 to improve the reliability of identifying anomalous transmissions. For example, one monitoring device in the group of monitoring devices 702 may collect a set of reliability metrics from multiple monitoring devices in the group of monitoring devices 702, and identify a time domain as having a false transmission if a threshold number of monitoring devices in the group of monitoring devices 702 identify the time domain as having low reliability (e.g., x monitoring devices have measurements greater than y). In some embodiments, the group report message 724 may include

[0137] At 726, the positioning device 704 can identify a set of anomalous transmissions or a set of unreliable time domains based on the group report message 724. The positioning device 704 can then perform positioning based on the group report message 724, for example, by ignoring measurements associated with time domains at or below a threshold level, or by ignoring measurements associated with the last 10% of time domains ordered by reliability. In other words, the positioning device 704 can use the group report message 724 to identify anomalous transmissions sent by the malicious device 708 as a set of transmissions 720, while ignoring transmissions sent during those time domains. The positioning device 704 can then perform positioning on the remaining positioning signals, which may include the group of positioning signals 712 sent by the positioning device 706.

[0138] Similarly, at 728, the location device 706 can identify a set of anomalous transmissions or a set of unreliable time domains based on the group report message 724. The location device 706 can then perform location based on the group report message 724, for example, by ignoring measurements associated with time domains at or below a threshold level, or by ignoring measurements associated with the last 10% of time domains ordered by reliability. In other words, the location device 706 can use the group report message 724 to identify anomalous transmissions sent by the malicious device 708 as a set of transmissions 720, while ignoring transmissions sent during those time domains. The location device 706 can then perform location on the remaining location signals, which may include the group of location signals 710 sent by the location device 704.

[0139] In some aspects, the group of monitoring devices 702 may send the group report message 724 to at least one monitoring device in the group of monitoring devices 702. In other words, in addition to positioning devices 704 and / or 706 receiving and processing the group report message 724, at 718, at least one monitoring device in the group of monitoring devices 702 may aggregate the group report message 724 to perform collective processing on the group report message 724 to calculate location attributes for further calculations, such as more accurate calculations of the positioning of positioning device 704 and positioning device 706, which can improve the ability to prioritize the reliability of transmissions over a time domain period. At least one monitoring device in the group of monitoring devices 702 may send the results of this collective processing to the other monitoring devices in the group of monitoring devices 702 to improve the identification of anomalous transmissions. In some aspects, at 722, the group of monitoring devices 702 may identify subgroups of anomalous report messages in the group report messages, thereby allowing the group of monitoring devices 702 to ignore subgroups of the group report messages. In some aspects, the CIE can receive the group of report messages, identify subgroups of anomalous report messages within the group of report messages, and send an indicator of that subgroup of anomalous report messages to the group of monitoring devices, allowing the group of monitoring devices 702 to ignore the subgroup of the group of report messages. The group of monitoring devices 702 and / or the CIE can apply an outlier rejection algorithm to help ignore reports from potentially suspicious monitoring devices, thereby allowing the group of monitoring devices 702 to ignore report messages associated with suspicious monitoring devices. In some aspects, the group of monitoring devices 702 can send an indicator of suspicious anomalous report messages and / or an indicator of suspicious monitoring devices in at least one report message in the group of report messages 724, thereby allowing the positioning device 704 or positioning device 706 to ignore subgroups of report messages they receive.

[0140] Figure 8This is a flowchart 800 of a wireless communication method. The method can be performed by a first wireless device (e.g., base station 102, base station 310; wireless device 402, wireless device 406; monitoring device 622, monitoring device 624; a group of monitoring devices 702; network entity 1302, network entity 1402, network entity 1560). At 802, the first wireless device can receive multiple positioning signals from a second and a third wireless device during multiple time domains. For example, 802 can be performed by... Figure 7 802 is performed by one of a set of monitoring devices 702, which can receive a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706 during multiple time domains. Furthermore, 802 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0141] At point 804, the first wireless device can measure the multiple location signals. For example, 804 can be determined by... Figure 7 The monitoring is performed by one of the monitoring devices 702 in a set of monitoring devices, which can measure positioning signals at 717, such as a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706. Furthermore, 804 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0142] At point 806, the first wireless device can calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple positioning signals. For example, point 806 can be derived from... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs the calculation at 818 based on measurements acquired at 817 using multiple positioning signals, corresponding to multiple time domains. The multiple location attributes may include multiple sets of location attributes, each corresponding to a time domain among the multiple time domains. Furthermore, 806 may be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0143] At point 808, the first wireless device may send a report message, which may include a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. For example, 808 may be... Figure 7One of the monitoring devices in a group of monitoring devices 702 performs the action, which can send a set of report messages 724 to positioning devices 704, positioning devices 706, and / or other monitoring devices in the group of monitoring devices 702. At least one of the report messages 724 may include a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. In other words, the report message may indicate an abnormal transmission, or allow the positioning device to identify an abnormal transmission based on calculated location attributes. Furthermore, 808 may be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0144] Figure 9 This is a flowchart 900 of a wireless communication method. The method can be performed by a first wireless device (e.g., base station 102, base station 310; wireless device 402, wireless device 406; monitoring device 622, monitoring device 624; a group of monitoring devices 702; network entity 1302, network entity 1402, network entity 1560). At 902, the first wireless device can receive multiple positioning signals from a second and a third wireless device during multiple time domains. For example, 902 can be performed by... Figure 7 The monitoring device 702 in the set of monitoring devices performs the function of receiving a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706 during multiple time domains. Furthermore, 902 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0145] At position 904, the first wireless device can measure the multiple location signals. For example, 904 can be determined by... Figure 7 The monitoring device 702 in the set of monitoring devices performs the operation, and the monitoring device can measure positioning signals at 717, such as a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706. Furthermore, 904 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0146] At 906, the first wireless device can calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple positioning signals. For example, 906 can be derived from... Figure 7One of the monitoring devices in a set of monitoring devices 702 performs the calculation at 918 based on measurements acquired at 917 using multiple positioning signals, corresponding to multiple time domains. The multiple location attributes may include multiple sets of location attributes, each corresponding to a time domain among the multiple time domains. Furthermore, 906 may be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0147] At 908, the first wireless device may send a report message, which may include a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. For example, 908 may be... Figure 7 Performed by one of the monitoring devices 702 in a group of monitoring devices, this monitoring device may send a set of report messages 724 to positioning devices 704, positioning devices 706, and / or other monitoring devices in the group of monitoring devices 702. At least one of the report messages 724 may include a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. In other words, the report message may indicate an abnormal transmission, or allow the positioning device to identify an abnormal transmission based on calculated location attributes. Furthermore, 908 may be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0148] At 910, the first wireless device can calculate a reliability metric for each of the plurality of time domains. The report message may include at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains. For example, 910 may be generated by... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs the calculation at 722 of a reliability metric for each of the plurality of time domains. In other words, a transmission received during a time domain can be rated using a high reliability metric or a low reliability metric. The group report message 724 may include at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the plurality of time domains based on the reliability metric for each of the plurality of time domains. The sorted list may sort the plurality of time domains from most reliable to least reliable, and vice versa. Furthermore, 910 may be performed by Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0149] At 912, the first wireless device can receive a set of reporting messages from a group of wireless devices. Each reporting message in this set of reporting messages may include a second plurality of location attributes corresponding to the plurality of time domains. For example, 912 may be... Figure 7 The monitoring device in a group of monitoring devices 702 performs the operation and can receive the group of report messages 724 from other monitoring devices in the group of monitoring devices 702. Each report message in the group of report messages 724 may include a second plurality of location attributes corresponding to the plurality of time domains. In other words, each of the plurality of time domains may have an associated set of location attributes, which can be used to identify an abnormal transmission in one of the plurality of time domains. Furthermore, 912 may be performed by Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0150] At point 914, the first wireless device can identify the anomalous transmission based on each of the plurality of location attributes and the second plurality of location attributes. For example, 914 can be determined by... Figure 7 The monitoring device in a set of monitoring devices 702 performs the function at 722, which can identify the abnormal transmission based on each of the plurality of location attributes and the second plurality of location attributes from the set of report messages 724. Furthermore, 914 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0151] At 916, the first wireless device can calculate the location of the second or third wireless device based on each of the plurality of location attributes and the second plurality of location attributes. For example, 916 can be... Figure 7 Performed by one of the monitoring devices in a group of monitoring devices 702, the monitoring device can calculate the location of positioning device 704 and / or positioning device 706 at 718 based on a plurality of location attributes calculated at 718 and each of the second plurality of location attributes received from the group report message 724 from the other monitoring devices in the group of monitoring devices 702. Furthermore, 916 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0152] At point 918, the first wireless device can identify the abnormal transmission as originating from a second location other than the calculated location. For example, 918 can be... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs this function, and this monitoring device can identify the abnormal transmission at 722 as a transmission from a second location other than the calculated location. In other words, one of the monitoring devices in the set of monitoring devices 702 can determine that one of the transmissions in the set of transmissions 720 is transmitted from a location other than the location of positioning device 704 and a location other than the location of positioning device 706. Furthermore, 918 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0153] At point 920, the first wireless device can calculate the distance between the second wireless device and the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes. For example, 920 can be determined by... Figure 7 Performed by one of the monitoring devices in a group of monitoring devices 702, the monitoring device can calculate the distance between positioning device 704 and positioning device 706 based on multiple location attributes calculated at 718 and each of the second plurality of location attributes received from the group report message 724 from the other monitoring devices in the group of monitoring devices 702. Furthermore, 920 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0154] At point 922, the first wireless device can identify the abnormal transmission as originating from a device located at a second distance from at least one of the second and third wireless devices, this second distance differing from the calculated distance. For example, 922 can be defined by... Figure 7 One of the monitoring devices in a group of monitoring devices 702 performs the function at 722, identifying the abnormal transmission as originating from a device at a second distance from at least one of positioning devices 704 and 706, this second distance being different from the calculated distance. In other words, one of the monitoring devices in the group of monitoring devices 702 can calculate that one of the transmissions in the group of transmissions 720 was transmitted from a distance different from the distance to positioning device 704 and the distance to positioning device 706. Furthermore, 922 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0155] Figure 10This is a flowchart 1000 of a wireless communication method. The method can be performed by a first wireless device (e.g., base station 102, base station 310; wireless device 402, wireless device 406; monitoring device 622, monitoring device 624; a group of monitoring devices 702; network entity 1302, network entity 1402, network entity 1560). At 1002, the first wireless device can receive multiple positioning signals from a second and a third wireless device during multiple time domains. For example, 1002 can be performed by... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs the function, which can receive a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706 during multiple time domains. Furthermore, 1002 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0156] At location 1004, the first wireless device can measure the multiple location signals. For example, 1004 can be determined by... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs the function, which can measure positioning signals at 717, such as a set of positioning signals 710 from positioning device 704 and a set of positioning signals 712 from positioning device 706. Furthermore, 1004 can be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0157] At point 1006, the first wireless device can calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple positioning signals. For example, 1006 can be derived from... Figure 7 One of the monitoring devices in a set of monitoring devices 702 performs the calculation at 1018 based on measurements acquired at 1017 using multiple positioning signals, corresponding to multiple time domains. The multiple location attributes may include multiple sets of location attributes, each corresponding to a time domain among the multiple time domains. Furthermore, 1006 may be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0158] At 1008, the first wireless device may send a report message, which may include a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. For example, 1008 may be... Figure 7One of the monitoring devices in a group of monitoring devices 702 performs the action, which can send a set of report messages 724 to positioning devices 704, positioning devices 706, and / or other monitoring devices in the group of monitoring devices 702. At least one of the report messages 724 may include a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains. In other words, the report message may indicate an abnormal transmission, or allow the positioning device to identify an abnormal transmission based on the calculated location attributes. Furthermore, 1008 may be... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0159] At 1010, the first wireless device can receive a set of report messages from a group of wireless devices, wherein each report message in the set of report messages may include a second plurality of location attributes corresponding to the plurality of time domains. For example, 1010 may be provided by Figure 7 The monitoring device in a group of monitoring devices 702 performs the operation and can receive the group of report messages 724 from other monitoring devices in the group of monitoring devices 702. Each report message in the group of report messages 724 may include a second plurality of location attributes corresponding to the plurality of time domains. In other words, each of the plurality of time domains may have an associated set of location attributes, which can be used to identify an abnormal transmission in one of the plurality of time domains. Furthermore, 1010 may be performed by Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0160] At 1012, the first wireless device can identify the abnormal reporting message in the group of reporting messages based on each of the plurality of location attributes and the second plurality of location attributes. For example, 1012 can be determined by... Figure 7 One of the monitoring devices in a group of monitoring devices 702 performs the function of identifying an abnormal reporting message in the group of reporting messages 724 at 722 based on each of the plurality of location attributes and the second plurality of location attributes. For example, one of the monitoring devices in the group of monitoring devices 702 can determine a reliability metric in the reporting time domain of a reporting message in the group of reporting messages 724 that deviates from the reliability metrics reported by other reporting messages in the group of reporting messages 724 by at least a threshold. Furthermore, 1012 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0161] At 1014, the first wireless device may ignore a subgroup of reports associated with the anomaly report message in response to the identifier of the anomaly report message. For example, 1014 may be... Figure 7 One of the monitoring devices in a group of monitoring devices 702 performs this action, and the monitoring device can, at 722, ignore the subgroup associated with the anomaly report message 724 in response to the identifier of the anomaly report message. Furthermore, 1014 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0162] At point 1016, the first wireless device can identify the anomalous transmission based on each of the plurality of location attributes and the second plurality of location attributes. For example, 1016 can be determined by... Figure 7 The monitoring is performed by one of the monitoring devices 702 in a set of monitoring devices, which can identify the abnormal transmission at 722 based on each of the plurality of location attributes that were not discarded at 1014 and the second plurality of location attributes. Furthermore, 1016 can be performed by... Figure 1 , Figure 3 , Figure 14 or Figure 15 Component 199 is executed.

[0163] Figure 11 This is a flowchart 1100 of a wireless communication method. The method can be performed by a first wireless device (e.g., UE 104, UE 350; wireless device 404; positioning device 602, positioning device 604, positioning device 704, positioning device 706; device 1304). At 1102, the first wireless device can receive a set of positioning signals from a second wireless device during multiple time domain periods. For example, 1102 can be performed by… Figure 7 The positioning device 704 performs this function, and can receive a set of positioning signals 712 from the positioning device 706 during multiple time domains. The positioning device 704 can also receive a set of transmissions 720 from the malicious device 708 during multiple time domains. Furthermore, 1102 can be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0164] At 1104, the first wireless device can receive a report message including a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains. For example, 1104 may be... Figure 7The positioning device 704 performs this action, and can receive a set of report messages 724 from a set of monitoring devices 702. The set of report messages 724 may include a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains. Furthermore, 1104 may be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0165] At location 1106, the first wireless device can measure this set of location signals. For example, 1106 can be determined by... Figure 7 The positioning device 704 in the middle performs the operation, and the positioning device can measure the set of positioning signals 712 at 726. Furthermore, 1106 can be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0166] At 1108, the first wireless device can select a subgroup of the measured location signals based on at least one of the first indicator or the second indicator. For example, 1108 can be... Figure 7 The positioning device 704 performs this action, and at 726, the positioning device can select a subgroup of a measured set of positioning signals based on at least one of the first indicator or the second indicator. In other words, the positioning device 704 can identify the group transmission 720 based on the group report message 724 and ignore the group transmission 720 in order to perform positioning based on the group of positioning signals 712. Furthermore, 1108 can be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0167] At 1110, the first wireless device can calculate the location of the second wireless device based on this subgroup of a measured set of location signals. For example, 1110 can be determined by... Figure 7 The positioning device 704 performs this function, and at 726, the positioning device 706 can calculate its position based on a subgroup of a measured set of positioning signals (e.g., the set of positioning signals 712 minus those signals sharing the time domain with the set of transmissions 720). Furthermore, 1110 can be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0168] Figure 12This is a flowchart 1200 of a wireless communication method. The method can be performed by a first wireless device (e.g., UE 104, UE 350; wireless device 404; positioning device 602, positioning device 604, positioning device 704, positioning device 706; device 1304). At 1202, the first wireless device can receive a set of positioning signals from a second wireless device during multiple time domain periods. For example, 1202 can be performed by… Figure 7 The positioning device 704 performs this action, and can receive a set of positioning signals 712 from the positioning device 706 during multiple time domains. The positioning device 704 can also receive a set of transmissions 720 from the malicious device 708 during multiple time domains. Furthermore, 1202 can be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0169] At 1204, the first wireless device can receive a report message including a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains. For example, 1204 may be... Figure 7 The positioning device 704 performs this action, and the positioning device can receive a set of report messages 724 from a set of monitoring devices 702. The set of report messages 724 may include a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains. Furthermore, 1204 may be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0170] At point 1206, the first wireless device can measure this set of location signals. For example, 1206 can be determined by... Figure 7 The positioning device 704 in the middle performs the operation, and the positioning device can measure the set of positioning signals 712 at 726. Furthermore, 1206 can be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0171] At 1208, the first wireless device can select a subgroup of the measured location signals based on at least one of the first indicator or the second indicator. For example, 1208 can be... Figure 7 The positioning device 704 performs this action, and at 726, the positioning device can select a subgroup of a measured set of positioning signals based on at least one of the first indicator or the second indicator. In other words, the positioning device 704 can identify the group transmission 720 based on the group report message 724 and ignore the group transmission 720 in order to perform positioning based on the group of positioning signals 712. Furthermore, 1208 can be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0172] At 1210, the first wireless device can calculate the location of the second wireless device based on this subgroup of a measured set of location signals. For example, 1210 can be... Figure 7 The positioning device 704 performs this function, and at 726, the positioning device 706 can calculate its position based on a subgroup of a measured set of positioning signals (e.g., the set of positioning signals 712 minus those signals that share the time domain with the set of transmissions 720). Furthermore, 1210 can be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0173] At point 1212, the first wireless device can receive the report message from the third wireless device. For example, 1212 can be... Figure 7 The positioning device 704 in the group performs this function, and this positioning device can receive some of the report messages in the group of report messages 724 from other monitoring devices in the group of monitoring devices 702. Furthermore, 1212 can be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0174] At 1214, the first wireless device can receive a second report message from the fourth wireless device. This second report message may include a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains. For example, 1214 may be... Figure 7 The positioning device 704 in the group of monitoring devices 702 performs the operation, and this positioning device can receive some of the report messages in the group of report messages 724 from other monitoring devices in the group of monitoring devices 702. The report message received at 1212 may be received from different monitoring devices in the group of monitoring devices 702, compared to the report message received at 1214. The second report message may include a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains. Furthermore, 1214 may be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0175] At 1216, the first wireless device can further select the subgroup of the measured set of positioning signals based on at least one of the third indicator or the fourth indicator. For example, 1216 can be... Figure 7The positioning device 704 performs this action, and the positioning device can further select the subgroup of the measured set of positioning signals based on at least one of the third indicator or the fourth indicator. Furthermore, 1216 can be... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0176] At 1218, the first wireless device may further select the subgroup of the measured location signals based on at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of the sorted list of the reliability metric for each of the plurality of time domains. The reporting message may include at least one of the third or fourth indicators. For example, 1218 may be... Figure 7 The positioning device 704 performs this action, and the positioning device may further select the subgroup of the measured set of positioning signals based on at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list based on the reliability metric for each of the plurality of time domains. The report message in the group report message 724 may include at least one of the third or fourth indicators. Furthermore, 1218 may be performed by... Figure 1 , Figure 3 or Figure 13 Component 198 is executed.

[0177] Figure 13Figure 1300 illustrates an example of a hardware implementation of device 1304. Device 1304 may be a UE, a component of a UE, or implement UE functionality. In some aspects, device 1304 may include at least one cellular baseband processor 1324 (also referred to as a modem) coupled to one or more transceivers 1322 (e.g., cellular RF transceivers). Cellular baseband processor 1324 may include at least one on-chip memory 1324'. In some aspects, device 1304 may also include one or more Subscriber Identity Module (SIM) cards 1320 and at least one application processor 1306 coupled to a Secure Digital Card (SD) card 1308 and a screen 1310. Application processor 1306 may include on-chip memory 1306'. In some aspects, device 1304 may also include a Bluetooth module 1312, a WLAN module 1314, an SPS module 1316 (e.g., a GNSS module), one or more sensor modules 1318 (e.g., a barometric pressure sensor / altimeter; motion sensors such as an inertial measurement unit (IMU), gyroscope, and / or accelerometer; light detection and ranging (LIDAR), radio-assisted detection and ranging (RADAR), sound navigation and ranging (SONAR), magnetometer, audio, and / or other technologies for positioning), an additional memory module 1326, a power source 1330, and / or a camera 1332. Bluetooth module 1312, WLAN module 1314, and SPS module 1316 may include an on-chip transceiver (TRX) (or in some cases, only a receiver (RX)). Bluetooth module 1312, WLAN module 1314, and SPS module 1316 may include their own dedicated antennas and / or communicate using antenna 1380. Cellular baseband processor 1324 communicates with UE 104 and / or RU associated with network entity 1302 via transceiver 1322 through one or more antennas 1380. Cellular baseband processor 1324 and application processor 1306 may each include computer-readable media / memory 1324', 1306'. Additional memory module 1326 may also be considered as computer-readable media / memory. Each computer-readable media / memory 1324', 1306', 1326 may be non-transitory. Cellular baseband processor 1324 and application processor 1306 are each responsible for general processing, including the execution of software stored on the computer-readable media / memory. When executed by cellular baseband processor 1324 / application processor 1306, the software causes cellular baseband processor 1324 / application processor 1306 to perform the various functions described above. The computer-readable media / memory may also be used to store data manipulated by cellular baseband processor 1324 / application processor 1306 during software execution.Cellular baseband processor 1324 / application processor 1306 may be a component of UE 350 and may include at least one of memory 360 and / or TX processor 368, RX processor 356 and controller / processor 359. In one configuration, device 1304 may be at least one processor chip (modem and / or application) and may include only cellular baseband processor 1324 and / or application processor 1306, while in another configuration, device 1304 may be the entire UE (e.g., see below). Figure 3 The UE 350 includes an additional module of the device 1304.

[0178] As discussed above, component 198 may be configured to receive a set of location signals from a second wireless device during multiple time domains. Component 198 may be configured to receive a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of multiple location attributes corresponding to the multiple time domains. Component 198 may be configured to measure the set of location signals. Component 198 may be configured to select a subgroup of the measured set of location signals based on at least one of the first indicator or the second indicator. Component 198 may be configured to calculate the location of the second wireless device based on the subgroup of the measured set of location signals. Component 198 may be located within cellular baseband processor 1324, application processor 1306, or both cellular baseband processor 1324 and application processor 1306. Component 198 may be one or more hardware components specifically configured to perform the stated process / algorithm, implemented by one or more processors configured to execute the stated process / algorithm, stored in a computer-readable medium for implementation by one or more processors, or some combination thereof. When multiple processors are implemented, the multiple processors may execute the stated process / algorithm individually or in combination. As shown, device 1304 may include a variety of components configured for various functions. In one configuration, device 1304 (and in particular cellular baseband processor 1324 and / or application processor 1306) may include means for receiving a set of location signals from a second wireless device during multiple time domains. Device 1304 may include means for receiving a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of multiple location attributes corresponding to the multiple time domains. Device 1304 may include means for measuring the set of location signals. Device 1304 may include means for selecting a subgroup of the measured set of location signals based on at least one of the first indicator or the second indicator. Apparatus 1304 may include components for calculating the location of the second wireless device based on the subset of a measured set of location signals. The plurality of location attributes may include at least one of: ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location. The set of location signals may include at least one of: BLE signal, UWB signal, Wi-Fi signal, or sidelink signal. The plurality of time domains may include a set of periodically equal time domains. The reporting message may include a third indicator of the reliability metric for each of the plurality of time domains. The plurality of time domains may include a fourth indicator of a sorted list of the plurality of time domains based on the reliability metric for each of the plurality of time domains.Device 1304 may include components for selecting the subgroup of a set of measured location signals by further selecting the subgroup of the measured location signals based on at least one of the third indicator or the fourth indicator. Device 1304 may include components for receiving the report message by receiving the report message from a third wireless device. Device 1304 may include components for receiving a second report message from a fourth wireless device. The second report message may include a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains. The second report message may include a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains. Device 1304 may include components for selecting the subgroup of a set of measured location signals by further selecting the subgroup of the measured location signals based on at least one of the third indicator or the fourth indicator. The third wireless device may include a first AP. The fourth wireless device may include a second AP. These components may be components 198 of device 1304 configured to perform the functions described therein. As described above, device 1304 may include TX processor 368, RX processor 356, and controller / processor 359. Thus, in one configuration, these components may be TX processor 368, RX processor 356, and / or controller / processor 359 configured to perform the functions described therein.

[0179] Figure 14Figure 1400 illustrates an example of a hardware implementation of network entity 1402. Network entity 1402 may be a BS, a component of a BS, or implement BS functionality. Network entity 1402 may include at least one of CU 1410, DU 1430, or RU 1440. For example, depending on the layer functionality handled by component 199, network entity 1402 may include: CU 1410; both CU 1410 and DU 1430; each of CU 1410, DU 1430, and RU 1440; DU 1430; both DU 1430 and RU 1440; or RU 1440. CU 1410 may include at least one CU processor 1412. CU processor 1412 may include on-chip memory 1412'. In some aspects, CU 1410 may also include an additional memory module 1414 and a communication interface 1418. CU 1410 communicates with DU 1430 via a midhaul link (such as an F1 interface). DU 1430 may include at least one DU processor 1432. DU processor 1432 may include on-chip memory 1432'. In some aspects, DU 1430 may also include an additional memory module 1434 and a communication interface 1438. DU 1430 communicates with RU 1440 via a fronthaul link. RU 1440 may include at least one RU processor 1442. RU processor 1442 may include on-chip memory 1442'. In some aspects, RU 1440 may also include an additional memory module 1444, one or more transceivers 1446, an antenna 1480, and a communication interface 1448. RU 1440 communicates with UE 104. On-chip memories 1412', 1432', 1442' and additional memory modules 1414, 1434, 1444 can each be considered as computer-readable media / memory. Each computer-readable medium / memory can be non-transitory. Each of processors 1412, 1432, 1442 is responsible for general processing, including executing software stored on the computer-readable medium / memory. When executed by the corresponding processor, the software causes that processor to perform the various functions described above. The computer-readable medium / memory can also be used to store data manipulated by the processor when executing the software.

[0180] As discussed above, component 199 may be configured to receive multiple location signals from a second and a third wireless device during multiple time domains. Component 199 may be configured to measure the multiple location signals. Component 199 may be configured to calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. Component 199 may be configured to send a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains. Component 199 may be located within one or more processors of one or more of CU 1410, DU 1430, and RU 1440. Component 199 may be one or more hardware components specifically configured to execute the stated process / algorithm, implemented by one or more processors configured to execute the stated process / algorithm, stored in a computer-readable medium for implementation by one or more processors, or some combination thereof. When multiple processors are implemented, the multiple processors may execute the stated process / algorithm individually or in combination. Network entity 1402 may include various components configured for various functions. In one configuration, network entity 1402 may include components for receiving multiple location signals from a second and a third wireless device during multiple time domains. Network entity 1402 may include components for measuring the multiple location signals. Network entity 1402 may include components for calculating multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. Network entity 1402 may include components for sending a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains. The multiple location attributes may include at least one of the following: ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location. The multiple location signals may include at least one of the following: BLE signal, UWB signal, Wi-Fi signal, or sidelink signal. The multiple time domains may include a set of periodically equal time domains. Network entity 1402 may include components for calculating a reliability metric for each of the plurality of time domains. The report message may include a third indicator for the reliability metric for each of the plurality of time domains. The report message may include a fourth indicator for a sorted list of the plurality of time domains based on the reliability metric for each of the plurality of time domains.Network entity 1402 may include components for calculating the reliability metric for each of the plurality of time domains by: calculating the reliability metric for each of the plurality of time domains based on at least one of: a histogram of the plurality of location attributes, a Gaussian model of the plurality of location attributes, the standard deviation of the plurality of location attributes, the SINR corresponding to each of the plurality of location signals, or an intensity indicator of a peak in the corresponding channel response associated with each of the plurality of location signals. Network entity 1402 may include components for receiving a set of reporting messages from a set of wireless devices. Each reporting message in the set of reporting messages may include a second plurality of location attributes corresponding to the plurality of time domains. Network entity 1402 may include components for identifying the anomalous transmission based on the plurality of location attributes and each of the second plurality of location attributes. Network entity 1402 may include components for calculating the anomalous transmission by: calculating the location of the second or third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a second location other than the calculated location. Network entity 1402 may include components for calculating the anomalous transmission by: calculating the distance between the second and third wireless devices based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a device located at a second distance from at least one of the second and third wireless devices, the second distance being different from the calculated distance. Network entity 1402 may include components for identifying an anomalous reporting message in the group of reporting messages based on each of the plurality of location attributes and the second plurality of location attributes. Network entity 1402 may include components for ignoring a subgroup of the group of reporting messages associated with the anomalous reporting message in response to the identification of the anomalous reporting message. The second and third wireless devices may perform a location session (e.g., perform location) based on the plurality of location signals. The plurality of location attributes may be associated with at least one of the second or third wireless devices. Network entity 1402 may include an access point (AP). The second wireless device may include a user equipment (UE). The third wireless device may include a user equipment (UE). These components may be components 199 of network entity 1402 configured to perform the functions described therein. As described above, network entity 1402 may include a TX processor 316, an RX processor 370, and a controller / processor 375. Therefore, in one configuration, these components may be the TX processor 316, the RX processor 370, and / or the controller / processor 375 configured to perform the functions described therein.

[0181] Figure 15Figure 1500 illustrates an example of a hardware implementation of network entity 1560. In one example, network entity 1560 may be within core network 120. Network entity 1560 may include at least one network processor 1512. Network processor 1512 may include on-chip memory 1512'. In some aspects, network entity 1560 may also include an additional memory module 1514. Network entity 1560 communicates with CU 1502 directly (e.g., via a backhaul link) or indirectly (e.g., via RIC) through network interface 1580. On-chip memory 1512' and additional memory module 1514 may each be considered as computer-readable media / memory. Each computer-readable media / memory may be non-transitory. Network processor 1512 is responsible for general processing, including executing software stored on the computer-readable media / memory. When executed by a corresponding processor, the software causes that processor to perform the various functions described above. The computer-readable media / memory may also be used to store data manipulated by the processor while executing the software.

[0182] As discussed above, component 199 may be configured to receive multiple location signals from a second and a third wireless device during multiple time domains. Component 199 may be configured to measure the multiple location signals. Component 199 may be configured to calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. Component 199 may be configured to send a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains. Component 199 may be within network processor 1512. Component 199 may be one or more hardware components specifically configured to execute the stated process / algorithm, implemented by one or more processors configured to execute the stated process / algorithm, stored in a computer-readable medium for implementation by one or more processors, or some combination thereof. When multiple processors are implemented, the multiple processors may execute the stated process / algorithm individually or in combination. Network entity 1560 may include a variety of components configured for various functions. In one configuration, network entity 1560 may include components for receiving multiple location signals from a second and a third wireless device during multiple time domains. Network entity 1560 may include components for measuring the multiple location signals. Network entity 1560 may include components for calculating multiple location attributes corresponding to the multiple time domains based on the measured multiple location signals. Network entity 1560 may include components for sending a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of the calculated multiple location attributes corresponding to the multiple time domains. The multiple location attributes may include at least one of the following: ToA, AoA, RSSI, channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location. The multiple location signals may include at least one of the following: BLE signal, UWB signal, Wi-Fi signal, or sidelink signal. The multiple time domains may include a set of periodically equal time domains. Network entity 1560 may include components for calculating a reliability metric for each of the multiple time domains. The report message may include a third indicator for the reliability metric for each of the multiple time domains. The report message may also include a fourth indicator for a sorted list of the reliability metric based on each of the multiple time domains.Network entity 1560 may include components for calculating the reliability metric for each of the plurality of time domains by: calculating the reliability metric for each of the plurality of time domains based on at least one of: a histogram of the plurality of location attributes, a Gaussian model of the plurality of location attributes, the standard deviation of the plurality of location attributes, the SINR corresponding to each of the plurality of location signals, or an intensity indicator of a peak in the corresponding channel response associated with each of the plurality of location signals. Network entity 1560 may include components for receiving a set of reporting messages from a set of wireless devices. Each reporting message in the set of reporting messages may include a second plurality of location attributes corresponding to the plurality of time domains. Network entity 1560 may include components for identifying the anomalous transmission based on the plurality of location attributes and each of the second plurality of location attributes. Network entity 1560 may include components for calculating the anomalous transmission by: calculating the location of the second wireless device or the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a second location other than the calculated location. Network entity 1560 may include components for calculating the anomalous transmission by: calculating the distance between the second wireless device and the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and identifying the anomalous transmission as a transmission from a device located at a second distance from at least one of the second and third wireless devices, the second distance being different from the calculated distance. Network entity 1560 may include components for identifying an anomalous reporting message in the group of reporting messages based on each of the plurality of location attributes and the second plurality of location attributes. Network entity 1560 may include components for ignoring a subgroup of the group of reporting messages associated with the anomalous reporting message in response to the identification of the anomalous reporting message. The second and third wireless devices may perform positioning based on the plurality of location signals. The multiple location attributes may be associated with at least one of the second or third wireless devices. Network entity 1560 may include an access point (AP). The second wireless device may include a user equipment (UE). The third wireless device may include a user equipment (UE). These components may be components 199 of network entity 1560 configured to perform the functions described therein.

[0183] It should be understood that the specific order or hierarchy of the boxes in the disclosed process / flowcharts is merely an example of the exemplary method. It should be understood that the specific order or hierarchy of the boxes in the process / flowcharts may be rearranged based on design preferences. Furthermore, some boxes may be combined or omitted. The appended method claims present the elements of various boxes in a sample order, but are not limited to the given specific order or hierarchy.

[0184] The foregoing description is provided to enable any person skilled in the art to practice the various aspects described herein. Various modifications to these aspects will be apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects. Therefore, the claims are not limited to the aspects described herein but should be given the full scope consistent with the language of the claims. Unless specifically stated otherwise, references to elements in the singular form do not mean “one and only one” but rather “one or more.” Terms such as “if,” “when,” and “simultaneously” do not imply a direct temporal relationship or reaction. That is, these phrases, such as “when…”, do not imply an immediate action in response to the occurrence of an action or during the occurrence of an action, but simply suggest that if a condition is met, then the action will occur, without requiring a specific or immediate time limit for the occurrence of the action. The word “exemplary” is used herein to mean “serving as an example, instance, or illustration.” Any aspect described herein as “exemplary” is not necessarily to be construed as preferred or superior to other aspects. Unless specifically stated otherwise, the term “some” refers to one or more. Combinations such as "at least one of A, B, or C", "one or more of A, B, or C", "at least one of A, B, and C", "one or more of A, B, and C", and "A, B, C, or any combination thereof" include any combination of A, B, and / or C, and may include multiple A, multiple B, or multiple C. Specifically, combinations such as "at least one of A, B, or C", "one or more of A, B, or C", "at least one of A, B, and C", "one or more of A, B, and C", and "A, B, C, or any combination thereof" may be only A, only B, only C, A and B, A and C, B and C, or A and B and C, wherein any such combination may contain one or more members of A, B, or C. A set should be interpreted as a collection of elements in which the number of elements is one or more. Therefore, for a set of X, X will include one or more elements. When at least one processor is configured to execute a set of functions, the at least one processor is configured to execute the set of functions individually or in any combination. Therefore, each of the at least one processor can be configured to perform a specific subset of the set of functions, wherein the subset is the complete set, a suitable subset of the set, or an empty subset of the set. If the first device receives data from or sends data to the second device, data can be received / sent directly between the first and second devices, or indirectly between the first and second devices through a set of devices. A device configured to "output" data (such as transmission, signaling, or messages) can, for example, transmit data using a transceiver, transfer data to the device that transmitted the data, or output data to a component of the device.A device configured to "acquire" data (such as transmission, signaling, or messaging) may receive the data, for example, via a transceiver, obtain the data from a device receiving the data, or obtain the data from a component of the device. Information stored in memory includes instructions and / or data. All structural and functional equivalents of the elements throughout the various aspects described herein that are known to those skilled in the art or will later be known are expressly incorporated herein by reference and are covered by the claims. Furthermore, nothing disclosed herein is intended to be offered to the public, whether or not such disclosure is explicitly recited in the claims. The words "module," "mechanism," "element," "device," etc., cannot replace the word "component." Therefore, no claim element will be construed as a functional component unless the element is explicitly recited using the phrase "component for..."

[0185] As used in this article, the phrase “based on” should not be interpreted as referring to a closed set of information, one or more conditions, one or more factors, etc. In other words, the phrase “based on A” (where “A” can be information, conditions, factors, etc.) should be interpreted as “based on at least A”, unless specifically stated differently.

[0186] The following aspects are merely illustrative and may be combined with other aspects or teachings described herein without limitation.

[0187] Aspect 1 is a method for wireless communication at a first wireless device, the method comprising: receiving a plurality of positioning signals from a second wireless device and a third wireless device during a plurality of time domains. The method may include measuring the plurality of positioning signals. The method may include calculating a plurality of location attributes corresponding to the plurality of time domains based on the measured plurality of positioning signals. The method may include sending a report message including a first indicator of abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of the calculated plurality of location attributes corresponding to the plurality of time domains. For example, the report message may include an indicator of bad / false transmission. In another example, the report message may include an indicator allowing the second wireless device to identify a measurement / distance / angle / position of bad / false transmission.

[0188] Aspect 2 is the method according to aspect 1, wherein the plurality of location attributes include at least one of the following: time of arrival (ToA), angle of arrival (AoA), reference signal strength indicator (RSSI), channel energy response, the ratio of the maximum value to the median associated with the channel energy response, distance, or location.

[0189] Aspect 3 is the method according to any one of Aspect 1 or 2, wherein the plurality of positioning signals include at least one of the following: Bluetooth Low Energy (BLE) signal, Ultra Wideband (UWB) signal, Wi-Fi signal, or sidelink signal.

[0190] Aspect 4 is the method according to any one of aspects 1 to 3, wherein the plurality of time domains includes a set of periodically equal time domains.

[0191] Aspect 5 is the method according to any one of Aspects 1 to 4, the method further comprising: calculating a reliability metric for each of the plurality of time domains, wherein the reporting message includes at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains.

[0192] Aspect 6 is the method according to aspect 5, wherein calculating the reliability metric for each of the plurality of time domains includes calculating the reliability metric for each of the plurality of time domains based on at least one of: histograms of the plurality of location attributes, Gaussian models of the plurality of location attributes, standard deviations of the plurality of location attributes, signal-to-interference-plus-noise ratio (SINR) corresponding to each of the plurality of location signals, or intensity indicators of peak values ​​in the corresponding channel response associated with each of the plurality of location signals.

[0193] Aspect 7 is a method according to any one of Aspects 1 to 6, the method further comprising: receiving a set of reporting messages from a set of wireless devices, wherein each of the set of reporting messages includes a second plurality of location attributes corresponding to the plurality of time domains. The method may include: identifying the abnormal transmission based on the plurality of location attributes and each of the second plurality of location attributes.

[0194] Aspect 8 is the method according to aspect 7, wherein calculating the abnormal transmission includes: (a) calculating the location of the second wireless device or the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and (b) identifying the abnormal transmission as a transmission from a second location other than the calculated location.

[0195] Aspect 9 is the method according to any one of Aspects 7 or 8, wherein calculating the abnormal transmission includes: (a) calculating a distance between the second wireless device and the third wireless device based on each of the plurality of location attributes and the second plurality of location attributes; and (b) identifying the abnormal transmission as a transmission from a device that is at a second distance from at least one of the second wireless device and the third wireless device, the second distance being different from the calculated distance.

[0196] Aspect 10 is a method according to any one of aspects 1 to 9, the method further comprising: identifying an abnormal reporting message in the set of reporting messages based on each of the plurality of location attributes and the second plurality of location attributes. The method may include: ignoring a subgroup of the set of reporting messages associated with the abnormal reporting message in response to the identification of the abnormal reporting message.

[0197] Aspect 11 is a method according to any one of aspects 1 to 10, wherein the second wireless device and the third wireless device perform a positioning session based on the plurality of positioning signals, wherein the plurality of location attributes are associated with at least one of the second wireless device or the third wireless device.

[0198] Aspect 12 is the method according to any one of aspects 1 to 11, wherein the first wireless device includes an access point (AP).

[0199] Aspect 13 is a method according to any one of aspects 1 to 12, wherein the second wireless device includes a first user equipment (UE), and the third wireless device includes a second UE.

[0200] Aspect 14 is a method for wireless communication at a first wireless device, the method comprising: receiving a set of location signals from a second wireless device during multiple time domains. The method may include: receiving a report message including a first indicator of abnormal transmission associated with at least one of the multiple time domains, or a second indicator of multiple location attributes corresponding to the multiple time domains. The method may include: measuring the set of location signals. The method may include: selecting a subgroup of the measured set of location signals based on at least one of the first indicator or the second indicator. The method may include: calculating the location of the second wireless device based on the subgroup of the measured set of location signals.

[0201] Aspect 15 is the method according to aspect 14, wherein the plurality of location attributes include at least one of: time of arrival (ToA); angle of arrival (AoA); reference signal strength indicator (RSSI); channel energy response; the ratio of the maximum value to the median associated with the channel energy response; distance; or location.

[0202] Aspect 16 is the method according to any one of Aspects 14 or 15, wherein the set of positioning signals includes at least one of the following: Bluetooth Low Energy (BLE) signal; Ultra Wideband (UWB) signal; Wi-Fi signal; or sidelink signal.

[0203] Aspect 17 is the method according to any one of aspects 14 to 16, wherein the plurality of time domains comprises a set of periodically equal time domains.

[0204] Aspect 18 is a method according to any one of aspects 14 to 17, wherein the reporting message includes at least one of a third indicator of a reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains, wherein selecting the subgroup of the measured set of positioning signals includes: further selecting the subgroup of the measured set of positioning signals based on at least one of the third indicator or the fourth indicator.

[0205] Aspect 19 is a method according to any one of aspects 14 to 18, wherein receiving the report message includes receiving the report message from a third wireless device. The method may include: receiving a second report message from a fourth wireless device, wherein the second report message includes a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains. Selecting the subgroup of the measured set of location signals includes: further selecting the subgroup of the measured set of location signals based on at least one of the third indicator or the fourth indicator.

[0206] Aspect 20 is the method according to aspect 19, wherein the third wireless device includes a first access point (AP), and wherein the fourth wireless device includes a second AP.

[0207] Aspect 21 is a method according to any one of aspects 14 to 20, wherein the first wireless device includes a first user equipment (UE), and wherein the second wireless device includes a second UE.

[0208] Aspect 22 is an apparatus for wireless communication, the apparatus comprising: at least one memory; and at least one processor coupled to the at least one memory and based at least in part on information stored in the at least one memory, the at least one processor being configured individually or in any combination to implement any one of aspects 1 to 21.

[0209] Aspect 23 is the apparatus according to aspect 22, the apparatus further comprising at least one of an antenna or a transceiver coupled to the at least one processor.

[0210] Aspect 24 is an apparatus for wireless communication, the apparatus including components for implementing any one of aspects 1 to 21.

[0211] Aspect 25 is a computer-readable medium (e.g., a non-transitory computer-readable medium) storing computer-executable code, wherein the code, when executed by a processor, causes the processor to implement any one of aspects 1 to 21.

Claims

1. An apparatus for performing wireless communication at a first wireless device, the apparatus comprising: At least one memory; and At least one processor, coupled to the at least one memory, and configured individually or in any combination, based at least in part on information stored in the at least one memory, to: Multiple positioning signals are received from a second and a third wireless device during multiple time domains; Measure the multiple positioning signals; Calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple positioning signals; as well as Send a report message, the report message including a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains.

2. The apparatus of claim 1, wherein the calculated plurality of position attributes includes at least one of the following: Time of Arrival (ToA); Angle of arrival (AoA); Reference Signal Strength Indicator (RSSI); Channel energy response; The ratio of the maximum value to the median associated with the channel energy response; Distance; or Location.

3. The apparatus of claim 1, wherein the plurality of positioning signals comprises at least one of the following: Bluetooth Low Energy (BLE) signal; Ultra-wideband (UWB) signal; Wi-Fi signal; or Side link signal.

4. The apparatus of claim 1, wherein the plurality of time domains comprises a set of periodically equal time domains.

5. The apparatus of claim 1, wherein the at least one processor is further configured, alone or in any combination, to: Calculate a reliability metric for each of the plurality of time domains, wherein the report message includes at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains.

6. The apparatus according to claim 5, wherein, In order to calculate the reliability metric for each of the plurality of time domains, the at least one processor is configured individually or in any combination to calculate the reliability metric for each of the plurality of time domains based on at least one of the following: Histograms of the multiple location attributes; The Gaussian model of the multiple location attributes; The standard deviation of the multiple location attributes; The signal-to-interference-plus-noise ratio (SINR) corresponding to each of the plurality of positioning signals; or An intensity indicator of the peak value in the corresponding channel response associated with each of the plurality of positioning signals.

7. The apparatus of claim 1, wherein the at least one processor is further configured, alone or in any combination, to: Receive a set of report messages from a set of wireless devices, wherein each report message includes a second plurality of location attributes corresponding to the plurality of time domains; and The abnormal transmission is identified based on each of the plurality of location attributes and the second plurality of location attributes.

8. The apparatus according to claim 7, wherein, To identify the abnormal transmission, the at least one processor is configured individually or in any combination as follows: The location of the second wireless device or the third wireless device is calculated based on the plurality of location attributes and each of the plurality of location attributes; as well as The abnormal transmission is identified as a transmission originating from a second location other than the calculated location.

9. The apparatus according to claim 7, wherein, To identify the abnormal transmission, the at least one processor is configured individually or in any combination as follows: The distance between the second wireless device and the third wireless device is calculated based on the plurality of location attributes and each of the plurality of location attributes; as well as The abnormal transmission is identified as a transmission from a device that is at a second distance from at least one of the second and third wireless devices, where the second distance is different from the calculated distance.

10. The apparatus of claim 7, wherein the at least one processor is further configured, alone or in any combination, to: Anomaly report messages in the set of report messages are identified based on each of the plurality of location attributes and the second plurality of location attributes; and In response to the identifier of the exception report message, the subgroup of the set of report messages associated with the exception report message is ignored.

11. The apparatus of claim 1, wherein the second wireless device and the third wireless device perform a location session based on the plurality of location signals, wherein the plurality of location attributes are associated with at least one of the second wireless device or the third wireless device.

12. The apparatus of claim 1, wherein the first wireless device includes an access point (AP).

13. The apparatus of claim 1, further comprising at least one of an antenna or a transceiver coupled to the at least one processor, wherein, in order to transmit the report message, the at least one processor is configured individually or in any combination to transmit the report message via at least one of the antenna or the transceiver, and wherein the second wireless device comprises a first user equipment (UE), and the third wireless device comprises a second UE.

14. An apparatus for performing wireless communication at a first wireless device, the apparatus comprising: At least one memory; and At least one processor, coupled to the at least one memory, and configured individually or in any combination, based at least in part on information stored in the at least one memory, to: Receive a set of positioning signals from a second wireless device during multiple time domains; Receive a report message, the report message including a first indicator of anomaly transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains; Measure the set of positioning signals; A subgroup of the measured positioning signals is selected based on at least one of the first indicator or the second indicator; as well as The location of the second wireless device is calculated based on the subgroup of a set of measured location signals.

15. The apparatus of claim 14, wherein the plurality of position attributes includes at least one of the following: Time of Arrival (ToA); Angle of arrival (AoA); Reference Signal Strength Indicator (RSSI); Channel energy response; The ratio of the maximum value to the median associated with the channel energy response; Distance; or Location.

16. The apparatus of claim 14, wherein the set of positioning signals comprises at least one of the following: Bluetooth Low Energy (BLE) signal; Ultra-wideband (UWB) signal; Wi-Fi signal; or Side link signal.

17. The apparatus of claim 14, wherein the plurality of time domains comprises a set of periodically equal time domains.

18. The apparatus of claim 14, wherein the reporting message includes at least one of a third indicator of a reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains, wherein, In order to select the subgroup of the measured set of positioning signals, the at least one processor is configured individually or in any combination to: The subgroup of the measured positioning signals is further selected based on at least one of the third indicator or the fourth indicator.

19. The apparatus according to claim 14, wherein, In order to receive the report message, the at least one processor is configured individually or in any combination to receive the report message from a third wireless device, wherein the at least one processor is further configured individually or in any combination to: A second report message is received from a fourth wireless device, wherein the second report message includes a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains, wherein, in order to select the subgroup of a measured set of location signals, the at least one processor is configured individually or in any combination to further select the subgroup of the measured set of location signals based on at least one of the third indicator or the fourth indicator.

20. The apparatus of claim 19, wherein the third wireless device includes a first access point (AP), and wherein the fourth wireless device includes a second AP.

21. The apparatus of claim 14, further comprising at least one of an antenna or a transceiver coupled to the at least one processor, wherein, in order to receive the report message, the at least one processor is configured individually or in any combination to receive the report message via at least one of the antenna or the transceiver, and wherein the first wireless device comprises a first user equipment (UE), and wherein the second wireless device comprises a second UE.

22. A method for performing wireless communication at a first wireless device, the method comprising: Multiple positioning signals are received from a second and a third wireless device during multiple time domains; Measure the multiple positioning signals; Calculate multiple location attributes corresponding to the multiple time domains based on the measured multiple positioning signals; as well as Send a report message, the report message including a first indicator of an abnormal transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of calculated location attributes corresponding to the plurality of time domains.

23. The method according to claim 22, further comprising: Calculate a reliability metric for each of the plurality of time domains, wherein the report message includes at least one of a third indicator of the reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains.

24. The method according to claim 22, further comprising: Receive a set of report messages from a set of wireless devices, wherein each report message in the set of report messages includes a second plurality of location attributes corresponding to the plurality of time domains; as well as The abnormal transmission is identified based on each of the plurality of location attributes and the second plurality of location attributes.

25. The method of claim 24, wherein calculating the abnormal transmission comprises: The location of the second wireless device or the third wireless device is calculated based on the plurality of location attributes and each of the plurality of location attributes; as well as The abnormal transmission is identified as a transmission originating from a second location other than the calculated location.

26. The method of claim 24, wherein calculating the abnormal transmission comprises: The distance between the second wireless device and the third wireless device is calculated based on the plurality of location attributes and each of the plurality of location attributes; as well as The abnormal transmission is identified as a transmission from a device that is at a second distance from at least one of the second and third wireless devices, where the second distance is different from the calculated distance.

27. The method of claim 24, further comprising: An abnormal report message in the set of report messages is identified based on each of the plurality of location attributes and the second plurality of location attributes; as well as In response to the identifier of the exception report message, the subgroup of the set of report messages associated with the exception report message is ignored.

28. A method for performing wireless communication at a first wireless device, the method comprising: Receive a set of positioning signals from a second wireless device during multiple time domains; Receive a report message, the report message including a first indicator of anomaly transmission associated with at least one of the plurality of time domains, or a second indicator of a plurality of location attributes corresponding to the plurality of time domains; Measure the set of positioning signals; A subgroup of the measured positioning signals is selected based on at least one of the first indicator or the second indicator; as well as The location of the second wireless device is calculated based on the subgroup of a set of measured location signals.

29. The method of claim 28, wherein the reporting message includes at least one of a third indicator of a reliability metric for each of the plurality of time domains, or a fourth indicator of a sorted list of the reliability metrics for each of the plurality of time domains, wherein selecting the subgroup of the measured location signals includes: The subgroup of the measured positioning signals is further selected based on at least one of the third indicator or the fourth indicator.

30. The method of claim 28, wherein receiving the report message includes receiving the report message from a third wireless device, the method further comprising: Receive a second report message from a fourth wireless device, wherein the second report message includes a third indicator of a second abnormal transmission associated with at least one of the plurality of time domains, or a fourth indicator of a second plurality of location attributes corresponding to the plurality of time domains, wherein selecting the subgroup of the measured set of location signals includes: further selecting the subgroup of the measured set of location signals based on at least one of the third indicator or the fourth indicator.

Images