Passive digital key system

Abstract

Techniques are provided for validating a mobile device in a passive digital key system. An exemplary method for validating a mobile device includes determining a positioning result of the mobile device relative to a reference point, obtaining a measured distance with at least a first transceiver, obtaining a calibration distance based at least in part on the positioning result of the mobile device, calculating a validation distance based at least in part on a difference between the measured distance and the calibration distance, and validating the mobile device based at least in part on a comparison of the validation distance to a threshold.

Description

[Technical Field]

[0001] This invention relates to a passive digital key system. [Background technology]

[0002] The use of wireless devices for many everyday activities is becoming increasingly common. Modern wireless devices may utilize one or more wireless communication technologies. For example, wireless devices may communicate using short-range communication technologies such as Bluetooth, UWB, and mmWave. The use of short-range communication technologies such as Bluetooth in wireless devices has become far more common in recent years and is routinely used in retail stores, offices, homes, cars, and public places where people gather. As the use of short-range communication increases, so does the need to protect short-range communication between wireless devices from third-party attacks. For example, Bluetooth communication between wireless devices is vulnerable to certain third-party attacks, such as relay-in-the-middle (RITM) attacks. An RITM attack occurs when a third-party attacker intercepts packets transmitted between Bluetooth wireless devices and then relays those packets to one of the wireless devices to gain access. One example involves a third-party attacker relaying packets from a key fob to a car in order to unlock the car door. Because a successful RITM attacker can gain access in a way that is not easily detectable, RITM attacks can pose a significant risk to critical data and tangible assets. Existing solutions to RITM attacks have some limitations, which can mean they don't adequately protect users of wireless devices. [Overview of the project] [Means for solving the problem]

[0003] An exemplary method for validating a mobile device according to this disclosure includes the steps of: determining a positioning result of the mobile device relative to a reference point; obtaining a measured distance using at least a first transceiver; obtaining a calibration distance at least in part based on the positioning result of the mobile device; calculating a validation distance at least in part based on the difference between the measured distance and the calibration distance; and validating the mobile device at least in part based on a comparison of the validation distance and a threshold.

[0004] An implementation of such a method may include one or more of the following features: The reference point and the first transceiver may be located inside a vehicle. The reference point and the first transceiver may be located inside a fixed structure. The positioning result may indicate an angle relative to the mobile device. Determining the angle relative to the mobile device may include determining the angle of arrival of the signal transmitted by the mobile device. The signal transmitted by the mobile device may be received by the first transceiver. Determining the angle relative to the mobile device may include determining that the mobile device is close to a second transceiver, thereby positioning the second transceiver at a known location relative to the reference point. The method may include the step of determining the received signal intensity of one or more signals transmitted by the mobile device and received by the second transceiver. The second transceiver may be configured to utilize a smaller bandwidth than the first transceiver. Obtaining the calibration distance may include querying a data structure based on the angle. Obtaining the measured distance to the mobile device may include determining the time of flight of the signal transmitted between the mobile device and the first transceiver. The positioning result may indicate the distance to a mobile device measured by at least one second transceiver. The distance to the mobile device may be based on at least one of the received signal strength measurement result or the time-of-flight measurement result. Obtaining the calibration distance may include querying a data structure based on an identification value associated with at least one second transceiver. The method may include the steps of determining a context associated with the mobile device and determining a threshold based on the context.

[0005] An exemplary method for validating a mobile device according to the present disclosure includes the steps of: determining an angle to the mobile device relative to a reference point using a first wireless transceiver; obtaining a measured distance to the mobile device using at least a second wireless transceiver; obtaining a calibration distance at least in part on the angle to the mobile device; calculating a validation distance at least in part on the difference between the measured distance and the calibration distance; and validating the mobile device at least in part on a comparison of the validation distance and a threshold.

[0006] Implementations of such methods may include one or more of the following features: Determining the angle relative to the mobile device may include determining that the mobile device is located within a predetermined angular range. The second radio transceiver may be configured to utilize a wider bandwidth than the first radio transceiver. Obtaining the calibration distance may include obtaining the calibration distance from a data structure, at least in part, based on the angle relative to the mobile device. The first and second radio transceivers may be installed in a vehicle, and the calibration distance may be based on the distance between the second radio transceiver and the periphery of the vehicle. The first and second radio transceivers may be installed in a vehicle, and the calibration distance may be based on the distance between a reference point and the periphery of the vehicle. The first and second radio transceivers may be installed in a vehicle, and the threshold may be based on the vehicle's conditions. The first radio transceiver may be located near the entrance of a fixed structure, and the second radio transceiver may be a radio access point within the fixed structure. Obtaining the measured distance may include determining the round-trip time between the second wireless transceiver and the mobile device.

[0007] An exemplary apparatus according to the present disclosure includes a memory, at least one transceiver, and at least one processor communicatively coupled to the memory and the at least one transceiver, wherein the at least one processor is configured to determine a positioning result of a mobile device relative to a reference point, obtain a measured distance using at least a first transceiver, obtain a calibration distance at least in part based on the positioning result of the mobile device, calculate a validation distance at least in part based on the difference between the measured distance and the calibration distance, and validate the mobile device at least in part based on a comparison of the validation distance and a threshold.

[0008] Such an implementation of the device may include one or more of the following features: The reference point and the first transceiver may be located inside a vehicle. The reference point and the first transceiver may be located inside a fixed structure. The positioning result may indicate an angle relative to the mobile device. At least one processor may further be configured to determine the angle of arrival of the signal transmitted by the mobile device. The signal transmitted by the mobile device may be received by the first transceiver. Since the second transceiver may be located at a known position relative to the reference point, at least one processor may further be configured to determine that the mobile device is near the second transceiver. At least one processor may further be configured to determine the received signal intensity of one or more signals transmitted by the mobile device and received by the second transceiver. The second transceiver may be configured to utilize a smaller bandwidth than the first transceiver. At least one processor may further be configured to query a data structure stored in memory based on the angle. At least one processor may further be configured to determine the time of flight of the signal transmitted between the mobile device and the first transceiver. The positioning result may indicate the distance to a mobile device measured by at least one second transceiver. At least one processor may further be configured to calculate the distance to the mobile device based on at least one of the received signal strength measurement result or the time-of-flight measurement result. At least one processor may further be configured to query a data structure stored in memory based on an identification value associated with at least one second transceiver. At least one processor may further be configured to determine a situation associated with the mobile device and to determine a threshold based on the situation.

[0009] An exemplary apparatus according to the present disclosure includes a memory, at least one transceiver, and at least one processor communicatively coupled to the memory and the at least one transceiver, wherein the at least one processor is configured to determine an angle to a mobile device relative to a reference point using at least a first radio transceiver, obtain a measured distance to the mobile device using at least a second radio transceiver, obtain a calibration distance at least partially based on the angle to the mobile device, calculate a validation distance at least partially based on the difference between the measured distance and the calibration distance, and validate the mobile device at least partially based on a comparison of the validation distance and a threshold.

[0010] Such an implementation of the device may include one or more of the following features: At least one processor may be further configured to determine that the mobile device is located within a predetermined angular division. The second radio transceiver may be configured to utilize a wider bandwidth than the first radio transceiver. At least one processor may be further configured to obtain a calibration distance from a data structure stored in memory, at least partially based on the angle to the mobile device. The first and second radio transceivers may be installed in a vehicle, and the calibration distance may be based on the distance between the second radio transceiver and the periphery of the vehicle. The first and second radio transceivers may be installed in a vehicle, and the calibration distance may be based on the distance between a reference point and the periphery of the vehicle. The first and second radio transceivers may be installed in a vehicle, and the threshold may be based on the vehicle's condition. The first radio transceiver may be located near the entrance of a fixed structure, and the second radio transceiver may be a radio access point within the fixed structure. At least one processor may further be configured to determine the round-trip time between the second wireless transceiver and the mobile device.

[0011] The items and / or techniques described herein may provide one or more of the following capabilities, as well as other capabilities not mentioned herein: A vehicle or other structure may utilize a digital key system. A mobile device, such as a smartphone, smartwatch, or key fob, may enable a user to enter a vehicle or other structure. The digital key system may utilize a first radio access technique to determine a first distance to the mobile device. A second radio access technique may be used to determine a second distance to the mobile device. Antennas and transceivers for the first and second radio access techniques may be in different locations. The digital key system may utilize one or more data structures to store offset bias values ​​based on different antenna locations. The mobile device may be validated by the digital key system based on the first distance, the second distance, and one or more bias values. A combination of the first and second radio access techniques may reduce the threat associated with RITM attacks. Other capabilities may be provided, and not all implementations provided herein must provide any, much less, of the capabilities discussed. [Brief explanation of the drawing]

[0012] [Figure 1] This is a schematic diagram illustrating an example of a wireless communication system. [Figure 2] This is a block diagram of the components of an example user device. [Figure 3] This is a block diagram of the components of an example transmit / receive point. [Figure 4] This is a block diagram of the components of an exemplary server. [Figure 5A] This is a diagram illustrating an example message flow for a round-trip time measurement session. [Figure 5B] This is a diagram illustrating an exemplary Wi-Fi wireless communication system. [Figure 6]It is a diagram of an exemplary message flow for passive positioning of a user device. [Figure 7] It is a diagram of an exemplary relay attack in a wireless digital key system. [Figure 8] It is a diagram of an exemplary vehicle with multiple wireless transceivers. [Figure 9] It is a diagram of a first example of a passive digital key system in a vehicle. [Figure 10] It is a diagram of a second example of a passive digital key system in a vehicle. [Figure 11] It is a diagram of an exemplary passive digital key system in a fixed structure. [Figure 12] It is a diagram of an exemplary data structure for a passive digital key system. [Figure 13] It is a diagram of a process flow for a method of validating a mobile device using a first exemplary passive digital key system. [Figure 14] It is a diagram of a process flow for a method of validating a mobile device using a second exemplary passive digital key system. [Figure 15] It is a diagram of a process flow for a method of validating a mobile device using a third exemplary passive digital key system.

Mode for Carrying Out the Invention

[0013] Techniques for validating mobile devices in passive digital key systems are discussed herein. In digital key vehicle systems, short-range communication technologies such as Bluetooth Low Energy (BLE), UWB, or mmWave may be used to validate mobile devices such as key fobs. Current BLE-based digital key systems may utilize multiple BLE transceivers installed in the vehicle to obtain distance estimates to digital keys located in any direction relative to the vehicle. In addition to BLE transceivers, the vehicle may also include one or more Wi-Fi-based transceivers. The passive digital key systems provided herein utilize Wi-Fi ranging systems supported by short-range communication to reduce vulnerability to RITM-type attacks. In one example, short-range communication (e.g., BLE) ranging results, such as received signal strength (RSSI) measurements, may be used to indicate the relative orientation of the mobile device (e.g., digital key) to the vehicle. To minimize bias in various directions around the vehicle, the distance between the vehicle-mounted Wi-Fi radio and the vehicle periphery area where mobile devices are detected by the short-range communication system may be subtracted from the distance measured using Wi-Fi. Other distance estimation methods (e.g., Ultra-Wide Band (UWB) based schemes) that may also be affected by bias related to the position of the transceiver and / or antenna module relative to the vehicle frame may also benefit from the proposed assistance from short-range transceivers. For example, an automotive manufacturer may install UWB radios for the application of digital keys, but due to cost constraints, such applications may only have a limited number of UWB radios (e.g., four UWB radios). Since the position of the UWB radios and corresponding antenna modules may cause bias errors relative to the vehicle periphery and short-range transceivers, the techniques provided herein may be used for UWB-based security schemes. Other combinations of radio technologies may also be used.For example, Wi-Fi and BLE, Wi-Fi and UWB, UWB and BLE, and other combinations of long-range or medium-range technologies with short-range technologies may be used. These techniques and configurations are examples, and other techniques and configurations may be used.

[0014] Referring to Figure 1, an example of a communication system 100 includes a UE 105, a Radio Access Network (RAN) 135, here referred to as a fifth-generation (5G) next-generation (NG) RAN (NG-RAN), and a 5G core network (5GC) 140. UE 105 may be, for example, an IoT device, a location tracking device, a mobile phone, or other device. The 5G network is sometimes called a New Radio (NR) network, NG-RAN 135 may be called a 5G RAN or NR RAN, and 5GC 140 may be called an NG core network (NGC). Standardization of NG-RAN and 5GC is underway in the Third Generation Partnership Project (3GPP). Therefore, NG-RAN 135 and 5GC 140 may comply with current and future standards for 5G support from 3GPP. RAN 135 may be another type of RAN, such as a 3G RAN, a 4G Long Term Evolution (LTE) RAN, etc. The communication system 100 may utilize information from constellation 185 of satellite vehicles (SV) 190, 191, 192, 193 for several other local or regional SPS, such as the Global Positioning System (GPS), Global Navigation Satellite System (GLONASS), Galileo, or Beidou (e.g., a Global Navigation Satellite System (GNSS)), or the Indian Regional Navigation Satellite System (IRNSS), European Geostationary Satellite Navigation Overlay Service (EGNOS), or Wide Area Augmentation System (WAAS). Additional components of the communication system 100 are described below. The communication system 100 may include additional or alternative components.

[0015] As shown in Figure 1, the NG-RAN135 includes NR nodeB (gNB) 110a, 110b, and next-generation eNodeB (ng-eNB) 114, and the 5GC140 includes access and mobility management function (AMF) 115, session management function (SMF) 117, location management function (LMF) 120, and gateway mobile location center (GMLC) 125. The gNB 110a, 110b, and ng-eNB 114 are communicatively coupled to each other and configured to communicate wirelessly bidirectionally with the UE 105, and each is communicatively coupled to the AMF 115 and configured to communicate bidirectionally with the AMF 115. The AMF 115, SMF 117, LMF 120, and GMLC 125 are communicatively coupled to each other, and the GMLC is communicatively coupled to an external client 130. SMF117 may function as an initial contact point for service control functions (SCFs) (not shown) for creating, controlling, and deleting media sessions.

[0016] Figure 1 provides a generalized diagram of various components, any or all of which may be used as appropriate, and each of them may be duplicated or omitted as needed. Specifically, one UE 105 is illustrated, but many UEs (e.g., hundreds, thousands, millions, etc.) may be used in the communication system 100. Similarly, the communication system 100 may include more (or fewer) SVs (i.e., more or fewer than the four SVs 190-193 shown), gNB 110a, 110b, ng-eNB 114, AMF 115, external client 130, and / or other components. The illustrated connections connecting the various components in the communication system 100 include data and signaling connections, which may include additional (intermediate) components, direct or indirect physical and / or wireless connections, and / or additional networks. Furthermore, the components may be rearranged, combined, separated, replaced, and / or omitted depending on the desired function.

[0017] Figure 1 shows a 5G-based network, but similar network implementations and configurations may be used for other communication technologies such as 3G and Long Term Evolution (LTE). The implementations described herein (whether for 5G technology and / or for one or more other communication technologies and / or protocols) may be used to transmit (or broadcast) a directional synchronization signal, receive and measure the directional signal at a UE (e.g., UE105), and / or provide location assistance to UE105 (via GMLC125 or other location server), and / or calculate the location of UE105 at a location-determinable device such as UE105, gNB110a, 110b, or LMF120 based on the measurements received at UE105 for such transmitted directional signals. The Gateway Mobile Location Center (GMLC) 125, Location Management Function (LMF) 120, Access and Mobility Management Function (AMF) 115, SMF 117, ng-eNB (eNodeB) 114, and gNB (gNodeB) 110a, 110b are examples and may be replaced by, or include, various other location server functions and / or base station functions in different embodiments.

[0018] UE105 may comprise and / or be referred to as a device, mobile device, wireless device, mobile terminal, terminal, mobile station (MS), Secure User Plane Location (SUPL) enabled terminal (SET), or any other name. Furthermore, UE105 may correspond to a mobile phone, smartphone, laptop, tablet, PDA, tracking device, navigation device, Internet of Things (IoT) device, asset tracker, health monitor, security system, smart city sensor, smart meter, wearable tracker, or any other portable or mobile device. While not always the case, the UE105 may support wireless communications using one or more radio access technologies (RATs), such as Global System for Mobile communication (GSM), Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA®), LTE, High Rate Packet Data (HRPD), IEEE 802.11 WiFi (also known as Wi-Fi), Bluetooth® (BT), Worldwide Interoperability for Microwave Access (WiMAX), and 5G new radio (NR) (e.g., using NG-RAN135 and 5GC140). The UE105 may also support wireless communications using a wireless local area network (WLAN) that can connect to other networks (e.g., the Internet) using, for example, digital subscriber lines (DSL) or packet cables. The use of one or more of these RATs may enable the UE105 to communicate with an external client 130 (for example, via an element of 5GC140 not shown in Figure 1, or possibly via GMLC125) and / or enable the external client 130 to receive location information about the UE105 (for example, via GMLC125).

[0019] UE105 may include a single entity or multiple entities, such as a personal area network in which the user may utilize audio, video and / or data I / O (input / output) devices, and / or body sensors, and separate wired or wireless modems. The estimation of the location of UE105 may be called location, location estimate, location fix, fix, place, location estimate, or location fix, and may be geographical, and therefore may or may not include an elevation component (e.g., elevation, ground, floor, or height or depth from underground), and provides the location coordinates of UE105 (e.g., latitude and longitude). Alternatively, the location of UE105 may be expressed as a civic location (e.g., as an address or designation for several points or narrow areas within a building, such as a particular room or floor). The location of UE105 may be expressed as an area or volume (defined either geographically or in civic form) in which UE105 is expected to be located with some probability or confidence level (e.g., 67%, 95%, etc.). The location of UE105 may be expressed as a relative location, for example, with distance and direction from a known location. The relative location may be expressed as relative coordinates (e.g., X, Y (and Z) coordinates) defined in comparison to some origin at the known location, which may be defined, for example, geographically, in civic terms, or by reference to a point, area, or volume shown on a map, plan, or building plan. In the descriptions contained herein, the use of the term location may include any of these variations unless otherwise specified. When calculating the location of a UE, it is common to solve for local x, y, and possibly z coordinates, and then, if desired, convert the local coordinates to absolute coordinates (for example, with respect to latitude, longitude, and altitude above or below mean sea level).

[0020] UE105 may be configured to communicate with other entities using one or more of various technologies. UE105 may be configured to indirectly connect to one or more communication networks via one or more device-to-device (D2D) peer-to-peer (P2P) links. D2D P2P links may be supported using any suitable D2D radio access technology (RAT), such as LTE Direct (LTE-D), WiFi Direct (WiFi-D), Bluetooth®, 5G CV2X Sidelink, or 5G ProSe. One or more of the group of UEs utilizing D2D communication may be within the geographical coverage area of ​​a transmit / receive point (TRP), such as one or more of gNB110a, 110b, and / or ng-eNB114. Other UEs within such a group may be outside such geographical coverage area or may not be able to receive transmissions from the base station in a different manner. A group of UEs communicating via D2D communication may utilize a one-to-many (1:M) system where each UE may transmit to other UEs in the group. TRP may facilitate the scheduling of resources for D2D communication. In other cases, D2D communication may occur between UEs without the involvement of TRP.

[0021] The base station (BS) in NG-RAN135 shown in Figure 1 includes NR NodeBs called gNB110a and 110b. The pair of gNB110a and 110b in NG-RAN135 may be connected to each other via one or more other gNBs. Wireless communication between UE105 and one or more of gNB110a and 110b provides UE105 with access to the 5G network, which may also provide wireless communication access to 5GC140 on behalf of UE105 using 5G. In Figure 1, it is assumed that the serving gNB for UE105 is gNB110a, but another gNB (e.g., gNB110b) may function as the serving gNB when UE105 moves to a different location, or as a secondary gNB to provide UE105 with additional throughput and bandwidth.

[0022] The base station (BS) in NG-RAN135 shown in Figure 1 may include an ng-eNB114, also called a next-generation evolved Node B. The ng-eNB114 may be connected to one or more gNB110a, 110b in NG-RAN135, possibly via one or more other gNBs and / or one or more other ng-eNBs. The ng-eNB114 may provide LTE wireless access and / or advanced LTE (eLTE) wireless access to UE105. One or more of the gNB110a, 110b, and / or ng-eNB114 may be configured to function as a positioning-only beacon, which may transmit signals to help determine the location of UE105, but may not receive signals from UE105 or other UEs.

[0023] BS110a, 110b, and 114 may each have one or more TRPs. For example, each sector within a BS cell may have a TRP, but multiple TRPs may share one or more components (e.g., they may share a processor but have separate antennas). System 100 may include macro-TRPs, or system 100 may have different types of TRPs, such as macro-TRPs, pico-TRPs, and / or femto-TRPs. Macro-TRPs may cover relatively large geographical areas (e.g., a radius of several kilometers) and may enable unrestricted access by terminals subscribing to the service. Pico-TRPs may cover relatively small geographical areas (e.g., picocells) and may enable unrestricted access by terminals subscribing to the service. Femto-TRPs or home-TRPs may cover relatively small geographical areas (e.g., femtocells) and may enable limited access by terminals associated with femtocells (e.g., terminals for users in their homes).

[0024] As stated, Figure 1 shows a node configured to communicate according to the 5G communication protocol, but nodes configured to communicate according to other communication protocols, such as the LTE protocol or the IEEE 802.11x protocol, may be used. For example, in an Evolved Packet System (EPS) providing LTE wireless access to UE105, the RAN may comprise an Evolved Universal Mobile Telecommunications System (UMTS) Terrestrial Radio Access Network (E-UTRAN) which may comprise base stations equipped with evolved Node B (eNB). The core network for the EPS may comprise an Evolved Packet Core (EPC). The EPS may comprise an E-UTRAN plus an EPC, in which, in Figure 1, the E-UTRAN corresponds to NG-RAN135 and the EPC corresponds to 5GC140.

[0025] The gNB110a, 110b, and ng-eNB114 may communicate with the AMF115, which in turn communicates with the LMF120 for positioning functions. The AMF115 may support the mobility of the UE105, including cell changes and handovers, and may participate in signaling connections to the UE105, as well as, if applicable, supporting data and voice bearers for the UE105. The LMF120 may communicate directly with the UE105, for example, through wireless communication. The LMF120 may support the positioning of UE105 when UE105 accesses NG-RAN135, and may support positioning procedures / methods such as Assisted GNSS (A-GNSS), Observed Time of Arrival (OTDOA), Real-time Kinematics (RTK), High Precision Single Positioning (PPP), Differential GNSS (DGNSS), Enhanced Cell ID (E-CID), Angle of Arrival (AOA), Angle of Departure (AOD), and / or other positioning methods. The LMF120 may process positioning service requests for UE105 received, for example, from AMF115 or GMLC125. The LMF120 may be connected to AMF115 and / or GMLC125. The LMF120 may be referred to by other names such as Position Manager (LM), Position Function (LF), Commercial LMF (CLMF), or Value-Added LMF (VLMF). Nodes / systems implementing the LMF120 may, as an addition or alternative, implement other types of location support modules, such as an Enhanced Serving Mobile Location Center (E-SMLC) or a Secure User Plane Location (SUPL) Location Platform (SLP). At least part of the positioning function (including the derivation of the UE105's position) may be performed in the UE105 (using, for example, signal measurement results acquired by the UE105 for signals transmitted by wireless nodes such as gNB110a, 110b, and / or ng-eNB114, and / or supporting data provided to the UE105 by the LMF120).

[0026] GMLC125 may support location requests for UE105 received from external client 130, and may forward such location requests to AMF115 for forwarding to LMF120 by AMF115, or may forward the location requests directly to LMF120. A location response from LMF120 (including, for example, a location estimate for UE105) may be returned to GMLC125 either directly or via AMF115, and GMLC125 may then return the location response (including, for example, a location estimate) to external client 130. GMLC125 is illustrated as being connected to both AMF115 and LMF120, although one of these connections may be supported by 5GC140 in some implementations.

[0027] As further shown in Figure 1, the LMF120 may communicate with gNB110a, 110b, and / or ng-eNB114 using the New Radio Positioning Protocol A (sometimes called NPPa or NRPPa), which may be defined in 3GPP® Technical Specification (TS) 38.455. NRPPa is the same as, similar to, or an extension of LTE Positioning Protocol A (LPPa), as defined in 3GPP TS 36.455, and NRPPa messages are transmitted via the AMF115 between gNB110a (or gNB110b) and the LMF120, and / or between ng-eNB114 and the LMF120. As further shown in Figure 1, the LMF120 and UE105 may communicate using the LTE Positioning Protocol (LPP), which may be defined in 3GPP TS 36.355. In addition, or instead, the LMF120 and UE105 may communicate using a New Radio Positioning Protocol (sometimes called NPP or NRPP), which may be the same as, similar to, or an extension thereof, LPP. Here, LPP and / or NPP messages may be transferred between the UE105 and the LMF120 via serving gNB110a, 110b or serving ng-eNB114 for the AMF115 and UE105. For example, LPP and / or NPP messages may be transferred between the LMF120 and AMF115 using the 5G Location Services Application Protocol (LCS AP), or between the AMF115 and UE105 using the 5G Non-Access Layer (NAS) protocol. The LPP and / or NPP protocols may be used to support the positioning of the UE105 using UE-assisted and / or UE-based positioning methods such as A-GNSS, RTK, OTDOA, and / or E-CID.The NRPPa protocol may be used to support the positioning of the UE105 using a network-based positioning method such as E-CID (for example, when used with measurement results obtained by gNB110a, 110b, or ng-eNB114), and / or may be used by the LMF120 to obtain position-related information from gNB110a, 110b, and / or ng-eNB114, such as parameters defining directional SS transmissions from gNB110a, 110b, and / or ng-eNB114.

[0028] Using a positioning method supported by the UE, UE105 may acquire position measurement results and transmit these results to a location server (e.g., LMF120) for the calculation of a position estimate for UE105. For example, the position measurement results may include one or more of the following for gNB110a, 110b, ng-eNB114, and / or WLAN APs: Received Signal Strength Indication (RSSI), Round-Trip Time (RTT), Reference Signal Time Difference (RSTD), Reference Signal Received Power (RSRP), and / or Reference Signal Received Quality (RSRQ). In addition, or instead, the position measurement results may include GNSS pseudodistance, code phase, and / or carrier phase measurements for SV190-193.

[0029] Using a UE-based positioning method, UE105 may obtain a positioning result (which may be the same as or similar to the positioning result for a UE-assisted positioning method, for example), and may calculate the position of UE105 (for example, with the help of support data received from a location server such as LMF120, or broadcast by gNB110a, 110b, ng-eNB114, or other base stations or APs).

[0030] Using a network-based positioning method, one or more base stations (e.g., gNB110a, 110b, and / or ng-eNB114) or APs may acquire and / or receive position measurement results (e.g., RSSI, RTT, RSRP, RSRQ, or Time to Arrive (TOA) measurements of the signal transmitted by UE105). One or more base stations or APs may transmit the measurement results to a location server (e.g., LMF120) for the calculation of the UE105's position estimation.

[0031] The information provided to the LMF120 by gNB110a, 110b, and / or ng-eNB114 using NRPPa may include timing and configuration information for directional SS transmissions, as well as position coordinates. The LMF120 may provide some or all of this information to the UE105 as supporting data in LPP and / or NPP messages via NG-RAN135 and 5GC140.

[0032] An LPP or NPP message sent from the LMF120 to the UE105 may instruct the UE105 to do one of a variety of things, depending on the desired functionality. For example, an LPP or NPP message may include an instruction to the UE105 to obtain GNSS (or A-GNSS), WLAN, E-CID, and / or OTDOA (or any other positioning method) measurement results. In the case of E-CID, an LPP or NPP message may instruct the UE105 to obtain one or more measurements of a directional signal transmitted within a particular cell supported by one or more of gNB110a, 110b, and / or ng-eNB114 (or supported by any other type of base station such as an eNB or WiFi AP) (e.g., beam ID, beamwidth, mean angle, RSRP, RSRQ measurements). UE105 may also return the measurement to LMF120 via serving gNB110a (or serving ng-eNB114) and AMF115 in an LPP or NPP message (for example, within a 5G NAS message).

[0033] As stated, the communication system 100 is described in relation to 5G technology, but the communication system 100 may be implemented to support other communication technologies such as GSM, WCDMA®, and LTE (for example, to implement voice, data, positioning, and other functions) used to support and interact with mobile devices such as UE105. In some such embodiments, 5GC140 may be configured to control different air interfaces. For example, 5GC140 may be connected to a WLAN using a Non-3GPP InterWorking Function (N3IWF, not shown in Figure 1) in 5GC150. For example, the WLAN may support IEEE802.11 WiFi access for UE105 and may include one or more WiFi APs. Here, the N3IWF may be connected to the WLAN and to other elements in 5GC140 such as AMF115. In some embodiments, both NG-RAN135 and 5GC140 may be replaced by one or more other RANs and one or more other core networks. For example, in an EPS, NG-RAN135 may be replaced by an E-UTRAN including an eNB, and 5GC140 may be replaced by an EPC including a Mobility Management Entity (MME) instead of AMF115, an E-SMLC instead of LMF120, and a GMLC which may be similar to GMLC125. In such an EPS, the E-SMLC may use LPPa instead of NRPPa to transmit and receive location information to and from the eNB within the E-UTRAN, and may use LPP to support the positioning of UE105. In these other embodiments, the positioning of UE105 using a directional PRS may be supported in a manner similar to that described herein for 5G networks, the difference being that the functions and procedures described herein for gNB110a, 110b, ng-eNB114, AMF115, and LMF120 may instead be applied to other network elements such as eNBs, WiFi APs, MMEs, and E-SMLCs, depending on the context.

[0034] As described, in some embodiments, the positioning function may be implemented at least in part using directional SS beams transmitted by base stations (such as gNB110a, 110b, and / or ng-eNB114) within range of the UE (e.g., UE105 in Figure 1) whose location will be determined. In some cases, the UE may use directional SS beams from multiple base stations (such as gNB110a, 110b, and ng-eNB114) to calculate the location of the UE.

[0035] Referring also to Figure 2, UE200 is an example of UE105 and comprises a computing platform including a processor 210, memory 211 containing software (SW) 212, one or more sensors 213, a transceiver interface 214 for a transceiver 215, a user interface 216, a satellite positioning system (SPS) receiver 217, a camera 218, and a place (motion) device 219. The processor 210, memory 211, sensors 213, transceiver interface 214, user interface 216, SPS receiver 217, camera 218, and place (motion) device 219 may be coupled to communicate with each other by a bus 220 (which may be configured for optical and / or telecommunications, for example). One or more of the shown devices (for example, one or more of the camera 218, place (motion) device 219, and / or sensors 213) may be omitted from UE200. The processor 210 may include one or more intelligent hardware devices, such as a central processing unit (CPU), a microcontroller, or an application-specific integrated circuit (ASIC). The processor 210 may comprise multiple processors, including a general-purpose / application processor 230, a digital signal processor (DSP) 231, a modem processor 232, a video processor 233, and / or a sensor processor 234. One or more of the processors 230-234 may comprise multiple devices (e.g., multiple processors). For example, the sensor processor 234 may comprise processors for radar, ultrasound, and / or lidar, for example. The modem processor 232 may support dual SIM / dual connectivity (or possibly more SIMs). For example, one SIM (subscriber identification module or subscriber identification module) may be used by an original equipment manufacturer (OEM), and another SIM may be used by the end user of the UE200 for connectivity. Memory 211 is a non-temporary storage medium that may include random access memory (RAM), flash memory, disk memory, and / or read-only memory (ROM).Memory 211 stores software 212, which may be processor-readable, processor-executable software code containing instructions, configured such that when executed, the instructions cause the processor 210 to perform various functions described herein. Alternatively, the software 212 does not have to be directly executable by the processor 210, but may be configured such that, when compiled and executed, it causes the processor 210 to perform functions. This description may refer to the processor 210 performing functions, including other implementations such as the processor 210 executing software and / or firmware. This description may refer to the processor 210 performing functions as a shorthand for one or more of the processors 230-234 performing functions. This description may refer to the UE200 performing functions as a shorthand for one or more appropriate components of the UE200 performing functions. In addition to memory 211, and / or instead of memory 211, the processor 210 may include memory containing instructions. The functions of processor 210 will be discussed in more detail below.

[0036] The configuration of the UE200 shown in Figure 2 is an example of the present disclosure, including the claims, and is not limited thereto; other configurations may be used. For example, an exemplary configuration of the UE includes one or more of the processors 230-234 of the processor 210, memory 211, and wireless transceivers 240. Other exemplary configurations include one or more of the processors 230-234 of the processor 210, memory 211, and wireless transceivers 240, one or more of the sensors 213, a user interface 216, an SPS receiver 217, a camera 218, a PMD 219, and / or a wired transceiver 250.

[0037] The UE200 may include a modem processor 232 which may be capable of performing baseband processing of signals received and downconverted by the transceiver 215 and / or the SPS receiver 217. The modem processor 232 may perform baseband processing of signals so that they are upconverted for transmission by the transceiver 215. In addition, or instead, baseband processing may be performed by a processor 230 and / or a DSP 231. However, other configurations may be used to perform baseband processing.

[0038] The UE200 may include, for example, a sensor 213 which includes an inertial measuring unit (IMU) 270, one or more magnetometers 271, and / or one or more environmental sensors 272. The IMU 270 may comprise one or more inertial sensors, for example, one or more accelerometers 273 (which collectively respond to the acceleration of the UE200 in three dimensions) and / or one or more gyroscopes 274. The magnetometer may provide measurement results for determining orientation (for example, relative to magnetic north and / or true north), which may be used for any of a variety of purposes, for example, to support one or more compass applications. The environmental sensors 272 may comprise, for example, one or more temperature sensors, one or more barometric pressure sensors, one or more ambient light sensors, one or more camera imagers, and / or one or more microphones, etc. Sensor 213 may generate analog and / or digital signals, the signal indications of which may be stored in memory 211 and processed by DSP 231 and / or processor 230 to support one or more applications, such as applications targeting positioning and / or navigation operations. The sensor processing subsystem may be embedded in a low-power core to facilitate continuous recording and derivation of sensor parameters required for high-level functions such as temperature sensing, location assistance, or autonomous navigation.

[0039] Sensor 213 may be used for relative position measurement, relative position determination, motion determination, etc. Information detected by Sensor 213 may be used for motion detection, relative displacement, autonomous navigation, sensor-based position determination, and / or sensor-assisted position determination. Sensor 213 may be useful in determining whether UE200 is stationary or mobile, and / or whether any useful information regarding the mobility of UE200 should be reported to LMF120. For example, based on information acquired / measured by Sensor 213, UE200 may notify / report to LMF120 that UE200 has detected movement or that UE200 has moved, and may report relative displacement / distance (e.g., via autonomous navigation, or sensor-based position determination, or sensor-assisted position determination enabled by Sensor 213). In another example, with respect to relative positioning information, the sensor / IMU may be used to determine the angle and / or bearing of other devices relative to UE200, etc.

[0040] The IMU270 may be configured to provide measurement results regarding the direction and / or speed of motion of the UE200, and these measurement results may be used in relative position determination. For example, one or more accelerometers 273 and / or one or more gyroscopes 274 of the IMU270 may detect the linear acceleration and rotational velocity of the UE200, respectively. The measurement results of the linear acceleration and rotational velocity of the UE200 may be integrated over time to determine the instantaneous direction and displacement of motion of the UE200. The instantaneous direction and displacement of motion may be integrated to track the position of the UE200. For example, the reference position of the UE200 may be determined for a given moment using, for example, the SPS receiver 217 (and / or by some other means), and the measurement results from the accelerometers 273 and gyroscopes 274 obtained after this moment may be used in autonomous navigation to determine the current position of the UE200 based on the movement (direction and distance) of the UE200 compared to the reference position.

[0041] The magnetometer 271 may determine the magnetic field strength in different directions, which may be used to determine the orientation of the UE200. For example, orientation may be used to provide a digital compass to the UE200. The magnetometer 271 may include a two-dimensional magnetometer configured to detect and provide a representation of the magnetic field strength in two orthogonal dimensions. In addition, or instead, the magnetometer 271 may include a three-dimensional magnetometer configured to detect and provide a representation of the magnetic field strength in three orthogonal dimensions. The magnetometer 271 may provide means for sensing the magnetic field and providing a representation of the magnetic field to, for example, the processor 210.

[0042] The transceiver 215 may include a wireless transceiver 240 and a wired transceiver 250, respectively, configured to communicate with other devices via wireless and wired connections. For example, the wireless transceiver 240 may include a transmitter 242 and a receiver 244 coupled to one or more antennas 246 to transmit and / or receive a wireless signal 248 (for example, over one or more uplink channels and / or one or more sidelink channels) and to convert the signal from the wireless signal 248 to a wired (for example, electrical and / or optical) signal and from the wired (for example, electrical and / or optical) signal to the wireless signal 248. Thus, the transmitter 242 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 244 may include multiple receivers, which may be individual components or composite / integrated components. The Wireless Transceiver 240 may be configured to communicate signals (for example, with the TRP and / or one or more other devices) in accordance with various radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA® (broadband CDMA), LTE (Long-Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), V2C (Uu), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), Bluetooth®, Zigbee, 5G CV2X (Sidelink), and 5G ProSe. New Radio may use mm wave frequencies and / or sub-6GHz frequencies.The wired transceiver 250 may include a transmitter 252 and a receiver 254 configured for wired communication with network 135, for example, to transmit communications to gNB 110a and receive communications from gNB 110a. The transmitter 252 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 254 may include multiple receivers, which may be individual components or composite / integrated components. The wired transceiver 250 may be configured for optical and / or electrical communications, for example. The transceiver 215 may be communicatively coupled to a transceiver interface 214, for example, by optical and / or electrical connections. The transceiver interface 214 may be at least partially integrated with the transceiver 215.

[0043] The user interface 216 may include one or more of several devices, such as a speaker, microphone, display device, vibration device, keyboard, and touchscreen. The user interface 216 may include two or more of these devices. The user interface 216 may be configured to allow the user to interact with one or more applications hosted by the UE200. For example, the user interface 216 may store in memory 211 an indication of analog and / or digital signals to be processed by the DSP 231 and / or general-purpose processor 230 in response to user actions. Similarly, an application hosted on the UE200 may store in memory 211 an indication of analog and / or digital signals to present output signals to the user. The user interface 216 may include an audio input / output (I / O) device, such as a speaker, microphone, digital-analog circuitry, analog-digital circuitry, amplifier, and / or gain control circuitry (including two or more of these devices). Other configurations of the audio I / O device may be used. In addition, or instead, the user interface 216 may include, for example, one or more touch sensors that respond to touch and / or pressure on the keyboard and / or touchscreen of the user interface 216.

[0044] An SPS receiver 217 (for example, a Global Positioning System (GPS) receiver) may be capable of receiving and acquiring an SPS signal 260 via an SPS antenna 262. The antenna 262 may be configured to convert the wireless signal 260 into a wired signal, such as an electrical or optical signal, and may be integrated with an antenna 246. The SPS receiver 217 may be configured to process the acquired SPS signal 260, either entirely or partially, to estimate the position of the UE200. For example, the SPS receiver 217 may be configured to use the SPS signal 260 to determine the position of the UE200 by trilateration. A general-purpose processor 230, memory 211, DSP 231, and / or one or more specialized processors (not shown) may be used in conjunction with the SPS receiver 217 to process the acquired SPS signal, either entirely or partially, and / or to calculate the estimated position of the UE200. Memory 211 may store indications (e.g., measurement results) of the SPS signal 260 and / or other signals (e.g., signals obtained from the wireless transceiver 240) for use when performing positioning operations. The general-purpose processor 230, DSP 231, and / or one or more specialized processors, and / or memory 211 may provide or support a positioning engine for use when processing the measurement results to estimate the position of the UE200.

[0045] The UE200 may include a camera 218 for capturing still or moving images. The camera 218 may include, for example, an imaging sensor (e.g., a charge-coupled device or CMOS imager), a lens, analog-digital circuitry, a frame buffer, and the like. Additional processing, adjustment, encoding, and / or compression of the signal representing the captured image may be performed by a general-purpose processor 230 and / or DSP 231. In addition, or instead, a video processor 233 may perform adjustment, encoding, compression, and / or manipulation of the signal representing the captured image. The video processor 233 may decode / decompress the stored image data for presentation on a display device (not shown) of the user interface 216, for example.

[0046] The location (motion) device (PMD) 219 may be configured to determine the location and, optionally, the movement of the UE 200. For example, the PMD 219 may communicate with and / or include part or all of the SPS receiver 217. The PMD 219 may also or alternatively be configured to determine the location of the UE 200 using ground-based signals (e.g., at least some of the signals 248) to assist in acquiring and using the SPS signal 260 for trilateration, or both. The PMD 219 may be configured to use one or more other techniques for determining the location of the UE 200 (e.g., relying on the UE's self-reporting location (e.g., part of the UE's location beacon)), or a combination of techniques (e.g., SPS signals and ground positioning signals) for determining the location of the UE 200. The PMD219 may include one or more of the sensors 213 (e.g., a gyroscope, accelerometer, magnetometer, etc.), which may provide indications that the sensors 213 sense the orientation and / or motion of the UE200 and that the processor 210 (e.g., processor 230 and / or DSP231) uses them to determine the motion of the UE200 (e.g., velocity vectors and / or acceleration vectors). The PMD219 may be configured to provide indications of uncertainty and / or error in the determined location and / or motion.

[0047] Referring also to Figure 3, the TRP300 examples BS110a, 110b, and 114 include a computing platform comprising a processor 310, a memory 311 containing software (SW) 312, a transceiver 315, and (optionally) an SPS receiver 317. The processor 310, memory 311, transceiver 315, and SPS receiver 317 may be coupled to communicate with each other by a bus 320 (which may be configured for, for example, optical and / or telecommunications). One or more of the devices shown (e.g., a wireless interface and / or SPS receiver 317) may be omitted from the TRP300. The SPS receiver 317 may be configured similarly to the SPS receiver 217 to enable receiving and acquiring SPS signals 360 via an SPS antenna 362. The processor 310 may include one or more intelligent hardware devices, such as a central processing unit (CPU), a microcontroller, an application-specific integrated circuit (ASIC), etc. The processor 310 may comprise multiple processors (for example, including a general-purpose / application processor, a DSP, a modem processor, a video processor, and / or a sensor processor, as shown in Figure 2). Memory 311 is a non-temporary storage medium and may include random-access memory (RAM), flash memory, disk memory, and / or read-only memory (ROM), etc. Memory 311 stores software 312, which may be processor-readable, processor-executable software code containing instructions, configured such that, when executed, it causes the processor 310 to perform various functions described herein. Alternatively, the software 312 may not be directly executable by the processor 310, but may be configured such that, when compiled and executed, it causes the processor 310 to perform functions. While this description may refer to the processor 310 performing functions, this includes other implementations, such as the processor 310 executing software and / or firmware.This description may refer to "processor 310 performing a function" as an abbreviation for one or more of the processors included in processor 310 performing a function. This description may refer to "TRP300 performing a function" as an abbreviation for one or more suitable components of TRP300 (and therefore one of BS110a, 110b, or 114) performing a function. Processor 310 may include, in addition to and / or instead of memory 311, memory in which instructions are stored. The functions of processor 310 will be discussed in more detail below.

[0048] The transceiver 315 may include a wireless transceiver 340 and a wired transceiver 350, respectively, configured to communicate with other devices via wireless and wired connections. For example, the wireless transceiver 340 may include a transmitter 342 and a receiver 344 coupled to one or more antennas 346 to transmit and / or receive a wireless signal 348 (for example, over one or more uplink channels) and / or receive it (for example, over one or more downlink channels), and to convert the signal from the wireless signal 348 to a wired (for example, electrical and / or optical) signal and from the wired (for example, electrical and / or optical) signal to the wireless signal 348. Thus, the transmitter 342 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 344 may include multiple receivers, which may be individual components or composite / integrated components. The Wireless Transceiver 340 may be configured to communicate signals (for example, with UE200, one or more other UEs, and / or one or more other devices) in accordance with various Radio Access Technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA® (Wideband CDMA), LTE (Long-Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), 802.15, Bluetooth®, Zigbee, UWB, and mmWave. The wired transceiver 350 may include a transmitter 352 and a receiver 354 configured for wired communication with network 140, for example, to send communications to and receive communications from LMF120 or other network servers.The transmitter 352 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 354 may include multiple receivers, which may be individual components or composite / integrated components. The wired transceiver 350 may be configured, for example, for optical and / or telecommunications.

[0049] The configuration of the TRP300 shown in Figure 3 is an example of the present disclosure, including the claims, and is not limited thereto; other configurations may be used. For example, the description herein discusses that the TRP300 is configured to perform or performs several functions, but one or more of these functions may be performed by the LMF120 and / or UE200 (i.e., the LMF120 and / or UE200 may be configured to perform one or more of these functions).

[0050] Referring also to Figure 4, an exemplary server such as the LMF120 comprises a computing platform including a processor 410, memory 411 containing software (SW) 412, and a transceiver 415. The processor 410, memory 411, and transceiver 415 may be coupled to communicate with each other by a bus 420 (which may be configured, for example, for optical and / or telecommunications). One or more of the shown devices (e.g., a wireless interface) may be omitted from the server 400. The processor 410 may include one or more intelligent hardware devices, such as a central processing unit (CPU), a microcontroller, an application-specific integrated circuit (ASIC), etc. The processor 410 may comprise multiple processors (for example, including a general-purpose / application processor, a DSP, a modem processor, a video processor, and / or a sensor processor, as shown in Figure 2). The memory 411 is a non-temporary storage medium and may include random access memory (RAM), flash memory, disk memory, and / or read-only memory (ROM), etc. Memory 411 stores software 412, which may be processor-readable, processor-executable software code containing instructions, configured such that when executed, the instructions cause the processor 410 to perform various functions described herein. Alternatively, the software 412 may not be directly executable by the processor 410, but may be configured such that, when compiled and executed, it causes the processor 410 to perform a function. This description may refer to the processor 410 performing a function, which includes other implementations such as the processor 410 executing software and / or firmware. This description may refer to the processor 410 performing a function as a shorthand for one or more processors included in the processor 410 performing a function. This description may refer to the server 400 (or LMF120) performing a function as a shorthand for one or more appropriate components of the server 400 performing a function.The processor 410 may include, in addition to and / or instead of, memory 411, memory in which instructions are stored. The functions of the processor 410 will be discussed in more detail below.

[0051] The transceiver 415 may include a wireless transceiver 440 and a wired transceiver 450, respectively, configured to communicate with other devices via wireless and wired connections. For example, the wireless transceiver 440 may include a transmitter 442 and a receiver 444 coupled to one or more antennas 446 to transmit and / or receive a wireless signal 448 (for example, over one or more downlink channels) and / or receive it (for example, over one or more uplink channels), and to convert the signal from the wireless signal 448 to a wired (for example, electrical and / or optical) signal and from the wired (for example, electrical and / or optical) signal to the wireless signal 448. Thus, the transmitter 442 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 444 may include multiple receivers, which may be individual components or composite / integrated components. The wireless transceiver 440 may be configured to communicate signals (for example, with UE200, one or more other UEs, and / or one or more other devices) in accordance with various radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA® (broadband CDMA), LTE (Long-Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802.11p), WiFi, WiFi Direct (WiFi-D), Bluetooth®, BLE, and Zigbee. The wired transceiver 450 may include a transmitter 452 and a receiver 454 configured for wired communication with network 135, for example, to send communications to and receive communications from TRP300.The transmitter 452 may include multiple transmitters, which may be individual components or composite / integrated components, and / or the receiver 454 may include multiple receivers, which may be individual components or composite / integrated components. The wired transceiver 450 may be configured, for example, for optical communications and / or telecommunications.

[0052] The configuration of the server 400 shown in Figure 4 is an example of the present disclosure, including the claims, and is not limited thereto; other configurations may be used. For example, the wireless transceiver 440 may be omitted. In addition, or instead, the description herein discusses that the server 400 is configured to perform or performs several functions, one or more of which may be performed by the TRP 300 and / or UE 200 (i.e., the TRP 300 and / or UE 200 may be configured to perform one or more of which functions).

[0053] Referring to Figure 5A, an example of a conceptual diagram of a round-trip time measurement session 500 is shown. A common method involves a responding station 502 and an initiating station 504. The responding station 502 and the initiating station 504 may be UEs such as UE200, or other wireless mobile devices configured to participate in time-of-flight positioning. In some examples, but not limited to, the RTT measurement session 500 may be based on Fine Timing Measurement messages exchanged between the responding station 502 and the initiating station 504. Other messages and signals, such as positioning reference signals (PRS), sounding reference signals (SRS), infrared camera signals, or other reference signals, may be used to determine time-of-flight information between the two UEs. The RTT session 500 may utilize the FTM protocol (e.g., 802.11mc D4.3 section 10.24.6) to allow the two stations to exchange round-trip measurement frames (e.g., FTM frames). The initiator station 504 may calculate the round-trip time by recording the TOA (i.e., t2) of the FTM frame from the responding station 502 and the TOD (i.e., t3) of the acknowledgment frame (ACK) of the FTM frame. The responding station 502 may record the TOD (i.e., t1) of the FTM frame and the TOA (i.e., t4) of the ACK received from the initiator station 504. Changes in message format may allow timing values ​​to be transferred between the responding station 502 and the initiator station 504. Thus, the RTT is calculated as follows: RTT=[(t4-t1)-(t3-t2)] (1)

[0054] An RTT session 500 may allow the initiating station 504 to obtain the distance between itself and the responding station 502. An FTM session is an example of a ranging technique between the responding station 502 and the initiating station 504. Other ranging techniques such as TDOA and TOA / TOF may also be used to determine the relative locations of the two stations. Other signaling may also be used to enable negotiation processes, measurement result exchanges, and termination processes. For example, Wi-Fi 802.11az ranging null data packets (NDP) and trigger-based (TB) ranging NDP sessions may also be used.

[0055] Referring to Figure 5B, an exemplary Wi-Fi wireless communication network 550 according to an aspect of this disclosure is shown. In the example of Figure 5B, a location server 552 (which may correspond to any of the servers described herein) is configured to calculate the location estimation of UE 554, or to assist another entity (e.g., an AP, UE 554, another UE, a location server, a third-party application, etc.) in calculating the location estimation of UE 554. UE 554 may wirelessly communicate with a plurality of Wi-Fi access points 556-1, 556-2, and 556-3 (which may correspond to any of the TRP 300 described herein) using RF signals and standardized protocols for modulating RF signals and exchanging information packets. By extracting different types of information from the exchanged RF signals and utilizing the layout of the Wi-Fi wireless network 550 (i.e., AP locations, geometric locations, etc.), the location server 552 may determine or assist in determining the location of UE 554 in a predetermined reference coordinate system. In one embodiment, the location server 552 may specify its location using a two-dimensional coordinate system, but the embodiments disclosed herein are not limited thereto and may also be applicable to determining the location using a three-dimensional coordinate system if additional dimensions are desired. In addition, Figure 5B shows one UE 554 and three APs 556-1, 556-2, and 556-3, but as can be understood, there may be more UE 554s and more base stations.

[0056] To support location estimation, AP556-1, 556-2, and 556-3 may be configured to broadcast a reference RF signal to UEs within their coverage area, enabling UE554 to measure the characteristics of such reference RF signals. For example, UE554 may measure the ToA and / or RSSI of a particular reference RF signal transmitted by at least three different APs, and an RTT positioning method may be used to report these ToA (and additional information) to the location server 552 (e.g., via a serving AP). In order to determine the location (x,y) of UE554, the entity determining the location of UE554 needs to know the locations of AP556-1, 556-2, and 556-3, and this location is (x) in the reference coordinate system. k ,y k ) may also be expressed as, however, in the example in Figure 5B, k=1, 2, 3. If one of AP556-2 (e.g., a serving AP) or UE554 determines the location of UE554, the locations of the relevant AP556-1, 556-3 may be provided to the serving AP556-2 or UE554 by the location server 552 (which has network geometry information). Alternatively, the location server 552 may use known network geometry to determine the location of UE554.

[0057] UE554 or any of the respective AP556-1, 556-2, or 556-3, the distance between UE554 and the respective AP556-1, 556-2, or 556-3 (d k However, k=1, 2, 3) may be determined. In one embodiment, the RTT558-1, 558-2, 558-3 of the signals exchanged between UE554 and any AP556-1, 556-2, 556-3 is determined, and the distance (d k) can be converted to ). The RTT technique can measure the time between the transmission of a signaling message (e.g., a reference RF signal) and the reception of a response. The FTM procedure in Figure 5A is an example of the RTT technique. These methods may utilize calibration to eliminate any processing delays and hardware delays. In some environments, it may be assumed that the processing delays of the UE554 and AP556-1, 556-2, and 556-3 are the same.

[0058] each distance d k Once determined, UE554, AP556-1, 556-2, 556-3, or location server 552 can solve for the location (x,y) of UE554 by using various known geometric techniques, such as trilateration. From Figure 5B, the location of UE554 is ideally at the common intersection of three semicircles, each semicircle having radius d k and center (x k ,y k It is defined by ), where k=1, 2, 3.

[0059] In some cases, additional information may be obtained in the form of an angle of arrival (AoA) or angle of departure (AoD) that defines a range of directions, either linearly (e.g., in the horizontal or three-dimensional plane) or, in some cases, a range of directions (e.g., from the locations of AP556-1, 556-2, 556-3 to UE554). The intersection of two directions at or near a point (x,y) can provide another estimate of the location of UE554. In some examples, a single distance to one of the APs and the AoA may be used to determine the estimated location of UE554.

[0060] Referring to Figure 6 with further reference to Figure 5B, an exemplary message flow 600 for passive positioning using multiple APs is shown. Message flow 600 includes a first AP 556-1, a second AP 556-2, and a UE 554. In message flow 600, the AP network 550 provides passive positioning services by exchanging NDP sounding packets among the APs, and the client UE listens to these packets. The UE's location may be estimated based on the received sounding packets. For example, the AP network 550 may utilize a passive positioning technique described in 802.11az. In one example, the AP's location may be broadcast to the UE. In an example of digital key application, the UE 554 may be configured to feed back measurement information to a controller (not shown in Figure 6). In one example, message flow 600 includes the first AP 556-1 sending an I2R NDP message 602 at time T1, which is received by the second AP 556-2 at time T2. UE554 is positioned to receive I2R NDP602 at time T5. Second AP556-2 may transmit an acknowledgment message, such as NDPA message 604. Second AP556-2 is configured to transmit R2I NDP message 606 at time T3, which is received by first AP556-1 at time T4. UE554 is positioned to receive R2I NDP606 at time T6. First AP556-1 and / or second AP556-2 may be configured to indicate turnaround time (i.e., T3-T2), time of flight (i.e., T2-T1), and other supporting data (e.g., the locations of AP556-1 and 556-2) (e.g., via broadcast or other signaling). In one example, first AP556-1 may indicate time of flight and second AP556-2 may indicate turnaround time. In one embodiment, the UE554 is configured to perform an RSTD measurement based on arrival times T5 and T6.In one embodiment, the UE554 may be configured to store the respective ToA(T5, T6) in a local data structure along with station ID information (for example, the MAC IDs of the first AP556-1 and the second AP556-2, respectively), and then provide the data to the digital key system controller.

[0061] Referring to Figure 7, Figure 700 illustrates a relay attack in a wireless digital key system. Generally, traditional mechanical keys are replaced by electronic keys known as key fobs or remotes. Some remote keyless systems (RKS) may use wireless technologies such as BLE, and mobile devices such as smartphones, smartwatches, or other mobile transceivers may be used as keys. For example, a mobile device 702 (e.g., a smartwatch) may be worn by user 702a, and a vehicle 704 configured with an RKS may automatically unlock or lock based on the proximity of the mobile device 702. In some examples, an engine ignition system may also utilize an RKS to enable the engine starting process. The mobile device 702 may be configured to listen for signals broadcast from the vehicle 704 and respond by transmitting encrypted codes. In a relay station attack (RSA), a thief may forge signals transmitted between the mobile device 702 and the vehicle 704. For example, assuming user 702a walks away from vehicle 704 and is out of communication range, first thief 710a may use first wireless device 710 to send a general RKS signal to vehicle 704. Vehicle 704 may respond with an authentication request 707, and first wireless device 710 may use device-to-device (D2D) link 708 to send this request to second wireless device 706, which is under the control of second thief 706a. Second thief 706a may follow user 702a (e.g., sit near user in a restaurant, walk behind user in a crowd). Second wireless device 706 may relay the authentication request 707 to mobile device 702, which may respond with a certificate 709. Second wireless device 706 relays the certificate to first wireless device 710 via link 708. The first wireless device 710 unlocks the vehicle 704 by transmitting certificate 709. The relay attack in Figure 7 is an example, and these signals and procedures may be used in various relay attack schemes.However, generally, such relay attacks occur when the vehicle owner or the corresponding fob / mobile device is away from the vehicle.

[0062] Referring to Figure 8, Figure 800 shows an exemplary vehicle 804 with multiple wireless transceivers. For example, vehicle 804 includes multiple short-range transceivers and at least one long-range or medium-range transceiver (i.e., longer range than the short-range transceivers). The short-range transceivers in Figure 800 are illustrated as BLE transceivers (i.e., BLE1 to BLE14), but other short-range communication technologies may be used. The long-range or medium-range transceiver in the figure is a Wi-Fi transceiver 806, which may include some or all of the components of TRP300, and TRP300 may be an example of Wi-Fi 806. The BLE transceivers and Wi-Fi transceiver 806 may be communicatively coupled to a controller (not shown in Figure 8). The BLE transceiver may be a system-on-chip configuration or may be other commercially available BLE circuitry configured to measure signal strength (e.g., TI CC2540 / 41, Nordic nRF51822, Cypress Semi PSoC4 BLE, etc.). Multiple BLE transceivers may be installed around the periphery of the vehicle 804 and configured to detect nearby mobile devices. In one embodiment, the BLE transceivers may be configured to acquire ranging / positioning results (e.g., RSSI) from nearby mobile devices. For example, a first mobile device 802a may be approaching the left side of the vehicle 804, and a first BLE transceiver BLE1 and a second BLE transceiver BLE2 may provide the controller with indications of their respective RSSI measurement results. Other signals and measurement results may also be used to indicate the detection of a mobile device by one or more BLE transceivers. The controller may be configured to determine the relative position of the first mobile device 802a based on the RSSI measurement results (e.g., between BLE1 and BLE2). Similarly, a second mobile device 802b may approach the vehicle 804 from behind (for example, to open the trunk), and a sixth BLE transceiver BLE6 and a seventh BLE transceiver BLE7 may provide the controller with their respective detection indicators and / or RSSI measurement results.Other BLE transceivers may also provide detection indications and / or RSSI measurement results to the controller. Since the BLE transceivers are positioned around the periphery of the vehicle 804, the relative distances of the mobile devices 802a and 802b to the vehicle may be approximately equal, as this is based on the distances they are measured from the periphery of the vehicle.

[0063] The Wi-Fi transceiver 806 may be configured to determine the distance to mobile devices 802a, 802b based on RTT exchange, for example, as described in Figure 5A. Since the antenna module for the Wi-Fi transceiver 806 may be located in the center of the vehicle 804, the measured distance to each mobile device 802a, 802b may differ based on the relative position of the Wi-Fi transceiver 806 to the periphery of the vehicle 804. For example, a first distance D1 between the Wi-Fi transceiver 806 and the first mobile device 802a may be less than a second distance D2 between the Wi-Fi transceiver 806 and the second mobile device 802b. The passive digital key system described herein may utilize discovery information obtained from BLE transceivers (e.g., BLE1...BLE14) and distance measurement results obtained from the Wi-Fi transceiver 806 to validate the location of the mobile devices and reduce the possibility of relay attacks, as illustrated in Figure 7.

[0064] Referring to Figure 9, Figure 900 shows a first exemplary passive digital key system in vehicle 904. Vehicle 904 includes a number of short-range transceivers (i.e., BLE1...BLE14) and at least one medium / long-range transceiver (i.e., Wi-Fi transceiver 906). Other short-range and medium / long-range communication technologies may also be used. Wi-Fi transceiver 906 may include some or all of the components of TRP300, and TRP300 may be an example of Wi-Fi transceiver 906. The BLE transceivers and Wi-Fi transceiver 906 may be communicatively coupled to a controller 910. Controller 910 may include some or all of the components of server 400, and server 400 may be an example of controller 910. Controller 910 may be configured to run a digital key unlocking system (DKUS) for vehicle 904. A BLE transceiver may be installed on the periphery of the vehicle 904 and configured to acquire distance / positioning results (e.g., RSSI) from a mobile device approaching as described in Figure 8. In one embodiment, the BLE transceiver and controller 910 may be configured to acquire the RSSI measurement result 905 and detect when the mobile device 902 is near the vehicle 904. When the distance estimate 908 based on RSSI is within a threshold (e.g., 0.5m, 1m, 2m, etc.), the DKUS execution on the controller 910 may be configured to activate the Wi-Fi transceiver 906 and acquire one or more Wi-Fi signals 906a. Based on the position of the Wi-Fi antenna module relative to the periphery of the vehicle 904, the Wi-Fi distance estimate 914 may be greater than the true distance between the mobile device 902 and the periphery of the vehicle. For example, the bias value 912 may be based on the distance between the Wi-Fi transceiver 906 and the vehicle periphery near the mobile device 902 (e.g., based on the RSSI measurement result). In one embodiment, DKUS may include a vehicle edge calibration database or other data structure that stores a plurality of vehicle edge calibration values. For each Wi-Fi transceiver j, j=1,2,...,N, DKUS stores M vehicle edge calibration values ​​Dij , it may be remembered for i = 1, 2,..., M. Here, D ij is the distance from the Wi-Fi transceiver j to the closest vehicle periphery to the BLE transceiver i. As shown in FIG. 900, there are 14 BLE transceivers and 1 Wi-Fi transceiver. Therefore, 14 vehicle periphery calibration values may be stored in the database. For example, the vehicle periphery calibration value may be based on the BLE transceiver that reports the strongest RSSI (e.g., BLE2 in FIG. 9). DKUS may be configured to return the vehicle periphery calibration value D ij associated with an appropriate combination of BLE and Wi-Fi transceivers. Then, the distance estimation based on the Wi-Fi measurement result is the Wi-Fi distance estimation 914 minus the appropriate vehicle periphery calibration value (e.g., the bias value 912 associated with BLE2). In one example, an interpolation technique may be used to determine the calibration value when the mobile device 902 is located between the BLE transceivers.

[0065] In some embodiments, the BLE transceiver may be used to detect the presence of the mobile device 902 without determining the distance. For example, the transmission from the mobile device 902 may be received by one or more BLE transceivers such as the first BLE transceiver BLE1, the second BLE transceiver BLE2, and the third BLE transceiver BLE3. The detection of the mobile device 902 by one or more BLE transceivers may be used as a trigger to activate the Wi-Fi transceiver 906. The Wi-Fi transceiver may be configured to obtain the distance estimation 914, and the controller 910 may apply the bias estimation 912 based on the BLE transceiver with the strongest signal (e.g., BLE2). In one example, the Wi-Fi transceiver 906 may determine the angle of arrival (AoA) of the signal transmitted by the mobile device 902, and the controller 910 may obtain the bias estimation 912 based on the AoA.

[0066] Referring to Figure 10, Figure 1000 shows a second exemplary passive digital key system in vehicle 1004. Vehicle 1004 includes a plurality of short-range transceivers (i.e., BLE1...BLE14) and at least one medium / long-range transceiver (i.e., Wi-Fi transceiver 1008). Wi-Fi transceiver 1008 may include some or all of the components of TRP300, and TRP300 may be an example of Wi-Fi 1008. The BLE transceivers and Wi-Fi transceiver 1008 may be communicatively coupled to a controller 1010. Controller 1010 may include some or all of the components of a server 400, and server 400 may be an example of controller 1010. Controller 1010 may be configured to run a digital key unlocking system (DKUS) for vehicle 1004. The BLE transceivers may be located at locations known relative to a reference point. For example, a BLE transceiver may be installed on the periphery of a vehicle 1004 and configured to detect signals from a mobile device approaching as described in Figure 8, and / or to acquire ranging results (e.g., RSSI). In one embodiment, the vehicle periphery calibration database may be defined by an angle with respect to a reference point, such as the center of the vehicle 1004, the position of the Wi-Fi transceiver 1008, or another predetermined reference point. For each Wi-Fi transceiver j, j=1,2,...,N, the DKUS is defined as L=360 / A step Individual vehicle peripheral calibration value D ij It may be configured to maintain a vehicle perimeter calibration database that stores i=1,2,...,L. ij The value of angle A = iA step This is the distance from the Wi-Fi transceiver j to the edge of the vehicle, and A step This is the angular calibration resolution. For example, Figure 1000 shows 16 angular divisions 1006a...1006p (i.e., A) based on a reference point 1020 (e.g., the center of the vehicle). stepThe figure (=22.5 degrees) is illustrated. Therefore, the database for each Wi-Fi transceiver stores 16 vehicle edge calibration values. For example, distance value 1012 is the vehicle edge calibration value for Wi-Fi transceiver 1008 corresponding to the fourth angle division 1006d. The controller 1010 may be configured to determine the Wi-Fi-based distance to an approaching mobile device and to modify the distance calculation based on one or more vehicle edge calibration values ​​related to the angle of approach.

[0067] In operation, one or more BLE transceivers BLE1...BLE14 may report a detection signal 1014 indication to the controller 1010 in order to estimate the angle of the mobile device 1002 relative to the vehicle 1004. The controller 1010 may be configured to return the vehicle perimeter calibration value at the angle closest to the estimated angle. One or more signals 1018 received by the Wi-Fi transceiver 1008 may be used to determine the distance to the mobile device 1002. The Wi-Fi distance estimation may be adjusted based on a selected vehicle perimeter calibration value (for example, based on a fourth angle division 1006d). In one example, the estimation algorithm may be a weighted average, with greater weight given to BLE transceivers with stronger RSSI measurement results. For example, referring to Figure 10, BLE10 may have the largest weight because its RSSI measurement result 1014 is the strongest, BLE9 may have the second largest weight because its RSSI measurement result 1016 is the second strongest, and BLE5 may have a weight of 0 because its RSSI measurement result (not shown in Figure 10) is below a threshold. In one embodiment, the Wi-Fi transceiver 1008 may be configured to determine the angle of arrival (AoA) of the signal 1018 received from the mobile device 1002 in order to estimate the angle relative to the mobile device 1002. The controller 1010 may be configured to utilize the Wi-Fi AoA measurement result and the BLE RSSI measurement result in order to improve angle estimation.

[0068] Referring to Figure 11, an exemplary passive digital key system in a fixed structure is shown in Figure 1100. Other security implementations may utilize other physical and electronic structures configured to restrict access to physical and virtual areas before a validation process, so the structure in Figure 1100 is illustrative and not limiting. Figure 1100 includes a mobile device 1102 under the control of user 1102a. The mobile device 1102 may include some or all of the components of UE200, and UE200 may be an example of the mobile device 1102. A short-range transceiver 1106 may be located in a barrier such as a wall 1108 and configured as a digital key access system to enable access through the door 1110. A wireless network including a first AP 1104 may be located near the door 1110 and may be configured to acquire distance and / or angle information for devices near the short-range transceiver 1106. In one example, the first AP 1104 may be configured to exchange Wi-Fi ranging results 1104a with the mobile device 1102. In another example, the first AP 1104 may be configured to determine AoA 1104b of the signal transmitted from the mobile device 1102 based on a reference bearing 1103 (e.g., 0 degrees, North). A short-range transceiver 1106 may detect the presence of the mobile device 1102 via one or more detection signals 1106a. The short-range transceiver 1106 may be communicably coupled to a controller 1116 via a wired or wireless connection. The controller 1116 may be a network server and / or be included in the first AP 1104. When the mobile device 1102 is detected, the controller 1116 may configure the first AP 1104 to determine distance and / or angle measurements for the mobile device 1102. The controller 1116 also controls the distance and / or calibration values ​​(for example, d) associated with the first AP 1104 and the short-range transceiver 1106. cal) may be obtained. The controller 1116 may validate that the mobile device 1102 is near the short-range transceiver 1106 by comparing the distance measurement result 1104a with the distance calibration value. Angle calibration values ​​may also be compared with AoA1104b to validate the position of the mobile device 1102. For example, the mobile device 1102 may be validated when the comparison of the distance measurement result 1104a with the distance calibration value is within a predetermined threshold (e.g., 0.5m, 1m, 2m, etc.). Similarly, the mobile device 1102 may be validated when the measured AoA1104b and angle calibration value are within a threshold (e.g., 1, 2, 5, 10 degrees). A combination of distance and angle thresholds may also be used to validate the mobile device 1102.

[0069] In one embodiment, ranging results from other stations in the network may be used to validate the location of the mobile device 1102. For example, a second AP 1112 may be configured to obtain distance and / or AoA based on signals transmitted from the mobile device 1102. In one example, the first AP 1104 and the second AP 1112 may be configured to exchange ranging signals 1114 in a passive positioning scheme as illustrated in Figure 6. The mobile device 1102 may be configured to determine RSTD values ​​associated with one or more stations and report the corresponding measurements to the network (e.g., the controller 1116 via the first AP 1104). The RSTD measurement results may be used to validate the location of the mobile device 1102. In one example, a short-range transceiver 1106 may be configured to provide the mobile device 1102 with encrypted support data to enable the mobile device 1102 to communicate with the Wi-Fi network.

[0070] Referring to Figure 12, an exemplary data structure 1200 of a passive digital key system is shown. For example, the data structure may correspond to a peripheral calibration database, such as the vehicle peripheral calibration database described earlier. One or more objects of the data structure 1200 may reside on the controller 910 or another network-connected server 400. The data structure 1200 may reside on a memory device 1202, such as a solid-state hard drive or a mechanical hard drive, and may contain multiple data records stored in a relational database application (e.g., Amazon Aurora, Oracle Database, Microsoft SQL Server, MySQL, DB2, etc.) or in one or more single-layer files (e.g., JSON, XML, CSV, etc.). The table structure and fields of the data structure 1200 are examples and not limiting, so other data fields, tables, stored procedures, and indexing schemas may be used to construct the data structure 1200. In one example, the site table 1204 may consist of records relating to various locations, vehicles, or other entities configured to utilize the passive digital key system. For example, the siteDesc field may be used to describe a site, such as a building name or vehicle identification number. The siteLoc field may be used to indicate the site's location, such as a street address or geographical coordinates (e.g., latitude / longitude / altitude). The siteGroup field may be a linking field to associate a site with a larger group, such as a corporate campus or a fleet of vehicles. The group structure may be used to spread standard parameters to the associated sites. One or more security fields may be used to validate or authenticate the station in a passive digital key system. Other fields may also be associated with sites, vehicles, or entities using a passive digital key system.

[0071] The Wi-Fi station table 1206 may include a wifiIndex field to uniquely identify Wi-Fi stations within a site. The siteID field may be used to link Wi-Fi station records with site table 1204. The radioID field may be used to identify characteristics of the Wi-Fi radio, such as a transmitted identifier. The antennaLoc field may indicate the location of an antenna within the site. Other fields may also be used to characterize the features of the Wi-Fi stations.

[0072] One or more calibration tables, such as distance calibration table 1208 and angle calibration table 1210, may be associated with a Wi-Fi station. Distance calibration table 1208 may include fields indicating the calibration distance (e.g., peripheral value) for each of the short-range transmitters in the digital key system. For example, the ble1cal field may indicate the peripheral distance to BLE1 based on the location and / or antenna location of the associated Wi-Fi station. Similarly, other BLE calibration fields (e.g., ble2cal, ble3cal, ble4cal, etc.) may store peripheral distances to the associated BLE transmitters (e.g., BLE2, BLE3, BLE4, etc.) based on location information in the records of the associated Wi-Fi station. Angle calibration table 1210 may include fields indicating peripheral distance values ​​for various angular values ​​around the station. For example, the ang1cal field may indicate the peripheral distance associated with a first angular division 1006a. Similarly, other angle-based calibration fields (e.g., ang2cal, ang3cal, ang4cal, etc.) may store peripheral distances to the relevant angle segments (e.g., 1006b, 1006c, 1006d, etc.) based on the relevant Wi-Fi station records (e.g., the wifiID field). Other fields may also be included in the distance calibration table and angle calibration table records. For example, the locations of Wi-Fi and BLE transceivers at a site may be stored.

[0073] Referring further to Figures 1 to 12 and then to Figure 13, Method 1300 for validating a mobile device using a first exemplary passive digital key system includes the steps shown. However, Method 1300 is an example and not limiting. Method 1300 may be modified, for example, by adding, removing, rearranging, combining, performing simultaneously, and / or dividing a single step into multiple steps.

[0074] In step 1302, the method includes the step of measuring a first distance between a mobile device and a first point using a first transceiver. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be a means for measuring the first distance. To reduce power consumption, the first transceiver may be a short-range wireless access technology configured for low transmit power. In one embodiment, the wireless transceiver may include one or more BLE transmitters, such as the BLE transmitters BLE1...BLE14 in Figure 9, which are configured to acquire distance information related to the mobile device. For example, the mobile device 902 may be a user device such as a smartphone, smartwatch, fitness band, fob, key fob, or other device, which is configured to transmit and receive signals using two or more wireless access technologies. The distance between the mobile device 902 and the first point (e.g., with the first transceiver BLE2) may be based on an RSSI measurement result acquired in the first transceiver. RSSI measurement results may also be obtained by other transceivers, such as nearby BLE transceivers BLE1, BLE3, or other transceivers in vehicle 904.

[0075] In step 1304, the method includes the step of measuring a second distance between a mobile device and a second point using a second transceiver. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be a means for measuring the second distance. The second transceiver may be a medium-range wireless access technology and may have greater transmission power than the first transceiver. The second transceiver may have a longer communication range than the first transceiver. In one embodiment, the wireless transceiver 440 may include one or more Wi-Fi transceivers, such as the Wi-Fi transceiver 906 in Figure 9, which is configured to acquire distance information related to the mobile device 902. In one example, the second transceiver may be configured to utilize a wider bandwidth than the first transceiver. For example, the second transceiver may be a UWB radio that is communicably coupled to the controller 910. The second distance may be based on Wi-Fi ranging techniques such as RSSI and RTT. For example, the Wi-Fi distance estimate 914 may represent the distance between the Wi-Fi transceiver 906 (e.g., an antenna associated with the Wi-Fi transceiver) and the mobile device 902. The second distance may be based on the distance between the Wi-Fi transceiver 1008 and the mobile device 1002, or the distance between the AP 1104 and the mobile device 1102.

[0076] In step 1306, the method includes the step of obtaining a validation distance based at least partially on a first point and a second point. One of the controllers 910, 1010, 1116, including a processor 410, may be a means for obtaining the validation distance. In one embodiment, controller 910 may include a peripheral calibration database such as a data structure 1200. The data structure may be queried based on identification information of the first and second transceivers. For example, a Wi-Fi transceiver 906 may be associated with several calibration values ​​(e.g., ble1cal, ble2cal, etc.), and the calibration value for a particular BLE transceiver may be used as the validation distance. In one example, more than one BLE transceiver may be identified, and interpolation techniques may be used for the corresponding calibration values ​​to obtain the validation distance. The validation distance may correspond to a bias value 912 that indicates the distance from the Wi-Fi transceiver 906 to the periphery of the vehicle 904 closest to the mobile device 902, or from the Wi-Fi transceiver 1008 to the periphery of the vehicle 1004 closest to the mobile device 1002, or from AP 1104 to the short-range transceiver 1106.

[0077] In step 1308, the method includes a step of validating the mobile device, at least in part, based on a comparison of a first distance, a second distance, and a validation distance. One of the controllers 910, 1010, and 1116, including the processor 410, may be a means for validating the mobile device. In one example, this comparison may include subtracting the validation distance obtained in step 1306 from the second distance obtained in step 1304, and then comparing the remainder with the first distance obtained in step 1302. For example, referring to Figure 9, the difference between the Wi-Fi distance estimate 914 and the bias value 912 should be approximately equal to the RSSI distance estimate 908. If the value is approximately equal to or within a predetermined threshold (e.g., 0.5m, 1m, 2m, etc.), the mobile device may be validated. Once the mobile device is validated, the DKUS running on the controller 910 may be configured to unlock the vehicle, activate the ignition system, or perform other security-related procedures.

[0078] The exemplary passive digital key system shown in Figure 9 utilizes BLE and Wi-Fi radio access technologies, but Method 1300 is not limited in that sense, as other short-range, medium-range, and long-range, active and / or passive radio access technologies may also be used. For example, the first and second transceivers may be based on other radio access technologies configured for D2D, P2P, 5G NR sidelink, UWB radio, RFID systems, Wi-Fi, BLE, and RF ranging applications.

[0079] Referring further to Figures 1 to 12 and then to Figure 14, Method 1400 for validating a mobile device using a second exemplary passive digital key system includes the steps shown. However, Method 1400 is an example and not limiting. Method 1400 may be modified, for example, by adding, removing, rearranging, combining, performing simultaneously, and / or dividing a single step into multiple steps.

[0080] In step 1402, the method includes the step of determining an angle relative to a reference point for a mobile device using at least a first wireless transceiver. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be a means for determining the angle. To reduce power consumption, the first wireless transceiver may be a short-range wireless access technology configured for low transmit power. In one embodiment, the wireless transceiver may include one or more BLE transmitters, such as the BLE transmitters BLE1...BLE14 in Figure 10, configured to acquire signals from the mobile device. For example, the mobile device 1002 may be a user device such as a smartphone, smartwatch, fitness band, key fob, or other device, configured to transmit and receive signals using two or more wireless access technologies. In one example, the angle relative to the mobile device 1002 may be based at least in part on RSSI measurement results acquired by one or more of the BLE transceivers BLE1...BLE14. For example, the RSSI measurement result 1014 obtained by the 10th BLE transceiver BLE10 may be used to determine that the mobile device 1002 is close to the 4th angle segment 1006d. In one example, the estimation algorithm may be a weighted average, with greater weight given to BLE transceivers with stronger RSSI measurement results. For example, referring to Figure 10, BLE10 may have the greatest weight because its RSSI measurement result 1014 is the strongest, BLE9 may have the second greatest weight because its RSSI measurement result 1016 is the second strongest, and the other BLE transceivers may then be weighted based on a relative comparison of their respective RSSI measurement results. The weighted average of the RSSI measurement results may be used to determine which angle segment the mobile device is located in. In one embodiment, the Wi-Fi transceiver may be configured to determine the AoA of the signal transmitted by the mobile device, and the AoA may be used to determine the angle relative to a reference point. In one example, the reference point may be the location of the Wi-Fi antenna module.

[0081] In step 1404, the method includes the step of obtaining a measured distance to a mobile device using at least a second wireless transceiver. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be a means for obtaining the measured distance. The second wireless transceiver may be a medium-range wireless access technology and may have greater transmit power than the first wireless transceiver. In one embodiment, the wireless transceiver may include one or more Wi-Fi transceivers, such as the Wi-Fi transceiver 1008 in Figure 10, which are configured to obtain distance information related to the mobile device 1002. In one example, the second wireless transceiver may be configured to utilize a wider bandwidth than the first wireless transceiver. For example, the second wireless transceiver may be a UWB radio that is communically coupled to the controller 1010. The second distance may be based on Wi-Fi ranging techniques such as RSSI and RTT. For example, the Wi-Fi distance estimation may be based on a signal 1018 received from the mobile device 1002. Other wireless access technologies and ranging techniques may also be used.

[0082] In step 1406, the method includes the step of obtaining a calibration distance based at least in part on an angle relative to the mobile device. One of the controllers 910, 1010, 1116, including a processor 410, may be a means for obtaining the calibration distance. In one embodiment, controller 1010 may include a peripheral calibration database, such as a data structure 1200. The data structure may be queried based on the angle determined in step 1402. For example, a signal obtained by a BLE transceiver may be used to select one of the angle divisions 1006a to 1006p based on the location of the mobile device 1002. The Wi-Fi transceiver 1008 may be associated with several angle-based calibration values ​​(e.g., ang1cal, ang2cal, etc.), and the calibration value for one or more of the angle divisions 1006a to 1006p may be used as the calibration distance. In one example, more than one angle division may be selected, and interpolation techniques may be used for the corresponding calibration values ​​to obtain the calibration distance. The calibration distance may correspond to a distance value 1012 that represents the distance from the Wi-Fi transceiver 1008 to the periphery of the vehicle 1004 within an angular division (for example, the fourth angular division 1006d). In one embodiment, the calibration value may be based on a distance measured from a reference point, such as a reference point 1020 at the center of the vehicle. Other reference points may also be used.

[0083] In step 1408, the method includes the step of calculating a validation distance based at least in part on the difference between the measured distance and the calibration distance. One of the controllers 910, 1010, and 1116, including the processor 410, may be a means for calculating the validation distance. The measured distance obtained in step 1404 may be based on the distance between the position of the antenna of the second radio transceiver and the mobile device 1002. The position of the antenna may be physically offset from the periphery of the vehicle 1004. The calibration distance may be used as a bias value to compensate for the physical displacement of the antenna relative to various points on the periphery of the vehicle 1004. Other arithmetic and trigonometric functions may be used to calculate the validation distance. For example, the positions of the antenna and the mobile device relative to a reference point may be included in the calculation of the validation distance.

[0084] In step 1410, the method includes a step of validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold. One of the controllers 910, 1010, 1116, including a processor 410, may be a means for validating the mobile device. In one example, this comparison may include determining whether the validation distance is less than or equal to a predetermined threshold (e.g., 0.5m, 1m, 2m, etc.). In one embodiment, the threshold may be based on contextual information related to the mobile device, such as location (e.g., at home, in a mall, in a city), departure time (e.g., shorter departure time, higher threshold), density of nearby vehicles (e.g., a smaller threshold distance may be used in a crowded parking lot), and time of day (e.g., a smaller threshold distance at night). Other mobile device states, environmental state values, and vehicle state values ​​may be used to determine the context and / or to set the threshold. In one example, one or more lookup tables may be used to associate the threshold with one or more contextual parameters. Once the mobile device is validated, the DKUS running on the controller 1010 may be configured to unlock the vehicle, activate the ignition system, or perform other security-related procedures.

[0085] The exemplary passive digital key system illustrated in Figure 10 utilizes BLE and Wi-Fi radio access technologies, but Method 1400 is not limited in that sense, as other active and passive radio access technologies may also be used. For example, the first and second radio transceivers may be based on other radio access technologies configured for D2D, P2P, 5G NR sidelink, UWB radio, RFID systems, Wi-Fi, BLE, and RF ranging applications.

[0086] Referring further to Figures 1 to 12 and then to Figure 15, Method 1500 for validating a mobile device using a third exemplary passive digital key system includes the steps shown. However, Method 1500 is an example and not limiting. Method 1500 may be modified, for example, by adding, removing, rearranging, combining, performing simultaneously, and / or dividing a single step into multiple steps.

[0087] In step 1502, the method includes the step of determining a positioning result for a mobile device relative to a reference point. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be means for determining the positioning result. The positioning result may be distance, angle, or a combination of both. In some embodiments, the wireless transceiver may include one or more low-power transceivers and / or bandwidth-constrained transceivers, such as a BLE-based transceiver, which is located at a known location relative to the reference point. Determining the positioning result may include detecting the mobile device using the transceiver and determining the angle relative to the mobile device by using the angle of the transceiver's position relative to the reference point as the angle relative to the mobile device. In some embodiments, the transceiver may be configured to determine the angle of arrival (AoA) of the signal transmitted by the mobile device. The AoA may be used to determine the angle relative to the reference point. In some examples, the reference point may be the location of the transceiver. In some embodiments, determining the positioning result may include determining the distance to the mobile device. For example, one or more BLE-based transceivers may be configured to obtain RSSI measurement results from a mobile device to determine distance. Other radio ranging techniques, such as time-of-flight measurement results, may also be used.

[0088] In step 1504, the method includes the step of obtaining a measured distance to a mobile device using at least a first transceiver. One of the controllers 910, 1010, 1116, including a processor 410 and a wireless transceiver 440, may be a means for obtaining the measured distance. The first transceiver may be configured to obtain distance information related to the mobile device. The measured distance may be based on radio frequency ranging techniques such as RSSI and time-of-flight measurement results such as those used in RTT procedures. In some embodiments, additional radio transceivers may be used, and the measured distance may be based on ranging techniques such as multi-RTT, AoA, and TDOA. Other radio access techniques and ranging techniques may also be used.

[0089] In step 1506, the method includes the step of obtaining a calibration distance based at least in part on the positioning result of the mobile device. One of the controllers 910, 1010, 1116, including the processor 410, may be a means for obtaining the calibration distance. In one embodiment, a data structure may be queried based on an angle relative to the mobile device. The data structure may include distance and / or angle calibration values ​​associated with the first radio receiver. For example, when the positioning result obtained in step 1502 is a distance, the calibration distance may be based on an identification value (e.g., ble1cal, ble2cal, etc.) associated with the BLE transceiver reporting the positioning result. When the positioning result obtained in step 1502 is an angle, the calibration distance may be based on an angle (e.g., ang1cal, ang2cal, etc.). The calibration distance may be obtained based on one or more lookup tables including distance and / or angle and associated calibration distances. In some examples, an interpolation function may be used to obtain a calibration distance for the distance and / or angle values ​​between them (i.e., the angle values ​​between angle values ​​in a lookup table).

[0090] In step 1508, the method includes the step of calculating a validation distance based at least in part on the difference between the measured distance and the calibration distance. One of the controllers 910, 1010, and 1116, including a processor 410, may be a means for calculating the validation distance. In one embodiment, the processor 410 may be configured to subtract the calibration distance from the measured distance, with the remainder being the validation distance. Other arithmetic and trigonometric operations may also be used based on the angle, reference point, measured distance, calibration distance, and associated transceiver / antenna position.

[0091] In step 1510, the method includes a step of validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold. One of the controllers 910, 1010, and 1116, including a processor 410, may be a means for validating the mobile device. In one example, this comparison may include determining whether the validation distance is less than or equal to a predetermined threshold (e.g., 0.5m, 1m, 2m, etc.). In one embodiment, the threshold may be based on contextual information such as location (e.g., at home, in a mall, in a city), distance (e.g., shorter distance, higher threshold), density of nearby vehicles (e.g., a smaller threshold distance may be used in a crowded parking lot), and time of day (e.g., a smaller threshold distance at night). Other environmental and vehicle conditions may be used to set the threshold.

[0092] Other examples and implementations are within the scope of this disclosure and the accompanying claims. For example, due to the nature of software and computers, the functions described above may be implemented using software, hardware, firmware, hardwiring, or any combination thereof, executed by a processor. The features implementing the functions may also be physically located in various locations, including being distributed so that parts of the functions are implemented in various physical locations. For example, one or more functions or one or more parts thereof, discussed above as being performed in a location server, may be executed outside the location by an AP, etc.

[0093] As used herein, the singular forms “a,” “an,” and “the” also include the plural form unless the context otherwise explicitly indicates. For example, “a processor” may include one processor or more processors. As used herein, the terms “equip,” “equip,” “include,” and / or “include” specify the presence of the feature, integer, step, operation, element, and / or component being described, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.

[0094] Furthermore, in this specification, "or" used in enumerations of items modified by "at least one of" or "one or more of" indicates a disjunctive enumeration, such as the enumeration "at least one of A, B, or C" or "one or more of A, B, or C" meaning A, or B, or C, or AB, or AC, or BC, or ABC (i.e., A and B and C), or a combination of two or more features (e.g., AA, AAB, ABBC, etc.).

[0095] Significant modifications may be made according to specific requirements. For example, customized hardware may be used, and / or certain elements may be implemented in hardware, software executed by the processor (including portable software such as applets), or both. Furthermore, connectivity to other computing devices, such as network input / output devices, may be utilized.

[0096] The systems and devices discussed above are examples. Various configurations may omit, substitute, or add various procedures or components as appropriate. For example, features described for some configurations may be combined in various other configurations. Different aspects and elements of configurations may be combined in the same way. Furthermore, technology is evolving, and therefore many of the elements are examples and do not limit the scope of this disclosure or claims.

[0097] A wireless communication system is a communication system in which communication is transmitted wirelessly, that is, by electromagnetic waves and / or sound waves that propagate through the atmosphere rather than through wires or other physical connections. A wireless communication network is configured such that not all communication is transmitted wirelessly, but at least some communication is transmitted wirelessly. Furthermore, the term “wireless communication device” or similar terms does not require that the device’s function is exclusively or uniformly primarily for communication, or that the device is a mobile device, but that the device includes wireless communication capabilities (unidirectional or bidirectional), for example, including at least one radio for wireless communication (each radio being part of a transmitter, receiver, or transceiver).

[0098] Specific details are given in the description to provide a complete understanding of exemplary configurations (including implementation forms). However, configurations may be practiced without these specific details. For example, well-known circuits, processes, algorithms, structures, and techniques are shown without unnecessary details to avoid obscuring the configurations. This description provides exemplary configurations and does not limit the claims, applicability, or configurations. Rather, the foregoing description of configurations provides instructions for practicing the described techniques. Various modifications may be made to the function and configuration of the elements without departing from the scope of this disclosure.

[0099] As used herein, the terms “processor-readable medium,” “machine-readable medium,” and “computer-readable medium” refer to any medium involved in providing data that enables a machine to operate in a particular manner. Using a computing platform, various processor-readable media may be involved in providing instructions / code to a processor for execution and / or may be used to store and / or carry such instructions / code (e.g., signals). In many implementations, processor-readable media are physical and / or tangible storage media. Such media may take many forms, including, but are not limited to, non-volatile and volatile media. Non-volatile media include, for example, optical disks and / or magnetic disks. Volatile media include, but are not limited to, dynamic memory.

[0100] The statement that a value exceeds a first threshold (i.e., is greater than or above it) is equivalent to the statement that the value satisfies or exceeds a second threshold that is slightly greater than the first threshold, for example, the second threshold being a single value higher than the first threshold in the resolution of the computing system. The statement that a value is less than a first threshold (i.e., is within or below it) is equivalent to the statement that the value is less than or equal to a second threshold that is slightly smaller than the first threshold, for example, the second threshold being a single value lower than the first threshold in the resolution of the computing system.

[0101] Examples of implementation forms are described in the following numbered clauses.

[0102] 1. A method for validating a mobile device, The steps include determining the positioning result of the mobile device relative to a reference point, A step of obtaining the measurement distance using at least a first transceiver, A step of obtaining a calibration distance based at least partially on the positioning results of a mobile device, A step of calculating a validation distance based at least partially on the difference between the measured distance and the calibration distance, A method comprising the step of validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0103] 2. The method of Clause 1, wherein the reference point and the first transceiver are located inside the vehicle.

[0104] 3. The method of Clause 1, wherein the reference point and the first transceiver are located within a fixed structure.

[0105] 4. The method of Clause 1, wherein the positioning result indicates an angle relative to the mobile device.

[0106] 5. The method of Clause 4, wherein determining the angle relative to the mobile device includes determining the angle of arrival of the signal transmitted by the mobile device.

[0107] 6. The method of Clause 5, wherein a signal transmitted by a mobile device is received by a first transceiver.

[0108] 7. The method of Clause 4, wherein determining the angle relative to the mobile device includes determining that the mobile device is close to the second transceiver, and the second transceiver is positioned at a known position relative to a reference point.

[0109] 8. The method of Clause 7, further comprising the step of determining the received signal strength of one or more signals transmitted by a mobile device and received by a second transceiver.

[0110] 9. The method of Clause 8, wherein the second transceiver is configured to utilize a smaller bandwidth than the first transceiver.

[0111] 10. The method of Clause 4, wherein the step of obtaining the calibration distance includes a step of querying a data structure based on the angle.

[0112] 11. The method of Clause 1, wherein the step of obtaining a measured distance to a mobile device includes the step of determining the time of flight of a signal transmitted between the mobile device and a first transceiver.

[0113] 12. The method of Clause 1, wherein the positioning result indicates the distance to a mobile device measured by at least one second transceiver.

[0114] 13. The method of Clause 12, wherein the distance to the mobile device is based on at least one of the results of a received signal strength measurement or a time-of-flight measurement.

[0115] 14. The method of Clause 12, wherein the step of obtaining a calibration distance includes the step of querying a data structure based on an identification value associated with at least one second transceiver.

[0116] 15. Steps to determine the situation related to mobile devices, The method of Clause 1, further comprising the step of determining a threshold based on the circumstances.

[0117] 16. A method for validating a mobile device, The steps include determining the angle of a mobile device relative to a reference point using at least a first wireless transceiver, The steps include obtaining the measured distance to the mobile device using at least a second wireless transceiver, A step of obtaining a calibration distance based at least partially on the angle relative to the mobile device, A step of calculating a validation distance based at least partially on the difference between the measured distance and the calibration distance, A method comprising the step of validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0118] 17. The method of Clause 16, wherein the step of determining the angle relative to the mobile device includes the step of determining that the mobile device is located within a predetermined angle range.

[0119] 18. The method of Clause 16, wherein the second radio transceiver is configured to utilize a wider bandwidth than the first radio transceiver.

[0120] 19. The method of Clause 16, wherein the step of obtaining the calibration distance includes the step of obtaining the calibration distance from a data structure, at least in part on the angle relative to the mobile device.

[0121] 20. The method of Clause 16, wherein a first radio transceiver and a second radio transceiver are installed in the vehicle, and the calibration distance is based on the distance between the second radio transceiver and the periphery of the vehicle.

[0122] 21. The method of Clause 16, wherein a first radio transceiver and a second radio transceiver are installed in the vehicle, and the calibration distance is based on the distance between a reference point and the periphery of the vehicle.

[0123] 22. The method of Clause 16, wherein a first radio transceiver and a second radio transceiver are installed in the vehicle, and the threshold is based on the vehicle's condition.

[0124] 23. The method of Clause 16, wherein the first radio transceiver is located near the entrance of a fixed structure, and the second radio transceiver is a radio access point inside the fixed structure.

[0125] 24. The method of Clause 16, wherein the step of obtaining the measurement distance includes the step of determining the round-trip time between the second wireless transceiver and the mobile device.

[0126] 25. Memory and, At least one transceiver, The system comprises memory and at least one processor communicatively coupled to at least one transceiver, wherein the at least one processor is Determine the relative positioning result of the mobile device with respect to a reference point. The measurement distance is obtained using at least the first transceiver, Based at least partially on the positioning results of the mobile device, the calibration distance is obtained, The validation distance is calculated based at least partially on the difference between the measured distance and the calibration distance. An apparatus configured to validate a mobile device based at least in part on a comparison of a validation distance and a threshold.

[0127] 26. The apparatus of Clause 25, wherein the reference point and the first transceiver are located inside the vehicle.

[0128] 27. The apparatus of Clause 25, wherein the reference point and the first transceiver are located within a fixed structure.

[0129] 28. The device of Clause 25, in which the positioning result indicates an angle relative to the mobile device.

[0130] 29. The apparatus of clause 28, wherein at least one processor is further configured to determine the angle of arrival of a signal transmitted by a mobile device.

[0131] 30. The apparatus of Clause 29, wherein a signal transmitted by a mobile device is received by a first transceiver.

[0132] 31. The apparatus of Clause 29, further comprising a second transceiver positioned at a known location relative to a reference point, wherein at least one processor is further configured to determine that a mobile device is near the second transceiver.

[0133] 32. The apparatus of clause 31, wherein at least one processor is further configured to determine the received signal intensity of one or more signals transmitted by a mobile device and received by a second transceiver.

[0134] 33. The apparatus of clause 32, wherein the second transceiver is configured to utilize a smaller bandwidth than the first transceiver.

[0135] 34. The apparatus of clause 28, wherein at least one processor is further configured to query data structures stored in memory based on angle.

[0136] 35. The apparatus of clause 25, further comprising at least one processor configured to determine the time of flight of a signal transmitted between a mobile device and a first transceiver.

[0137] 36. The apparatus of Clause 25, wherein the positioning result indicates the distance to a mobile device measured by at least one second transceiver.

[0138] 37. The apparatus of Clause 36, wherein at least one processor is further configured to calculate the distance to a mobile device based on at least one of the results of a received signal strength indication measurement or a time-of-flight measurement.

[0139] 38. The apparatus of clause 36, wherein at least one processor is further configured to query a data structure stored in memory based on an identification value associated with at least one second transceiver.

[0140] 39. At least one processor further, Determine the situation related to mobile devices, The apparatus of clause 25, configured to determine a threshold based on the situation.

[0141] 40. Memory and, At least one transceiver, The system comprises memory and at least one processor communicatively coupled to at least one transceiver, wherein the at least one processor is The angle of the mobile device relative to the reference point is determined using at least a first wireless transceiver, The distance to the mobile device is measured using at least a second wireless transceiver. Based at least partially on the angle relative to the mobile device, obtain the calibration distance. The validation distance is calculated based at least partially on the difference between the measured distance and the calibration distance. An apparatus configured to validate a mobile device based at least in part on a comparison of a validation distance and a threshold.

[0142] 41. The apparatus of Clause 40, wherein at least one processor is further configured to determine that the mobile device is positioned within a predetermined angular division.

[0143] 42. The apparatus of Clause 40, wherein the second radio transceiver is configured to utilize a wider bandwidth than the first radio transceiver.

[0144] 43. The apparatus of Clause 40, wherein at least one processor is further configured to obtain a calibration distance from a data structure stored in memory, at least partially based on an angle to a mobile device.

[0145] 44. The apparatus of Clause 40, wherein a first radio transceiver and a second radio transceiver are installed in the vehicle, and the calibration distance is based on the distance between the second radio transceiver and the periphery of the vehicle.

[0146] 45. The apparatus of Clause 40, wherein a first radio transceiver and a second radio transceiver are installed in the vehicle, and the calibration distance is based on the distance between a reference point and the periphery of the vehicle.

[0147] 46. ​​The apparatus of Clause 40, wherein a first wireless transceiver and a second wireless transceiver are installed in the vehicle, and the threshold is based on the vehicle's condition.

[0148] 47. The apparatus of Clause 40, wherein the first radio transceiver is located near the entrance of a fixed structure, and the second radio transceiver is a radio access point inside the fixed structure.

[0149] 48. The apparatus of clause 40, wherein at least one processor is further configured to determine the round-trip time between a second wireless transceiver and a mobile device.

[0150] 49. A device for validating mobile devices, A means for determining the positioning result of a mobile device relative to a reference point, A means for acquiring the measured distance using at least a first transceiver, A means for obtaining a calibration distance based at least partially on the positioning results of a mobile device, A means for calculating a validation distance based at least partially on the difference between the measured distance and the calibration distance, An apparatus comprising means for validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0151] 50. A device for validating mobile devices, Means for determining the angle of a mobile device relative to a reference point using at least a first wireless transceiver, A means for obtaining the measured distance to a mobile device using at least a second wireless transceiver, Means for obtaining a calibration distance based at least partially on the angle relative to the mobile device, A means for calculating a validation distance based at least partially on the difference between the measured distance and the calibration distance, An apparatus comprising means for validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0152] 51. A non-temporary processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to validate a mobile device, A code for determining the positioning result of a mobile device relative to a reference point, Code for obtaining the measured distance using at least the first transceiver, A code for obtaining the calibration distance, at least partially based on the positioning results of a mobile device, A code for calculating the validation distance based at least partially on the difference between the measured distance and the calibration distance, A non-temporary processor-readable storage medium comprising a code for validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0153] 52. A non-temporary processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to validate a mobile device, A code for determining the angle of a mobile device relative to a reference point using at least a first wireless transceiver, Code for obtaining the measured distance to a mobile device using at least a second wireless transceiver, Code to obtain the calibration distance based at least partially on the angle relative to the mobile device, A code for calculating the validation distance based at least partially on the difference between the measured distance and the calibration distance, A non-temporary processor-readable storage medium comprising a code for validating a mobile device, at least in part, based on a comparison of a validation distance and a threshold.

[0154] 53. A method for validating a mobile device, A step of measuring a first distance between a mobile device and a first point using a first transceiver, A step of measuring a second distance between a mobile device and a second point using a second transceiver, A step of obtaining a validity distance based at least partially on the first point and the second point, A method comprising the step of validating a mobile device based at least in part on a comparison of a first distance, a second distance, and a validation distance.

[0155] 54. The method of Clause 53, wherein a first point is an antenna operably coupled to a first transceiver, and a second point is an antenna operably coupled to a second transceiver.

[0156] 55. The method of Clause 53, wherein the second transceiver has a longer communication range than the first transceiver.

[0157] 56. The method of Clause 53, wherein the second transceiver is configured to utilize a wider bandwidth than the first transceiver.

[0158] 57. The method of Clause 53, wherein the step of obtaining a validation distance includes the step of obtaining a validation distance from a data structure, at least in part on a first point and a second point.

[0159] 58. The method of Clause 53, wherein the validation distance is based on the distance between the second point and the periphery of the vehicle.

[0160] 59. The method of Clause 53, wherein the validation distance is based on the distance between the first point and the second point.

[0161] 60. The method of Clause 53, wherein the first point is near the entrance of the building and the second point is the location of the wireless access point inside the building.

[0162] 61. A step of measuring the angle of arrival of a signal transmitted by a mobile device using a second transceiver, The method of Clause 53 further comprises the step of obtaining a validating distance based at least partially on the angle of arrival.

[0163] 62. The method of Clause 53, wherein the step of measuring a second distance includes the step of determining the round-trip time between the second transceiver and the mobile device.

[0164] 63. Memory and, At least two transceivers, It comprises memory and at least one processor communicatively coupled to at least two transceivers, wherein the at least one processor is A first transceiver is used to measure a first distance between the mobile device and a first point. A second transceiver is used to measure the second distance between the mobile device and the second point. Based at least partially on the first and second points, obtain a validity distance. An apparatus configured to validate a mobile device based at least in part on a comparison of a first distance, a second distance, and a validation distance.

[0165] 64. The apparatus of Clause 63, wherein a first point is an antenna operably coupled to a first transceiver, and a second point is an antenna operably coupled to a second transceiver.

[0166] 65. The apparatus of Clause 63, wherein the second transceiver has a longer communication range than the first transceiver.

[0167] 66. The apparatus of Clause 63, wherein the second transceiver is configured to utilize a wider bandwidth than the first transceiver.

[0168] 67. The apparatus of Clause 63, wherein at least one processor is further configured to obtain a validation distance from a data structure based at least partially on a first point and a second point.

[0169] 68. The device of Clause 63, in which the validation distance is based on the distance between a second point and the periphery of the vehicle.

[0170] 69. Apparatus of Clause 63, wherein the validation distance is based on the distance between a first point and a second point.

[0171] 70. The apparatus of Clause 63, wherein the first point is near the entrance of the building and the second point is the location of a wireless access point inside the building.

[0172] 71. At least one processor further, Using a second transceiver, measure the angle of arrival of the signal transmitted by the mobile device. The apparatus of Clause 63, configured to obtain a validation distance based at least partially on the angle of arrival.

[0173] 72. The apparatus of clause 63, wherein at least one processor is further configured to determine the round-trip time between a second transceiver and a mobile device.

[0174] 73. A device for validating mobile devices, A means for measuring a first distance between a mobile device and a first point using a first transceiver, A means for measuring a second distance between a mobile device and a second point using a second transceiver, Means for obtaining a validity distance based at least partially on the first point and the second point, An apparatus comprising means for validating a mobile device based at least in part on a comparison of a first distance, a second distance, and a validation distance.

[0175] 74. A non-temporary processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to validate a mobile device, A code for measuring a first distance between a mobile device and a first point using a first transceiver, A code for measuring a second distance between a mobile device and a second point using a second transceiver, A code for obtaining a validity distance based at least partially on the first and second points, A non-temporary processor-readable storage medium comprising a code for validating a mobile device, at least in part, based on a comparison of a first distance, a second distance, and a validation distance. [Explanation of symbols]

[0176] 105 User Equipment 110 gNB 114 ng-eNB 115 AMF 117 SMF 120 LMF 125 GMLC 130 External Clients 135 NG-RAN 140 5G cores 185 Constellations 190 Satellite Vehicles 191 Satellite Vehicle 192 Satellite Vehicle 193 Satellite Vehicle 200 user devices 210 processors 211 memory 212 Software 213 Sensors 214 Transceiver Interface 215 Transceiver 216 User Interface 217 SPS Receiver 218 Cameras 219 Location Devices 220 bus 230 General-Purpose / Application Processors 232 Modem Processors 233 Video Processors 234 Sensor Processors 240 Wire Restaurant Seaba 242 Transmitter 244 receiver 246 Antenna 248 Wireless Signals 250 wired transceivers 252 Transmitter 254 Receiver 260 SPS signal 262 Antenna 270 IMU 271 Magnetometer 272 Environmental Sensors 273 Accelerometer 274 Gyroscope 300 Send / Receive Points 310 Processor 311 memory 312 Software 315 Transceiver 317 SPS Receiver 320 bus 340 Wire Restaurant Seaba 342 Transmitter 344 Receiver 346 Antenna 348 Wireless Signals 350 Wired Transceiver 352 Transmitter 354 Receiver 360 SPS signal 362 SPS antenna 400 servers 410 Processor 411 memory 412 Software 415 Transceiver 420 bus 440 Wire Restaurant Seaba 442 Transmitter 444 receiver 446 Antenna 448 Wireless Signals 450 Wired Transceiver 452 Transmitter 454 Receiver 502 Response Station 504 Starting station 552 Location Server 554 UE 556 AP 558 RTT 602 I2R NDP message 604 NDPA message 606 R2I NDP message 702 Mobile Devices 704 vehicles 706 Wireless Devices 707 Authentication Request 708 D2D Link 709 Certificate 710 Wireless Devices 802 Mobile devices 806 Wi-Fi Transceiver 902 Mobile Devices 905 RSSI measurement results 906 Wi-Fi Transceiver 908 Distance Estimation 910 Controller 912 Bias Value 914 Wi-Fi distance estimation 1006 Angle classification 1008 Wi-Fi Transceiver 1010 Controller 1012 Distance Value 1014 Detection signal 1016 RSSI measurement results 1020 Reference point 1102 Mobile devices 1103 Reference direction 1104 1st AP 1106 Short-range transceiver 1108 Wall 1110 Door 1112 2nd AP 1114 Ranging signal 1116 Controller 1202 Peripheral Calibration Database 1204 Site Table 1206 Wi-Fi Station Table 1208 Distance Calibration Table 1210 Angle Calibration Table

Claims

1. A method for validating a mobile device, which is performed by at least one processor, The steps include obtaining a positioning result regarding the relative position of the mobile device to a reference point based on a signal transmitted by the mobile device, The steps include: obtaining the measurement distance from the first transceiver to the mobile device using at least the first transceiver; A step of obtaining a calibration distance for calibrating the measurement distance, based at least on the positioning result of the mobile device, A step of calculating a validity distance based at least on the difference between the measurement distance and the calibration distance, The steps include validating the mobile device based at least on a comparison of the validation distance and the threshold, and A method that includes [a certain feature].

2. The method according to claim 1, wherein the reference point and the first transceiver are located inside a vehicle or a fixed structure.

3. The method according to claim 1, wherein the positioning result indicates an angle relative to the mobile device.

4. The method of claim 3, wherein determining the angle with respect to the mobile device includes determining the angle of arrival of the signal transmitted by the mobile device.

5. The method according to claim 4, wherein the signal transmitted by the mobile device is received by the first transceiver.

6. The method according to claim 3, wherein determining the angle with respect to the mobile device includes determining that the mobile device is close to a second transceiver, and the second transceiver is positioned at a known position with respect to the reference point.

7. The method according to claim 6, further comprising the step of determining the received signal intensity of one or more signals transmitted by the mobile device and received by the second transceiver.

8. The method according to claim 7, wherein the second transceiver is configured to utilize a smaller bandwidth than the first transceiver.

9. The method according to claim 3, wherein the step of obtaining the calibration distance includes the step of querying a data structure based on the angle.

10. The method according to claim 1, wherein the step of obtaining the measurement distance from the first transceiver to the mobile device includes the step of determining the time of flight of a signal transmitted between the mobile device and the first transceiver.

11. The method according to claim 1, wherein the positioning result indicates the distance to the mobile device measured by at least one second transceiver.

12. The method according to claim 11, wherein the distance to the mobile device is based on at least one of the received signal strength indicator measurement result or the time of flight measurement result.

13. The method according to claim 11, wherein the step of obtaining the calibration distance includes the step of querying a data structure based on an identification value associated with the at least one second transceiver.

14. The steps include determining the environmental conditions of the mobile device, The steps of determining the threshold based on the aforementioned environmental conditions and The method according to claim 1, further comprising:

15. A method for validating a mobile device, which is performed by at least one processor, The steps include determining the angle of the mobile device relative to a reference point using at least a first wireless transceiver, The steps include: obtaining the measurement distance from the second wireless transceiver to the mobile device using at least a second wireless transceiver; A step of obtaining a calibration distance for calibrating the measurement distance, based at least on the angle with respect to the mobile device, A step of calculating a validity distance based at least on the difference between the measurement distance and the calibration distance, The steps include validating the mobile device based at least on a comparison of the validation distance and the threshold, and A method that includes [a certain feature].

16. The method according to claim 15, wherein the step of determining the angle relative to the mobile device includes the step of determining that the mobile device is located within a predetermined angle range.

17. The method according to claim 15, wherein the second wireless transceiver is configured to utilize a wider bandwidth than the first wireless transceiver.

18. The method of claim 15, wherein the step of obtaining the calibration distance includes the step of obtaining the calibration distance from a data structure based at least on the angle with respect to the mobile device.

19. The method according to claim 15, wherein the first wireless transceiver and the second wireless transceiver are arranged inside a vehicle, and the calibration distance is based on the distance between the second wireless transceiver or the reference point and the periphery of the vehicle.

20. The method according to claim 15, wherein the first wireless transceiver and the second wireless transceiver are installed inside a vehicle, and the threshold is based on the conditions of the vehicle.

21. The method according to claim 15, wherein the first wireless transceiver is located near the entrance of a fixed structure, and the second wireless transceiver is a wireless access point within the fixed structure.

22. The method of claim 15, wherein the step of obtaining the measurement distance includes the step of determining the round-trip time between the second wireless transceiver and the mobile device.

23. Memory and At least one transceiver, A processor that is communicatively coupled to the memory and the at least one transceiver, Based on the signals transmitted by the mobile device, a positioning result is obtained regarding the relative position of the mobile device to a reference point. The measurement distance from the first transceiver to the mobile device is obtained using at least the first transceiver, Based at least on the positioning result of the mobile device, a calibration distance is obtained for calibrating the measurement distance. Based at least the difference between the measurement distance and the calibration distance, the validation distance is calculated. The mobile device is validated at least based on a comparison of the validation distance and the threshold. A configuration with at least one processor and A device equipped with the following features.

24. The apparatus according to claim 23, wherein the at least one processor is further configured to carry out the method described in any one of claims 2 to 14.

25. Memory and At least one transceiver, A processor that is communicatively coupled to the memory and the at least one transceiver, The angle of the mobile device relative to the reference point is determined using at least a first wireless transceiver, The distance from the second wireless transceiver to the mobile device is obtained using at least a second wireless transceiver. Based at least on the angle relative to the mobile device, a calibration distance is obtained for calibrating the measurement distance. Based at least the difference between the measurement distance and the calibration distance, the validation distance is calculated. The mobile device is validated at least based on a comparison of the validation distance and the threshold. A configuration with at least one processor and A device equipped with the following features.

26. The apparatus according to claim 25, wherein the at least one processor is further configured to carry out the method described in any one of claims 16 to 22.

27. A non-temporary processor-readable storage medium comprising processor-readable instructions configured to cause one or more processors to carry out the method described in any one of claims 1 to 22.

Images