Two-stage sensing signal configuration for radio frequency (RF) sensing

Abstract

Techniques for radio frequency (RF) sensing are discussed. The techniques may include: transmitting, from a network entity, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receiving, at the network entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

Description

Qualcomm Ref. No. 2402271 WOTWO-STAGE SENSING SIGNAL CONFIGURATION FOR RADIO FREQUENCY(RF) SENSINGCROSS-REFERENCE TO RELATED APPLICATION

[0001] This application claims the benefit of Greek Patent Application No. 20240100625, filed September 11, 2024, entitled “TWO-STAGE SENSING SIGNAL CONFIGURATION FOR RADIO FREQUENCY (RF) SENSING,” which is assigned to the assignee hereof, and the entire contents of which arc hereby incorporated herein by reference for all purposes.TECHNICAL FIELD

[0002] Aspects of the disclosure relate generally to location determination systems, and more particularly to determining the location of a target with at least one user equipment (UE) utilizing radio frequency (RF) sensing.BACKGROUND

[0003] Radio frequency (RF) sensing is a major use case for the next generation of wireless systems such as, for example, 5G advanced and / or 6G wireless systems. In general, RF sensing approaches includes having one or more transmitting entities transmitting signals towards targets that need to be detected and / or tracked. Then the reflected transmitted signals that are scattered by the one or more targets are received and analyzed by one or more user equipment (UEs) in an environment of the one or more targets. In this example, by utilizing a plurality of user equipment (UEs), RF sensing allows for increased sensing coverage, balanced RF sensing loading, and maximizing detection probabilities of targets in an environment.

[0004] Unfortunately, as targets and / or UEs move about within this environment, it becomes a challenging problem to detect and / or track these targets because receiving a reflected signal from a target ultimately depends on many factors including the transmitted sensing signal beamforming direction, the location and speed of the target, the radar cross section (RCS) of the target, the location / orientation of the receiving UE acting as a sensing node, and the UE’s receive beamforms. All these factors make it difficult to know beforehand which UEs will be able to receive reflections from a certain target.-1-4903 / A106WOQualcomm Ref. No. 2402271 WOSUMMARY

[0005] An example user equipment (UE) for radio frequency (RF) sensing includes: at least one memoiy; a main radio having at least one transceiver; a low-power wake up radio (LP- WUR); at least one processor communicatively coupled to the at least one memory, the main radio, and the LP-WUR, wherein the at least one processor is configured to: receive, with the LP-WUR, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive and process, with the main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measure, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmit sensing information of the target to a network entity, wherein the sensing information includes the positional information.

[0006] An example method for RF sensing with a UE includes: receiving, with a low- power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and transmitting the sensing information of the target to a network entity.

[0007] An example RF sensing method includes: transmitting, from a network entity, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receiving, at the network-2-4903 / A106WOQualcomm Ref. No. 2402271 WO entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0008] An example network entity for RF includes: at least one memory; at least one transceiver; at least one processor communicatively coupled to the at least one memory, the at least one transceiver, wherein the at least one processor is configured to: transmit, with the at least one transceiver, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmit, with the at least one transceiver, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receive, at the network entity from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0009] Another example network entity for RF sensing includes: means for transmitting a probe signal at a target at a first time, wherein the probe signal has a first transmit power and a first time duration; means for transmitting a sensing signal at the target beginning at a second time, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and means for receiving from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0010] Another example UE for RF sensing includes: means for receiving, with a low- power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; means for receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; means for measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and means for transmitting the sensing information of the target to a network entity.

[0011] An example non-transitory, processor-readable storage medium includes processor- readable instructions to cause at least one processor of a network entity, for RF sensing, to: transmit a probe signal at a target at a first time, wherein the probe signal has a first transmit-3-4903 / A106WOQualcomm Ref. No. 2402271 WO power and a first time duration; transmit a sensing signal at the target beginning at a second time, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receive from at least one UE, sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0012] Another example non-transitory, processor-readable storage medium includes processor-readable instructions to cause at least one processor of a UE, for RF sensing, to: receive, with a low-power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive and process, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measure, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and transmit the sensing information of the target to a network entity.

[0013] Techniques are discussed for radio frequency (RF) sensing utilizing a two-stage sensing signal configuration. The techniques include a method for RF sensing that may comprise: transmitting, from a network entity, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receiving, at the network entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0014] Utilizing these techniques, a network entity is discussed that comprises: at least one memory and at least one processor communicatively coupled to the at least one memory, and a TE, wherein the at least one processor is configured to: transmit, with the at least one transceiver, a probe signal at a target at a first time with the TE, wherein the probe signal has a first transmit power and a first time duration; transmit, with the at least one transceiver,, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and-4-4903 / A106WOQualcomm Ref. No. 2402271 WO the second time is after an end time of the first time duration; and receive, at the network entity from at least one UE, sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0015] Further a UE for RF sensing is discussed that may comprise at least one memory; a main radio having at least one transceiver; a low-power wake up radio (LP-WUR); at least one processor communicatively coupled to the at least one memory, the main radio, and the LP-WUR, wherein the at least one processor is configured to: receive, with the LP-WUR, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if the first transmit power is greater than a threshold value, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power, and the second time is after an end time of the first time duration; measure, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmit sensing information of the target to a network entity, wherein the sensing information includes the positional information.

[0016] Other devices, apparatuses, systems, methods, features, and advantages of the invention will be or will become apparent to one with skill in the art upon examination of the following figures and detailed description. It is intended that all such additional devices, apparatuses, systems, methods, features, and advantages be included within this description, be within the scope of the invention, and be protected by the accompanying claims.BRIEF DESCRIPTION OF THE DRAWINGS

[0017] FIG. 1 is a simplified diagram of an example wireless communications system.

[0018] FIG. 2 is a system block diagram of components of an example user equipment (UE) shown in FIG. 1.

[0019] FIG. 3 is a system block diagram of components of an example transmission / reception point shown in FIG. 1.

[0020] FIG. 4 is a system block diagram of components of an example server shown in FIG. 1.

[0021] FIG. 5 is a functional system block diagram of an example of an implementation of a system for utilizing a two-stage sensing signal configuration for detecting a location of a-5-4903 / A106WOQualcomm Ref. No. 2402271 WO target with a network entity and at least one user equipment (UE) having a low-power wakeup radio (LP-WUR) and a main radio.

[0022] FIG. 6 is a functional system diagram of an example of an implementation of the system described in relation to FIG. 5 for traffic applications along a road.

[0023] FIG. 7 is a system block diagram of an example of an implementation of a UE shown in FIG. 5.

[0024] FIG. 8 is a diagram of an example of an implementation of a two-stage sensing scheme along time.

[0025] FIG. 9 is a diagram of an example of another implementation of a two-stage sensing scheme along time.

[0026] FIG. 10 is a flowchart of an example of an implementation of a method for detecting the location of a target with a network entity shown in FIGS. 4 and 5.

[0027] FIG. 11 is a flowchart of an example of an implementation of a method for detecting a location of a target with a UE shown in FIGS. 5 and 7.DETAILED DESCRIPTION

[0028] Techniques are discussed for detecting the location of a target with one or more user equipment (UE) utilizing a two-stage sensing signal configuration. In general, techniques are discussed for performing sensing processing at a UE, e.g., to partially solve a problem where a Transmission / Reception Point (TRP) cannot determine which UE, in a group of UEs, might receive reflections from a target. These techniques may include a two-stage sensing signal (e.g., a probing signal and main sensing signal) approach where a sensing probing signal is processed by the low-power wakeup radio (LP-WUR) that triggers a main radio of the UE to do processing of a main sensing signal over a longer range of time (with significantly more processing). In other words, the LP-WUR may be used for RF sensing purposes and to decide whether to use the main radio in performing the sensing measurements or not. In this example, the decision to perform sensing with the main radio is done by the UE rather than the network.

[0029] In general, techniques are discussed for radio frequency (RF) sensing to detect the location of a target with one or more user equipment (UE) utilizing a two-stage sensing signal configuration where the first stage may be a probe signal and the second stage may include a sensing signal (i.e., a main sensing signal). The techniques include a method for detecting a location of a target with a network entity. The method may comprise: transmitting, from a-6-4903 / A106WOQualcomm Ref. No. 2402271 WO network entity, a probe signal at the target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receiving, at the network entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0030] Utilizing these techniques, a network entity is discussed that comprises: at least one memory and at least one processor communicatively coupled to the at least one memory, and a TE, wherein the at least one processor is configured to: transmit, with the at least one transceiver, a probe signal at the target at a first time with the TE, wherein the probe signal has a first transmit power and a first time duration; transmit, with the at least one transceiver, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receive, at the network entity from at least one UE, sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0031] Also discussed are techniques that include a method for detecting the location of the target with a UE. The method may comprise: receiving, with a low-power wakeup radio (LP- WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by the target to produce the reflected portion of the probe signal; receiving, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if the first transmit power is greater than a threshold value, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power, and the second time is after an end time of the first time duration; measuring, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmitting sensing information of the target to a network entity, wherein the sensing information includes the positional information.

[0032] Further a UE for RF sensing is discussed that may comprise at least one memory; a main radio having at least one transceiver; a low-power wake up radio (LP-WUR); at least one processor communicatively coupled to the at least one memory, the main radio, and the-7-4903 / A106WOQualcomm Ref. No. 2402271 WOLP-WUR. The at least one processor may be configured to: receive, with the LP-WUR, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by the target to produce the reflected portion of the probe signal; receive, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if the first transmit power is greater than a threshold value, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power, and the second time is after an end time of the first time duration; measure, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmit sensing information of the target to a network entity, wherein the sensing information includes the positional information.

[0033] In these examples, the TE may be a UE, base station, and / or TRP and the network entity may be a server or other processing device. The network entity may be physically remote from the TE or, alternatively, be part of the TE. In these examples, the UE may also be referred to as a “sensing node.”

[0034] In these examples, they may be a plurality of UEs in an environment where the target(s) is located, where the plurality of UEs may participate in a given sensing session to determine the location of a target.

[0035] Utilizing these techniques allows for increased sensing coverage, balanced radio frequency (RF) sensing load, an maximation of detection probabilities of targets because UEs are typically at the same height and general location of desired targets to be detected.

[0036] The description herein may refer to sequences of actions to be performed, for example, by elements of a computing device. Various actions described herein can be performed by specific circuits (e.g., an application specific integrated circuit (ASIC)), by program instructions being executed by one or more processors, or by a combination of both. Sequences of actions described herein may be embodied within a non-transitory computer- readable medium having stored thereon a corresponding set of computer instructions that upon execution would cause an associated processor to perform the functionality described herein. Thus, the various examples described herein may be embodied in a number of different forms, all of which are within the scope of the disclosure, including claimed subject matter.

[0037] As used herein, the temrs "user equipment" (UE) and "base station" are not specific to or otherwise limited to any particular Radio Access Technology (RAT), unless otherwise-8-4903 / A106WOQualcomm Ref. No. 2402271 WO noted. In general, a UE may be any wireless communication device (e.g., a mobile phone, router, tablet computer, laptop computer, consumer asset tracking device, Internet of Things (loT) device, etc.) used to communicate over a wireless communications network. A UE may be mobile or may (e.g., at certain times) be stationary, and may communicate with a Radio Access Network (RAN). As used herein, the term "UE" may be referred to interchangeably as an "access terminal" or "AT," a "client device," a "wireless device," a "subscriber device," a "subscriber terminal," a "subscriber station," a "user terminal" or UT, a "mobile terminal," a "mobile station," a "mobile device," or variations thereof. Generally, UEs can communicate with a core network via a RAN, and through the core network the UEs can be connected with external networks such as the Internet and with other UEs. Of course, other mechanisms of connecting to the core network and / or the Internet are also possible for the UEs, such as over wired access networks, WiFi® networks (e.g., based on IEEE (Institute of Electrical and Electronics Engineers) 802.11, etc.) and so on. Two or more UEs may communicate directly in addition to or instead of passing information to each other through a network.

[0038] A base station may operate according to one of several RATs in communication with UEs depending on the network in which it is deployed. Examples of a base station include an Access Point (AP), a Network Node, a NodeB, an evolved NodeB (eNB), or a general Node B (gNodeB, gNB). In addition, in some systems a base station may provide purely edge node signaling functions while in other systems it may provide additional control and / or network management functions.

[0039] UEs may be embodied by any of a number of types of devices including but not limited to printed circuit (PC) cards, compact flash devices, external or internal modems, wireless or wireline phones, smartphones, tablets, consumer asset tracking devices, asset tags, and so on. A communication link through which UEs can send signals to a RAN is called an uplink channel (e.g., a reverse traffic channel, a reverse control channel, an access channel, etc.). A communication link through which the RAN can send signals to UEs is called a downlink or forward link channel (e.g., a paging channel, a control channel, a broadcast channel, a forward traffic channel, etc.). As used herein the term traffic channel (TCH) can refer to either an uplink / reverse or downlink / forward traffic channel.

[0040] As used herein, the term "cell" or "sector" may correspond to one of a plurality of cells of a base station, or to the base station itself, depending on the context. The term "cell" may refer to a logical communication entity used for communication with a base station (for-9-4903 / A106WOQualcomm Ref. No. 2402271 WO example, over a carrier), and may be associated with an identifier for distinguishing neighboring cells (for example, a physical cell identifier (PCID), a virtual cell identifier (VOID)) operating via the same or a different carrier. In some examples, a carrier may support multiple cells, and different cells may be configured according to different protocol types (for example, machine-type communication (MTC), narrowband Intemet-of-Things (NB-IoT), enhanced mobile broadband (eMBB), or others) that may provide access for different types of devices. In some examples, the term "cell" may refer to a portion of a geographic coverage area (for example, a sector) over which the logical entity operates.

[0041] Referring to FIG. 1, an example of a communication system 100 includes a UE 105, a UE 106, a Radio Access Network (RAN), here a Fifth Generation (5G) Next Generation (NG) RAN (NG-RAN) 135, a 5G Core Network (5GC) 140, and a server 150. The UE 105 and / or the UE 106 may be, e.g., an loT device, a location tracker device, a cellular telephone, a vehicle (e.g., a car, a truck, a bus, a boat, etc.), or another device. A 5G network may also be referred to as a New Radio (NR) network; NG-RAN 135 may be referred to as a 5G RAN or as an NR RAN; and 5GC 140 may be referred to as an NG Core network (NGC). Standardization of an NG-RAN and 5GC is ongoing in the 3rd Generation Partnership Project (3GPP). Accordingly, the NG-RAN 135 and the 5GC 140 may conform to current or future standards for 5G support from 3 GPP. The NG-RAN 135 may be another type of RAN, e.g., a 3G RAN, a 4G Long Term Evolution (LTE) RAN, etc. The UE 106 may be configured and coupled similarly to the UE 105 to send and / or receive signals to / from similar other entities in the system 100, but such signaling is not indicated in FIG. 1 for the sake of simplicity of the figure. Similarly, the discussion focuses on the UE 105 for the sake of simplicity. The communication system 100 may utilize information from a constellation 185 of satellite vehicles (SVs) 190, 191, 192, 193 for a Satellite Positioning System (SPS) (e.g., a Global Navigation Satellite System (GNSS)) like the Global Positioning System (GPS), the Global Navigation Satellite System (GLONASS), Galileo, or Beidou or some other local or regional SPS such as the Indian Regional Navigational Satellite System (IRNSS), the European Geostationary Navigation Overlay Service (EGNOS), or the Wide Area Augmentation System (WAAS). Additional components of the communication system 100 are described below. The communication system 100 may include additional or alternative components.

[0042] As shown in FIG. 1, the NG-RAN 135 includes NR nodeBs (gNBs) 110a, 110b, and a next generation eNodeB (ng-eNB) 114, and the 5GC 140 includes an Access and Mobility-10-4903 / A106WOQualcomm Ref. No. 2402271 WOManagement Function (AMF) 115, a Session Management Function (SMF) 117, a Location Management Function (LMF) 120, and a Gateway Mobile Location Center (GMLC) 125. The gNBs 110a, 110b and the ng-eNB 114 are communicatively coupled to each other, are each configured to bi-directionally wirelessly communicate with the UE 105, and are each communicatively coupled to, and configured to bi-directionally communicate with, the AMF 115. The gNBs 110a, 110b, and the ng-eNB 114 may be referred to as base stations (BSs). The AMF 115, the SMF 1 17, the LMF 120, and the GMLC 125 are communicatively coupled to each other, and the GMLC is communicatively coupled to an external client 130. The SMF 117 may serve as an initial contact point of a Service Control Function (SCF) (not shown) to create, control, and delete media sessions. Base stations such as the gNBs 110a, 110b and / or the ng-eNB 114 may be a macro cell (e.g., a high-power cellular base station), or a small cell (e.g., a low-power cellular base station), or an access point (e.g., a short-range base station configured to communicate with short-range technology such as WiFi®, WiFi®- Direct (WiFi®-D), Bluetooth®, Bluetooth®-low energy (BLE), Zigbee®, etc. One or more base stations, e.g., one or more of the gNBs 110a, 110b and / or the ng-eNB 114 may be configured to communicate with the UE 105 via multiple carriers. Each of the gNBs 110a, 110b and / or the ng-eNB 114 may provide communication coverage for a respective geographic region, e.g., a cell. Each cell may be partitioned into multiple sectors as a function of the base station antennas.

[0043] FIG. 1 provides a generalized illustration of various components, any or all of which may be utilized as appropriate, and each of which may be duplicated or omitted as necessary. Specifically, although one UE 105 is illustrated, many UEs (e.g., hundreds, thousands, millions, etc.) may be utilized in the communication system 100. Similarly, the communication system 100 may include a larger (or smaller) number of SVs (i.e. , more or fewer than the four SVs 190-193 shown), gNBs 1 10a, 110b, ng-eNBs 114, AMFs 115, external clients 130, and / or other components. The illustrated connections that connect the various components in the communication system 100 include data and signaling connections which may include additional (intermediary) components, direct or indirect physical and / or wireless connections, and / or additional networks. Furthermore, components may be rearranged, combined, separated, substituted, and / or omitted, depending on desired functionality.

[0044] While FIG. 1 illustrates a 5G-based network, similar network implementations and configurations may be used for other communication technologies, such as 3G, Long Term-11-4903 / A106WOQualcomm Ref. No. 2402271 WOEvolution (LTE), etc. Implementations described herein (be they for 5G technology and / or for one or more other communication technologies and / or protocols) may be used to transmit (or broadcast) directional synchronization signals, receive and measure directional signals at UEs (e.g., the UE 105) and / or provide location assistance to the UE 105 (via the GMLC 125 or other location server) and / or compute a location for the UE 105 at a location-capable device such as the UE 105, the gNB 110a, 110b, or the LMF 120 based on measurement quantities received at the UE 105 for such directionally -transmitted signals. The gateway mobile location center (GMLC) 125, the location management function (LMF) 120, the access and mobility management function (AMF) 115, the SMF 117, the ng-cNB (cNodcB) 114 and the gNBs (gNodeBs) 110a, 110b are examples and may be replaced by or include various other location server functionality and / or base station functionality respectively.

[0045] The system 100 is capable of wireless communication in that components of the system 100 can communicate with one another (at least some times using wireless connections) directly or indirectly, e.g., via the gNBs 110a, 110b, the ng-eNB 114, and / or the 5GC 140 (and / or one or more other devices not shown, such as one or more other base transceiver stations). For indirect communications, the communications may be altered during transmission from one entity to another, e.g., to alter header information of data packets, to change format, etc. The UE 105 may include multiple UEs and may be a mobile wireless communication device, but may communicate wirelessly and via wired connections. The UE 105 may be any of a variety of devices, e.g., a smartphone, a tablet computer, a vehicle-based device, etc., but these are examples as the UE 105 is not required to be any of these configurations, and other configurations of UEs may be used. Other UEs may include wearable devices (e.g., smart watches, smart jewelry, smart glasses or headsets, etc.). Still other UEs may be used, whether currently existing or developed in the future. Further, other wireless devices (whether mobile or not) may be implemented within the system 100 and may communicate with each other and / or with the UE 105, the gNBs 110a, 110b, the ng-eNB 114, the 5GC 140, and / or the external client 130. For example, such other devices may include internet of thing (loT) devices, medical devices, home entertainment and / or automation devices, etc. The 5GC 140 may communicate with the external client 130 (e.g., a computer system), e.g., to allow the external client 130 to request and / or receive location information regarding the UE 105 (e.g., via the GMLC 125).

[0046] The UE 105 or other devices may be configured to communicate in various networks and / or for various purposes and / or using various technologies (e.g., 5G, Wi-Fi®-12-4903 / A106WOQualcomm Ref. No. 2402271 WO communication, multiple frequencies of Wi-Fi® communication, satellite positioning, one or more types of communications (e.g., GSM (Global System for Mobiles), CDMA (Code Division Multiple Access), LTE (Long Term Evolution), V2X (Vehicle-to-Everything, e.g., V2P (Vehicle-to-Pedestrian), V2I (Vehiclc-to-lnfrastructure). V2V (Vehicle-to-Vehicle), etc.), IEEE 802. 1 Ip, etc.). V2X communications may be cellular (Cellular-V2X (C-V2X)) and / or WiFi® (e.g., DSRC (Dedicated Short-Range Connection)). The system 100 may support operation on multiple carriers (waveform signals of different frequencies). Multicarrier transmitters can transmit modulated signals simultaneously on the multiple carriers. Each modulated signal may be a Code Division Multiple Access (CDMA) signal, a Time Division Multiple Access (TDMA) signal, an Orthogonal Frequency Division Multiple Access (OFDMA) signal, a Single-Carrier Frequency Division Multiple Access (SC-FDMA) signal, etc. Each modulated signal may be sent on a different carrier and may carry pilot, overhead information, data, etc. The UEs 105, 106 may communicate with each other through UE-to-UE sidelink (SL) communications by transmitting over one or more sidelink channels such as a physical sidelink synchronization channel (PSSCH), a physical sidelink broadcast channel (PSBCH), or a physical sidelink control channel (PSCCH). Direct wireless-device-to-wireless-device communications without going through a network may be referred to generally as sidelink communications without limiting the communications to a particular protocol.

[0047] The UE 105 may comprise and / or may be referred to as a device, a mobile device, a wireless device, a mobile terminal, a terminal, a mobile station (MS), a Secure User Plane Location (SUPL) Enabled Terminal (SET), or by some other name. Moreover, the UE 105 may correspond to a cellphone, smartphone, laptop, tablet, PDA, consumer asset tracking device, navigation device, Internet of Things (loT) device, health monitors, security systems, smart city sensors, smart meters, wearable trackers, or some other portable or moveable device. Typically, though not necessarily, the UE 105 may support wireless communication using one or more Radio Access Technologies (RATs) such as Global System for Mobile communication (GSM), Code Division Multiple Access (CDMA), Wideband CDMA (WCDMA), LTE, High Rate Packet Data (HRPD), IEEE 802.1 1 WiFi® (also referred to as Wi-Fi®), Bluetooth® (BT), Worldwide Interoperability for Microwave Access (WiMax®), 5G new radio (NR) (e.g., using the NG-RAN 135 and the 5GC 140), etc. The UE 105 may support wireless communication using a Wireless Local Area Network (WLAN) which may connect to other networks (e.g., the Internet) using a Digital Subscriber Line (DSL) or packet-13-4903 / A106WOQualcomm Ref. No. 2402271 WO cable, for example. The use of one or more of these RATs may allow the UE 105 to communicate with the external client 130 (e.g., via elements of the 5GC 140 not shown in FIG. 1, or possibly via the GMLC 125) and / or allow the external client 130 to receive location information regarding the UE 105 (e.g., via the GMLC 125).

[0048] The UE 105 may include a single entity or may include multiple entities such as in a personal area network where a user may employ audio, video and / or data TO (input / output) devices and / or body sensors and a separate wireline or wireless modem. An estimate of a location of the UE 105 may be referred to as a location, location estimate, location fix, fix, position, position estimate, or position fix, and may be geographic, thus providing location coordinates for the UE 105 (e.g., latitude and longitude) which may or may not include an altitude component (e.g., height above sea level, height above or depth below ground level, floor level, or basement level). Alternatively, a location of the UE 105 may be expressed as a civic location (e.g., as a postal address or the designation of some point or small area in a building such as a particular room or floor). A location of the UE 105 may be expressed as an area or volume (defined either geographically or in civic form) within which the UE 105 is expected to be located with some probability or confidence level (e.g., 67%, 95%, etc.). A location of the UE 105 may be expressed as a relative location comprising, for example, a distance and direction from a known location. The relative location may be expressed as relative coordinates (e.g., X, Y (and Z) coordinates) defined relative to some origin at a known location which may be defined, e.g., geographically, in civic terms, or by reference to a point, area, or volume, e.g., indicated on a map, floor plan, or building plan. In the description contained herein, the use of the term location may comprise any of these variants unless indicated otherwise. When computing the location of a UE, it is common to solve for local x, y, and possibly z coordinates and then, if desired, convert the local coordinates into absolute coordinates (e.g., for latitude, longitude, and altitude above or below mean sea level).

[0049] The UE 105 may be configured to communicate with other entities using one or more of a variety of technologies. The UE 105 may be configured to connect indirectly to one or more communication networks via one or more device-to-device (D2D) peer-to-peer (P2P) links. The D2D P2P links may be supported with any appropriate D2D radio access technology (RAT), such as LTE Direct (LTE-D), WiFi® Direct (WiFi®-D), Bluetooth®, and so on. One or more of a group of UEs utilizing D2D communications may be within a geographic coverage area of a Transmission / Reception Point (TRP) such as one or more of-14-4903 / A106WOQualcomm Ref. No. 2402271 WO the gNBs 110a, 110b, and / or the ng-eNB 114. Other UEs in such a group may be outside such geographic coverage areas, or may be otherwise unable to receive transmissions from a base station. Groups of UEs communicating via D2D communications may utilize a one-to- many (1 :M) system in which each UE may transmit to other UEs in the group. A TRP may facilitate scheduling of resources for D2D communications. In other cases, D2D communications may be carried out between UEs without the involvement of a TRP. One or more of a group of UEs utilizing D2D communications may be within a geographic coverage area of a TRP. Other UEs in such a group may be outside such geographic coverage areas, or be otherwise unable to receive transmissions from a base station. Groups of UEs communicating via D2D communications may utilize a one-to-many (EM) system in which each UE may transmit to other UEs in the group. A TRP may facilitate scheduling of resources for D2D communications. In other cases, D2D communications may be carried out between UEs without the involvement of a TRP.

[0050] Base stations (BSs) in the NG-RAN 135 shown in FIG. 1 include NR Node Bs, referred to as the gNBs 110a and 110b. Pairs of the gNBs 110a, 110b in the NG-RAN 135 may be connected to one another via one or more other gNBs. Access to the 5G network is provided to the UE 105 via wireless communication between the UE 105 and one or more of the gNBs 110a, 110b, which may provide wireless communications access to the 5GC 140 on behalf of the UE 105 using 5G. In FIG. 1, the serving gNB for the UE 105 is assumed to be the gNB 110a, although another gNB (e.g., the gNB 110b) may act as a serving gNB if the UE 105 moves to another location or may act as a secondary gNB to provide additional throughput and bandwidth to the UE 105.

[0051] Base stations (BSs) in the NG-RAN 135 shown in FIG. 1 may include the ng-eNB 114, also referred to as a next generation evolved Node B. The ng-eNB 114 may be connected to one or more of the gNBs 110a, 110b in the NG-RAN 135, possibly via one or more other gNBs and / or one or more other ng-eNBs. The ng-eNB 114 may provide LTE wireless access and / or evolved LTE (eLTE) wireless access to the UE 105. One or more of the gNBs 110a, 110b and / or the ng-eNB 114 may be configured to function as positioning- only beacons which may transmit signals to assist with determining the position of the UE 105 but may not receive signals from the UE 105 or from other UEs.

[0052] The gNBs 110a, 110b and / or the ng-eNB 114 may each comprise one or more TRPs. For example, each sector within a cell of a BS may comprise a TRP, although multiple TRPs may share one or more components (e.g., share a processor but have separate-15-4903 / A106WOQualcomm Ref. No. 2402271 WO antennas). The system 100 may include macro TRPs exclusively or the system 100 may have TRPs of different types, e.g., macro, pico, and / or femto TRPs, etc. A macro TRP may cover a relatively large geographic area (e.g., several kilometers in radius) and may allow unrestricted access by terminals with service subscription. A pico TRP may cover a relatively small geographic area (e.g., a pico cell) and may allow unrestricted access by terminals with service subscription. A femto or home TRP may cover a relatively small geographic area (e.g., a femto cell) and may allow restricted access by terminals having association with the femto cell (e.g., terminals for users in a home).

[0053] Each of the gNBs 110a, 110b and / or the ng-cNB 114 may include a radio unit (RU), a distributed unit (DU), and a central unit (CU). For example, the gNB 110b includes an RU 111, a DU 112, and a CU 113. The RU 111, DU 112, and CU 113 divide functionality of the gNB 1 10b. While the gNB 110b is shown with a single RU, a single DU, and a single CU, a gNB may include one or more RUs, one or more DUs, and / or one or more CUs. An interface between the CU 113 and the DU 112 is referred to as an Fl interface. The RU 111 is configured to perform digital front end (DFE) functions (e.g., analog-to-digital conversion, filtering, power amplification, transmission / reception) and digital beamforming, and includes a portion of the physical (PHY) layer. The RU 111 may perform the DFE using massive multiple input / multiple output (MIMO) and may be integrated with one or more antennas of the gNB 110b. The DU 112 hosts the Radio Link Control (RLC), Medium Access Control (MAC), and physical layers of the gNB 110b. One DU can support one or more cells, and each cell is supported by a single DU. The operation of the DU 112 is controlled by the CU 113. The CU 113 is configured to perform functions for transferring user data, mobility control, radio access network sharing, positioning, session management, etc. although some functions are allocated exclusively to the DU 112. The CU 113 hosts the Radio Resource Control (RRC), Service Data Adaptation Protocol (SDAP), and Packet Data Convergence Protocol (PDCP) protocols of the gNB 110b. The UE 105 may communicate with the CU 113 via RRC, SDAP, and PDCP layers, with the DU 112 via the RLC, MAC, and PHY layers, and with the RU 111 via the PHY layer.

[0054] As noted, while FIG. 1 depicts nodes configured to communicate according to 5G communication protocols, nodes configured to communicate according to other communication protocols, such as, for example, an LTE protocol or IEEE 802.1 lx protocol, may be used. For example, in an Evolved Packet System (EPS) providing LTE wireless access to the UE 105, a RAN may comprise an Evolved Universal Mobile-16-4903 / A106WOQualcomm Ref. No. 2402271 WOTelecommunications System (UMTS) Terrestrial Radio Access Network (E-UTRAN) which may comprise base stations comprising evolved Node Bs (eNBs). A core network for EPS may comprise an Evolved Packet Core (EPC). An EPS may comprise an E-UTRAN plus EPC, where the E-UTRAN corresponds to the NG-RAN 135 and the EPC corresponds to the 5GC 140 in FIG. 1.

[0055] The gNBs 110a, 110b and the ng-eNB 114 may communicate with the AMF 115, which, for positioning functionality, communicates with the LMF 120. The AMF 115 may support mobility of the UE 105, including cell change and handover and may participate in supporting a signaling connection to the UE 105 and possibly data and voice bearers for the UE 105. The LMF 120 may communicate directly with the UE 105, e.g., through wireless communications, or directly with the gNBs 110a, 110b and / or the ng-eNB 114. The LMF 120 may support positioning ofthe UE 105 when the UE 105 accesses the NG-RAN 135 and may support position procedures / methods such as Assisted GNSS (A-GNSS), Observed Time Difference of Arrival (OTDOA) (e.g., Downlink (DL) OTDOA or Uplink (UL) OTDOA), Round Trip Time (RTT), Multi-Cell RTT, Real Time Kinematic (RTK), Precise Point Positioning (PPP), Differential GNSS (DGNSS), Enhanced Cell ID (E-CID), angle of arrival (AoA), angle of departure (AoD), and / or other position methods. The LMF 120 may process location services requests for the UE 105, e.g., received from the AMF 115 or from the GMLC 125. The LMF 120 may be connected to the AMF 115 and / or to the GMLC 125. The LMF 120 may be referred to by other names such as a Location Manager (LM), Location Function (LF), commercial LMF (CLMF), or value added LMF (VLMF). A node / system that implements the LMF 120 may additionally or alternatively implement other types of location-support modules, such as an Enhanced Serving Mobile Location Center (E-SMLC) or a Secure User Plane Location (SUPL) Location Platform (SLP). At least part of the positioning functionality (including derivation of the location of the UE 105) may be performed at the UE 105 (e.g., using signal measurements obtained by the UE 105 for signals transmitted by wireless nodes such as the gNBs 110a, 110b and / or the ng-eNB 114, and / or assistance data provided to the UE 105, e.g., by the LMF 120). The AMF 115 may serve as a control node that processes signaling between the UE 105 and the 5GC 140, and may provide QoS (Quality of Service) flow and session management. The AMF 115 may support mobility of the UE 105 including cell change and handover and may participate in supporting signaling connection to the UE 105.-17-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0056] The server 150, e.g., a cloud server, is configured to obtain and provide location estimates of the UE 105 to the external client 130. The server 150 may, for example, be configured to run a microservice / service that obtains the location estimate of the UE 105. The server 150 may, for example, pull the location estimate from (e.g., by sending a location request to) the UE 105, one or more of the gNBs 110a, 110b (e.g., via the RU 111, the DU 112, and the CU 113) and / or the ng-eNB 114, and / or the LMF 120. As another example, the UE 105, one or more of the gNBs 110a, 110b (e.g., via the RU 111 , the DU 112, and the CU 113), and / or the LMF 120 may push the location estimate of the UE 105 to the server 150.

[0057] The GMLC 125 may support a location request for the UE 105 received from the external client 130 via the server 150 and may forward such a location request to the AMF 115 for forwarding by the AMF 115 to the LMF 120 or may forward the location request directly to the LMF 120. A location response from the LMF 120 (e.g., containing a location estimate for the UE 105) may be returned to the GMLC 125 either directly or via the AMF 115 and the GMLC 125 may then return the location response (e.g., containing the location estimate) to the external client 130 via the server 150. The GMLC 125 is shown connected to both the AMF 115 and LMF 120, though may not be connected to the AMF 115 or the LMF 120 in some implementations.

[0058] As further illustrated in FIG. 1, the LMF 120 may communicate with the gNBs 110a, 110b and / or the ng-eNB 114 using a New Radio Position Protocol A (which may be referred to as NPPa or NRPPa), which may be defined in 3GPP Technical Specification (TS) 38.455. NRPPa may be the same as, similar to, or an extension of the LTE Positioning Protocol A (LPPa) defined in 3GPP TS 36.455, with NRPPa messages being transferred between the gNB 110a (or the gNB 110b) and the LMF 120, and / or between the ng-eNB 114 and the LMF 120, via the AMF 115. As further illustrated in FIG. 1, the LMF 120 and the UE 105 may communicate using an LTE Positioning Protocol (LPP), which may be defined in 3GPP TS 36.355. The LMF 120 and the UE 105 may also or instead communicate using a New Radio Positioning Protocol (which may be referred to as NPP or NRPP), which may be the same as, similar to, or an extension of LPP. Here, LPP and / or NPP messages may be transferred between the UE 105 and the LMF 120 via the AMF 115 and the serving gNB 110a, 110b or the serving ng-eNB 1 14 for the UE 105. For example, LPP and / or NPP messages may be transferred between the LMF 120 and the AMF 115 using a 5G Location Services Application Protocol (LCS AP) and may be transferred between the AMF 115 and the UE 105 using a 5G Non-Access Stratum (NAS) protocol. The LPP and / or NPP protocol-18-4903 / A106WOQualcomm Ref. No. 2402271 WO may be used to support positioning of the UE 105 using UE-assisted and / or UE-based position methods such as A-GNSS, RTK, OTDOA and / or E-CID. The NRPPa protocol may be used to support positioning of the UE 105 using network-based position methods such as E-CID (e.g., when used with measurements obtained by the gNB 110a, 110b or the ng-eNB 114) and / or may be used by the LMF 120 to obtain location related information from the gNBs 110a, 110b and / or the ng-eNB 114, such as parameters defining directional SS or PRS transmissions from the gNBs 110a, 110b, and / or the ng-eNB 114. The LMF 120 may be colocated or integrated with a gNB or a TRP, or may be disposed remote from the gNB and / or the TRP and configured to communicate directly or indirectly with the gNB and / or the TRP.

[0059] With a UE-assisted position method, the UE 105 may obtain location measurements and send the measurements to a location server (e.g., the LMF 120) for computation of a location estimate for the UE 105. For example, the location measurements may include one or more of a Received Signal Strength Indication (RSSI), Round Trip signal propagation Time (RTT), Reference Signal Time Difference (RSTD), Reference Signal Received Power (RSRP) and / or Reference Signal Received Quality (RSRQ) for the gNBs 110a, 110b, the ng- eNB 114, and / or a WLAN AP. The location measurements may also or instead include measurements of GNSS pseudorange, code phase, and / or carrier phase for the SVs 190-193.

[0060] With a UE-based position method, the UE 105 may obtain location measurements (e.g., which may be the same as or similar to location measurements for a UE-assisted position method) and may compute a location of the UE 105 (e.g., with the help of assistance data received from a location server such as the LMF 120 or broadcast by the gNBs 110a, 110b, the ng-eNB 114, or other base stations or APs).

[0061] With a network-based position method, one or more base stations (e.g., the gNBs 110a, 110b, and / or the ng-eNB 114) or APs may obtain location measurements (e.g., measurements of RSSI, RTT, RSRP, RSRQ or Time of Arrival (ToA) for signals transmitted by the UE 105) and / or may receive measurements obtained by the UE 105. The one or more base stations or APs may send the measurements to a location server (e.g., the LMF 120) for computation of a location estimate for the UE 105.

[0062] Information provided by the gNBs 110a, 110b, and / or the ng-eNB 114 to the LMF 120 using NRPPa may include timing and configuration information for directional SS or PRS transmissions and location coordinates. The LMF 120 may provide some or all of this information to the UE 105 as assistance data in an LPP and / or NPP message via the NG-RAN 135 and the 5GC 140.-19-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0063] An LPP or NPP message sent from the LMF 120 to the UE 105 may instruct the UE 105 to do any of a variety of things depending on desired functionality. For example, the LPP or NPP message could contain an instruction for the UE 105 to obtain measurements for GNSS (or A-GNSS), WLAN, E-CID, and / or OTDOA (or some other position method). In the case of E-CID, the LPP or NPP message may instruct the UE 105 to obtain one or more measurement quantities (e.g., beam ID, beam width, mean angle, RSRP, RSRQ measurements) of directional signals transmitted within particular cells supported by one or more of the gNBs 110a, 110b, and / or the ng-eNB 114 (or supported by some other type of base station such as an cNB or WiFi® AP). The UE 105 may send the measurement quantities back to the LMF 120 in an LPP or NPP message (e.g., inside a 5G NAS message) via the serving gNB 110a (or the serving ng-eNB 114) and the AMF 115.

[0064] As noted, while the communication system 100 is described in relation to 5G technology, the communication system 100 may be implemented to support other communication technologies, such as GSM, WCDMA, LEE, etc., that are used for supporting and interacting with mobile devices such as the UE 105 (e.g., to implement voice, data, positioning, and other functionalities). In some such implementations, the 5GC 140 may be configured to control different air interfaces. For example, the 5GC 140 may be connected to a WLAN using a Non-3GPP InterWorking Function (N3IWF, not shown FIG. 1) in the 5GC 140. For example, the WLAN may support IEEE 802. 11 WiFi® access for the UE 105 and may comprise one or more WiFi® APs. Here, the N3IWF may connect to the WLAN and to other elements in the 5GC 140 such as the AMF 115. In some implementations, both the NG-RAN 135 and the 5GC 140 may be replaced by one or more other RANs and one or more other core networks. For example, in an EPS, the NG-RAN 135 may be replaced by an E-UTRAN containing eNBs and the 5GC 140 may be replaced by an EPC containing a Mobility Management Entity (MME) in place of the AMF 115, an E-SMLC in place of the LMF 120, and a GMLC that may be similar to the GMLC 125. In such an EPS, the E-SMLC may use LPPa in place of NRPPa to send and receive location information to and from the eNBs in the E-UFRAN and may use LPP to support positioning of the UE 105. In these other examples, positioning of the UE 105 using directional PRSs may be supported in an analogous manner to that described herein for a 5G network with the difference that functions and procedures described herein for the gNBs 110a, 110b, the ng-eNB 114, the AMF 115, and the LMF 120 may, in some cases, apply instead to other network elements such eNBs, WiFi® APs, an MME, and an E-SMLC.-20-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0065] As noted, in some examples, positioning functionality may be implemented, at least in part, using the directional SS or PRS beams, sent by base stations (such as the gNBs 110a, 110b, and / or the ng-eNB 114) that are within range of the UE whose position is to be determined (e.g., the UE 105 of FIG. 1). The UE may, in some instances, use the directional SS or PRS beams from a plurality of base stations (such as the gNBs 110a, 110b, the ng-eNB 114, etc.) to compute the position of the UE.

[0066] Referring also to FIG. 2, a UE 200 may be an example of one of the UEs 105, 106 and may comprise a computing platform including a processor 210, memory 211 including software (SW) 212, one or more sensors 213, a transceiver interface 214 for a transceiver 215 (that includes a wireless transceiver 240 and a wired transceiver 250), a user interface 216, a Satellite Positioning System (SPS) receiver 217, a camera 218, and a position device (PD) 219. The processor 210, the memory 211 , the sensor(s) 213, the transceiver interface 214, the user interface 216, the SPS receiver 217, the camera 218, and the position device 219 may be communicatively coupled to each other by a bus 220 (which may be configured, e.g., for optical and / or electrical communication). One or more of the shown apparatus (e.g., the camera 218, the position device 219, and / or one or more of the sensor(s) 213, etc.) may be omitted from the UE 200. The processor 210 may include one or more hardware devices, e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc. The processor 210 may comprise multiple processors including a general-purpose / application processor 230, a Digital Signal Processor (DSP) 231, a modem processor 232, a video processor 233, and / or a sensor processor 234. One or more of the processors 230-234 may comprise multiple devices (e.g., multiple processors). For example, the sensor processor 234 may comprise, e.g., processors for RF (radio frequency) sensing (with one or more (cellular) wireless signals transmitted and reflection(s) used to identify, map, and / or track an object), and / or ultrasound, etc. The modem processor 232 may support dual SIM / dual connectivity (or even more SIMs). For example, a SIM (Subscriber Identity Module or Subscriber Identification Module) may be used by an Original Equipment Manufacturer (OEM), and another SIM may be used by an end user of the UE 200 for connectivity. The memory 21 1 may be a non-transitory storage medium that may include random access memory (RAM), flash memory, disc memory, and / or read-only memory (ROM), etc. The memory 211 may store the software 212 which may be processor-readable, processor-executable software code containing instructions that may be configured to, when executed, cause the processor 210 to perform various functions described herein.-21-4903 / A106WOQualcomm Ref. No. 2402271 WOAlternatively, the software 212 may not be directly executable by the processor 210 but may be configured to cause the processor 210, e.g., when compiled and executed, to perform the functions. The description herein may refer to the processor 210 performing a function, but this includes other implementations such as where the processor 210 executes software and / or firmware. The description herein may refer to the processor 210 performing a function as shorthand for one or more of the processors 230-234 performing the function. The description herein may refer to the UE 200 performing a function as shorthand for one or more appropriate components of the UE 200 performing the function. The processor 210 may include a memory with stored instructions in addition to and / or instead of the memory 211. Functionality of the processor 210 is discussed more fully below.

[0067] The configuration of the UE 200 shown in FIG. 2 is an example and not limiting of the disclosure, including the claims, and other configurations may be used. For example, an example configuration of the UE may include one or more of the processors 230-234 of the processor 210, the memory 211, and the wireless transceiver 240. Other example configurations may include one or more of the processors 230-234 of the processor 210, the memory 211 , a wireless transceiver, and one or more of the sensor(s) 213 , the user interface 216, the SPS receiver 217, the camera 218, the PD 219, and / or a wired transceiver.

[0068] The UE 200 may comprise the modem processor 232 that may be capable of performing baseband processing of signals received and down-converted by the transceiver 215 and / or the SPS receiver 217. The modem processor 232 may perform baseband processing of signals to be upconverted for transmission by the transceiver 215. Also or alternatively, baseband processing may be performed by the general -purpose / application processor 230 and / or the DSP 231. Other configurations, however, may be used to perform baseband processing.

[0069] The UE 200 may include the sensor(s) 213 that may include, for example, an Inertial Measurement Unit (IMU) 270, one or more magnetometers 271, and / or one or more environment sensors 272. The IMU 270 may comprise, for example, one or more accelerometers 273 (e.g., collectively responding to acceleration of the UE 200 in three dimensions) and / or one or more gyroscopes 274 (e.g., three-dimensional gyroscope(s)). The sensor(s) 213 may include the one or more magnetometers 271 (e.g., three-dimensional magnetometer(s)) to determine orientation (e.g., relative to magnetic north and / or true north) that may be used for any of a variety of purposes, e.g., to support one or more compass applications. The environment sensor(s) 272 may comprise, for example, one or more-22-4903 / A106WOQualcomm Ref. No. 2402271 WO temperature sensors, one or more barometric pressure sensors, one or more ambient light sensors, one or more camera imagers, and / or one or more microphones, etc. The sensor(s) 213 may generate analog and / or digital signals indications of which may be stored in the memory 211 and processed by the DSP 231 and / or the general-purpose / application processor 230 in support of one or more applications such as, for example, applications directed to positioning and / or navigation operations. The sensor(s) 213 may comprise one or more of other various types of sensors such as one or more optical sensors, one or more weight sensors, and / or one or more radio frequency (RF) sensors, etc.

[0070] The scnsor(s) 213 may be used in relative location measurements, relative location determination, motion determination, etc. Information detected by the sensor(s) 213 may be used for motion detection, relative displacement, dead reckoning, sensor-based location determination, and / or sensor-assisted location determination. The sensor(s) 213 may be useful to determine whether the UE 200 is fixed (stationary) or mobile and / or whether to report certain useful information to the LMF 120 regarding the mobility of the UE 200. For example, based on the information obtained / measured by the sensor(s) 213, the UE 200 may notify / report to the LMF 120 that the UE 200 has detected movements or that the UE 200 has moved, and may report the relative displacement / distance (e.g., via dead reckoning, or sensor-based location determination, or sensor-assisted location determination enabled by the sensor(s) 213). In another example, for relative positioning information, the sensors / IMU may be used to determine the angle and / or orientation of the other device with respect to the UE 200, etc.

[0071] The IMU 270 may be configured to provide measurements about a direction of motion and / or a speed of motion of the UE 200, which may be used in relative location determination. For example, the one or more accelerometers 273 and / or the one or more gyroscopes 274 of the IMU 270 may detect, respectively, a linear acceleration and a speed of rotation of the UE 200. The linear acceleration and speed of rotation measurements of the UE 200 may be integrated over time to determine an instantaneous direction of motion as well as a displacement of the UE 200. The instantaneous direction of motion and the displacement may be integrated to track a location of the UE 200. For example, a reference location of the UE 200 may be determined, e.g., using the SPS receiver 217 (and / or by some other means) for a moment in time and measurements from the accelerometer(s) 273 and the gyroscope(s) 274 taken after this moment in time may be used in dead reckoning to-23-4903 / A106WOQualcomm Ref. No. 2402271 WO determine present location of the UE 200 based on movement (direction and distance) of the UE 200 relative to the reference location.

[0072] The magnetometer(s) 271 may determine magnetic field strengths in different directions which may be used to determine orientation of the UE 200. For example, the orientation may be used to provide a digital compass for the UE 200. The magnetometer(s) may include a two-dimensional magnetometer configured to detect and provide indications of magnetic field strength in two orthogonal dimensions. The magnetometer(s) 271 may include a three-dimensional magnetometer configured to detect and provide indications of magnetic field strength in three orthogonal dimensions. The magnctomctcr(s) 271 may provide means for sensing a magnetic field and providing indications of the magnetic field, e.g., to the processor 210.

[0073] The transceiver 215 may include a wireless transceiver 240 and a wired transceiver 250 configured to communicate with other devices through wireless connections and wired connections, respectively. For example, the wireless transceiver 240 may include a wireless transmitter 242 and a wireless receiver 244 coupled to an antenna 246 for transmitting (e.g., on one or more uplink channels and / or one or more sidelink channels) and / or receiving (e.g., on one or more downlink channels and / or one or more sidelink channels) wireless signals 248 and transducing signals from the wireless signals 248 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 248. The wireless transmitter 242 includes appropriate components (e.g., a power amplifier and a digital-to-analog converter). The wireless receiver 244 includes appropriate components (e.g., one or more amplifiers, one or more frequency filters, and an analog-to-digital converter). The wireless transmitter 242 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the wireless receiver 244 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 240 may be configured to communicate signals (e.g., with TRPs and / or one or more other devices) according to a variety of radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802. l ip), WiFi®, WiFi® Direct (WiFi®-D), Bluetooth®, Zigbee® etc. New Radio may use mm-wave frequencies and / or sub-6GHz frequencies. The wired-24-4903 / A106WOQualcomm Ref. No. 2402271 WO transceiver 250 may include a wired transmitter 252 and a wired receiver 254 configured for wired communication, e.g., a network interface that may be utilized to communicate with the NG-RAN 135 to send communications to, and receive communications from, the NG-RAN 135. The wired transmitter 252 may include multiple transmitters that may be discrete components or combincd / integratcd components, and / or the wired receiver 254 may include multiple receivers that may be discrete components or combined / integrated components. The wired transceiver 250 may be configured, e.g., for optical communication and / or electrical communication. The transceiver 215 may be communicatively coupled to the transceiver interface 214, e.g., by optical and / or electrical connection. The transceiver interface 214 may be at least partially integrated with the transceiver 215. The wireless transmitter 242, the wireless receiver 244, and / or the antenna 246 may include multiple transmitters, multiple receivers, and / or multiple antennas, respectively, for sending and / or receiving, respectively, appropriate signals.

[0074] The user interface 216 may comprise one or more of several devices such as, for example, a speaker, microphone, display device, vibration device, keyboard, touch screen, etc. The user interface 216 may include more than one of any of these devices. The user interface 216 may be configured to enable a user to interact with one or more applications hosted by the UE 200. For example, the user interface 216 may store indications of analog and / or digital signals in the memory 211 to be processed by DSP 231 and / or the general- purpose / application processor 230 in response to action from a user. Similarly, applications hosted on the UE 200 may store indications of analog and / or digital signals in the memory 211 to present an output signal to a user. The user interface 216 may include an audio input / output (I / O) device comprising, for example, a speaker, a microphone, digital-to-analog circuitry, analog-to-digital circuitry, an amplifier and / or gain control circuitry (including more than one of any of these devices). Other configurations of an audio I / O device may be used. Also or alternatively, the user interface 216 may comprise one or more touch sensors responsive to touching and / or pressure, e.g., on a keyboard and / or touch screen of the user interface 216.

[0075] The SPS receiver 217 (e.g., a GPS receiver) may be capable of receiving and acquiring SPS signals 260 via an SPS antenna 262. The SPS antenna 262 is configured to transduce the SPS signals 260 from wireless signals to wired signals, e.g., electrical or optical signals, and may be integrated with the antenna 246. The SPS receiver 217 may be configured to process, in whole or in part, the acquired SPS signals 260 for estimating a-25-4903 / A106WOQualcomm Ref. No. 2402271 WO location of the UE 200. For example, the SPS receiver 217 may be configured to determine location of the UE 200 by trilateration using the SPS signals 260. The general- purpose / application processor 230, the memory 211, the DSP 231 and / or one or more specialized processors (not shown) may be utilized to process acquired SPS signals, in whole or in part, and / or to calculate an estimated location of the UE 200, in conjunction with the SPS receiver 217. The memory 211 may store indications (e.g., measurements) of the SPS signals 260 and / or other signals (e.g., signals acquired from the wireless transceiver 240) for use in performing positioning operations. The general-purpose / application processor 230, the DSP 231, and / or one or more specialized processors, and / or the memory 211 may provide or support a location engine for use in processing measurements to estimate a location of the UE 200.

[0076] The UE 200 may include the camera 218 for capturing still or moving imageiy. The camera 218 may comprise, for example, an imaging sensor (e.g., a charge coupled device or a CMOS (Complementary Metal-Oxide Semiconductor) imager), a lens, analog-to-digital circuitry, frame buffers, etc. Additional processing, conditioning, encoding, and / or compression of signals representing captured images may be performed by the general- purpose / application processor 230 and / or the DSP 231. Also or alternatively, the video processor 233 may perform conditioning, encoding, compression, and / or manipulation of signals representing captured images. The video processor 233 may decode / decompress stored image data for presentation on a display device (not shown), e.g., of the user interface 216.

[0077] The position device (PD) 219 may be configured to determine a position of the UE 200, motion of the UE 200, and / or relative position of the UE 200, and / or time. For example, the PD 219 may communicate with, and / or include some or all of, the SPS receiver 217. The PD 219 may work in conjunction with the processor 210 and the memory 211 as appropriate to perform at least a portion of one or more positioning methods, although the description herein may refer to the PD 219 being configured to perform, or performing, in accordance with the positioning method(s). The PD 219 may also or alternatively be configured to determine location of the UE 200 using terrestrial-based signals (e.g., at least some of the wireless signals 248) for trilateration, for assistance with obtaining and using the SPS signals 260, or both. The PD 219 may be configured to determine location of the UE 200 based on a cell of a serving base station (e.g., a cell center) and / or another technique such as E-CID. The PD 219 may be configured to use one or more images from the camera 218 and image-26-4903 / A106WOQualcomm Ref. No. 2402271 WO recognition combined with known locations of landmarks (e.g., natural landmarks such as mountains and / or artificial landmarks such as buildings, bridges, streets, etc.) to determine location of the UE 200. The PD 219 may be configured to use one or more other techniques (e.g., relying on the UE’s self-reported location (e.g., part of the UE’s position beacon)) for determining the location of the UE 200, and may use a combination of techniques (e.g., SPS and terrestrial positioning signals) to determine the location of the UE 200. The PD 219 may include one or more of the sensors 213 (e.g., gyroscope(s), accelerometer(s), magnetometer(s), etc.) that may sense orientation and / or motion of the UE 200 and provide indications thereof that the processor 210 (e.g., the general-purpose / application processor 230 and / or the DSP 231) may be configured to use to determine motion (e.g., a velocity vector and / or an acceleration vector) of the UE 200. The PD 219 may be configured to provide indications of uncertainty and / or error in the determined position and / or motion.Functionality of the PD 219 may be provided in a variety of manners and / or configurations, e.g., by the general-purpose / application processor 230, the transceiver 215, the SPS receiver 217, and / or another component of the UE 200, and may be provided by hardware, software, firmware, or various combinations thereof.

[0078] Referring also to FIG. 3, an example of a TRP 300 of the gNBs 110a, 110b and / or the ng-eNB 114 may comprise a computing platform including a processor 310, memory 311 including software (SW) 312, and a transceiver 315. The processor 310, the memory 311, and the transceiver 315 may be communicatively coupled to each other by a bus 320 (which may be configured, e.g., for optical and / or electrical communication). One or more of the shown apparatus (e.g., a wireless transceiver) may be omitted from the TRP 300. The processor 310 may include one or more hardware devices, e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc. The processor 310 may comprise multiple processors (e.g., including a general- purpose / application processor, a DSP, a modem processor, a video processor, and / or a sensor processor as shown in FIG. 2). The memory 311 may be a non-transitory storage medium that may include random access memory (RAM)), flash memory, disc memory, and / or readonly memory (ROM), etc. The memory 311 may store the software 312 which may be processor-readable, processor-executable software code containing instructions that are configured to, when executed, cause the processor 310 to perform various functions described herein. Alternatively, the software 312 may not be directly executable by the processor 310-27-4903 / A106WOQualcomm Ref. No. 2402271 WO but may be configured to cause the processor 310, e.g., when compiled and executed, to perform the functions.

[0079] The description herein may refer to the processor 310 performing a function, but this includes other implementations such as where the processor 310 executes software and / or firmware. The description herein may refer to the processor 310 performing a function as shorthand for one or more of the processors contained in the processor 310 performing the function. The description herein may refer to the TRP 300 performing a function as shorthand for one or more appropriate components (e.g., the processor 310 and the memory 311) of the TRP 300 (and thus of one of the gNBs 110a, 110b and / or the ng-cNB 114) performing the function. The processor 310 may include a memory with stored instructions in addition to and / or instead of the memory 311. Functionality of the processor 310 is discussed more fully below.

[0080] The transceiver 315 may include a wireless transceiver 340 and / or a wired transceiver 350 configured to communicate with other devices through wireless connections and wired connections, respectively. For example, the wireless transceiver 340 may include a wireless transmitter 342 and a wireless receiver 344 coupled to one or more antennas 346 for transmitting (e.g., on one or more uplink channels and / or one or more downlink channels) and / or receiving (e.g., on one or more downlink channels and / or one or more uplink channels) wireless signals 348 and transducing signals from the wireless signals 348 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 348. Thus, the wireless transmitter 342 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the wireless receiver 344 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 340 may be configured to communicate signals (e.g., with the UE 200, one or more other UEs, and / or one or more other devices) according to a variety of radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802. l ip), WiFi®, WiFi® Direct (WiFi®-D), Bluetooth®, Zigbee® etc. The wired transceiver 350 may include a wired transmitter 352 and a wired receiver 354 configured for wired communication, e.g., a network interface that may be utilized to communicate with the NG-RAN 135 to send-28-4903 / A106WOQualcomm Ref. No. 2402271 WO communications to, and receive communications from, the LMF 120, for example, and / or one or more other network entities. The wired transmitter 352 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the wired receiver 354 may include multiple receivers that may be discrete components or combined / integrated components. The wired transceiver 350 may be configured, e.g., for optical communication and / or electrical communication.

[0081] The configuration of the TRP 300 shown in FIG. 3 is an example and not limiting of the disclosure, including the claims, and other configurations may be used. For example, the description herein discusses that the TRP 300 may be configured to perform or performs several functions, but one or more of these functions may be performed by the LMF 120 and / or the UE 200 (i.e., the LMF 120 and / or the UE 200 may be configured to perform one or more of these functions).

[0082] Referring also to FIG. 4, a server 400, of which the LMF 120 may be an example, may comprise a computing platform including a processor 410, memory 411 including software (SW) 412, and a transceiver 415. The processor 410, the memory 411, and the transceiver 415 may be communicatively coupled to each other by a bus 420 (which may be configured, e.g., for optical and / or electrical communication). One or more of the shown apparatus (e.g., a wireless transceiver) may be omitted from the server 400. The processor 410 may include one or more hardware devices, e.g., a central processing unit (CPU), a microcontroller, an application specific integrated circuit (ASIC), etc. The processor 410 may comprise multiple processors (e.g., including a general -purpose / application processor, a DSP, a modem processor, a video processor, and / or a sensor processor as shown in FIG. 2). The memory 411 may be a non-transitory storage medium that may include random access memory (RAM)), flash memory, disc memory, and / or read-only memory (ROM), etc. The memory 411 may store the software 412 which may be processor-readable, processorexecutable software code containing instructions that are configured to, when executed, cause the processor 410 to perform various functions described herein. Alternatively, the software 412 may not be directly executable by the processor 410 but may be configured to cause the processor 410, e.g., when compiled and executed, to perform the functions. The description herein may refer to the processor 410 performing a function, but this includes other implementations such as where the processor 410 executes software and / or firmware. The description herein may refer to the processor 410 performing a function as shorthand for one or more of the processors contained in the processor 410 performing the function. The-29-4903 / A106WOQualcomm Ref. No. 2402271 WO description herein may refer to the server 400 performing a function as shorthand for one or more appropriate components of the server 400 performing the function. The processor 410 may include a memory with stored instructions in addition to and / or instead of the memory 411. Functionality of the processor 410 is discussed more fully below.

[0083] The transceiver 415 may include a wireless transceiver 440 and / or a wired transceiver 450 configured to communicate with other devices through wireless connections and wired connections, respectively. For example, the wireless transceiver 440 may include a wireless transmitter 442 and a wireless receiver 444 coupled to one or more antennas 446 for transmitting (c.g., on one or more downlink channels) and / or receiving (c.g., on one or more uplink channels) wireless signals 448 and transducing signals from the wireless signals 448 to wired (e.g., electrical and / or optical) signals and from wired (e.g., electrical and / or optical) signals to the wireless signals 448. Thus, the wireless transmitter 442 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the wireless receiver 444 may include multiple receivers that may be discrete components or combined / integrated components. The wireless transceiver 440 may be configured to communicate signals (e.g., with the UE 200, one or more other UEs, and / or one or more other devices) according to a variety of radio access technologies (RATs) such as 5G New Radio (NR), GSM (Global System for Mobiles), UMTS (Universal Mobile Telecommunications System), AMPS (Advanced Mobile Phone System), CDMA (Code Division Multiple Access), WCDMA (Wideband CDMA), LTE (Long Term Evolution), LTE Direct (LTE-D), 3GPP LTE-V2X (PC5), IEEE 802.11 (including IEEE 802. l ip), WiFi®, WiFi® Direct (WiFi®-D), Bluetooth®, Zigbee® etc. The wired transceiver 450 may include a wired transmitter 452 and a wired receiver 454 configured for wired communication, e.g., a network interface that may be utilized to communicate with the NG-RAN 135 to send communications to, and receive communications from, the TRP 300, for example, and / or one or more other network entities. The wired transmitter 452 may include multiple transmitters that may be discrete components or combined / integrated components, and / or the wired receiver 454 may include multiple receivers that may be discrete components or combined / integrated components. The wired transceiver 450 may be configured, e.g., for optical communication and / or electrical communication.

[0084] The description herein may refer to the processor 410 performing a function, but this includes other implementations such as where the processor 410 executes software (stored in the memory 411) and / or firmware. The description herein may refer to the server-30-4903 / A106WOQualcomm Ref. No. 2402271 WO400 performing a function as shorthand for one or more appropriate components (e.g., the processor 410 and the memory 411) of the server 400 performing the function.

[0085] The configuration of the server 400 shown in FIG. 4 is an example and not limiting of the disclosure, including the claims, and other configurations may be used. For example, the wireless transceiver 440 may be omitted. Also or alternatively, the description herein discusses that the server 400 is configured to perform or performs several functions, but one or more of these functions may be performed by the TRP 300 and / or the UE 200 (i.e., the TRP 300 and / or the UE 200 may be configured to perform one or more of these functions).Positioning Techniques

[0086] For terrestrial positioning of a UE in cellular networks, techniques such as Advanced Forward Link Trilateration (AFLT) and Observed Time Difference Of Arrival (OTDOA) often operate in “UE-assisted” mode in which measurements of reference signals (e.g., PRS, CRS, etc.) transmitted by base stations are taken by the UE and then provided to a location server. The location server calculates the position of the UE based on the measurements and known locations of the base stations. Because these techniques use the location server to calculate the position of the UE, rather than the UE itself, these positioning techniques are not frequently used in applications such as car or cell-phone navigation, which instead typically rely on satellite-based positioning.

[0087] A UE may use a Satellite Positioning System (SPS) (a Global Navigation Satellite System (GNSS)) for high-accuracy positioning using precise point positioning (PPP) or real time kinematic (RTK) technology. These technologies use assistance data such as measurements from ground-based stations. LTE Release 15 allows the data to be encrypted so that the UEs subscribed to the service exclusively can read the information. Such assistance data varies with time. Thus, a UE subscribed to the service may not easily “break encryption” for other UEs by passing on the data to other UEs that have not paid for the subscription. The passing on would need to be repeated every time the assistance data changes.

[0088] In UE-assisted positioning, the UE sends measurements (e.g., TDOA, Angle of Arrival (AoA), etc.) to the positioning server (e.g., LMF / eSMLC). The positioning server has the base station almanac (BSA) that contains multiple ‘entries’ or ‘records’, one record per cell, where each record contains geographical cell location but also may include other data. An identifier of the ‘record’ among the multiple ‘records’ in the BSA may be-31-4903 / A106WOQualcomm Ref. No. 2402271 WO referenced. The BSA and the measurements from the UE may be used to compute the position of the UE.

[0089] In conventional UE-based positioning, a UE computes its own position, thus avoiding sending measurements to the network (e.g., location server), which in turn improves latency and scalability. The UE uses relevant BSA record information (e.g., locations of gNBs (more broadly base stations)) from the network. The BSA information may be encrypted. But since the BSA information varies much less often than, for example, the PPP or RTK assistance data described earlier, it may be easier to make the BSA information (compared to the PPP or RTK information) available to UEs that did not subscribe and pay for decryption keys. Transmissions of reference signals by the gNBs make BSA infomiation potentially accessible to crowd-sourcing or war-driving, essentially enabling BSA information to be generated based on in-the-field and / or over-the-top observations.

[0090] Positioning techniques may be characterized and / or assessed based on one or more criteria such as position determination accuracy and / or latency. Latency is a time elapsed between an event that triggers determination of position-related data and the availability of that data at a positioning system interface, e.g., an interface of the LMF 120. At initialization of a positioning system, the latency for the availability of position-related data is called time to first fix (TTFF), and is larger than latencies after the TTFF. An inverse of a time elapsed between two consecutive position-related data availabilities is called an update rate, i.e., the rate at which position-related data are generated after the first fix. Latency may depend on processing capability, e.g., of the UE. For example, a UE may report a processing capability of the UE as a duration of DL PRS symbols in units of time (e.g., milliseconds) that the UE can process every T amount of time (e.g., T ms) assuming 272 PRB (Physical Resource Block) allocation. Other examples of capabilities that may affect latency are a number of TRPs from which the UE can process PRS, a number of PRS that the UE can process, and a bandwidth of the UE.

[0091] One or more of many different positioning techniques (also called positioning methods) may be used to determine position of an entity such as one of the UEs 105, 106. For example, known position-determination techniques include RTT, multi-RTT, OTDOA (also called TDOA and including UL-TDOA and DL-TDOA), Enhanced Cell Identification (E-CID), DL-AoD, UL-AoA, etc. RTT uses a time for a signal to travel from one entity to another and back to determine a range between the two entities. The range, plus a known location of a first one of the entities and an angle between the two entities (e.g., an azimuth-32-4903 / A106WOQualcomm Ref. No. 2402271 WO angle) can be used to determine a location of the second of the entities. In multi-RTT (also called multi-cell RTT), multiple ranges from one entity (e.g., a UE) to other entities (e.g., TRPs) and known locations of the other entities may be used to determine the location of the one entity. In TDOA techniques, the difference in travel times between one entity and other entities may be used to determine relative ranges from the other entities and those, combined with known locations of the other entities may be used to determine the location of the one entity. Angles of arrival and / or departure may be used to help determine location of an entity. For example, an angle of arrival or an angle of departure of a signal combined with a range between devices (determined using signal, e.g., a travel time of the signal, a received power of the signal, etc.) and a known location of one of the devices may be used to determine a location of the other device. The angle of arrival or departure may be an azimuth angle relative to a reference direction such as true north. The angle of arrival or departure may be a zenith angle relative to directly upward from an entity (i.e., relative to radially outward from a center of Earth). E-CID uses the identity of a serving cell, the timing advance (i.e., the difference between receive and transmit times at the UE), estimated timing and power of detected neighbor cell signals, and possibly angle of arrival (e.g., of a signal at the UE from the base station or vice versa) to determine location of the UE. In TDOA, the difference in arrival times at a receiving device of signals from different sources along with known locations of the sources and known offset of transmission times from the sources are used to determine the location of the receiving device.

[0092] In a network-centric RTT estimation, the serving base station instructs the UE to scan for I receive RTT measurement signals (e.g., PRS) on serving cells of two or more neighboring base stations (and typically the serving base station, as at least three base stations are needed). The one of more base stations transmit RTT measurement signals on low reuse resources (e.g., resources used by the base station to transmit system information) allocated by the network (e.g., a location server such as the LMF 120). The UE records the arrival time (also referred to as a receive time, a reception time, a time of reception, or a time of arrival (ToA)) of each RTT measurement signal relative to the UE’s current downlink timing (e.g., as derived by the UE from a DL signal received from its serving base station), and transmits a common or individual RTT response message (e.g., SRS (sounding reference signal) for positioning, i.e., UL-PRS) to the one or more base stations (e.g., when instructed by its serving base station) and may include the time difference T_(Rx— >Tx) (i.e., UE TRx-Tx or UERx-Tx) between the ToA of the RTT measurement signal and the transmission time of the-33-4903 / A106WOQualcomm Ref. No. 2402271 WORTT response message in a payload of each RTT response message. The RTT response message would include a reference signal from which the base station can deduce the ToA of the RTT response. By comparing the difference T_(Tx— >Rx) between the transmission time of the RTT measurement signal from the base station and the ToA of the RTT response at the base station to the UE-reported time difference T_(Rx— >Tx), and subtracting the UERx-Tx, the base station can deduce the propagation time between the base station and the UE, from which the base station can determine the distance between the UE and the base station by assuming the speed of light during this propagation time.

[0093] A UE-ccntric RTT estimation is similar to the network-based method, except that the UE transmits uplink RTT measurement signal(s) (e.g., when instructed by a serving base station), which are received by multiple base stations in the neighborhood of the UE. Each involved base station responds with a downlink RTT response message, which may include the time difference between the ToA of the RTT measurement signal at the base station and the transmission time of the RTT response message from the base station in the RTT response message payload.

[0094] For both network-centric and UE-centric procedures, the side (network or UE) that performs the RTT calculation typically (though not always) transmits the first message(s) or signal(s) (e.g., RTT measurement signal(s)), while the other side responds with one or more RTT response message(s) or signal(s) that may include the difference between the ToA of the first message(s) or signal(s) and the transmission time of the RTT response message(s) or signal(s).

[0095] A multi-RTT technique may be used to determine position. For example, a first entity (e.g., a UE) may send out one or more signals (e.g., unicast, multicast, or broadcast from the base station) and multiple second entities (e.g., other TSPs such as base station(s) and / or UE(s)) may receive a signal from the first entity and respond to this received signal. The first entity receives the responses from the multiple second entities. The first entity (or another entity such as an LMF) may use the responses from the second entities to determine ranges to the second entities and may use the multiple ranges and known locations of the second entities to determine the location of the first entity by trilateration.

[0096] In some instances, additional information may be obtained in the form of an angle of arrival (AoA) or angle of departure (AoD) that defines a straight-line direction (e.g., which may be in a horizontal plane or in three dimensions) or possibly a range of directions (e.g.,-34-4903 / A106WOQualcomm Ref. No. 2402271 WO for the UE from the locations of base stations). The intersection of two directions can provide another estimate of the location for the UE.

[0097] For positioning techniques using PRS (Positioning Reference Signal) signals (e.g., TDOA and RTT), PRS signals sent by multiple TRPs are measured and the arrival times of the signals, known transmission times, and known locations of the TRPs used to determine ranges from a UE to the TRPs. For example, an RSTD (Reference Signal Time Difference) may be determined for PRS signals received from multiple TRPs and used in a TDOA technique to determine position (location) of the UE. A positioning reference signal may be referred to as a PRS or a PRS signal. The PRS signals arc typically sent using the same power and PRS signals with the same signal characteristics (e.g., same frequency shift) may interfere with each other such that a PRS signal from a more distant TRP may be overwhelmed by a PRS signal from a closer TRP such that the signal from the more distant TRP may not be detected. PRS muting may be used to help reduce interference by muting some PRS signals (reducing the power of the PRS signal, e.g., to zero and thus not transmitting the PRS signal). In this way, a weaker (at the UE) PRS signal may be more easily detected by the UE without a stronger PRS signal interfering with the weaker PRS signal. The term RS, and variations thereof (e.g., PRS, SRS, CSI-RS (Channel State Information - Reference Signal)), may refer to one reference signal or more than one reference signal.

[0098] Positioning reference signals (PRS) include downlink PRS (DL PRS, often referred to simply as PRS) and uplink PRS (UL PRS) (which may be called SRS (Sounding Reference Signal) for positioning). A PRS may comprise a PN code (pseudorandom number code) or be generated using a PN code (e.g., by modulating a carrier signal with the PN code) such that a source of the PRS may serve as a pseudo-satellite (a pseudolite). The PN code may be unique to the PRS source (at least within a specified area such that identical PRS from different PRS sources do not overlap). PRS may comprise PRS resources and / or PRS resource sets of a frequency layer. A DL PRS positioning frequency layer (or simply a frequency layer) is a collection of DL PRS resource sets, from one or more TRPs, with PRS resource(s) that have common parameters configured by higher-layer parameters DL-PRS- PositioningFrequencyLayer, DL-PRS-ResourceSet, and DL-PRS-Resource. Each frequency layer has a DL PRS subcarrier spacing (SCS) for the DL PRS resource sets and the DL PRS resources in the frequency layer. Each frequency layer has a DL PRS cyclic prefix (CP) for the DL PRS resource sets and the DL PRS resources in the frequency layer. In 5G, a-35-4903 / A106WOQualcomm Ref. No. 2402271 WO resource block occupies 12 consecutive subcarriers and a specified number of symbols. Common resource blocks are the set of resource blocks that occupy a channel bandwidth. A bandwidth part (BWP) is a set of contiguous common resource blocks and may include all the common resource blocks within a channel bandwidth or a subset of the common resource blocks. Also, a DL PRS Point A parameter defines a frequency of a reference resource block (and the lowest subcarrier of the resource block), with DL PRS resources belonging to the same DL PRS resource set having the same Point A and all DL PRS resource sets belonging to the same frequency layer having the same Point A. A frequency layer also has the same DL PRS bandwidth, the same start PRB (and center frequency), and the same value of comb size (i.e., a frequency of PRS resource elements per symbol such that for comb-N, every Nth resource element is a PRS resource element). A PRS resource set is identified by a PRS resource set ID and may be associated with a particular TRP (identified by a cell ID) transmitted by an antenna panel of a base station. A PRS resource ID in a PRS resource set may be associated with an omnidirectional signal, and / or with a single beam (and / or beam ID) transmitted from a single base station (where a base station may transmit one or more beams). Each PRS resource of a PRS resource set may be transmitted on a different beam and as such, a PRS resource (or simply resource) can also be referred to as a beam. This does not have any implications on whether the base stations and the beams on which PRS are transmitted are known to the UE.

[0099] A TRP may be configured, e.g., by instructions received from a server and / or by software in the TRP, to send DL PRS per a schedule. According to the schedule, the TRP may send the DL PRS intermittently, e.g., periodically at a consistent interval from an initial transmission. The TRP may be configured to send one or more PRS resource sets. A resource set is a collection of PRS resources across one TRP, with the resources having the same periodicity, a common muting pattern configuration (if any), and the same repetition factor across slots. Each of the PRS resource sets comprises multiple PRS resources, with each PRS resource comprising multiple OFDM (Orthogonal Frequency Division Multiplexing) Resource Elements (REs) that may be in multiple Resource Blocks (RBs) within N (one or more) consecutive symbol(s) within a slot. PRS resources (or reference signal (RS) resources generally) may be referred to as OFDM PRS resources (or OFDM RS resources). An RB is a collection of REs spanning a quantity of one or more consecutive symbols in the time domain and a quantity (12 for a 5G RB) of consecutive sub-carriers in the frequency domain. Each PRS resource is configured with an RE offset, slot offset, a-36-4903 / A106WOQualcomm Ref. No. 2402271 WO symbol offset within a slot, and a number of consecutive symbols that the PRS resource may occupy within a slot. The RE offset defines the starting RE offset of the first symbol within a DL PRS resource in frequency. The relative RE offsets of the remaining symbols within a DL PRS resource are defined based on the initial offset. The slot offset is the starting slot of the DL PRS resource with respect to a corresponding resource set slot offset. The symbol offset determines the starting symbol of the DL PRS resource within the starting slot. Transmitted REs may repeat across slots, with each transmission being called a repetition such that there may be multiple repetitions in a PRS resource. The DL PRS resources in a DL PRS resource set arc associated with the same TRP and each DL PRS resource has a DL PRS resource ID. A DL PRS resource ID in a DL PRS resource set is associated with a single beam transmitted from a single TRP (although a TRP may transmit one or more beams).

[0100] A PRS resource may also be defined by quasi-co-location and start PRB parameters. A quasi-co-location (QCL) parameter may define any quasi-co-location information of the DL PRS resource with other reference signals. The DL PRS may be configured to be QCL type D with a DL PRS or SS / PBCH (Synchronization Signal / Physical Broadcast Channel) Block from a serving cell or a non-serving cell. The DL PRS may be configured to be QCL type C with an SS / PBCH Block from a serving cell or a non-serving cell. The start PRB parameter defines the starting PRB index of the DL PRS resource with respect to reference Point A. The starting PRB index has a granularity of one PRB and may have a minimum value of 0 and a maximum value of 2176 PRBs.

[0101] A PRS resource set is a collection of PRS resources with the same periodicity, same muting pattern configuration (if any), and the same repetition factor across slots. Every time all repetitions of all PRS resources of the PRS resource set are configured to be transmitted is referred as an “instance”. Therefore, an “instance” of a PRS resource set is a specified number of repetitions for each PRS resource and a specified number of PRS resources within the PRS resource set such that once the specified number of repetitions are transmitted for each of the specified number of PRS resources, the instance is complete. An instance may also be referred to as an “occasion.” A DL PRS configuration including a DL PRS transmission schedule may be provided to a UE to facilitate (or even enable) the UE to measure the DL PRS.

[0102] Multiple frequency layers of PRS may be aggregated to provide an effective bandwidth that is larger than any of the bandwidths of the layers individually. Multiple-37-4903 / A106WOQualcomm Ref. No. 2402271 WO frequency layers of component carriers (which may be consecutive and / or separate) and meeting criteria such as being quasi co-located (QCLed), and having the same antenna port, may be stitched to provide a larger effective PRS bandwidth (for DL PRS and UL PRS) resulting in increased time of arrival measurement accuracy. Stitching comprises combining PRS measurements over individual bandwidth fragments into a unified piece such that the stitched PRS may be treated as having been taken from a single measurement. Being QCLed, the different frequency layers behave similarly, enabling stitching of the PRS to yield the larger effective bandwidth. The larger effective bandwidth, which may be referred to as the bandwidth of an aggregated PRS or the frequency bandwidth of an aggregated PRS, provides for better time-domain resolution (e.g., of TDOA). An aggregated PRS includes a collection of PRS resources and each PRS resource of an aggregated PRS may be called a PRS component, and each PRS component may be transmitted on different component carriers, bands, or frequency layers, or on different portions of the same band.

[0103] RTT positioning is an active positioning technique in that RTT uses positioning signals sent by TRPs to UEs and by UEs (that are participating in RTT positioning) to TRPs. The TRPs may send DL-PRS signals that are received by the UEs and the UEs may send SRS (Sounding Reference Signal) signals that are received by multiple TRPs. A sounding reference signal may be referred to as an SRS or an SRS signal. In 5G multi-RTT, coordinated positioning may be used with the UE sending a single UL-SRS for positioning that is received by multiple TRPs instead of sending a separate UL-SRS for positioning for each TRP. A TRP that participates in multi-RTT will typically search for UEs that are currently camped on that TRP (served UEs, with the TRP being a serving TRP) and also UEs that are camped on neighboring TRPs (neighbor UEs). Neighbor TRPs may be TRPs of a single BTS (Base Transceiver Station) (e.g., gNB), or may be a TRP of one BTS and a TRP of a separate BTS. For RTT positioning, including multi-RTT positioning, the DL-PRS signal and the UL-SRS for positioning signal in a PRS / SRS for positioning signal pair used to determine RTT (and thus used to determine range between the UE and the TRP) may occur close in time to each other such that errors due to UE motion and / or UE clock drift and / or TRP clock drift are within acceptable limits. For example, signals in a PRS / SRS for positioning signal pair may be transmitted from the TRP and the UE, respectively, within about 10 ms of each other. With SRS for positioning being sent by UEs, and with PRS and SRS for positioning being conveyed close in time to each other, it has been found that radiofrequency (RF) signal congestion may result (which may cause excessive noise, etc.)-38-4903 / A106WOQualcomm Ref. No. 2402271 WO especially if many UEs attempt positioning concurrently and / or that computational congestion may result at the TRPs that are trying to measure many UEs concurrently.

[0104] RTT positioning may be UE-based or UE-assisted. In UE-based RTT, the UE 200 determines the RTT and corresponding range to each of the TRPs 300 and the position of the UE 200 based on the ranges to the TRPs 300 and known locations of the TRPs 300. In UE- assisted RTT, the UE 200 measures positioning signals and provides measurement information to the TRP 300, and the TRP 300 determines the RTT and range. The TRP 300 provides ranges to a location server, e.g., the server 400, and the server determines the location of the UE 200, c.g., based on ranges to different TRPs 300. The RTT and / or range may be determined by the TRP 300 that received the signal(s) from the UE 200, by this TRP 300 in combination with one or more other devices, e.g., one or more other TRPs 300 and / or the server 400, or by one or more devices other than the TRP 300 that received the signal(s) from the UE 200.

[0105] Various positioning techniques are supported in 5G NR. The NR native positioning methods supported in 5G NR include DL-only positioning methods, UL-only positioning methods, and DL+UL positioning methods. Downlink-based positioning methods include DL-TDOA and DL-AoD. Uplink-based positioning methods include UL-TDOA and UL- AoA. Combined DL+UL -based positioning methods include RTT with one base station and RTT with multiple base stations (multi-RTT).

[0106] A position estimate (e.g., for a UE) may be referred to by other names, such as a location estimate, location, position, position fix, fix, or the like. A position estimate may be geodetic and comprise coordinates (e.g., latitude, longitude, and possibly altitude) or may be civic and comprise a street address, postal address, or some other verbal description of a location. A position estimate may further be defined relative to some other known location or defined in absolute terms (e.g., using latitude, longitude, and possibly altitude). A position estimate may include an expected error or uncertainty (e.g., by including an area or volume within which the location is expected to be included with some specified or default level of confidence). Position information may include one or more positioning signal measurements (e.g., of one or more satellite signals, of PRS, and / or one or more other signals), and / or one or more values (e.g., one or more ranges (possibly including one or more pseudoranges), and / or one or more position estimates, etc.) based on one or more positioning signal measurements.RF Sensing Techniques-39-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0107] Wireless communication signals (e.g., radio frequency (RF) signals configured to carry orthogonal frequency division multiplexing (OFDM) symbols in accordance with a wireless communications standard, such as LTE, NR, etc.) transmitted between a UE and a base station can be used for environment sensing (also referred to as “RF sensing” or “radar”). Using wireless communication signals for environment sensing can be implemented with radar principles with advanced detection capabilities that enable, among other things, touchless / device-free interaction with a device / system. The wireless communication signals may be cellular communication signals, such as LTE or NR signals, WLAN signals, such as Wi-Fi signals, etc. As a particular example, the wireless communication signals may be an OFDM waveform as utilized in LTE and NR. High- frequency communication signals, such as millimeter wave (mmW) RF signals, are especially beneficial to use as sensing signals because the higher frequency provides, at least, more accurate range (distance) detection.

[0108] Possible use cases of RF sensing include health monitoring use cases, such as heartbeat detection, respiration rate monitoring, and the like, gesture recognition use cases, such as human activity recognition, keystroke detection, sign language recognition, and the like, contextual information acquisition use cases, such as location detection / tracking, direction finding, range estimation, and the like, and automotive sensing use cases, such as smart cruise control, collision avoidance, and the like.

[0109] There are different types of sensing, including monostatic sensing (also referred to as “active sensing”) and bistatic sensing (also referred to as “passive sensing”). Monostatic sensing systems may include implementations where the transmitter (Tx) and receiver (Rx) are co-located in the same sensing device (e.g., a UE). The sensing device can measure various properties (e.g., times of arrival (ToAs), angles of arrival (AoAs), phase shift, etc.) of the reflections of the RF sensing signals 434 to determine characteristics of the target object 406 (e.g., size, shape, speed, motion state, etc.). In bistatic sensing schemes, the transmitter (Tx) and receiver (Rx) are not co-located, that is, they are separate devices (e.g., a UE and a base station (or TRP)). In this case, the transmitter device transmits RF sensing signals to the sensing device 404, but some of the RF sensing signals reflect off a target object. The sensing device (also referred to as the “receiver device”) can measure the times of arrival (ToAs) of the RF sensing signals received directly from the transmitter device and the ToAs of the reflections of the RF sensing signals reflected from the target object.-40-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0110] More specifically, a transmitter device (e.g., a base station) may transmit a single RF signal or multiple RF signals to a sensing device (e.g., a UE). However, the receiver may receive multiple RF signals corresponding to each transmitted RF signal due to the propagation characteristics of RF signals through multipath channels. Each path may be associated with a cluster of one or more channel taps. Generally, the time at which the receiver detects the first cluster of channel taps is considered the ToA of the RF signal on the line-of-site (LOS) path (i.e., the shortest path between the transmitter and the receiver). Later clusters of channel taps are considered to have reflected off objects between the transmitter and the receiver and therefore to have followed non-LOS (NLOS) paths between the transmitter and the receiver. RF sensing signals may follow the LOS path between the transmitter device and the sensing device, and the RF sensing signals may follow an NLOS path between the transmitter device and the sensing device due to reflecting off the target object. The transmitter device may have transmitted multiple RF sensing signals, some of which followed the LOS path and others of which followed the NLOS path. Alternatively, the transmitter device may have transmitted a single RF sensing signal in a broad enough beam that a portion of the RF sensing signal followed the LOS path (RF sensing signal) and a portion of the RF sensing signal followed the NLOS path (RF sensing signal).

[0111] Based on the ToA of the LOS path, the ToA of the NLOS path, and the speed of light, the sensing device can determine the distance to the target object(s). For example, the sensing device can calculate the distance to the target object as the difference between the ToA of the LOS path and the ToA of the NLOS path multiplied by the speed of light. In addition, if the sensing device is capable of receive beamfomiing, the sensing device may be able to determine the general direction to a target object as the direction (angle) of the receive beam on which the RF sensing signal following the NLOS path was received. That is, the sensing device may determine the direction to the target object as the angle of arrival (AoA) of the RF sensing signal, which is the angle of the receive beam used to receive the RF sensing signal. The sensing device may then report this information to the transmitter device, its serving base station, an application server associated with the core network, an external client, a third-party application, or some other sensing entity. Alternatively, the sensing device may report the ToA measurements to the transmitter device, or other sensing entity (e.g., if the sensing device does not have the processing capability to perform the calculations itself), and the transmitter device may determine the distance and, optionally, the direction to the target object.-41-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0112] Note that if the RF sensing signals are uplink RF signals transmitted by a UE to a base station, the base station would perform object detection based on the uplink RF signals just like the UE does based on the downlink RF signals. Like other forms of radar, wireless communication-based sensing signals can be used to estimate the range (distance), velocity (Doppler), and AoA of a target object.

[0113] In this disclosure, techniques are discussed for detecting the location of a target with one or more UEs utilizing a two-stage sensing signal configuration. These techniques may include a two-stage sensing signal configuration utilizing a probe signal and sensing signal, where the probe signal (i.c., the first stage signal) is processed by a LP-WUR of the UE that triggers a main radio of the UE to do processing of the sensing signal (i.e., the second stage signal) over a longer range of time that includes significantly more processing of the sensing signal. In this manner, LP-WUR may be used for RF sensing purposes and as a trigger that allows the UE to decide whether to use the main radio in performing the sensing measurements of the second stage sensing signal or not. In this example, the decision to perform sensing with the main radio is done by the UE rather than a network entity in signal communication with the UE.

[0114] Turning to FIG. 5, a functional system block diagram is shown of an example of an implementation of a system 500 for utilizing a two-stage sensing signal configuration for detecting a location 502 of a target 504 with at least one UE having a LP-WUR and a main radio. In this example, the system 500 may include a network entity 506, a TE 508, and at least one UE (for example, a first UE 510 and second UE 512). The network entity 506 may be in signal communication with the TE 508, first UE 510, and second UE 512 via a network 514. The network entity 506 may be a server. Alternatively, the network entity 506 may be in signal communication with the TE 508 directly via an optional direct signal path 516 or the network entity 506 may be, optionally, part of the TE 508. In this example, the first UE 510 and second UE 512 may be in signal communication with the network entity 506 via the network 514 and at least one base station 518.

[0115] In this example, the TE 508 may be a UE (i.e., a third UE), base station (e.g., the at least one base station 518), and / or TRP (e.g., TRP 300 discussed previously in relation to FIG. 3). The network entity 506 may be, for example, the 5GC 140, LMF 120, and / or server 400 discussed previously. As an example, the network entity 506 may include at least one processor (i.e., processor 410), at least one memory (i.e., memory 411), software (i.e., SW 412), and at least one transceiver (i.e., transceiver 415). The at least one base station 518-42-4903 / A106WOQualcomm Ref. No. 2402271 WO may be, for example, the NG-RAN 135 discussed previously in relation to FIG. 1. The first UE 510 and / or second UE 512 may be, for example, the UE 105, UE 200, discussed previously.

[0116] The circuits, components, modules, and / or devices of, or associated with the system 500 and other devices are described as being in signal communication, communicatively coupled, and / or electrically coupled (or simply '‘coupled”) with each other, where signal communication refers to any type of communication and / or connection between the circuits, components, modules, and / or devices that allows a circuit, component, module, and / or device to pass and / or receive signals and / or information from another circuit, component, module, and / or device. The communication and / or connection may be along any signal path between the circuits, components, modules, and / or devices that allows signals and / or information to pass from one circuit, component, module, and / or device to another and includes wireless or wired signal paths. The signal paths may be physical, such as, for example, conductive wires, electromagnetic wave guides, cables, attached and / or electromagnetic or mechanically coupled terminals, semi-conductive or dielectric materials or devices, or other similar physical connections or couplings. Additionally, signal paths may be non-physical such as free-space (in the case of electromagnetic propagation) or information paths through digital components where communication information may be passed from one circuit, component, module, and / or device to another in varying digital formats without passing through a direct electromagnetic connection.

[0117] In example of operation, the network entity 506 may perform a method for detecting the location 502 of the target 504 utilizing a two-stage sensing signal configuration. In the first stage of operation, the network entity 506 may cause the TE 508 to transmit, at the target 504, a probe signal 520 at the first time; and, in the second stage of operation, the network entity 506 may cause the TE 508 to transmit, at the target 504, a sensing signal 522 at a second time. In this example, the probe signal 520 has a first power and a first time duration of transmission; and the sensing signal 522 has a second power that is greater than or equal to the first power, where the second time is after an end time of the first time duration. The sensing signal 522 also has a second time duration that starts at the second time of transmitting the sensing signal 522 and a difference in time between the second time and the end time of the first-time duration of the probe signal 520 defines an offset duration between the transmission of the probe signal 520 and the sensing signal 522. In this example, the probe signal 520 may be configured as an On-Off Keying-based signal (i.e., a signal where-43-4903 / A106WOQualcomm Ref. No. 2402271 WO the transmiter of the TE 508 switches between transmission and no transmission according to a predefined sequence such that modulation represents digital data as the presence or absence of a carrier wave) and the sensing signal 522 may be configured as an orthogonal frequency-division multiplexing (OFDM) signal. As such and in general, the probe signal 520 has one or more characteristics that are different from the sensing signal 522. As an example, the probe signal 520 may have a different structure or modulation scheme than the sensing signal 522 and may be optionally a signal that is less complex in terms of receiver processing relative to the sensing signal 522 to save on processing power.

[0118] Further, the network entity 506 may cause the TE 508 to transmit multiple sensing signals 522 towards the target 504 such that transmiting the sensing signal 522 at the target 504 may include transmiting the sensing signal 522 repeatedly at the target 504 within the second time duration.

[0119] The network entity 506 may then receive sensing information 524 of the target 504 from the first UE 510, second UE 512, or both, where the sensing information 524 is produced from a reflected portion of the sensing signal 522 produced when the sensing signal 522 is scatered, reflected, and / or deflected on the target 504.

[0120] In this example, the probe signal 520 and sensing signal 522 may be both transmited in the same direction and, if the target 504 is present in the direction of the transmission path of both the probe signal 520 and sensing signal 522, both the probe signal 520 and sensing signal 522 will be scatered by the target 504 to produce at least a first reflected portion of the probe signal (i.e., first reflected probe signal 526), a second reflected portion of the probe signal (i.e., second reflected probe signal 528), a first reflected portion of the sensing signal (i.e., first reflected sensing signal 530), and a second reflected portion of the sensing signal (i.e., second reflected sensing signal 532), which are, in this example, received by the first UE 510 and second UE 512, respectively.

[0121] In this example, if both the first UE 510 and second UE 512 are present, in response to receiving the first reflected sensing signal 530 with the first UE 510 and the second reflected sensing signal 532, the first UE 510 may produce a first sensing information signal 534 and the second UE 512 may produce a second sensing information signal 536 that may be transmited to the at least one base station 518. The sensing information 524 provided to the network entity 506, via the network 514, may alternatively include either the first sensing information signal 534 or the second sensing information signal 536 if only one UE (i.e., either first UE 510 or second UE 512 is present) or a combination of sensing information of-44-4903 / A106WOQualcomm Ref. No. 2402271 WO both the first sensing information signal 534 and the second sensing information signal 536, if both the first UE 510 and second UE 512 are present. Alternatively, the sensing information 524 may include either the first sensing information signal 534 or the second sensing information signal 536, if both the first UE 510 and second UE 512 are present but are transmitting the first sensing information signal 534 and the second sensing information signal 536 at different times. In these examples, the first UE 510 and / or second UE 512 may measure positional information of the target 504 in response to the respective received reflected portions of the sensing signal (i.e., the first reflected sensing signal 530 and / or the second reflected sensing signal 532), where the sensing information (i.e., the first sensing information signal 534 and / or the second sensing infomiation signal 536) includes, is in response to, or is based on, the measured positional information. The network entity 506 may then determine the location 502 of the target 504 from the sensing information 524.

[0122] In this example, in addition to receiving sensing information 524 from the one or more UEs, the network entity 506 may also be configured to receive one or more capability messages 538 from the one or more UEs. As an example, the first UE 510 may transmit a first capability message 540 and the second UE 512 may transmit a second capability message 542 that are shown as the one or more capability messages 538 that are transmitted to the network entity 506. In this example, each capability message of a UE indicates a switching time needed for the UE to switch from operating the LP-WUR to operating the main radio, where the LP-WUR is configured to receive the probe signal (e.g., first reflected probe signal 526 or second reflected probe signal 528) and the main radio is configured to receive the sensing signal (e.g., first reflected sensing signal 530 or second reflected sensing signal 532). Once the one or more capability messages 538 are received, the network entity 506 may be configured to update the transmission of the sensing signal 522 by updating the second time in response to the switching time, or switching times, of the one or more capability messages 538.

[0123] In general, in this example as will be discussed later, the main radio (i.e., the main radio 704 of FIG. 7) may be operating in a “sleep” or “low-power mode” with respect to sensing or otherwise, then the main radio may be activated, or enabled, to process the signals, hi this way, the LP-WUR (i.e., LP-WUR 702 of FIG. 7) will consume less power when compared to main radio.

[0124] The network entity 506 may also be configured to set a threshold value for the probe signal 520 in response to the one or more capability messages 538, and transmit the threshold-45-4903 / A106WOQualcomm Ref. No. 2402271 WO value to the at least one UE (e.g., the first UE 510, second UE 512, or both), where the threshold value sets a trigger on the at least one UE to operate the main radio if the at least one UE receives a reflected portion of the probe signal (e.g., the first reflected sensing signal 530, second reflected sensing signal 532, or both) that has a received power level that is greater than the threshold value.

[0125] Moreover, in this example, if a plurality of UEs (that include both the first UE 510 and second UE 512) are present, the network entity 506 may receive the sensing information 524 by receiving the sensing information 524 (including the first sensing information signal 534 and second sensing information signal 536) from the plurality of UEs; and receive the one or more capability messages 538 by receiving an individual capability message from each UE of the plurality of UEs that indicates an individual switching time for each UE. The network entity 506 may then be configured to update the second time by updating the second time in response to the individual switching times of all the plurality of UEs that sent the capability messages.

[0126] In addition to the network entity 506, each UE (e.g., the first UE 510, second UE 512, or both) may also perform a method for detecting the location 502 of the target 504 utilizing a two-stage sensing signal configuration. For example, the first UE 510 may perform a method that comprises: receiving, with a LP-WUR of the first UE 510, a reflected portion (i.e., the first reflected probe signal 526) of the probe signal 520 that was transmitted by the TE 508 at a first time, towards the target 504, where the probe signal 520 has a first power and a first time duration, and the probe signal 520 was scattered, reflected, or diffracted by the target 504 to produce the reflected portion of the probe signal 520; receiving, with a main radio of the first UE 510, a reflected portion (i.e., the first reflected sensing signal 530) of the sensing signal 522 that was transmitted by the TE 508 at a second time if the first power is greater than the threshold value, where the sensing signal 522 has a second power that is greater than or equal to the first power, and the second time is after an end time of the first time duration; measuring, with the main radio, positional information of the target 504 in response to the received reflected portion of the sensing signal 522; and transmitting sensing information (i.e., the first sensing information signal 534) to the network entity 506, where the sensing information includes the positional information.

[0127] The first UE 510 may also transmit a capability message (i.e., first capability message 540) to the network entity 506 that indicates a switching time for the first UE 510 to switch from operating the LP-WUR to operating the main radio. Further, in this example,-46-4903 / A106WOQualcomm Ref. No. 2402271 WO generally, the first UE 510 may be able to receive the first reflected sensing signal 530 for the entire amount of the second time duration. However, alternatively, in some other implementations, the first UE 510 may not be able to receive the first reflected sensing signal 530 for the entire amount of the second time duration and may only be able to receive the reflected portion of the sensing signal 522 by only being able to receive the reflected portion of the sensing signal 522 for a receive time duration that is a fraction of the second time duration (i.e., for a time duration that is shorter than the second time duration). In this example, the first UE 510 may be configured to measure the positional information by measuring the positional information in response to the received reflected portion of the sensing signal 522 for the receive time duration and not the second time duration.

[0128] As discussed previously, the first UE 510 may receive the threshold value from the network entity 506, where the threshold value is in response to the capability message (i.e., the first capability message 540). The first UE 510 may also be configured to provide an error message to the network entity 506 via the first sensing information signal 534 to inform the network entity 506 that measured power level of the first reflected probe signal 526 was less than the threshold value provided by the network entity 506.

[0129] In this example, the first UE 510 was described as performing the method but it is noted that this was illustration purposes only and the second UE 512, or other UEs may also perform the same method.

[0130] FIG. 6 is a functional system diagram of an example of an implementation of the system 600 described in relation to FIG. 5 for traffic applications along a road 602. In this example, a plurality of UEs may be implemented in a corresponding plurality of vehicles travelling along two opposite directions along a first lane 604 and second lane 606 of the road 602. The system 600 includes the network entity 506 in signal communication with at least two base stations (i.e., the first base station 608 and second base station 610) via the network 514. In this example, the first base station 608 and second base station 610 may each be a TE (e.g., TE 508) that each transmit a probe signal and sensing signal towards the road 602 on approximately opposite directions. In this example, some, or all of, the vehicles may have UEs as described previously. For example, for ease of illustration, a first vehicle 612 and second vehicle 614 are shown as having, or being, a UE having a LP-WUR and a main radio.

[0131] The network entity 506 may utilize the first base station 608, second base station 610, first vehicle 612, and second vehicle 614 to determine the position of targets (including other vehicles) along the road 602. Utilizing these techniques the network entity 506 may be-47-4903 / A106WOQualcomm Ref. No. 2402271 WO utilized for blind spot detection and / or sensing assisted automotive maneuvering and navigation.

[0132] FIG. 7 is a system block diagram of an example of an implementation of a UE 700 which may be either the first UE 510 or second UE 512 described previously in relation to FIG. 5. The UE 700 may include an LP-WUR 702, a main radio 704 having at least one transceiver 706, at least one memory 708, at least one processor 710, a bus 712, a first antenna 714, and at least one second antenna 716. Alternatively, the UE 700 may only include a combined single antenna instead of the first antenna 714 and the at least one second antenna 716.

[0133] The at least one memory 708 may include a machine-readable (e.g., computer- readable) medium having software 718 for producing instructions for the at least one processor 710. In this example, the LP-WUR 702, main radio 704, at least one transceiver 706, at least one memory 708, and at least one processor 710 are in signal communication, via the bus 712. The first antenna 714 may be in signal communication with the LP-WUR 702 and the second antenna 716 may be in signal communication with the at least one transceiver 706.

[0134] The LP-WUR 702 may be configured to receive the reflected probe signal 720, via the first antenna 714, for first stage sensing of the UE 700 and the at least one processor 710 may be configured to, via the at least one transceiver 706 and the at least one second antenna 716, receive the reflected sensing signal 722 and transmit the sensing information signal 724 via the at least one antenna 716.

[0135] The main radio 704 and LP-WUR 702 may be implemented as separate devices within the UE 700 that may optionally share some circuitry. In general, in this example, the LP-WUR 702 and main radio 704 may include different circuitry (in addition to any optional shared circuitry) and have different capabilities for processing different modulation schemes as noted above with different power consumptions where the LP-WUR 702 is configured to consume less power than the main radio 704. As an example, the LP-WUR 702 may include some of the circuitry of main radio 704, where the LP-WUR 702 may optionally be a subportion of the main radio 704 that utilizes less power than utilizing all of the circuitry of the main radio 704. Moreover, this optional circuitry may be active when the main radio 704 is in a sleep / low-power mode.

[0136] FIG. 8 is a diagram of an example of an implementation of a two-stage sensing scheme 800 along time 802. As described previously, the two-stage sensing scheme 800 may-48-4903 / A106WOQualcomm Ref. No. 2402271 WO include a probe signal 804 as a first stage sensing signal and a “main” sensing signal 806 as the second stage sensing signal. The probe signal 804 has a first time 808, a first time duration 810, and an end time 812. The sensing signal 806 has a start time at a second time 814, a second time duration 816, and an end time 818. In this example, the first time duration 810 is the transmission duration of the probe signal 804 and the second time duration 816 is the transmission duration of the sensing signal 806. The time between the duration of the probe signal 804 and sensing signal 806 is an offset having an offset duration 820.

[0137] As described previously, the probe signal 804 is transmitted at the first time 808 with the first time duration 810 and the sensing signal 806 is transmitted at the second time 814 that is after the end time 812 of the first duration 810. The sensing signal 806 has the second time duration 816 that starts at the second time 814 and ends at the end time 818. In this example, the offset duration 820 is defined as the difference in time between the second time 814 and the end time 812 of the first time duration 810 of the probe signal 804. As discussed previously, in this example, the probe signal 804 may be an On-Off Keying-based signal, and the sensing signal 806 may be an OFDM signal.

[0138] As an example, the probe signal 804 may be configured to “piggyback” on existing low power signals utilized by the UE 700. Examples of existing low power signals may include low power synchronization signals. In this example, the two-stage sensing signal configuration may be configured to indicate which existing low power signal to utilize in the first stage with the probe signal 804. Examples of these existing low power signals include, for example, low power single-sideband modulation (LP-SSB) signal or similar type of signal.

[0139] FIG. 9 a diagram of an example of another implementation of a two-stage sensing scheme 900 along time 902. In this example, the UE 700 is not able to measure the sensing signal 806 for the entire duration of the second time duration 816 because of the switching time 904 needed to go from operating the LP-WUR 702 to waking up and operating the main radio 704. In this example, the switching time 904 extends past the second start time 814 by an amount of time TI 906. If the second time duration 816 is designated as TO, the fraction of the sensing signal 806 within the second time duration 816 that the UE is capable of measuring is equal to the fractionT° TT1. The UE 700 may then be configured to report back o to the network entity 506, via the sensing information signal 724, the fraction or the time difference of O- Ti.-49-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0140] In this example, these time values may be reported to the network entity 506 to provide an indication to the network entity 506 of the reliability and the confidence to be expected from the reflected sensing signal 722 based on, for example, measured Doppler values of the reflected sensing signal 722. These Doppler values have a Doppler resolution that depends on the monitored window’s duration from the main sensing signal (i.e. , the second time duration 816 of the sensing signal 806). In this example, the measured Doppler values assist the UE 700 in determining whether the UE 700 should activate the main radio 704. For example, the UE 700 may activate the main radio 704 only when there is a high probability that the UE 700 will be able to monitor the sensing signal 806 for a minimum fraction of the second time duration 816 based on the Doppler values of the reflected sensing signal 722 (i.e., the sensing signal 806). As an example, the UE 700 may wake up the main radio 704 only if the received Doppler resolution is greater than a Doppler threshold.

[0141] In this example, the Doppler resolution is defined as Av, whereand A is the wavelength of the sensing signal 722 and T is the sensing signal duration (i.e., the second time duration 816 of the sensing signal 806). The UE 700 is configured to determine the Av value and based on the available signal duration T, decides whether to wake up the main radio 704 based on the determined Av value.

[0142] Alternatively, the UE 700 may report back the fraction of the monitored second stage signal (i.e., the sensing signal 806) when reporting RF sensing measurements to the network entity 506. In this example, the UE 700 may report to the network entity 506 the fraction (i.e.,T°T1) or TO- TI (i.e., exactly what was monitored by the UE 700) of theTo monitored second stage duration (i.e., the second time duration 816 of the sensing signal 806) along with other sensing measurements.

[0143] In this example, at the end of the reception of the first stage signal (i.e., the probe signal 804 at end time 812) by the LP-WUR 702, the UE 700 may then determine the receive power of the probe signal 804. The UE 700 may then compare this determined received power to a predefined threshold (i.e., PLP-wuR,min) and if the determined received power is greater than the predefined threshold, the UE 700 wakes up the main radio 704 to monitor the main sensing signal (i.e., the sensing signal 806). As an example, the predefined threshold-50-4903 / A106WOQualcomm Ref. No. 2402271 WO may be approximately - 80 dBm. In this example, the predefined threshold is configured by the network entity 506 and provided to the UE 700.

[0144] FIG. 10 is a flowchart of an example of an implementation of a method 1000 for detecting the location (e.g., location 502) of a target (e.g., target 504) with a network entity (e.g., network entity 506). The method 1000 may comprise: at stage 1002, transmitting a probe signal at the target at a first time with the TE, where the probe signal has a first power and a first time duration; at stage 1004, transmitting a sensing signal at the target at a second time with the TE, where the sensing signal has a second power that is greater than or equal to the first power and the second time is after an end time of the first time duration; and, at stage 1006, receiving sensing information of the target from at least one UE, where the sensing information is produced from a reflected portion of the sensing signal produced when the sensing signal is scattered on the target.

[0145] The at least one transceiver 415, possibly in combination with the at least one processor 410, and the at least one memory 411, may comprise means for transmitting the probe signal (e.g., probe signal 520) at the target (e.g., target 504) at the first time with the TE (e.g., TE 508), where the probe signal has a first power and a first time duration; means for transmitting a sensing signal (e.g., sensing signal 522) at the target at the second time with the TE, where the sensing signal has a second power that is greater than or equal to the first power and the second time is after an end time of the first time duration; and means for receiving the sensing information (e.g., sensing information 524) of the target from at least one UE, where the sensing information is produced from a reflected portion of the sensing signal produced when the sensing signal is scattered on the target.

[0146] FIG. 11 is a flowchart of an example of an implementation of a method 1100 for detecting a location of a target with a UE. The method 1100 may comprise: at stage 1102, receiving, with a LP-WUR of the UE, a reflected portion of a probe signal that was transmitted by a TE at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; at stage 1104, receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, wherein the second time is after an end time of the first time duration; at stage 1106, measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and at stage 1108, transmitting the sensing information of the target to a network-51-4903 / A106WOQualcomm Ref. No. 2402271 WO entity. In this example, in some aspects, the method 1100 may include activating or waking the main radio from a sleep, or low power state, in response to the received probe signal power level being above the threshold.

[0147] In this example, the method 1100 may further include transmitting a capability message (i.e., capability message 538) to the network entity (i.e. , network entity 506) that indicates a switching time for the UE (i.e., UE 510) to switch from operating the LP-WUR (i.e., LP-WUR 702) to operating the main radio (i.e., main radio 704). The method 1100 may further include receiving the threshold value from the network entity, where the threshold value is in response to the capability message. In this example, the sensing signal may include a second time duration that starts at the second time, and receiving the reflected portion of the sensing signal includes receiving the reflected portion of the sensing signal for a receive time duration that is a fraction of the second time duration. Further, measuring the sensing information may include measuring the sensing information in response to the received reflected portion of the sensing signal for the receive time duration. Moreover, the sensing information may include an error message if the first transmit power is less than the threshold value.

[0148] The LP-WUR 702, possibly in combination with the at least one processor 710, at least one memory 708, may comprise means for receiving, with the LP-WUR 702 of the UE 700, the reflected portion (e.g., reflected probe signal 720) of a probe signal (e.g., probe signal 520) that was transmitted by the TE (e.g., TE 508) at the first time. The at least one transceiver 706, possibly in combination with the at least one processor 710, at least one memory 708, may comprise means for receiving, with the main radio 704 of the UE 700, a reflected portion (i.e., reflected sensing signal 722) of a sensing signal 522 that was transmitted by the TE (e.g., TE 508) at a second time if the first power is greater than a threshold value. The at least one processor 710, possibly in combination with the at least one memory 708 and SW 718 may comprise means for measuring, with the main radio 704, positional information of the target 504 in response to the received reflected portion (e.g., reflected sensing signal 722) of the sensing signal 522. Moreover, the at least one transceiver 706, possibly in combination with the at least one processor 710, at least one memory 708, may comprise means for transmitting the sensing information (e.g., sensing information signal 724) to the network entity (e.g., network entity 506), where the sensing information includes the positional information.-52-4903 / A106WOQualcomm Ref. No. 2402271 WOImplementation examples

[0149] Implementation examples are provided in the following numbered clauses.

[0150] Clause 1. A user equipment (UE) for radio frequency (RF) sensing, the UE comprising: at least one memory; a main radio having at least one transceiver; a low-power wake up radio (LP-WUR); at least one processor communicatively coupled to the at least one memory, the main radio, and the LP-WUR, wherein the at least one processor is configured to: receive, with the LP-WUR, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive and process, with the main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measure, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmit sensing information of the target to a network entity, wherein the sensing information includes the positional information.

[0151] Clause 2. The UE of clause 1, wherein the at least one processor is further configured to transmit a capability message to the network entity that indicates a switching time for the UE to switch from operating the LP-WUR to operating the main radio.

[0152] Clause 3. The UE of clause 2, wherein the at least one processor is further configured to receive the threshold value from the network entity, wherein the threshold value is in response to the capability message.

[0153] Clause 4. The UE of clause 2, wherein the sensing signal includes a second time duration that starts at the second time, and the at least one processor is configured to receive the reflected portion of the sensing signal by being configured to receive the reflected portion of the sensing signal for a receiving time duration that is a fraction of the second time duration.

[0154] Clause 5. The UE of clause 4, wherein the at least one processor is configured to measure the positional information by being configured to measure the positional information in response to the received reflected portion of the sensing signal for the receive time duration.

[0155] Clause 6. The UE of any of clauses 1, 2, 3, 4, or 5, wherein the sensing information includes an error message if the first transmit power is less than the threshold value.-53-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0156] Clause 7. A method for radio frequency (RF) sensing with a user equipment (UE), the method comprising: receiving, with a low-power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and transmitting the sensing information of the target to a network entity.

[0157] Clause 8. The method of clause 7, further includes transmitting a capability message to the network entity that indicates a switching time for the UE to switch from operating the LP-WUR to operating the main radio.

[0158] Clause 9. The method of clause 8, further including receiving the threshold value from the network entity, wherein the threshold value is in response to the capability message.

[0159] Clause 10. The method of clause 8, wherein the sensing signal includes a second time duration that starts at the second time, and receiving the reflected portion of the sensing signal includes receiving the reflected portion of the sensing signal for a receive time duration that is a fraction of the second time duration.

[0160] Clause 11. The method of clause 10, wherein measuring the sensing information includes measuring the sensing information in response to the received reflected portion of the sensing signal for the receive time duration.

[0161] Clause 12. The method of any of clauses 7, 8, 9, 10, or 11, wherein the sensing information includes an error message if the first transmit power is less than the threshold value.

[0162] Clause 13. A radio frequency (RF) sensing method comprising: transmitting, from a network entity, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and-54-4903 / A106WOQualcomm Ref. No. 2402271 WO receiving, at the network entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0163] Clause 14. The method of clause 13, further including determining a location of the target from the sensing information.

[0164] Clause 15. The method of clause 13, wherein the probe signal is an On-Off Keyingbased signal, and the sensing signal is an orthogonal frequency-division multiplexing (OFDM) signal.

[0165] Clause 16. The method of clause 13, wherein a difference in time between the second time and the end time of the first time duration defines an offset duration.

[0166] Clause 17. The method of clause 13, further includes receiving, at the network entity, a capability message from each of the at least one UE that indicates a switching time duration for a respective one of the at least one UE to switch from operating a low-power wakeup radio (LP-WUR) to operating a main radio.

[0167] Clause 18. The method of clause 17, further comprising determining the second time based on the switching time duration indicated by the capability message.

[0168] Clause 19. The method of clause 18, wherein receiving the sensing information includes receiving the sensing information from a plurality of UEs, receiving the capability message includes receiving a plurality of individual switching time durations in a plurality of individual capability messages from the plurality of UEs, wherein each individual capability message indicates an individual switching time duration for a respective one of the plurality of UEs, and determining the second time comprises determining the second time based on the plurality of individual switching time durations.

[0169] Clause 20. The method of any of clauses 17, 18, or 19 further including setting a threshold power value for the probe signal in response to the capability message, and transmitting the threshold power value to the at least one UE, wherein the threshold power value sets a trigger on the at least one UE to operate the main radio if the at least one UE receives a reflected portion of the probe signal with a received power level that is greater than the threshold power value.

[0170] Clause 21. The method of any of clauses 16, 17, 18, 19, or 20, wherein transmitting the sensing signal at the target includes transmitting the sensing signal repeatedly within a second time duration.

[0171] Clause 22. A network entity for radio frequency (RF) sensing, the network entity comprising: at least one memory; at least one transceiver; at least one processor-55-4903 / A106WOQualcomm Ref. No. 2402271 WO communicatively coupled to the at least one memory, the at least one transceiver, wherein the at least one processor is configured to: transmit, with the at least one transceiver, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmit, with the at least one transceiver, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receive, at the network entity from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0172] Clause 23. A network entity for radio frequency (RF) sensing, the network entity comprising: means for transmitting a probe signal at a target at a first time, wherein the probe signal has a first transmit power and a first time duration; means for transmitting a sensing signal at the target beginning at a second time, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and means for receiving from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0173] Clause 24. A user equipment (UE) for radio frequency (RF) sensing, the UE comprising: means for receiving, with a low-power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; means for receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; means for measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and means for transmitting the sensing information of the target to a network entity.

[0174] Clause 25. A non-transitory, processor-readable storage medium includes processor-readable instructions to cause at least one processor of a network entity, for radio frequency (RF) sensing, to: transmit a probe signal at a target at a first time, wherein the probe signal has a first transmit power and a first time duration; transmit a sensing signal at the target beginning at a second time, wherein the sensing signal has a second transmit power-56-4903 / A106WOQualcomm Ref. No. 2402271 WO that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receive from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

[0175] Clause 26. A non-transitory, processor-readable storage medium includes processor-readable instructions to cause at least one processor of a user equipment (UE), for radio frequency (RF) sensing, to: receive, with a low-power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive and process, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, the second time is after an end time of the first time duration; measure, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and transmit the sensing information of the target to a network entity.

[0176] Other examples and implementations are within the scope of the disclosure and appended claims. For example, due to the nature of software and computers, functions described above can be implemented using software executed by a processor, hardware, firmware, hardwiring, or a combination of any of these. Features implementing functions may also be physically located at various positions, including being distributed such that portions of functions are implemented at different physical locations.

[0177] As used herein, the singular forms “a,” “an,” and “the” include the plural forms as well, unless the context clearly indicates otherwise. Thus, reference to a device in the singular (e.g., “a device,” “the device”), including in the claims, includes at least one, i.e., one or more, of such devices (e.g., “a processor” includes at least one processor (e.g., one processor, two processors, etc.), “the processor” includes at least one processor, “a memory” includes at least one memory, “the memory” includes at least one memory, etc.). The phrases “at least one” and “one or more” are used interchangeably and such that “at least one” referred-to object and “one or more” referred-to objects include implementations that have one referred-to object and implementations that have multiple referred-to objects. For example, “at least one processor” and “one or more processors” each includes implementations that have one processor and implementations that have multiple processors.-57-4903 / A106WOQualcomm Ref. No. 2402271 WO

[0178] The terms “comprises,” “comprising,” “includes,” and / or “including,” as used herein, specify the presence of stated features, integers, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.

[0179] Also, as used herein, “or” as used in a list of items (possibly prefaced by “at least one of’ or prefaced by “one or more of’) indicates a disjunctive list such that, for example, a list of “at least one of A, B, or C,” or a list of “one or more of A, B, or C” or a list of “A or B or C” means A, or B, or C, or AB (A and B), or AC (A and C), or BC (B and C), or ABC (i.c. , A and B and C), or combinations with more than one feature (c.g., AA, AAB, ABBC, etc.). Thus, a recitation that an item, e.g., a processor, is configured to perform a function regarding at least one of A or B, or a recitation that an item is configured to perform a function A or a function B, means that the item may be configured to perform the function regarding A, or may be configured to perform the function regarding B, or may be configured to perform the function regarding A and B. For example, a phrase of “a processor configured to measure at least one of A or B” or “a processor configured to measure A or measure B” means that the processor may be configured to measure A (and may or may not be configured to measure B), or may be configured to measure B (and may or may not be configured to measure A), or may be configured to measure A and measure B (and may be configured to select which, or both, of A and B to measure). Similarly, a recitation of a means for measuring at least one of A or B includes means for measuring A (which may or may not be able to measure B), or means for measuring B (and may or may not be configured to measure A), or means for measuring A and B (which may be able to select which, or both, of A and B to measure). As another example, a recitation that an item, e.g., a processor, is configured to at least one of perform function X or perform function Y means that the item may be configured to perform the function X, or may be configured to perform the function Y, or may be configured to perform the function X and to perform the function Y. For example, a phrase of “a processor configured to at least one of measure X or measure Y” means that the processor may be configured to measure X (and may or may not be configured to measure Y), or may be configured to measure Y (and may or may not be configured to measure X), or may be configured to measure X and to measure Y (and may be configured to select which, or both, of X and Y to measure).

[0180] As used herein, unless otherwise stated, a statement that a function or operation is “based on” an item or condition means that the function or operation is based on the stated-58-4903 / A106WOQualcomm Ref. No. 2402271 WO item or condition and may be based on one or more items and / or conditions in addition to the stated item or condition.

[0181] Substantial variations may be made in accordance with specific requirements. For example, customized hardware might also be used, and / or particular elements might be implemented in hardware, software (including portable software, such as applets, etc.) executed by a processor, or both. Further, connection to other computing devices such as network input / output devices may be employed. Components, functional or otherwise, shown in the figures and / or discussed herein as being connected or communicating with each other arc communicatively coupled unless otherwise noted. That is, they may be directly or indirectly connected to enable communication between them.

[0182] The systems and devices discussed above are examples. Various configurations may omit, substitute, or add various procedures or components as appropriate. For instance, features described with respect to certain configurations may be combined in various other configurations. Different aspects and elements of the configurations may be combined in a similar manner. Also, technology evolves and, thus, many of the elements are examples and do not limit the scope of the disclosure or claims.

[0183] A wireless communication system is one in which communications are conveyed wirelessly, i.e., by electromagnetic and / or acoustic waves propagating through atmospheric space rather than through a wire or other physical connection, between wireless communication devices. A wireless communication system (also called a wireless communications system, a wireless communication network, or a wireless communications network) may not have all communications transmitted wirelessly, but is configured to have at least some communications transmitted wirelessly. Further, the term “wireless communication device,” or similar term, does not require that the functionality of the device is exclusively, or even primarily, for communication, or that communication using the wireless communication device is exclusively, or even primarily, wireless, or that the device be a mobile device, but indicates that the device includes wireless communication capability (one-way or two-way), e.g., includes at least one radio (each radio being part of a transmitter, receiver, or transceiver) for wireless communication.

[0184] Specific details are given in the description herein to provide a thorough understanding of example configurations (including implementations). However, configurations may be practiced without these specific details. For example, well-known circuits, processes, algorithms, structures, and techniques have been shown without-59-4903 / A106WOQualcomm Ref. No. 2402271 WO unnecessary detail in order to avoid obscuring the configurations. The description herein provides example configurations, and does not limit the scope, applicability, or configurations of the claims. Rather, the preceding description of the configurations provides a description for implementing described techniques. Various changes may be made in the function and arrangement of elements.

[0185] The terms '‘processor-readable medium,” “machine-readable medium,” and “computer-readable medium,” as used herein, refer to any medium that participates in providing data that causes a machine to operate in a specific fashion. Using a computing platform, various processor-readable media might be involved in providing instructions / codc to processor(s) for execution and / or might be used to store and / or carry such instructions / code (e.g., as signals). In many implementations, a processor-readable medium is a physical and / or tangible storage medium. Such a medium may take many forms, including but not limited to, non-volatile media and volatile media. Non-volatile media include, for example, optical and / or magnetic disks. Volatile media include, without limitation, dynamic memory.

[0186] Having described several example configurations, various modifications, alternative constructions, and equivalents may be used. For example, the above elements may be components of a larger system, wherein other rules may take precedence over or otherwise modify the application of the disclosure. Also, a number of operations may be undertaken before, during, or after the above elements are considered. Accordingly, the above description does not bound the scope of the claims.

[0187] Unless otherwise indicated, “about” and / or “approximately” as used herein when referring to a measurable value such as an amount, a temporal duration, and the like, encompasses variations of ±20% or ± 10%, ±5%, or ±0.1 % from the specified value, as appropriate in the context of the systems, devices, circuits, methods, and other implementations described herein. Unless otherwise indicated, “substantially” as used herein when referring to a measurable value such as an amount, a temporal duration, a physical attribute (such as frequency), and the like, also encompasses variations of ±20% or ±10%, ±5%, or ±0.1 % from the specified value, as appropriate in the context of the systems, devices, circuits, methods, and other implementations described herein.

[0188] A statement that a value exceeds (or is more than or above) a first threshold value is equivalent to a statement that the value meets or exceeds a second threshold value that is slightly greater than the first threshold value, e.g., the second threshold value being one value-60-4903 / A106WOQualcomm Ref. No. 2402271 WO higher than the first threshold value in the resolution of a computing system. A statement that a value is less than (or is within or below) a first threshold value is equivalent to a statement that the value is less than or equal to a second threshold value that is slightly lower than the first threshold value, e.g., the second threshold value being one value lower than the first threshold value in the resolution of a computing system.-61-4903 / A106WO

Claims

1. Qualcomm Ref. No. 2402271 WOCLAIMS:What is claimed.

1. A user equipment (UE) for radio frequency (RF) sensing, the UE comprising: at least one memory; a main radio having at least one transceiver; a low-power wake up radio (LP-WUR); at least one processor communicatively coupled to the at least one memory, the main radio, and the LP-WUR, wherein the at least one processor is configured to: receive, with the LP-WUR, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receive and process, with the main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, wherein the second time is after an end time of the first time duration; measure, with the main radio, positional information of the target in response to the received reflected portion of the sensing signal; and transmit sensing information of the target to a network entity, wherein the sensing information includes the positional information.

2. The UE of claim 1, wherein the at least one processor is further configured to transmit a capability message to the network entity that indicates a switching time for the UE to switch from operating the LP-WUR to operating the main radio.

3. The UE of claim 2, wherein the at least one processor is further configured to receive the threshold value from the network entity, wherein the threshold value is in response to the capability message.

4. The UE of claim 2, wherein the sensing signal includes a second time duration that starts at the second time, and-62-4903 / A106WOQualcomm Ref. No. 2402271 WO the at least one processor is configured to receive the reflected portion of the sensing signal by being configured to receive the reflected portion of the sensing signal for a receiving time duration that is a fraction of the second time duration.

5. The UE of claim 4, wherein the at least one processor is configured to measure the positional information by being configured to measure the positional information in response to the received reflected portion of the sensing signal for the receive time duration.

6. The UE of claim 1 , wherein the sensing information includes an error message if the first transmit power is less than the threshold value.

7. A method for radio frequency (RF) sensing with a user equipment (UE), the method comprising: receiving, with a low-power wakeup radio (LP-WUR) of the UE, a reflected portion of a probe signal that was transmitted by a transmitting entity (TE) at a first time, wherein the probe signal has a first transmit power and a first time duration, and the probe signal was scattered by a target to produce the reflected portion of the probe signal; receiving and processing, with a main radio of the UE, a reflected portion of a sensing signal that was transmitted by the TE at a second time if a received power of the probe signal is greater than a threshold value, wherein the second time is after an end time of the first time duration; measuring, with the main radio, sensing information of the target in response to receiving the reflected portion of the sensing signal; and transmitting the sensing information of the target to a network entity.

8. The method of claim 7, further includes transmitting a capability message to the network entity that indicates a switching time for the UE to switch from operating the LP- WUR to operating the main radio.

9. The method of claim 8, further including receiving the threshold value from the network entity, wherein the threshold value is in response to the capability message.-63-4903 / A106WOQualcomm Ref. No. 2402271 WO10. The method of claim 8, wherein the sensing signal includes a second time duration that starts at the second time, and receiving the reflected portion of the sensing signal includes receiving the reflected portion of the sensing signal for a receive time duration that is a fraction of the second time duration.

11. The method of claim 10, wherein measuring the sensing information includes measuring the sensing information in response to the received reflected portion of the sensing signal for the receive time duration.

12. The method of claim 7, wherein the sensing information includes an error message if the first transmit power is less than the threshold value.

13. A radio frequency (RF) sensing method comprising: transmitting, from a network entity, a probe signal at a target at a first time with a transmitting entity (TE), wherein the probe signal has a first transmit power and a first time duration; transmitting, from the network entity, a sensing signal at the target beginning at a second time with the TE, wherein the sensing signal has a second transmit power that is greater than or equal to the first transmit power and the second time is after an end time of the first time duration; and receiving, at the network entity, from at least one user equipment (UE), sensing information of the target based on a reflected portion of the sensing signal reflected by the target.

14. The method of claim 13, further including determining a location of the target from the sensing information.

15. The method of claim 13, wherein the probe signal is an On-Off Keying-based signal, and-64-4903 / A106WOQualcomm Ref. No. 2402271 WO the sensing signal is an orthogonal frequency-division multiplexing (OFDM) signal.

16. The method of claim 13, wherein a difference in time between the second time and the end time of the first time duration defines an offset duration.

17. The method of claim 13, further includes receiving, at the network entity, a capability message from each of the at least one UE that indicates a switching time duration for a respective one of the at least one UE to switch from operating a low-power wakeup radio (LP-WUR) to operating a main radio.

18. The method of claim 17, further comprising determining the second time based on the switching time duration indicated by the capability message.

19. The method of claim 18, wherein receiving the sensing information includes receiving the sensing information from a plurality of UEs, receiving the capability message includes receiving a plurality of individual switching time durations in a plurality of individual capability messages from the plurality of UEs, wherein each individual capability message indicates an individual switching time duration for a respective one of the plurality of UEs, and determining the second time comprises determining the second time based on the plurality of individual switching time durations.

20. The method of claim 17, further including setting a threshold power value for the probe signal in response to the capability message, and transmitting the threshold power value to the at least one UE, wherein the threshold power value sets a trigger on the at least one UE to operate the main radio if the at least one UE receives a reflected portion of the probe signal with a received power level that is greater than the threshold power value.-65-4903 / A106WO

Images