CN104620560A - System and method for providing conditional access to transmitted information - Google Patents

Abstract

The present disclosure relates to systems, methods, computer program products, and apparatuses that control access to location information at a receiver, or at another device external to the receiver, based on various considerations, including the type of service requested, the user affinity, the device type, the software application type, payment, and/or other characteristics associated with a particular software application, or the distributor of that software application. The present disclosure also relates to systems, methods, computer program products and apparatuses for performing secure data transmission for a particular application, among other applications.

Description

Systems and methods for providing conditional access to transmitted information

technical field

The present disclosure generally relates to positioning systems and methods. More particularly, but not exclusively, this disclosure relates to systems and methods for controlling access to location information.

Background technique

Systems for providing location information are known in the art. For example, radio-based systems (LORAN, GPS, GLONASS, etc.) already provide location information for people, vehicles, equipment, etc. However, these systems have limitations associated with factors such as location accuracy, transmitted and received signal levels, radio channel interference, and/or channel issues such as multipath, device power consumption, and the like.

Determination of an accurate location of a mobile subscriber can be very challenging. If the subscriber is indoors or in an urban area with obstructions, the subscriber's mobile device may not be able to receive signals from GPS satellites, and the network may be forced to rely on less accurate network-based trilateration/multilateration positioning methods. Furthermore, if a subscriber is in a multi-story building, it is only known that the subscriber is in that building, not which floor they are on, which can cause delays in providing emergency assistance (which can potentially be life threatening). Clearly, there is a need for computing devices (e.g., mobile computing devices) that can assist subscribers to speed up the location determination process, provide greater accuracy (including vertical information), and address some of the challenges of location determination in urban areas and inside buildings sexual system.

Furthermore, location information communicated in a GPS-like system is readily available to various devices without any option for managing which devices have access to location information, or more specifically, which software applications on a device can use location information. This lack of management can impose a bandwidth burden on network operators where multiple applications across multiple devices communicate location information over the network to third party services associated with those applications. Having the ability to manage the use of location information will also allow network operators to maintain better service levels for their customers while reducing unneeded bandwidth usage. Furthermore, providing better control over the network operator will allow monetization per user equipment or user per user equipment at the application level or service level. Accordingly, there is a need for improved positioning systems that address these and/or other problems with existing positioning systems and devices.

Contents of the invention

A system, method, and computer program product are described for providing a computing device with conditional access to location information, the computer program product comprising a computer-usable medium having computer-readable program code encoded therein, the The code is adapted to be executed to implement a method for providing a computing device with conditional access to location information. For example, certain methods of the present disclosure relate to systems, methods, computer program products, and apparatus for controlling access to location information by one or more applications. The systems, methods, computer program products and apparatus may decrypt a first set of encrypted position signals received from a network of terrestrial transmitters using a first key. The system, method, computer program product, and apparatus may also determine location information from a first set of decrypted location signals and identify the first set of location information, wherein the first set of location information is based on A first service level associated with the first application is identified. The system, method, computer program product and apparatus may also encrypt the first set of location information using a second key and provide the encrypted first set of location information to the first application . Various additional aspects, features, and functions are described below in conjunction with the accompanying figures.

Description of drawings

Attention is turned to the drawings and detailed description.

Figure 1 depicts a diagram showing details of a terrestrial position/positioning system on which embodiments may be implemented;

Figure 2 shows a diagram showing specific details of one embodiment of a terrestrial position/positioning system on which embodiments may be implemented;

Figure 3 depicts a diagram of a transmitter/beacon;

Figure 4A depicts a diagram showing details of one embodiment of a receiver;

Figure 4B depicts a diagram showing details of one embodiment of a receiver/user device and other components external to the receiver/user device;

Figure 4C depicts a diagram showing details of another embodiment of a receiver and other components external to the receiver/user equipment;

Figure 5A illustrates a process for determining location information about a receiver and controlling access to the location information at the receiver;

Figure 5B shows a process for assigning location information for an E-911 call;

Figure 5C shows the process for keys not provided;

Figure 5D shows the process for pre-provisioned keys;

Figure 6 illustrates a process for providing conditional access to location information;

Figure 7 illustrates a process for providing conditional access credentials;

Figure 8 shows a process for processing location information;

Figure 9 shows the types of data for use during the conditional access process;

Figure 10A shows the packet structure;

Figure 10B illustrates bit sequences for use in accordance with certain aspects; and

Figure 11 shows a process for providing conditional access to location information at a receiver/user equipment.

Detailed ways

Various aspects of the disclosure are described below. It should be apparent that the teachings herein may be embodied in a variety of forms and that any specific structure, function, or both disclosed herein are merely illustrative. Based on the teachings herein one skilled in the art should appreciate that any aspect disclosed may be implemented independently of any other aspects and that two or more of these aspects may be combined in various ways. For example, any number of the aspects set forth herein may be used to implement a system or practice a method.

As used herein, the term "illustrative" means serving as an example, instance or illustration. Any aspect and/or embodiment described herein as "illustrative" is not necessarily to be construed as preferred or advantageous over other aspects and/or embodiments.

overview

The present disclosure generally relates to methods for providing signaling for location determination, and uses a receiver (also referred to herein alternatively as User Equipment, User Terminal/UE, or similar terminology) as, for example, a cell phone or other portable device. ) communication wide area transmitters to determine high precision position/positioning information positioning system and method. Location signaling services associated with certain aspects may use broadcast-only beacons/transmitters configured to transmit encrypted location signals. A receiver with an appropriate chipset is able to receive and use positioning signals based on air link access authentication techniques including authentication through the use of stored air link access credentials (ALAC) during the initial decryption phase. The replica decrypts the location signal for authentication. Once decrypted using ALAC during the initial decryption phase, the receiver may provide access to the location information to the particular software application running on the receiver based on an additional decryption phase using an Authorized Service Level Certificate (ASLC) associated with that software application. conditional access.

Various components within the receiver can be used to perform the decryption phase. For example, decryption of broadcast signals may occur at the GPS chip along with ALAC provided into firmware in a secure hardware area (eg, in the GPS chip). By comparison, decrypting location information using an ASLC can occur at another chip (e.g., the receiver's processor) along with the ASLC, which is not provided in firmware (e.g., accessible via a different level of software) . Of course, those skilled in the art will appreciate alternative configurations.

Once decrypted, the location information can be processed by a processor (eg, a positioning engine) to calculate various positioning signal data (eg, latitude, longitude, and magnitude) to varying degrees of accuracy. An example of amplitude calculation is provided in US Utility Patent Application Serial No. 13/296,067, entitled WIDE AREAPOSITIONING SYSTEMS, filed November 14, 2011, which is hereby incorporated by reference.

The two-stage decryption of the position information at the receiver offers several advantages over the prior art. For example, the two-stage decryption aspect enables a transmitter and/or receiver to provide positioning signals to authorized receivers and/or authorized software applications (hereinafter "applications") while denying access to unauthorized receivers and unauthorized Authorized application access. Similarly, access to location information may be controlled based on user requesting access or other types of considerations.

Controlling access to location information based on authorization allows carrier and application developers to offer tiered service levels, which can be purchased based on different business agreements. Tier levels may be related to accuracy levels, coverage areas, effective periods, usage, lifetime, or other considerations.

The two-stage decryption of the location information at the receiver also reduces the likelihood that an unauthorized user (eg, a hacker) can gain access to and use the location information, resulting in lost revenue.

The realization of the above advantages must be balanced against the performance requirements of the positioning system. According to certain aspects, the encryption and decryption phases performed in the system may not include system performance metrics such as time to first fix (TTFF) of the receiver's position and the accuracy of any position fix. Furthermore, the processing associated with the various conditional access methods described herein can be limited based on the processing power of a particular receiver, which can prevent process-intensive encryption procedures.

According to other aspects, conditional access features can be implemented across a variety of device platforms and can support distribution models identified in the use cases described herein. Other aspects may involve manufacturer-based or customer-based provisioning of receivers (in addition to any re-provisioning) to support the conditional access methods described herein. For example, various provisioning embodiments are described herein. Importantly, any process within the conditional access process described here must comply with any E-911 functional requirements.

Various other aspects, features, and functions are described below in conjunction with the accompanying drawings. While details of embodiments of the present disclosure may vary and still fall within the scope of the claimed disclosure, those skilled in the art will understand that the drawings described herein are not intended to suggest limitations as to scope of use or inventive aspects. any limitations on functionality. Neither the drawings nor their description should be interpreted as having any dependency or requirement relating to any one or combination of components shown in those drawings.

In the following description, numerous specific details are introduced to provide a thorough understanding of, and to enable description of, the described systems and methods. One skilled in the relevant art will recognize, however, that the implementations can be practiced without one or more of the specific details, or with other components, systems, etc. In other instances, well-known structures or operations are not shown, or not described in detail, to avoid obscuring aspects of the disclosed embodiments.

system aspect

FIG. 1 provides a diagram showing details of an example position/positioning system 100 upon which various embodiments may be implemented. Positioning system 100 (also referred to herein as Wide Area Positioning System (WAPS) or simply "system") includes synchronized beacons (also denoted herein as "transmitters") and user equipment (also denoted herein as "receivers"). machine units" or simply "receivers"), said beacons being typically terrestrial, said user equipment being configured to acquire and track signals and/or other location signaling provided from said beacons, For example, such other position signaling may be provided by satellite systems, such as the Global Positioning System (GPS) and/or other satellite or terrestrial based position systems. Optionally, the receiver may include a position calculation engine for determining position/location information from signals received from beacon and/or satellite systems, and the system 100 may also include a server in communication with various other systems Systems, such as beacons, network infrastructure (eg, the Internet, cellular networks, wide or local area networks, and/or other networks). The server system may include various system-related information, such as a tower index, a billing interface, one or more encryption algorithm processing components (which may be based on one or more dedicated encryption algorithms), a location calculation engine, and/or Other processing components to facilitate position, motion and/or orientation determination of a user of the system.

As shown in the exemplary system 100, the beacon may be in the form of a plurality of transmitters 110, and the receiver unit may be in the form of one or more user equipment 120, which may be configured to transmit Machine 110 receives signaling, and is optionally configured to receive GPS or other satellite system signaling, cellular signaling, Wi-Fi signaling, Wi-Max signaling, Bluetooth signaling, Ethernet, and/or art Any of various electronic communication devices known or developed in the future for other data or information signaling. Receiver unit 120 may be in the form of a cellular or smart phone, tablet device, PDA, notebook or other computing system, digital camera, asset tracking tag, and ankle bracelet, and/or similar or equivalent devices. In some embodiments, receiver unit 120 may be a stand-alone position/location device configured to receive only or primarily signals from transmitter 110 and determine a position/location based at least in part on the received signals. As described herein, the receiver unit 120 may also be referred to herein as a "user equipment" (UE), a handheld device, a smartphone, a tablet, and/or a "receiver."

Transmitter 110 (which is also denoted herein as a "tower") is configured to communicate to a plurality of receiver units 120 (for simplicity, a single receiver unit 120 is shown in FIG. However, a typical system will be configured to support multiple receiver units) sending the transmitter output signal within a defined coverage area. Transmitter 110 may also be connected to server system 130 via communication link 133, and/or may have other communication connections (not shown) to network infrastructure 170, for example, via a wired connection, cellular data connection, Wi-Fi, Wi-Max or other wireless connections and so on.

One or more receivers 120 may receive signaling from multiple receivers 110 via a corresponding communication link 113 from each receiver 110 . Additionally, as shown in FIG. 1 , receiver 120 may also be configured to receive and/or transmit other signals, for example, via communication link 163 from a cellular base station (also referred to as a Node B, eNB, or base station) and/or Send cellular network signals, Wi-Fi network signals, paging network signals, or other wired or wireless connection signaling, and receive and/or transmit satellite signaling via satellite communication link 153, for example from GPS or other satellite positioning systems . Although the satellite positioning signaling shown in the exemplary embodiment of FIG. 1 is shown as being provided from GPS system satellites 150, in other embodiments the signaling may be provided from other satellite systems, and/or, in some In an embodiment, a land-based wired or wireless positioning system or other data communication system is provided.

In an exemplary embodiment, the transmitter 110 of the system 100 is configured to operate in a dedicated licensed or shared licensed/unlicensed radio spectrum; however, some embodiments may be implemented to provide signaling in an unlicensed shared spectrum. make. Transmitter 110 may transmit signaling in these various radio frequency bands using a new type of signaling (as described subsequently herein). This signaling may be in the form of dedicated signals configured to provide specific data in a defined format, advantageously for positioning and navigation purposes. For example, as described subsequently herein, signaling may be structured to be particularly advantageous for operating in obstructed environments, eg, where conventional satellite position signaling is attenuated and/or affected by reflections, multipathing, and the like. Additionally, the signaling may be configured to provide fast acquisition and location determination times to allow fast location determination when the device is powered on or location active, reduce power consumption, and/or provide other advantages.

Various implementations of WAPS can be combined with other positioning systems to provide enhanced positioning and position determination. Alternatively or additionally, the WAPS system can be used to assist other positioning systems. In addition, information determined by the receiver unit 120 of the WAPS system may be provided via other communication network links 163 (e.g., cellular, Wi-Fi, paging, etc.) to one or more server systems 130 and existing Other network systems on or coupled to network infrastructure 170 report location and location information. For example, in a cellular network, cellular backhaul link 165 may be used to provide information from receiver unit 120 to associated cellular carriers and/or others (not shown) via network infrastructure 170 . This may be used to quickly and accurately locate the location of the receiver 120 during an emergency, or may be used to provide location-based services or other functionality from cellular carriers or other network users or systems.

Note that, in the context of this disclosure, a positioning system is a system that locates one or more of latitude, longitude, and magnitude coordinates, which may also be in terms of a one-dimensional, two-dimensional, or three-dimensional coordinate system (e.g. , x, y, z coordinates, angular coordinates, etc.) to describe or show. Also, note that whenever the term "GPS" is mentioned, it should be understood in the broader sense of the Global Navigation Satellite System (GNSS), which may include other existing satellite positioning systems (e.g., GLONASS) and future positioning systems (eg, Galileo and Compass/Beidou). Furthermore, as previously shown, other positioning systems (eg, terrestrial-based systems) may be used in addition to, or instead of, satellite-based positioning systems in some embodiments.

Embodiments of WAPS include a plurality of towers or transmitters, such as the plurality of transmitters 110 shown in FIG. . Positioning signals can be coordinated to be synchronized between all transmitters in a particular system or local coverage area, and can have a regular GPS clock source for timing synchronization. WAPS data location transmissions may include dedicated communication channel resources (e.g., time, code, and/or frequency) to facilitate transmission of data required for trilateration, notification to subscribers/groups of subscribers, broadcast of messages, and/or Or general operation of WAPS network. A disclosure regarding WAPS data location transfers can be found in the incorporated application.

In positioning systems using different time difference of arrival or trilateration methods, the transmitted positioning information typically includes one or more of precision time series and positioning signal data, wherein the positioning signal data includes the position of the transmitter and various timing corrections and other related data or information. In a WAPS implementation, the data may include additional messages or information, such as notification/access control messages to subscriber groups, general broadcast messages, and/or related to system operations, users, interactions with other networks, and other Other data or information related to system functionality. The positioning signal data may be provided in a number of ways. For example, positioning signal data may be modulated onto, augmented or overlaid onto, and/or concatenated with an encoded time series.

The data transmission methods and apparatus described herein can be used to provide improved positioning information throughput for WAPS. In particular, higher order modulation data may be transmitted as a separate part of the information from the pseudo-noise (PN) ranging data. This can be used to allow improved acquisition speed in systems using CDMA multiplexing, TDMA multiplexing, or a combination of CDMA/TDMA multiplexing. The present disclosure is shown in terms of a wide area positioning system in which multiple towers broadcast synchronized positioning signals to UEs, and more particularly, using terrestrial towers; however, embodiments are not so limited, and Other systems may also be implemented that fall within the spirit and scope of this disclosure.

In an exemplary embodiment, WAPS uses coded modulation (referred to as spread spectrum modulation or pseudo-noise (PN) modulation) sent from a tower or transmitter (eg, transmitter 110 ) to achieve wide bandwidth. A corresponding receiver unit (eg, receiver or user equipment 120) includes one or more components for processing the signal using despreading circuitry, eg, a matched filter or a chain of correlators. Such receivers produce waveforms that ideally have strong peaks surrounded by low level capabilities. The arrival time of the peak represents the arrival time of the signal transmitted at the UE. Performing this operation on multiple signals from multiple towers (whose positions are known accurately) allows the location of the receiver to be determined by means of trilateration. Various additional details related to WAPS signal generation in the transmitter (eg, transmitter 110) and received signal processing in the receiver (eg, receiver 120) are described later herein.

In one embodiment, WAPS may use binary coded modulation as the spread spectrum method. The WAPS signals of an exemplary embodiment may include two specific types of information: (1) high-accuracy ranging signals (which can be transmitted quickly relative to other signals), and (2) positioning data, such as transmitter ID and location , time of day, health, environmental conditions, eg, atmospheric information (eg, pressure, temperature, humidity, wind direction and strength, and other conditions). Similar to GPS, WAPS can transmit positioning information by modulating a high-speed binary pseudo-random ranging signal with a low-rate information source. In addition to this application, the incorporated application discloses embodiments of methods of using pseudorandom ranging signals and modulating information signals, both of which may use higher order modulation, eg, quaternary or octal modulation. In one embodiment, the ranging signal is binary phase modulated, and higher order modulation is used to provide positioning information in a separate signal.

Conventional systems use a position location signal format (eg, used in a time-division multiplexed configuration) where each slot transmission consists of a pseudo-random ranging signal followed by various types of location data. These conventional systems also include a synchronization or simultaneous signal, which is deleted where a pseudo-random ranging signal is also used as the simultaneous signal. However, like other earlier systems, the positioning data for these conventional systems is binary, which limits throughput. These systems also transmit a large number of binary bits during the intervals in which positioning data is transmitted.

To address these limitations, in an exemplary embodiment, a binary or quaternary pseudo-random signal may be transmitted in a specific time slot followed by a very high order modulated data signal. For example, in a given time slot, one or more positioning information symbols may be transmitted using differential 16-phase modulation to convey 4 bits of information per time slot. This represents a 4x improvement in throughput for typically 1 bit transmitted when applying binary phase modulation to a pseudo-random carrier. Other types of modulation of positioning information may also be used, eg, 16QAM, etc. In addition, certain error-controlled modulation methods can be used for higher levels of modulation, for example, the use of trellis codes. These modulation methods generally reduce the error rate.

FIG. 2 depicts certain aspects of a location system 240 configured to implement the conditional access process described herein. As shown in FIG. 2 , positioning system 240 may perform various functions. For example, positioning system 240 may generate and construct available ALAC, which may be generated individually and provided to manufacturer 210 and/or service provider 230 in the form of ALAC blocks for addition to user equipment 220 (e.g., GPS FW image). ALAC may be implemented in a device-specific manner, including the use of device identifiers, and device-specific algorithms to provide an additional layer of protection over ALAC. Location system 240 may also operate a billing and auditing system to track and bill usage of the location functionality provided by location system 240 .

Location system 240 may generate and configure available ASLCs to manufacturers 210, user equipment 220, service providers 230, and/or external entities 250 (eg, application developers or providers). ASLC can be serialized to include a unique device identifier, eg, IMEI, MAC address, etc.

The location system 240 may generate and manage developer keys, SDKs, and APIs for external entities 250 wishing to incorporate location information into downloadable applications. Each developer key may have some associated ASLC based on the associated application's service level. Each application ASLC may contain a developer key as a unique identifier, and may contain other unique IDs as well. Positioning system 240 may also maintain a server to handle requests for dynamic transmission of ASLCs to user equipment 220 from applications deployed in the field (ie, on user equipment 220 ).

Manufacturer 210 may map one or more ALACs and ASLCs (e.g., obtained from positioning system 240, or created and maintained separately) onto the receiver along with requisite firmware ("FW") and software ("SW") . Manufacturer 210 can also load a library of files as images. Manufacturers 210 may include chipset vendors, device OEMs, OS vendors, and the like. By comparison, the same ALAC can be used for all transmissions from all transmitters, while a different ASLC can be used for each application at each receiver, and based on a specific user account. Both ASLC and ALAC can be encrypted at the UE, or protected from unauthorized access.

The service provider 230 may provide various services to the user equipment 220, including cellular services and web-based services. Other services may include any wireless or wired transmission of content (eg, video content, audio content, image content, text content, other content). The service provider 230 may store the ASLC associated with the application that it provides to the user equipment 220 . The service provider 230 may also enable control plane (c-plane) message flow for E-911, and network management (where applicable). The service provider 230 may also enable user plane (u-plane) message flow for internal LBSs via SUPL.

The external entity 250 may include a provider that provides various positioning services to the user via the user's receiver. For example, external entities 250 may include PSAPs, location-based advertising networks, and LBS application developers/publishers, among others. The location system 240 and the service provider 230 can provide a series of services to the external entity 250, including location assistance, ASLC verification and provisioning, value-added services, billing services, and auditing services.

User devices 220 may include smartphones, tablets, and connected computer devices. User device 220 may be configured to control access to location information by various applications (eg, e-911, network management (NW), or LBS). Control of access can be accomplished using an ASLC that is mapped onto firmware or downloaded after the user device 220 is manufactured and brought into commerce. As shown, the driver and file library layers can assist in the management of the ASLC, assist in the decryption of location information, and assist in restricting the use of decrypted location information by applications for multiple applications and users on the device, based on instructions indicated by the ASLC. permission. For example, a file repository can associate an ASLC with its related application (eg, E911, network management, LBS, etc.), and can provide or arbitrate the transmission of appropriate location information for the application.

Various system features, including transmitters and receivers, have been described above. Figures 3 and 4A, 4B, and 4C, described below, provide additional details regarding certain implementations of the transmitter and receiver.

Figure 3 represents a diagram showing some details of one embodiment 300 of a beacon/transmitter system from which position/positioning signals described subsequently herein may be transmitted. Transmitter implementation 300 may correspond to transmitter 110 shown in FIG. 1 . Note that transmitter embodiment 300 includes various components for performing associated signal reception and/or processing; however, in other embodiments, these components may be combined and/or organized in different ways to Similar or equivalent signal processing, signal generation, and signal transmission are provided.

Although not shown in FIG. 3 , the transmitter/beacon embodiment 300 may include components for receiving GPS signals and providing positioning information and/or other data (e.g., timing data, precision factor ( DOP) data or other data or information that may be provided from GPS or other positioning systems) one or more GPS components. Note that while the transmitter 300 is shown with a GPS component in FIG. 3, other components for receiving satellite or terrestrial signals and providing similar or equivalent output signals, data or other information may be used for the transmitter precise timing operations within the WAPS network, and/or for timing correction on the WAPS network.

Transmitter 300 may also include one or more transmitter components (eg, RF transmission component 370 ) for generating and transmitting transmitter output signals, as described subsequently herein. The transmitter assembly may also include various elements known or developed in the art for providing an output signal to a transmit antenna, such as analog or digital logic and power circuits, signal processing circuits, tuning circuits, buffers and power amplifiers, and the like. Signal processing may be performed in a processing component (not shown) to generate the output signal, which in some embodiments may be integrated with other components described in connection with FIG. 3 , or in other embodiments the The processing components described above may be stand-alone processing components for performing multiple signal processing and/or other operational functions.

One or more memories (not shown) can be coupled with the processing component (not shown) to provide storage and retrieval of data and/or to provide storage and retrieval of instructions for execution in the processing component. For example, the instructions may be instructions for performing various processing methods and functions described subsequently herein, such as for determining location information or other information associated with a transmitter (e.g., local environmental conditions), and generating transmitter output signal, which is sent to the user equipment 120 as shown in FIG. 1 .

Transmitter 300 may also include one or more environments for sensing or determining conditions (e.g., local pressure, temperature, humidity, wind, or others (collectively or individually, "atmosphere")) associated with the transmitter. sensing components (not shown). In an exemplary embodiment, atmospheric (eg, pressure) information may be generated in the environmental sensing component and provided to the processing component for integration with other data in the transmitter output signal described later herein. One or more server interface components (not shown) may also be included in the transmitter 300 to provide an interface between the transmitter and a server system (e.g., server system 130 shown in FIG. 1 ), and/or Interfacing with network infrastructure (eg, network infrastructure 170 shown in FIG. 1 ). For example, system 130 may transmit data or information associated with the positioning system and/or user equipment to transmitter 300 via the transmitter's interface components.

Each transmitter 300 can transmit data at the physical layer at an adjustable number of bits per second per slot (eg, 96 bits per second per slot), and each transmitter can be independent of the other, including its location information. Transmitter 300 may include various components for generating, encrypting, securing, modulating and transmitting data. For example, the transmitter 300 may include a data generation component 310 for generating location information, an encryption component 320 for encrypting the location information based on a specific Air Link Access Credential (ALAC), an access credential storage component for storing the ALAC 330, and other components—for example, packet ID/CRC component 340, encoding, puncture (puncture) and interleaving component 350, modulation component 360, and RF transmission component 370, etc. components not shown. Components 340 and 350 may provide forward error correction (FEC) and CRC schemes, as well as other data formatting schemes, to reduce the effects of fading, path loss, and other environmental conditions. Component 360 provides modulation of the data.

Although the modulation and signal structure may vary, wherein varying numbers of bits per frame can be used, it is contemplated that 190 bits per frame may be used for transmission from transmitter 300 . For example, after encoding overhead, 102 data bits are available, of which 7 bits are reserved for unencrypted frame information, leaving 95 bits for encrypted position information. Preferably, encryption is applied minimally to maintain low overhead. For example, an encryption rate may be approximately 95 bits per 3 seconds. The transmission may repeat itself for several cycles (eg, 10 cycles or 30 seconds) before data is exchanged. Various payloads are considered including: latitude, longitude, magnitude, pressure, temperature, transmission correction, and transmission quality. Other payloads may include security information, service ID, conditional access data (eg, ASLC information). These various payloads can be segmented onto multiple time slots. Those skilled in the art will appreciate other payloads, other numbers of bits, and different ways of grouping payloads.

In some cases, an n-bit indicator is needed to indicate the type of packet being conveyed (that type of information will be conveyed in some packets), or how multiple packets of the same information are related to each other. The packet structure may include this n-bit indicator at any point in the packet. Figure 10A shows an example of a packet structure showing 4 packet type indicator bits, among other bits, and Figure 10B shows an example of a packet sequence using a 4-bit packet type indicator symbol.

As shown in Figures 1OA and 1OB, 4 bits may indicate the packet type, and the main packet payload may include 98 bits. 4 bits may not be encrypted, and a packet type of "0" may be unencrypted, and a packet type of "1" may be encrypted. For packet types that are not "0" or "1", for example but not limited to, the fifth bit may be an encryption bit, and may indicate whether the packet is encrypted. The bits can be unencrypted. The 6th bit may be a hint bit and may indicate that it starts a new packet (1) or continues a previous packet (0). The bits can be unencrypted. The 7th bit may be a stop bit and may indicate that it is the last packet (1) or not (0). The bits can be unencrypted. The next 95 bits may comprise the main packet payload, which may be encrypted if the encryption bit is 1, and not encrypted if the encryption bit is 0. Optionally, the payload may include the index of the current packet and/or the total number of packets expected to be sent with the current information.

Attention is now turned to FIG. 4A, which depicts features of a receiver 400 where transmitter signals may be received and processed to determine position/location information (e.g., instead of E-911 or LBS application).

Receiver implementation 400 may correspond to user equipment 120 shown in FIG. 1 and may include a device for receiving GPS signals and providing positioning information and/or other data (e.g., timing data, DOP data or other data or information that may be provided from GPS or other positioning systems) one or more GPS components 480 . Of course, other global navigation satellite systems (GNSS) are contemplated, and it should be understood that disclosures related to GPS may apply to these other systems. Note that while receiver 400 is shown with a GPS component in FIG. 4A , in various embodiments other components are used to receive satellite or terrestrial signals and provide similar or equivalent output signals, data or other information. components can be replaced. Of course, any location processor may be adapted to receive and process location information as described herein or in the incorporated application.

Receiver 400 may also include one or more cellular components 490 for transmitting and receiving data or information via a cellular or other data communication system. Alternatively or additionally, receiver 400 may include a communication component (not shown) for transmitting and/or receiving data via other wired or wireless communication networks (e.g., Wi-Fi, Wi-Max, Bluetooth, USB, or other networks). Shows).

Receiver 400 may include one or more components 420 (referred to as "components 420"), outlined by dotted lines, configured to receive signals from a terrestrial transmitter (e.g., transmitter 110 shown in FIG. The signal is processed to determine position/location information, as described subsequently herein. Component 420 may be integrated with, and/or share resources with, other components shown in FIG. 4A, eg, antennas, RF circuits, and the like. For example, component 420 and GPS component 480 may share some or all radio front end (RFE) components and/or processing elements. A processing component (not shown, but referred to generally here to indicate processing functionality in receiver 400) may integrate with some or all of component 420, or may share resources with some or all of component 420 and/or GPS component 480 , to determine location/location information, and/or perform other processing functions, as described herein. Similarly, cellular component 490 may share RF and/or processing functionality with RF component 410 and/or component 420 . Also shown is network component 460, which may refer to a local area network, wide area network, or other network using any type of wired and wireless communication paths. Each of components 410 , 420 , 460 , 480 , and 490 may transmit data to location engine 440 , which uses the data to determine an estimated location of receiver 400 . Location engine 400 may be implemented as known in the art or as future developed in the art, including implementations that include a processor configured to calculate an estimated location.

For example, in one embodiment, the set 490 may securely transmit positioning data via the control plane or the user plane, or the data may be retrieved directly via an Internet link. Data on the interface between 490 and the cellular modem may also be protected by receiver 400 specific interface encryption/decryption.

One or more memories 430 may be coupled with the processing components (not shown) and other components to provide storage and retrieval of data and/or to provide storage and retrieval of instructions for execution in the processing components. For example, the instructions may perform various processing methods and functions described herein, such as decrypting location information and determining location information. Accordingly, certain components included between component 420 (eg, components 421-424) may perform processing of location information, decryption keys, and/or other information as described herein. Alternatively, some or all of this processing may be performed on a stand-alone processor (not shown).

Location data, including location estimates or information for remote location calculations, can be communicated to these remote locations using industry standard protocols such as control plane signaling, user plane (SUPL) signaling, or Internet/data protocols or some combination of the above. components.

Receiver 400 may also include one or more environmental sensing devices for sensing or determining conditions associated with the receiver (e.g., local pressure, temperature, humidity, or other conditions that may be used to determine the location of receiver 400). components (not shown). In an exemplary embodiment, pressure information may be generated in such an environmental sensing component for use in conjunction with received transmitter, GPS, cellular or other signals to determine position/location information.

The receiver 400 may also include various additional user interaction components, such as a user input component (not shown), which may be in the form of a keyboard, touch screen, mouse or other user interaction elements. Audio and/or video data or information may be provided in output components (not shown), for example, in one or more speakers or other audio transducers (not shown), one or more visual displays (e.g., touch screen ), and/or other forms of user I/O elements known or developed in the art. In an exemplary embodiment, such an output component may be used to visually display the determined position/location information based on the received transmitter signal, and the determined position/position information may also be sent to the cellular component 490, And then to the associated carrier or otherwise.

Receiver 400 may include various other components configured to implement various features of the present disclosure, including the processes shown in FIGS. 5A , 6 , 7 and 8 . For example, component 420 may include a signal processing component 421 that includes a digital processing component 421a configured to demodulate the RF signal received from RF component 410 and further configured to estimate Time of Arrival (TOA), used in future to determine location. The signal processing component 421 may also include a pseudorange generating component 421b and a data processing component 421c. The pseudorange generation component 421b may be configured to generate "raw" position pseudorange data from the estimated TOA, refine the pseudorange data, and provide the pseudorange data to the location engine 440, which uses the pseudorange data to determine the location of the receiver 400. The data processing component 421c may be configured to demodulate the encoded location information, extract encrypted packet data from the encoded location information, and perform error checking (CRC) on the data. The data processing component 421c outputs the encrypted packet data to the first cipher component 422 .

The first cryptographic component 422 may be configured to decrypt the location information from the encrypted packet data based at least on the ALAC stored in the memory 430 . Since multiple ALACs may be stored on the receiver 400, and only one of them can be applied at a given time, the first cipher block 422 can use various techniques to determine the correct ALAC key to use. The data packet itself can have a CRC/digest field which only passes check if the correct ALAC key is applied. In the absence of a CRC/digest field due to packet content restrictions, each field of the decrypted packet can be checked against the expected range of values for that field. Furthermore, since a receiver is able to acquire packet data from multiple transmitters located in the vicinity of the receiver, location information from multiple transmitters will only pass certain correlation checks if the correct ALAC key is selected, e.g., Distance between transmitters, geographic identifiers, etc. The first cryptographic component 422 may also transmit the decrypted location information to an appropriate processing component associated with the E-911 procedure upon receipt of an indication that an emergency 911 call has been initiated.

Component 420 in FIG. 4A may also include a second cryptographic component 423 configured to decrypt some or all of the location information based on a suitable ASLC stored in memory 430 . The ASLC may be determined by an application with requested location information or a location fix. For example, ASLC may be associated with an LBS application or an E-911 application on receiver 400 .

Once the location information is decrypted by the second cryptographic component 423, the decrypted location information is output to a data unit output component 424, which determines the discrete data units of the location information (e.g., latitude, longitude, magnitude, pressure, temperature , humidity, system time, timing correction, and/or transmitter ID). The particular data unit of the location information may then be communicated to the location engine 440 based on the level of service indicated by the ASLC for the application requesting access to the location information.

Location engine 440 may be configured to process location information (and, in some cases, GPS data, cell data, and/or other network data) to determine the location of receiver 400 within certain boundaries (eg, level of accuracy, etc.). Once determined, location information may be provided to the application 450 . Those skilled in the art will appreciate that location engine 440 may represent any processor capable of determining location information, including a GPS location engine or other location engine. The positioning of the various components shown in Figure 4A is considered within the receiver at different chip spaces.

As disclosed anywhere herein, and repeated here for clarity, each application on the receiver 400 may require its own ASLC to access location information in order to determine the location of the receiver 400 . With respect to some aspects, one ASLC can be used by multiple applications, and multiple ASLCs can be used by one application, but for different users or under different circumstances. ASLC can be used to restrict the use of specific location information during specific time periods and in specific service areas.

E-911, network support, and LCS applications/services can be handled independently of each other, where their respective ASLCs can be loaded onto receiver 400 firmware, or uploaded to memory after receiver 400 manufacture. Each ASLC can be used to provide each application/service with its own feed of location information. Separate processing paths can be used to further separate these applications/services.

Receiver 400 may have limited hardware/software capabilities dedicated to position determination. The total script available for the conditional access features described herein may be approximately 32 kilobytes. Other scripts are considered.

The location information can be processed in the GPS processor, the application processor or in an external server. According to one aspect, the features described herein may be implemented on, or associated with, a GPS integrated circuit (IC) on the receiver. For example, a host processor at the receiver can be used to communicate with the GPS IC via a bi-directional serial link. Latitude, longitude, and other information can be communicated using this serial link. A serial link can be used to authenticate exchanges to a GPS IC (eg, ASLC). It is considered that the GPS IC includes a signal processing section that searches for a transmitter (e.g., by correlation with the PN sequence) and demodulates the signal received from the transmitter to obtain the physical layer payload, which The payload may be (and, according to some embodiments described herein, is) in encrypted form. The decryption engine is capable of decrypting the data before providing it to the next processing layer, which may be a location engine. The position engine can use the decrypted data to calculate the receiver position. Various engines can be provided in the GPS IC or in other receiver circuits.

Attention now falls to FIG. 4B , which depicts the receiver 400 at a first location and also depicts components located at other locations remote from the location of the receiver 400 . Receiver 400 and other components may collectively or individually determine location information based on processing of the transmitter signal. Certain aspects of Figure 4A are depicted in Figure 4B. Accordingly, for some embodiments, but not necessarily all, the description of those aspects in relation to FIG. 4A may be extended to those aspects in FIG. 4B.

As shown in FIG. 4B, receiver 400 may include interface (I/F) encryption/decryption (also referred to as "scrambling/descrambling") components that Data is protected while the communication signal is in transit. In some cases, these I/F components may act on I/F keys independently generated by each receiver 400 .

FIG. 4B provides a position calculation at the receiver 400 prior to a second cryptographic component 423a that may provide a position calculation to an application 450 located on the receiver 400, or to an application 499a not located on the receiver 400 the result of. Alternatively, the location calculation may be performed by a remote component (e.g., the server's remote location engine 440b) using location data received from the receiver 400, so that the results of the remote location calculation may be returned to the receiver 400 , or used by the remote application 499b.

Data transfer between components depicted by dashed lines in FIG. 4B may be performed directly between those components, or through intermediate components (eg, RF component 410 or network component 460 ). Dashed lines may indicate alternative implementations. For example, application manager 498a may receive location data from second cryptographic component 423a, after which application manager 498a may cause the location data to be communicated to remote application service 499a (e.g., via network component 460, or RF component 410, or other components in the receiver 400). The remote application service 499a may then use the location data (eg, a location estimate) to provide e911 or LBS services related to the receiver 400 .

As another example, the application manager 498a may receive data directly from the data unit output component 424, or through an intermediate component (e.g., an I/F encryption component), after which the application manager 498a may cause the location data to be communicated to a remote location engine 440b that computes an estimated location of the receiver 400 (eg, latitude, longitude, magnitude of the receiver 400). Remote location engine 440b may communicate the location estimate to second cryptographic component 423a (e.g., via network component 460, or RF component 410, or other components in receiver 400) or second cryptographic component 423b for processing at those components. further processing. The second cryptographic component 423b is used, for example, to control access to the location estimate by one or more remote application services 499b or by an application 450 running on the receiver 400 (e.g., by The pass of the position estimate of the other components of the ). The remote application service 499b or application 450 may then use the location estimate to provide e911 or LBS services associated with the receiver 400 . Any remote components may be co-located, or located in different geographical locations.

In FIG. 4B, a first cryptographic component 422 outputs the decrypted location information to a data unit output component 424, which determines discrete data units of location information (e.g., latitude, longitude, magnitude, pressure, temperature, other atmospheric information or measurements, system time, timing correction, and/or transmitter ID). These data units are then sent to the location engine 440a or 440b. Location engine 440a or 440b may be configured to process location information (and, in some cases, GPS data, cell data, and/or other network data) to determine the location of receiver 400 within a particular boundary (e.g., level of accuracy, and other borders). Once determined, location information may be provided to the application 450, 499a, or 499b via the second level password 423a or 423b (and possibly, via other intermediary components). Those skilled in the art will appreciate that location engine 440a or 440b may represent any processor capable of determining location information, including a GPS location engine or other location engine.

The second cryptographic component 423a may be configured to encrypt specific data using a session key for a specific application or a group of applications with a specific service level. A service level may grant access to certain subsets of data units (eg, latitude, longitude, magnitude, precision, etc.) to certain applications.

After encrypting the data (eg, using the session key), the second cryptographic component 423a may then make the encrypted data available to the application 450 . The session key can be dynamically generated at the receiver 400 and can be changed periodically to improve security. When a single session key is used for a group of applications, the session key can be changed when the ASLC validity period has elapsed for any application, thus forcing the group of applications to request a new session key.

In one embodiment, the second cryptographic component 423 authenticates the ASLC for a particular application before exchanging a session key with the application, so that the application can decrypt data for the application. Initially, the second cryptographic component 423 may receive the ASLC from the application, or may be instructed to query the ASLC from memory 430 or elsewhere. Certain encrypted data units of location information are then accessible to the application.

The ASLC may indicate the service level authorization for the application. To manage access to only data authorized for a particular application, the second cryptographic component 423a may exchange a session key with the application according to the application's authorization to send encrypted data indicated in the ASLC.

For the remote application 499a, the remote application manager 498a may provide a communication interface to transfer the ASLC and session key between the remote application and the second cryptographic component 423a.

Attention turns to FIG. 4C , which depicts some aspects of the disclosure as they relate to receivers and other components that transmit data to or receive data from the receivers. As shown in Figure 4C, a position signal is acquired from the transmitter (eg, using signal processing that shrinks the transmitter by correlation with the PN sequence). The signal processing may also demodulate the signal to obtain the physical layer payload and raw time of arrival (TOA) for each transmitter. These signals may be acquired and tracked by various hardware (HW), firmware (FW) and/or software (SW) components. For example, the FW and/or HW on the GPS chip can be used to decode packets from any of the various subframes of the signal transmission and verify the CRC. Alternatively, the host processor can decode and verify the CRC.

Trace HW/FW/SW can be used to generate raw TOA data, and transmit raw encrypted data (eg, packets) to the decryption component. In some implementations, the packet ID is not encrypted for all packet types. Raw encrypted data can be decrypted using an ALAC key within a specific HW/FW (eg, WAPS specific HW/FW). ALAC can be encrypted or encapsulated based on a device ID or device class specific to each device. A device-specific ID can be used for entitlement to WAPS location services on the device.

The ALAC decryption process and/or the FW/HW/SW responsible for decryption may vary from vendor to vendor at chip level, receiver/handset level, or carrier level. The raw decrypted data along with the raw TOA measurements can then be scrambled (e.g., using a scrambling algorithm and a device-generated key), and the scrambled data can be sent in a protected or unprotected data stream to the GPS chip A located file library that runs on itself or on the main processor, or both. Scrambling may not be necessary in case decrypting and locating file bases run on the same HW/FW (eg GPS chip).

Raw data and TOA measurements can be descrambled after the vault is located for future use in the vault. For example, descrambled data may be grouped into Data Units (DU) 1 through 5 as follows: DU1 (latitude, longitude, amplitude (LLA) at transmitter); DU2 (pressure/temperature at transmitter); DU3 (timing correction for transmitter); DU4 (time of transmitter's network (WAPS time)); and DU5 (identifier of transmitter).

Fine TOAs can be generated using raw and timing corrections from DU3. The location engine can use the various data units (eg, DU1, DU2, DU5), along with the fine TOA and pressure sensor readings, to calculate the receiver's LLA. Note that DU4 may be used by a positioning engine configured to generate timing signals (eg, used if a receiver is used to synchronize other receivers).

The receiver's LLA or any one of DU1 to DU5 may be encrypted based on parameters specified by the ASLC for the requesting application or the application group to which the requesting application belongs. Encryption may be performed using various techniques, including random or predefined session keys, other keys defined by ASLC, or other encryption methods known in the art. Various implementations are contemplated, including implementations where service level encryption and decryption may involve a single application instance or multiple different application instances.

In one implementation, encrypted data may only include data for the requesting application, as specified by the application's service level. For example, an estimate of the LLA of a receiver within a certain level of accuracy may become available (eg, LLA accuracy within 100 meters, LLA accuracy within 10 meters). In this implementation, a processor located at the receiver may analyze known LLAs with an accuracy of x meters, and then, depending on the service level authorization, generate a different LLA with an accuracy of y meters. Such an implementation would be beneficial where different levels of paid service are associated with varying levels of location accuracy.

The positioning engine may use the pressure and temperature readings received in DU2 for each of the plurality of transmitters to generate a best estimate of the reference pressure. This reference pressure can be sent in encrypted form to the respective positioning engine, which can use the reference pressure and the receiver's pressure sensor readings to calculate a magnitude, as described in the incorporated references.

In some SW architectures, the positioning engine may incorporate other measurements from other sources in a hybrid implementation that uses signals from any of Wi-Fi, GPS, WAPS, and other transmitters. Such a hybrid location engine may run in conjunction with the host processor after decryption of the encrypted receiver LLA or service level of other encrypted data (eg, any of DU1 to DU5). Alternatively, the hybrid location engine may run prior to service level encryption, so access to data derived from the hybrid location engine is restricted to authorized applications.

The discussion above with respect to FIG. 4C can be applied to MS-assisted (MS-A), MS-based (MS-B), or stand-alone user plane call flows. In the case of a control plane call flow (e.g., E-911), data and amplitude estimates in raw or refined TOA/pseudorange form (for MS-A mode), or in LLA form at the receiver (for based on MS mode) is sent to a Position Determination Entity (PDE), Serving Mobile Location Center (SMLC) or other device for position calculation and forwarded to PSAP. This transmission may be via one or more control plane signals of the cellular system.

Note that, although not preferred, location assistance data can be provided to the positioning engine using alternative means of communication (eg, network-based paths, local area network paths, wide area network paths, and other network paths beyond the RF path). This transmission may be necessary when low signal conditions exist between the receiver and transmitter network. When transmitted using an alternate means of communication, the assistance data may be encrypted using a key associated with ALAC, or using an alternate key specific to that means of communication. Alternatively, instead of using ALAC or similar keys, service level encryption and decryption could be used.

Although FIG. 4C depicts different components within different HW/FW/SW, certain embodiments may incorporate the various components of FIG. 4C into one or more hardware components, such as a main processor, a GPS chip, or both.

Method-Related Aspects

5A shows a diagram detailing a network process for determining location information about a receiver, and controlling access to the location information at the receiver, in accordance with certain aspects. Reference is made to FIG. 2 while describing the process shown in FIG. 5A. Those skilled in the art will appreciate that the process flow shown in Figure 5A is schematic and is not intended to limit the present disclosure to the sequence of stages shown in Figure 5A. Accordingly, stages may be removed and rearranged, and other stages not shown may be performed, within the scope and spirit of the present disclosure.

At stage 501, the location system 240 may create and maintain information for controlling access to location information by receivers. For example, location system 240 may create an air link certificate (ALAC) (also referred to as a "system-level key/certificate") and an unauthorized service level certificate (ASLC) that will be used by UE 220 in the future to use the location information Information received from the network (eg, from service provider 230 and/or positioning system 240 ) is previously decrypted based on restrictions specified by the ASLC for the particular application on the receiver that has requested location information. At stage 502, the created ALAC and ASLC are provided to the manufacturer 210, and at stage 503, the manufacturer 210 provides the ALAC/ASLC to the UE 220 (e.g. by mapping them in firmware).

At stage 504 (e.g., after the user purchases the UE 220), the UE 220 initiates the application or initiates an emergency 911 call. Prior to step 504, although not explicitly shown, applications may be downloaded to UE 220. In case the ASLC associated with the application has already been provided by the manufacturer, stage 505 is not necessary. Otherwise, UE 220 sends the developer key associated with the application to the network. The routing of the developer key may be through the service provider 230, the location system 240, and/or the developer of the application, such as an external entity 250 (routing not shown). After receiving and verifying the developer key, the network can then transmit the ASLC for the application to the UE 220, which can then store the ASLC.

At stage 506, the UE 220 obtains location information from the network. The location information may be obtained from a broadcast signal initiated at the positioning system 240 and/or may be obtained through the service provider 230 . Similarly, UE 220 may request location information, or monitor the broadcast of location information.

In stages 507-508, the UE 220 may decrypt the location information using the ALAC (eg, the ALAC associated with the transmitter broadcasting the location information) and the ASLC associated with the application at the receiver requesting the location information.

In stages 509-510, the decrypted location information is processed and positioning information related to the location of the UE 220 is determined (eg at the location engine).

In the case of a 911 call, location information, location information, and/or information used to determine location (e.g., pseudoranges and information about the transmitters whose pseudoranges were calculated) are communicated to the service provider in stages 511-512 230 and/or a PSAP operating as an external entity 250. Otherwise, at stage 512, for LBS-based applications, the location information may be maintained at the UE 220 to perform location-based services, and/or may be transmitted to an LBS entity operating as an external entity for assistance based on The provision of the location of the service. Another alternative for E-911 calls is for the receiver to send an encrypted packet and the original TOA information to the server. The encrypted packets can be decrypted at the server to extract the information needed to compute the position solution.

Figure 5B illustrates a process for describing location information related to a web application or E-911 transaction. Note that ASLC may or may not be used for E911 transactions. For example, if an ASLC is used for E-911 calls, a specific ASLC can be established for emergency calls with the highest service level and no expiration date.

6 shows a diagram detailing a process for providing conditional access to location information at a receiver in accordance with certain aspects. Reference is made to FIGS. 2 and 4A-C while describing the process shown in FIG. 6 .

As previously described, encrypted positioning signal data may be communicated to a receiver (eg, receiver 400 of FIGS. 4A-4C ). Encrypting the positioning signal data helps secure its transmission to, and use at, authorized receivers. However, robust encryption techniques may not be feasible given bandwidth constraints and limitations on processing power at the receiver. Therefore, encryption must protect the transmitted data while using minimal data/packet space, and does not require significant decryption at the receiver, which typically does not have the processing power to perform robust decryption for short periods of time.

Other encryption can be used based on various parameters (e.g., validity of payment associated with the application, current user location, whether a fixed amount of location requests by the user or the application has been exceeded, the period of time during which location information can be accessed, etc. ) to protect the use of location information by authorized applications and users. This second layer of encryption and decryption, which controls the distribution of location information to certain applications, while limiting access to that location information by other applications, is an important feature of the various embodiments described here because it allows network operators, carriers, Application providers/developers or other entities shown in FIG. 2 monetize the distribution of location information. Furthermore, the second layer of encryption and decryption neutralizes potential attempts by unauthorized users (eg, hackers) to gain access to location information for use in unauthorized applications.

Figure 6 shows two stages of decryption associated with an aspect. Those skilled in the art will appreciate variations in FIG. 6 that fall within the scope and spirit of the present disclosure. At stage 610, the receiver initiates the first application (eg automatically in response to some predefined conditions, in response to user input). Thereafter, the receiver determines whether a copy of the ASLC associated with the first application is stored in the receiver's memory (eg, memory 430 of FIGS. 4A-C ). If a copy exists, the receiver is "provisioned" with the ASLC, and stage 630 is run. Otherwise, the receiver is "not provided" and stage 620 is executed.

At stage 620, the receiver obtains a copy of the ASLC from the network. Figure 7 details the sub-phases of phase 620. Those skilled in the art will appreciate that stage 620 may be performed after other stages shown in FIG. 6 (eg, after any stage preceding stage 660 ).

At stage 630, encrypted positioning signals arrive from the network to the receiver. The positioning signal may be broadcast by the transmitter, or may arrive via other communication paths (eg, cellular paths, network-based paths, local area network paths). At stage 640, the receiver starts processing positioning signals. The sub-stages associated with stage 640 are shown in FIG. 8 .

At stage 650 the positioning signal reaches the first cryptographic component 422 where it is decrypted using the copy of the ALAC stored in the memory 430 . Thereafter, at stage 660, some or all of the location data from the decrypted positioning signal is decrypted by the second cryptographic component 423 using the ASLC associated with the first application. The ASLC may be retrieved from memory 430, or from the network (as described in connection with stage 620 and FIG. 7).

Finally, at stage 670, the location engine 440 may receive the decrypted location data and the location TOA or pseudorange information instead of the first application calculating the location of the receiver. The calculation of the location may be determined based on the service level indicated by the ASLC for the first application.

7 shows a diagram detailing a process for providing conditional access credentials at a receiver in accordance with certain aspects and stage 620 of FIG. 6 . FIG. 2 is referred to while describing the process shown in FIG. 7 .

At stage 710, the UE 220 retrieves the developer key associated with the application. The developer key may be stored on the UE 220 after the application is downloaded on the UE 220. The association of the developer key with the ASLC may be stored at the network (eg, service provider 230, location system 240, or external entity 250). The ASLC can be not only application specific but also specific to the UE 220 access level. At stage 720, the developer key is communicated to the network for processing (eg, to the service provider 230, the positioning system 240, and/or the developer or application provider 250).

At stage 730, in response to transmitting the developer key, the UE 220/receiver 400 receives an ASLC related to the developer key/application over the network. At stage 740, the ASLC may be stored for future use. Alternatively, the ASLC may not be stored so that stages 710 to 730 are repeated the next time the application requests location information (under the two-stage decryption model shown in FIG. ASLC).

8 shows a diagram detailing a process for processing positioning signal data in accordance with certain aspects and stage 640 of FIG. 6 . Reference is made to FIGS. 4A-C while describing the process shown in FIG. 8 . For example, stage 640 may be performed by signal processing component 421 in Figures 4A-C.

At stage 810, positioning signals received from the transmitter via the RF component 410 may be used to estimate a raw TOA (eg, at the digital processing component 421a). Thereafter, the raw TOA estimates may be converted into raw positioning pseudorange information at the pseudorange generation component 421b.

At stage 820, the positioning signal may be decoded at data processing component 421c. At stage 830, the data processing component 421c may perform error detection on the positioning signal before sending the positioning information to the first cryptographic component 422 for decoding.

Figure 11 shows the first stage of decryption, the second stage of encryption, and the third stage of decoding. Those skilled in the art will appreciate variations in FIG. 11 that fall within the scope and spirit of the disclosure. Certain stages depicted in Figure 11 may be rearranged or omitted in other implementations. The discussion below generally refers to receivers, however, the discussion can be extended to one or more processors for performing some or all of the functions specified below.

At stage 1110, a first application is launched (eg, automatically in response to some predefined condition, in response to user input, or in response to another event or circumstance). The application may be initiated at the receiver, or at a server located remotely from the receiver, or at another device. The receiver may take various forms, including those shown in Figures 4B-C.

At stage 1120, the receiver obtains a copy of the ASLC associated with the first application. The receiver may retrieve the ASLC from memory at the receiver, from the first application, or from an external source. The ASLC may specify parameters that determine what information can be provided/accessed by the first application and when and how it can be provided/accessed by the first application, among other conditions. Alternatives to using ASLCs are considered, including using only data in ASLCs without certificates.

In stage 1130, encrypted positioning information is passed from the transmitter to the receiver. Each of the positioning signals may be broadcast from a respective transmitter and may arrive via other communication paths (eg, cellular paths, network-based paths, local area network paths, or both).

In stage 1140, the receiver starts processing positioning signals.

At stage 1150, the positioning signal is decrypted using a key stored at the receiver or accessible by the receiver from an external source (eg, a key specified by ALAC).

At stage 1160, the receiver may identify or determine location information from the positioning signal. The location information may include raw and refined TOA measurements, Data Units (DUs) as described anywhere herein, estimated receiver location coordinates (computed based on positioning signal data), modified location coordinates (based on estimated location coordinates or other data to determine). Modified location coordinates may be determined based on parameters from stage 1120 . The parameters may indicate location coordinates within a predefined level of accuracy (eg, distance) that the application is allowed to receive estimated location coordinates. In this case, the processor can create new location coordinates based on the level of precision (e.g., alter the latitude so that it falls within x units of measure from the estimated latitude, alter the magnitude to 0 so that only two dimensions). Providing less precise location information may enable subscription services on a per-app or per-use basis.

At stage 1170, one or all of the location information may be encrypted using a key specified by or generated based on the ASLC or its data from stage 1120. The selection of location information for encryption may be governed by service level conditions specified by the ASLC. The service level conditions may specify which data is accessible by the first application, and may be determined from data described anywhere herein, including some or all of the data described with reference to FIG. 9 .

At stage 1180, the encrypted location information is decrypted for use by the first application. The processor running the first application may have an oracle about the key used to encrypt the location information. The oracle may be obtained by accessing the ASLC (eg, where the ASLC specifies a key or an algorithm for determining the key), or by receiving a key (eg, where a session identifier is used).

Aspects related to data

9 illustrates data for use during a conditional access process in accordance with certain aspects. As shown, the data may identify or represent application type (e.g., E-911, LBS, network management, law enforcement), UE ID or UE type, service type (e.g., usage accuracy, usage range, usage time, available data unit), service provider type, manufacturer type, developer type, user ID or type, request type, or other types of information that can be used as parameters to determine the service level of an application that determines which What kind of location information can be provided to the application, when the location information can be provided, how the location information can be provided, and where the location can be provided. GPS or other time may also be transmitted to monitor usage based on time limits. Some or all of this data may be incorporated into the application-specific and/or UE-specific ASLC and may in the future be accessed by the processing component to identify The location information was encrypted before the application. Each data may be used by a processor on the receiver to filter certain decrypted location information before providing that particular decrypted location information in encrypted form to an application, device or user. In other words, this data determines what location information is available, when it is available, and for how long it is available. ASLCs may also include encryption keys or algorithms used to create encryption keys (e.g., for creating encryption keys using real-time data, or other data that may be distributed in a protected key algorithm).

Service types can relate to levels of accuracy in up to three dimensions, including high range accuracy (eg, 3 meters), medium range accuracy (25-50 meters), and low range accuracy (400 meters). Service types can also relate to coverage levels, including localized, regionalized, national and global, and so on. A service type may also be related to a validity time level involving expiration of access rights on a one-time, monthly, yearly, or lifetime basis, among other validity periods. Service types can also relate to usage levels, including metered and unlimited. Various combinations of levels can be used.

Similar decryption for positioning applications of non-cellular devices is also contemplated. For example, E-911 calls through VoIP applications (eg, Skype ^™ ), cameras/video cameras, etc., which can have ASLC mapped to their firmware or downloaded into memory.

Aspects related to usage

Various types of computing devices and their connection states are considered, including devices that are almost always connected, often connected, or rarely connected (rarely connected) to a cellular network, location network, local area network, or other network. Additional considerations are given to the processing capabilities of each of these computing devices.

Types of connections include cellular (eg, 3G/4G, prepaid), Wi-Fi, wired (eg, USB, Ethernet), and other connections.

Types of computing devices include smartphones, other cellular phones, tablets, laptops, connected TVs, VoIP phones, STBs, DMAs, applications, security systems, PGDs, PNDs, DSCs, M2M applications, geofencing of assets, and more . Connected receivers are devices such as cell phones, tablets, and laptops that have active data channels (eg, cellular and Wi-Fi/wired Ethernet) available. Always-connected receivers are devices such as tablets and laptops with access to non-cellular devices (eg, Wi-Fi/wired Ethernet). Receivers that are not connected or have limited connectivity include receivers that are rarely (very) connected to the Internet and have no cellular connection.

It is contemplated that unconnected receivers may be manufactured with a pre-authorized ALAC and ASLC set programmed for the lifetime of the receiver. Key updates beyond their initial period can be transmitted to the device via a firmware update (eg, using a USB connection), or by temporarily connecting the device to a data network. Such an unconnected receiver can determine its location using a suitable RF receiver that receives encrypted location information (eg, a GPS chip).

Additional aspects

One or more aspects may relate to systems, methods, apparatus, and computer program products for controlling access to location information by one or more applications. A system may include a processing component for implementing a method. A computer program product may include a non-transitory computer-usable medium having computer-readable program code encoded therein, the program code being adapted to be executed to implement the method.

The method steps may include: decrypting a first set of encrypted position signals received from a network of terrestrial transmitters using a first key; determining position information from the first set of decrypted position signals; identifying said first set of position information , wherein the first set of location information is identified based on a first service level associated with a first application; the first set of location information is encrypted using a second key; and The first application provides the encrypted first set of location information.

According to some aspects, the first set of location information includes at least one of: location coordinates, timing corrections, and atmospheric measurements of one or more transmitters from the network of terrestrial transmitters.

According to some aspects, the method steps may further comprise using the decrypted position signal to calculate estimated coordinates of a position of a receiver, wherein the first set of position information comprises the estimated coordinates of the receiver .

According to some aspects, the decrypted position signal includes data specifying atmospheric measurements at each of the terrestrial transmitters, wherein the estimating coordinates includes using the decrypted position signal at the receiver and at least one magnitude coordinate calculated from atmospheric measurements.

According to some aspects, the method steps may further comprise: using the decrypted position signal to calculate estimated coordinates of the receiver's position; and based on a level of precision permitted for the first application, calculating revised coordinates based on the estimated coordinates, wherein the revised coordinates are less precise than the estimated coordinates in specifying the location of the receiver, and wherein the first set of position information includes the revised coordinates.

According to some aspects, the method steps may further include identifying a second set of location information, wherein the second set of location information is identified based on a second service level associated with a second application, wherein specific location information included in the first set is not included in the second set; encrypting the second set of location information using a third key; and sending the second application to the The second set of location information is provided.

According to some aspects, the method steps may further include decrypting a second set of encrypted position signals received from the network of terrestrial transmitters using the first key or the third key, wherein the encrypted a first set of position signals is received at a first position of the receiver, and a second set of encrypted position signals is received at a second position of the receiver; according to the first set of decrypted position signals two sets determine additional location information; identifying a second set of the additional location information, wherein the second set of additional location information is identified based on a second service level associated with a second application; encrypting the second set of location information using a fourth key; and providing the second set of location information to the second application.

According to some aspects, the method steps may further include: prior to identifying the first set of location information, determining whether information specifying the first service level is stored on the receiver; said information for a level of service is not stored on said receiver, accessing a first developer key associated with said first application; sending said first developer key to a server; and in response to sending said first developer key The server sends the first developer key and receives the information specifying the first service level.

According to some aspects, the information specifying the first service level is included in a first authorized service level certificate associated with the first application, and wherein the certificate is associated with the developer key .

According to some aspects, the first level of service specifies a period during which the second key can be used to encrypt the first set of location information and any subsequent set of location information.

According to some aspects, the second key is a session key generated after the location signal is decrypted.

According to some aspects, a first application runs on a remote server, and the first set of location information is provided to the remote server.

According to some aspects, the method steps may further include determining the first service level based on parameters specified in a first certificate associated with the first application.

According to some aspects, the method steps may further include: scrambling the location information prior to sending the location information over an unsecured communication path; and prior to identifying the first set, scrambling the scrambled location Information is descrambled.

According to some aspects, the method steps may further include: scrambling the estimated coordinates prior to sending the estimated coordinates over the unsecured communication path; and scrambling the estimated coordinates prior to encrypting the first set The estimated coordinates of are descrambled.

According to some aspects, the method steps may further include: selecting the first key from a plurality of keys, wherein the CRC field of the encrypted position signal is only used when the first key is used to encrypt the The first set of position signals passes the check when decrypted.

According to some aspects, the method steps may further include: selecting the first key from a plurality of keys, wherein the data of the decrypted position signal is only used when the first key is used to encrypt the encrypted position The first set of signals matches the expected range of values when decrypted.

According to some aspects, the method steps may further include: selecting the first key from a plurality of keys, wherein the packet data from the plurality of transmitters is only used when the first key is used for One or more correlation checks are passed when decrypting the first set of encrypted position signals, wherein the first set of encrypted position signals includes packet data from a plurality of transmitters.

other aspects

Additional disclosure regarding various features of the present disclosure is described in the following co-assigned patent application, which is hereby incorporated by reference in its entirety for any and all purposes: March 2012 U.S. Utility Model Application Serial No. 13/412,487, titled WIDE AREAPOSITIONING SYSTEMS, filed on 5th; U.S. Utility Model Application, Serial No. 12/557,479, titled WIDE AREAPOSITIONING SYSTEMS, filed September 10, 2009 Patent (now U.S. Patent No. 8,130,141); U.S. Utility Application Serial No. 13/412,508, filed March 5, 2012, entitled WIDE AREA POSITIONING SYSTEM; filed November 14, 2011 , Serial No. 13/296,067, entitled WIDE AREA POSITIONING SYSTEM; application serial No. PCT/US12/44452, filed June 28, 2011, entitled WIDE AREA POSITIONING SYSTEM; U.S. Patent Application Serial No. 13/535,626, entitled CODING IN WIDE AREA POSITIONING SYSTEMS, filed June 28, 2012; Serial No. 13/536,051, filed June 28, 2012, titled CODING IN U.S. Patent Application for WIDE AREA POSITIONING SYSTEM (WAPS); U.S. Patent Application Serial No. 13/565,614, filed August 2, 2012, entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System (WAPS); at U.S. Patent Application Serial No. 13/565,732, filed August 2, 2012, entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System; U.S. Patent Application entitled Cell Organization and Transmission Schemes in a Wide Area Positioning System; Serial No. 13/831,740, filed March 14, 2013, entitled Systems and Methods Configured to Estimate Receiver Position Using Timing Data Associated with Reference Locations in Three-Dimensional Space; Serial No. 13/909,977, filed June 4, 2013, entitled SYSTEMS AND METHODS FOR LOCATION POSITIONING DE OF VI U.S. Patent Application Serial No. 14/010,437, filed August 26, 2013, and entitled SYSTEMSAND METHODS FOR PROVIDING CONDITIONAL ACCESS TO TRANSMITTED INFORMATION; U.S. Patent Application No. 14/011,277, entitled METHODS AND APPARATUS FOR PSEUDO-RANDOM CODING IN A WIDE AREAPOSITIONING SYSTEM (WAPS). The above-mentioned applications, publications, and patents may be referred to herein, individually or collectively, as "incorporated references," "incorporated applications," "incorporated publications," "incorporated patents," or otherwise designated. Various aspects, details, devices, systems and methods disclosed herein may be incorporated with the disclosure in any of the incorporated references.

The systems and methods described herein may track position computing devices or other things to provide position information and navigation to or to such devices and things, noting that the term "GPS" may refer to any Global Navigation Satellite System (GNSS), e.g., GLONASS , Galileo, and Compass/Compass. The transmitter may transmit positioning data in a signal received by the user equipment. Positioning data may include "timing data" (e.g., time of arrival (TOA)) that can be used to determine the time of travel of a signal, which can be used to estimate the distance between the user equipment and the transmitter by multiplying the time of travel of the signal by the speed of the signal. The distance (eg, pseudorange) between .

Various architectures for GPS receivers are considered. For example, the logic function of a GPS receiver can be divided into two parts: (1) signal processing, and (2) position calculation. Signal processing functions can be implemented in hardware, and position calculations can be implemented in firmware/software. These functions can be performed on a GPS ASIC "chip" with DSP hardware blocks and an ARM processor subsystem that manages the DSP hardware and calculates position. Such GPS chips typically generate the final latitude, longitude and magnitude as NMEA messages. Alternatively, location calculations can be performed on the application processor located on the handheld device to add additional location information and build a comprehensive location solution. Here, the present disclosure can be used in all implementations (in addition to other configurations for processing signals and computing positions).

The various illustrative systems, methods, logical features, blocks, modules, components, circuits, and algorithm steps described herein can be implemented, executed, or controlled by suitable hardware known in the art or developed in the future, or by a processor (also referred to as a "processing device" and also includes any number of processors) running software to implement, perform or control, or both. A processor may perform or cause any of the following: processing, calculation, method steps, or other system functions related to the processes/methods and systems disclosed herein, including analysis, processing, conversion, or creation of data, or other related Data manipulation. Processors may include general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs) or other programmable logic devices, discrete gate or transistor logic, discrete hardware components, servers, or any combination of the above. A processor may be a conventional processor, microprocessor, controller, microcontroller, or state machine. A processor can also refer to a chip that includes various components such as a microprocessor and other components. The term "processor" may refer to one, two, or more processors of the same type or of different types. Note that the terms "computer" or "computing device" or "user device" and the like may refer to a device including a processor, or may refer to the processor itself. The software may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium. A "memory" can be coupled to a processor such that the processor can read information from, and write information to, the memory. The storage medium can be integrated with the processor. The software may be stored on or encoded as one or more instructions or code on a computer readable medium. Computer-readable media can be any available storage media, including non-volatile media (e.g., optical semiconductors, magnetic semiconductors), and data and instructions transmitted over a network using a network transmission protocol via wireless, optical, or wired signaling media carrier. Aspects of the systems and methods described herein may be implemented as functionality programmable into any of a number of circuits. Aspects can be embodied in processors with software-based circuit emulation, discrete gates, custom devices, neural logic, quantum devices, PLDs, FPGAs, PALs, ASICs, MOSFETs, CMOS, ECL, polymer processes, Mixing simulation and data, and mixing of the above. Data, instructions, commands, information, signals, bits, symbols, and chips mentioned throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, light fields or particles, or any combination thereof. A computing network may be used for implementation aspects and may include hardware components (servers, monitors, I/O, network connections). An application may perform an aspect by receiving, transforming, processing, storing, retrieving, transmitting, and/or outputting data, which may be stored in a hierarchical data source, a network data source, a relational data source, a non-relational data source, Object-oriented data sources, or other data sources. "Data" and "information" are used interchangeably. The terms "comprises," "comprises," "includes," "comprising," etc. are to be read in an inclusive sense (ie, without limitation) as opposed to an exclusive meaning (ie, consisting of only these). Words using the singular or the plural also include the plural or the singular respectively. The words "or" or "and" cover any and all items in the list. "Some" as well as "any" and "at least one" mean one or more. The term "device" may include one or more components (eg, processor, memory, screen). The term "module", "block", "feature" or "component" may refer to hardware or software, or a combination of both, that is configured to perform or realize the same functions as those modules, blocks, The function associated with a feature or component. Similarly, features in system and apparatus figures shown as rectangles may refer to hardware or software. Note that a line connecting two described features may represent data transfer between those features. This transfer can be directly between those features, or through intermediate features (although not shown). Where no line connects two features, data transfer between those features is considered unless otherwise stated. Accordingly, lines are provided to represent certain aspects and should not be construed as limiting.

The present disclosure is not intended to be limited to the aspects shown here, but is to be given the broadest understanding by those skilled in the art, including equivalent systems and methods. The protection afforded to this invention should be limited only in accordance with the following claims.

Claims (36)

1., for controlling by a system for the access of one or more application location information, this system comprises at least one processor, and described processor is used for:

The first double secret key is used to be decrypted from the first set of the encrypted location signal of the network reception of land transmitter;

Positional information is determined in the first set according to decrypted positions signal;

Identify the first set of described positional information, wherein, described first set of described positional information is applied the first service level be associated be identified based on first;

Described first set of positional information described in the second double secret key is used to be encrypted; And

First of the described positional information of encryption is provided to gather to described first application.

2. system according to claim 1, wherein, described first set of described positional information comprise following at least one: from the position coordinates of one or more transmitters of the network of described land transmitter, correction of timing and aeromerric moasurenont.

3. system according to claim 1, wherein, described processor also for:

Use described decrypted positions signal to calculate the estimated coordinates of the position of receiver, wherein, described first set of described positional information comprises the described estimated coordinates of described receiver.

4. system according to claim 3, wherein, described decrypted positions signal comprises the data of the aeromerric moasurenont at the transmitter place, each land be defined in the transmitter of described land, wherein, described estimated coordinates is included in the amplitude coordinate that described receiver place uses described decrypted positions signal and at least one aeromerric moasurenont to calculate.

5. system according to claim 1, wherein, described processor also for:

Use the estimated coordinates of the position of described decrypted positions calculated signals receiver; And

Based on the precision level of permitting for described first application, calculate and revise coordinate, this correction coordinate is based on described estimated coordinates, wherein, described correction coordinate is lower than described estimated coordinates precision in the described position of specifying described receiver, and wherein, described first set of described positional information comprises described correction coordinate.

6. system according to claim 1, wherein, described processor also for:

Identify the second set of described positional information, wherein, described second set of described positional information apply the second service level be associated be identified based on second, wherein, during the specific location information be included in described first set is gathered not included in described second;

Described second set of positional information described in the 3rd double secret key is used to be encrypted; And

Described second set of described positional information is provided to described second application.

7. system according to claim 1, wherein, described processor also for:

Described first key or the 3rd double secret key is used to be decrypted from the second set of the encrypted location signal of the network reception of described land transmitter, wherein, first first position being integrated into described receiver of described encrypted location signal is received, and second of described encrypted location signal the second position being integrated into described receiver is received;

The positional information of adding is determined according to the second set of described decrypted positions signal;

Identify the second set of described additional positional information, wherein, described second set of described additional positional information is applied the second service level be associated be identified based on second;

Described second set of positional information described in the 4th double secret key is used to be encrypted; And

Described second set of described positional information is provided to described second application.

8. system according to claim 1, wherein, described processor also for:

Before described first set identifying described positional information, determine to specify whether the information of described first service level is stored on described receiver;

Once determine to specify that the described information of described first service level is not stored on described receiver, access applies with described first the first developer's key be associated;

Described first developer's key is sent to server; And

Send described first developer's key in response to described server, receive the described information of the described first service level of regulation.

9. system according to claim 8, wherein, specify that the described information of described first service level is included in the first service level certificate of authorizing applied with described first and be associated, and wherein, described certificate is associated with described developer's key.

10. system according to claim 1, wherein, the second key described in described first service horizontal specification can be used in the period be encrypted described first set of described positional information and the set follow-up arbitrarily of positional information follow-up arbitrarily.

11. systems according to claim 1, wherein, described second key is the session key generated after described position signalling is decrypted.

12. systems according to claim 1, wherein, the first application runs on the remote server, and described first set of described positional information is provided to described remote server.

13. systems according to claim 1, wherein, described processor also for:

Based on applying the parameter specified in the First Certificate be associated determine described first service level with described first.

14. systems according to claim 1, wherein, described processor also for:

Before sending described positional information by unprotected communication path, scrambling is carried out to described positional information; And

Before described first set of identification, descrambling is carried out to the positional information of scrambling.

15. systems according to claim 3, wherein, described processor also for:

Before sending described estimated coordinates by unprotected communication path, scrambling is carried out to described estimated coordinates; And

Before described first set is encrypted, descrambling is carried out to the estimated coordinates of scrambling.

16. systems according to claim 1, wherein, described processor also for:

From multiple key, select described first key, wherein, the crc field of described encrypted location signal is only used for passing through verification when being decrypted the first set of described encrypted location signal at described first key.

17. systems according to claim 1, wherein, described processor also for:

Described first key is selected from multiple key, wherein, the data value scope that only coupling is expected when described first key is used for being decrypted the first set of described encrypted location signal of described decrypted positions signal.

18. systems according to claim 1, wherein, first of described encrypted location signal gathers the grouped data comprised from multiple transmitter, and wherein, described processor also for:

From multiple key, select described first key, wherein, from described multiple transmitter described grouped data only when described first key is used for being decrypted first of described encrypted location signal the set by one or more Correlation Calibration.

19. 1 kinds for controlling by the computer-implemented method of the access of one or more application location information, the method comprises the following steps:

The first double secret key is used to be decrypted from the first set of the encrypted location signal of the network reception of land transmitter;

Positional information is determined in the first set according to decrypted positions signal;

Identify the first set of described positional information, wherein, described first set of described positional information is applied the first service level be associated be identified based on first;

Described first set of positional information described in the second double secret key is used to be encrypted; And

First of the described positional information of encryption is provided to gather to described first application,

Wherein, at least one in above-mentioned steps implemented by least one processor.

20. computer-implemented methods according to claim 19, wherein, described first set of described positional information comprise following at least one: from the position coordinates of one or more transmitters of the network of described land transmitter, correction of timing and aeromerric moasurenont.

21. computer-implemented methods according to claim 19, wherein, the method is further comprising the steps of:

Use described decrypted positions signal to calculate the estimated coordinates of the position of receiver, wherein, described first set of described positional information comprises the described estimated coordinates of described receiver.

22. computer-implemented methods according to claim 21, wherein, described decrypted positions signal comprises the data of the aeromerric moasurenont at the transmitter place, each land be defined in the transmitter of described land, wherein, described estimated coordinates is included in the amplitude coordinate that described receiver place uses described decrypted positions signal and at least one aeromerric moasurenont to calculate.

23. computer-implemented methods according to claim 19, wherein, the method comprises the following steps:

Use the estimated coordinates of the position of described decrypted positions calculated signals receiver; And

Based on the precision level of permitting for described first application, calculate and revise coordinate, this correction coordinate is based on described estimated coordinates, wherein, described correction coordinate is lower than described estimated coordinates precision in the described position of specifying described receiver, and wherein, described first set of described positional information comprises described correction coordinate.

24. computer-implemented methods according to claim 19, wherein, described processor also for:

Identify the second set of described positional information, wherein, described second set of described positional information apply the second service level be associated be identified based on second, wherein, during the specific location information be included in described first set is gathered not included in described second;

Described second set of positional information described in the 3rd double secret key is used to be encrypted; And

Described second set of described positional information is provided to described second application.

25. computer-implemented methods according to claim 19, wherein, described processor also for:

Described first key or the 3rd double secret key is used to be decrypted from the second set of the encrypted location signal of the network reception of described land transmitter, wherein, first first position being integrated into described receiver of described encrypted location signal is received, and second of described encrypted location signal the second position being integrated into described receiver is received;

The positional information of adding is determined according to the second set of described decrypted positions signal;

Identify the second set of described additional positional information, wherein, described second set of described additional positional information is applied the second service level be associated be identified based on second;

Described second set of positional information described in the 4th double secret key is used to be encrypted; And

Described second set of described positional information is provided to described second application.

26. computer-implemented methods according to claim 19, wherein, described processor also for:

Before described first set identifying described positional information, determine to specify whether the information of described first service level is stored on described receiver;

Once determine to specify that the described information of described first service level is not stored on described receiver, access applies with described first the first developer's key be associated;

Described first developer's key is sent to server; And

Send described first developer's key in response to described server, receive the described information of the described first service level of regulation.

27. computer-implemented methods according to claim 26, wherein, specify that the described information of described first service level is included in the first service level certificate of authorizing applied with described first and be associated, and wherein, described certificate is associated with described developer's key.

28. computer-implemented methods according to claim 19, wherein, the second key described in described first service horizontal specification can be used in period of being encrypted described first set of described positional information and the set follow-up arbitrarily of follow-up arbitrarily positional information.

29. computer-implemented methods according to claim 19, wherein, described second key is the session key generated after described position signalling is decrypted.

30. computer-implemented methods according to claim 19, wherein, the first application runs on the remote server, and described first set of described positional information is provided to described remote server.

31. computer-implemented methods according to claim 19, wherein, the method comprises the following steps:

Based on applying the parameter specified in the First Certificate be associated determine described first service level with described first.

32. computer-implemented methods according to claim 19, wherein, the method comprises the following steps:

Before sending described positional information by unprotected communication path, scrambling is carried out to described positional information; And

Before described first set of identification, descrambling is carried out to the positional information of scrambling.

33. computer-implemented methods according to claim 21, wherein, the method comprises the following steps:

Before sending described estimated coordinates by unprotected communication path, scrambling is carried out to described estimated coordinates; And

Before described first set is encrypted, descrambling is carried out to the estimated coordinates of scrambling.

34. computer-implemented methods according to claim 19, wherein, the method comprises the following steps:

From multiple key, select described first key, wherein, the crc field of described encrypted location signal is only used for passing through verification when being decrypted the first set of described encrypted location signal at described first key.

35. computer-implemented methods according to claim 19, wherein, the method comprises the following steps:

Described first key is selected from multiple key, wherein, the data value scope that only coupling is expected when described first key is used for being decrypted the first set of described encrypted location signal of described decrypted positions signal.

36. computer-implemented methods according to claim 19, wherein, first of described encrypted location signal gathers the grouped data comprised from multiple transmitter, and wherein, said method comprising the steps of:

From multiple key, select described first key, wherein, from described multiple transmitter described grouped data only when described first key is used for being decrypted first of described encrypted location signal the set by one or more Correlation Calibration.