extended PRM_RPS Overview

VF MIC, Nov 2018

HUAWEI TECHNOLOGIES CO., LTD.

What is Radio Positioning System (RPS)?
• RPS is a geolocation product jointly developed by Vodafone and Huawei since 2015.
• It uses RF+GPS information from network users to build a fingerprint database, which could be used to massively
locate Vodafone customers in real time by using only the RF information reported when connected to the network.
• 3G&4G Location accuracy can reach up to 60m in urban areas, allowing new uses cases for VF “Big Data”.

3G&4G RPS NB-IoT RPS Drone RPS

UTM
Reports
(ASCII CSV)
3G/4G NW Database
Fingerprinting FURTHER
PCI
TRIALS RSRP
RF ON- 4G
GOING RPS
Location
3G/4G GPS
RF

Construct a GPS+RF fingerprint DB Enhanced RPS algorithm to locate NB-IoT Construct GPS+RF fingerprint DB to
(1%~10% users reported) to massively locate devices with a LTE fingerprint DB, with locate drones with RF info, detecting
users in real time, using only RF info Rel-14 NB-IoT LCS architecture fake or spoofed GPS

RPS research started in 2015, and the theory extended on NB-IoT location in 2016, and Drone location in 2017.

Huawei - Vodafone MIC (Mobile Innovation Center) Page2

All Rights Reserved
C2 General
Why use RPS?
• 3GPP has defined lots of location algorithms, such as A-GPS, OTDOA, E-CID, but what is the benefit of RPS?

ISD: 500m
A-GPS OTDOA E-CID RPS
3~50m 50~100m 100~500m 60~200m
• Strict on synchronization • No GPS card needed in RAN
• Need GPS in UE (50ns~100ns) • Accuracy depends on
• Need only 1% ~10% UE support GPS
• Need more time to search •Need GPS card installed in coverage of cells
report
satellite signal UMPT, high cost in • Core NE: Standard LCS
• Works in outdoor and indoor
• Not for indoor deployment need ESMLC, mAOS could
• Real time location for users without GPS
• Core NE: Need ESMLC • At least 3 eNBs needed work without ESMLC
• Core NE: 3G&4G no need ESMLC,
• Core NE: Need ESMLC NB-IoT RPS need ESMLC (LPP)

RPS has less limitations/deployment cost compared to A-GPS&OTDOA, and better accuracy compared to E-CID.
It also can massively locate Vodafone customers, allowing new uses cases for VF “Big Data”.
Huawei - Vodafone MIC (Mobile Innovation Center) Page3
All Rights Reserved
C2 General
How can RPS be used?
Population Distribution

Smart City Enterprise users Tracking

• City Traffic Planning
• Emergency Event Broadcast(Best Effort)

NB-IoT

Livestock Tracking
Asset Location verification
NB-IoT
NB-IoT

Asset Tracking Fake GPS

Drone Detecting

Huawei - Vodafone MIC (Mobile Innovation Center) Page4

All Rights Reserved
C2 General
3G & 4G RPS E2E Architecture --- Ready for commercial deployment now
• Locating based on the file (non-real time) /streaming (real time, 60s) data
and result reporting.
VF Server
• Huawei provides independent hardware & software architecture
Locating result based on mAOS.
file/streaming reporting • Using Trace Server as data source collection node.
Huawei Automatic synchronization of configuration • Optional: Get 4G IMSI/IMEI from MME
data and engineering parameters • Ericsson and NSN multivendor support in 4 months, after receiving
the traces and documents for parsing the traces correctly in
U2000 TS mAOS
commercial deployment.
(CME)
CHR/MR
file/streaming Device Requirement Description
data RPS algorithm RNC • SAU board • Huawei SAU boards collect UMTS NE data.
CHR/MR file/streaming runs here. NodeB • RAN17.1SPC55 • RAN17.1 and later NEs support real-time locating
0 or later
data
eNodeB • eRAN11.1SPC2 eRAN11.1 or later NEs supporting the MDT MR apply to the
RNC (SAU)
30 or later locating based on the feature database.
CHR/MR MME CHR flow data U2000 with the • V200R016C10C U2000 (Trace Server) V200R016C10CP2511 provides real-
file/streaming (If 4G IMSI/IMEI Trace Server P2511 or later time locating.
Raw signaling data required)
CME V200R016C10 or The TSP/mAOS Location uses the CME to automatically
later obtain engineering parameters.
mAOS V300R018C10 In 2018, TSP evolved to mAOS.
(TSP: V100R017C10 released )
NodeB eNodeB Core Network MME • EVU board • eRAN data can be associated with IMSIs/IMEIs only if
• V900R013C01 eRAN data is connected with MME CHRs.
• EVU boards on MMEs generate CHRs.
TSP was evolved to mAOS (mobile Agile Operate System) in 2018.

Huawei - Vodafone MIC (Mobile Innovation Center) Page5

All Rights Reserved
C2 General
3G & 4G RPS Trial Result --- Ready for commercial deployment now
PoC Test Result Commercial Trial Result
PoC test performed in a Huawei radio live network (SRAN11.1) in Commercial trial performed in a Huawei radio live network (SRAN12.1)
Madrid in December 2016. Traces taken directly from RNC/eNB and in Istanbul in January 2018. TSP 17.1 version is used to output the
post-processed by offline tool. 300 points were tested covering static location result of test users. 640 points were tested covering static
(Indoor & Outdoor), drive and walk scenario. (Indoor & Outdoor), drive and walk scenario.
Test Information 3G 4G
Test Information 3G 4G
Test Area Part of 3 RNCs 86 eNBs
Test Area RNC126 30 eNBs
Average ISD 465m 473m
Average ISD 377m 360m
Fingerprint Collection Time ~3 Weeks
Fingerprint Collection Time ~3 Weeks
Calls reported GPS 3% 23%
Calls reported GPS 0.7% 12%

RPS algorithm only:

Accuracy @67% 3G 4G
• ~60m @67%
4G Outdoor 81 55 • ~50% location responses
test area
Indoor 70 72 other 50% test points only reported a single cell,
3G Test area scenario where RPS could not be applied.
RNC126 Walk 74 65 3G & 4G
RPS & E-CID as fallback where RPS not apply Test area
Drive 77 48
• ~ 75m @67%
All Scenario 75m 59m • ~100% location responses
vs E-CID 257m 243m Result for a subset of the overall test points with 70%
RPS success ratio
Much better than E-CID.

Huawei - Vodafone MIC (Mobile Innovation Center) Page6

All Rights Reserved
C2 General
NB-IoT RPS Trial Result --- Ready for commercial trial in 2018Q4
Architecture of NB-IoT RPS Solution PoC Test Result
Rel-14 LPP PoC test performed in a Huawei radio live network (SRAN12.1) in Bilbao,
NB-IoT measurement December 2017. TSP 17.1 version is used to output the location result of
test users. 445 points were tested covering static( Indoor & Outdoor),
drive and walk scenario.
World 1st NB-IoT LPP-based (3GPP Rel-14) E2E Geo-Location Test
Test Information 4G & NB-IoT
Test Area 6 eNBs
Reuse LTE fingerprint Database
Average ISD 1800 m
• Based on 3GPP LCS architecture which consistent with 4G, reuse 4G DB
• Massive NB-IoT terminals provide big data management or data analysis Fingerprint Collection Drive Test

NE Huawei Product Version Requirement Algorithms have application scenario,

following shows the % where has Based on the
Support NB-IoT Rel-14 LCS
NB-IoT Chipset Boudica V150R100C20
Measurement normal location response. test points with Based on all test
Accuracy all normal points, including
NB-IoT platform OceanConnect V100R001C52 Send the LCS requirement to GMLC
@67% location w/wt location
Support NB-IoT, and support response in 3 response
eNodeB eRAN V100R013C10
LPPa(Optional)
algorithms
U2000 V200R018C10 Trace server is needed
LTE RPS 176 NA
mAOS mAOS V300R018C10 Support NB-IoT RPS
ALL 445 % with location NB-IoT RPS 255
MME
vUSN V100R018C10 Support Wakeup and paging UE, Test points response 365
Cloud Deployment transform LPP/LPPa
LTE RPS 55%
ECID 880 860
CloudSCEF V100R018C10 Support 3GPP Rel-14 NB-IoT ECID
ESMLC/GMLC
Commercial: PO+3 Months location The accuracy of NB-IoT RPS is not so good
NB-IoT RPS 80% as LTE RPS, but the response success
HSS V500R009C30SPC200 Support 3GPP Rel-11 LCS
E-CID 96% ratio is much better than LTE RPS

Huawei - Vodafone MIC (Mobile Innovation Center) Page7

All Rights Reserved
C2 General
Drone RPS Trial Result --- Algorithm Study
2017, World 1st NW based system to identify, monitor,
Why drone RPS needed? control and track UAVs , now VF is partner with EASA,
and participant in the U-SPACE DOMUS project.
Drones connected to the mobile network could enable safe
flights and open up new services
3D RPS Ph2
• Safe & Secure – drone registered and
identified in real time 10, 2017 02, 2018 04, 2018 07, 2018 11, 2018 01,2019
• New services enabled – BVLOS, automatic flight 2D
authorization… DOMUS
Ph1
• Mission control – protecting No-fly zones
Drone RPS live demos use the location architecture shown in Page 2.
then Mobile Network could be used as the Infrastructure to Drone RPS algorithm study trial performed in ATLAS in December 2017.
identify, monitor, control & command, and geo-locate drones. For the irregular coverage in the sky, using AI approach to locate.
• 198 sites are shown in left 166km*130km
area, whose signal has been detected by
• Identification using the SIM card the drone flying in the 10km*5km area
(Red rectangle).
• RPS enabling NW as a RADAR to • The farthest distance signal detected by
locate the drone (alternative to drone is ~104km away.
RPS GPS)  DIFFERENTIATOR
ISD of nearest surrounding sites:
• Remote Control & Command 11606m
through the Mobile network Drone RPS: 890m @67%
166Km * 130Km vs E-CID: 15861m @67%.

Huawei - Vodafone MIC (Mobile Innovation Center) Page8

All Rights Reserved
C2 General
Next Step
• 3G & 4G RPS：deployment
VF ES: under discussion, final plan is not confirmed VF Server
To limit the impact on ongoing core network project, the E2E
Locating result
architecture was changed a bit with Net Scout instead of MME. file/streaming reporting
For this Net Scout integration, Huawei will develop a patch for Huawei Automatic synchronization of configuration
“mAOS19.1 or higher version” in a period of 3 month after PO. data and engineering parameters

• NB-IoT RPS: Commercial chipset trial (planning) U2000 TS mAOS

(CME)
VF ES, with Commercial NB-IoT chipset, Boudica V150 CHR/MR
file/streaming
data RPS algorithm
CHR/MR file/streaming runs here.
data
RNC (SAU)

CHR/MR Net Scout flow data

file/streaming (4G IMSI/IMEI required)
Raw signaling data

• Drone RPS: 2D->3D (on going) NodeB eNodeB

Net Scout
EASA Phase2: altitude information is involved
DOMUS: U-Space project

Huawei - Vodafone MIC (Mobile Innovation Center) Page9

All Rights Reserved
C2 General
 Thank You
www.huawei.com

Copyright© 2008 Huawei Technologies Co., Ltd. All Rights Reserved.

The information contained in this document is for reference purpose only, and is subject to change or withdrawal according
to specific customer requirements and conditions.

Huawei - Vodafone MIC (Mobile Innovation Center) Page10

All Rights Reserved
C2 General