Abstract:
The assured-integrity monitored-extrapolation (AIME) navigation apparatus selectively utilizes measurements provided by ancillary sources at periodic intervals in determining the state of the platform on which the apparatus is mounted. The measurements have attributes which are measures of quality, quality being a measure of the usefulness of the measurement in accurately estimating the state of a platform. The AIME apparatus makes its selection of measurements for state determination on the basis of estimates of the values of these quality attributes. The determination of the quality of a time sequence of measured values of a particular quantity requires an evaluation time for its accomplishment. The AIME apparatus therefore determines the platform&#39;s state in two phases. It obtains highly-accurate determinations of the states of the platform at times prior to present time minus the evaluation time by using the quality measures available at these times and using only those measurements that are determined to be of high quality in the determination of state at these times. The platform state at present time is then obtained by extrapolation of the highly-accurate state at time minus the evaluation time using measurements whose quality is more uncertain.

Description:
BACKGROUND OF INVENTION 
     This invention relates generally to navigation systems and apparatus and more particularly to integrated radio-inertial navigation systems and apparatus. 
     The National Aeronautical Association has described the Global Positioning System as &#34;the most significant development for safe and efficient navigation and surveillance of air and spacecraft since the introduction of radio navigation 50 years ago.&#34; The Global Positioning System (GPS) consists of 24 globally-dispersed satellites with synchronized atomic clocks that transmit radio signals. Time, as measured by each satellite, is embedded in the transmitted radio signal of each satellite. The difference between the time embedded in a satellite&#39;s radio signal and a time measured at the point of reception of the radio signal by a clock synchronized to the satellite clocks is a measure of the range of the satellite from the point of reception. Since the clocks in the system cannot be maintained in perfect synchronism, the measure of range is referred to as &#34;pseudorange&#34; because it includes both a satellite clock error anti the clock error at the point of reception. 
     Each satellite transmits, in addition to its clock time, its position in an earth-fixed coordinate system and its own clock error. A user, by measuring the pseudoranges to four satellites and correcting the pseudoranges for the satellite clock errors, can first of all determine his actual range to each satellite and his own clock error. The user can then determine his own position in the earth-fixed coordinate system, knowing his range to each of the four satellites and the position of each satellite in the earth-fixed coordinate system. 
     GPS by itself is unsatisfactory as a sole means of navigation for civil aviation users. GPS has been designed to have extensive self-test features built into the system. However, a slowly increasing range bias error could occur due to satellite clock faults or due to errors in the uploaded data introduced as a result of human errors at the GPS Operational Control System Facility. Since such failures could affect users over a wide area, the Federal Aviation Authority requires that, even for approval as a supplemental navigation system, the system have &#34;integrity&#34; which is defined by the Federal Radio Navigation Plan (U.S. Dept. of Defense, DOD-4650.4 and U.S. Dept. of Transportation, DOT-TSC-RSPA-87-3 1986, DOT-TSC-RSPA-88-4 1988) as the ability to provide timely warnings to users when the system should not be used for navigation. For sole means of navigation, the system must also have sufficient redundancy that it can continue to function despite failure of a single component. For the non-precision approach phase of flight, a timely warning is 10 seconds. The present GPS integrity-monitoring system in the Operation Control System may take hours. A GPS &#34;integrity channel&#34; has been proposed to provide the integrity-monitoring function. 
     Because of the high cost of the GPS integrity channel, &#34;receiver autonomous integrity monitoring&#34; (RAIM) has been proposed wherein a receiver makes use of redundant satellite information to check the integrity of the navigation solution. It is sufficient to simply detect a satellite failure in the case of supplemental navigation. However, to detect a satellite failure using RAIM requires that at least five satellites with sufficiently good geometry be available. 
     For a sole means of navigation, it is also necessary to isolate the failed satellite and to be able to navigate with the remaining satellites. This requires that at least six satellites with sufficiently good geometry be available. To meet the integrity limit of 0.3 n.m. required for a non-precision approach, the availability of the five satellites, as required for supplemental navigation, is only 95 to 99 percent, depending on assumptions. However, the availability of the six satellites required for sole means is only 60 or 70 percent, which is totally inadequate. 
     If an inertial reference system (IRS) is also available, an attempt could be made to coast through integrity outage periods when the five satellites required for integrity are not available. Such periods sometimes last more than 10 minutes. An IRS which has not been calibrated in flight by GPS has a velocity accuracy specification of eight knots, 2 dRMS. It would therefore not be capable of meeting the accuracy requirement during such integrity outage periods. Moreover, for sole means of navigation it might also be necessary to coast through periods when six satellites were unavailable, in case a failure of one of these were detected. Since such periods can last more than an hour, the accuracy requirement cannot be achieved with an IRS uncalibrated by GPS. 
     The problem with calibrating the IRS with GPS using a conventional Kalman filter is that a GPS failure can contaminate the integrated GPS/IRS solution before the failure is detected. If the GPS failure causes a pseudorange error drift of less than one meter/sec., it cannot be detected by tests of the Kalman filter residuals. 
     BRIEF SUMMARY OF INVENTION 
     The assured-integrity monitored-extrapolation (AIME) navigation apparatus selectively utilizes measurements provided by ancillary navigation data sources at periodic intervals in determining the state of the platform on which the apparatus is mounted. 
     Examples of ancillary sources that can be used with the AIME apparatus are a global positioning system receiver and an inertial reference system. The measurements supplied to the AIME apparatus are all presumptively useful in determining the state of the platform. However, some measurements may be more efficacious in achieving accurate state determinations. The AIME apparatus selects those measurements that are likely to result in the highest accuracy. 
     In general, the measurements have attributes which are measures of quality, quality being a measure of the usefulness of the measurement in accurately estimating the state of a platform. The AIME apparatus makes its selection of measurements for state determination on the basis of estimates of the values of these quality attributes. These estimates may be obtained either from an external source or as a result of a process performed by the AIME apparatus. 
     The determination of the quality of a time sequence of measured values of a particular quantity requires an evaluation time for its accomplishment. The AIME apparatus therefore determines the platform&#39;s state in two phases. It obtains highly-accurate determinations of the states of the platform at times prior to present time minus the evaluation time by using the quality measures available at these times and using only those measurements that are determined to be of high quality in the determination of platform state at these times. The platform state at present time is then obtained by extrapolation of the accurately-determined state at time minus the evaluation time using measurements whose quality is more uncertain. 
    
    
     BRIEF DESCRIPTION OF DRAWINGS 
     FIG. 1 shows a block diagram of the assured-integrity monitored-extrapolation (AIME) navigation apparatus, a global positioning system receiver, and an inertial navigation system. 
     FIG. 2 shows the flow diagram for the interrupt routine which is performed each time new data is available to the AIME navigation apparatus. 
     FIG. 3 shows a functional block diagram of a digitally-implemented processor for obtaining the difference between the smoothed measured psuedorange to a satellite and the computed pseudorange. 
     FIG. 4 shows the flow diagram for the main program of the AIME navigation apparatus. 
    
    
     DESCRIPTION OF THE PREFERRED EMBODIMENT 
     The purpose of the assured-integrity monitored-extrapolation (AIME) navigation apparatus is to identify the satellites whose clock drifts are within specification and to use only those satellites within specification in estimating the user&#39;s position. 
     As shown in FIG. 1, the AIME navigation apparatus 1 operates in conjunction with a GPS receiver 3 and an inertial reference system 5 to produce navigation data for the platform on which it is installed by means of a Kalman filter process. The preferred embodiment of the AIME navigation apparatus utilizes an Intel 80960 microprocessor and memory resources. 
     The interrupt routine shown in FIG. 2 details the operations regularly performed by the AIME apparatus at Δt intervals where Δt for the preferred embodiment is 1 second. In step 7, input data is obtained from the GPS receiver 3 and the inertial reference system 5. 
     The GPS receiver 3 supplies ARINC 743 quantities comprising the pseudorange PR i  to each satellite i within view and the coordinates X Si , Y Si , and Z Si  of each satellite in an earth-fixed/earth-centered coordinate system. The AIME apparatus is designed to accommodate up to N satellites at a time. Thus, the index i takes on values from 1 to N. The value of N for the preferred embodiment is 8. 
     The platform to which the AIME apparatus and the associated GPS and IRS equipments are mounted is a dynamic system which exists in a state that can be characterized by a state vector--a set of state variables that define in whole or in part the platform&#39;s position and orientation in space and the first and second derivatives with respect to time of its position. It is convenient in the present case to deal with the error-state vector which is the difference between the true state vector for the platform and the state vector as determined by the IRS. 
     The IRS supplies the following ARINC 704 quantities relating to the position, velocity, acceleration, and attitude of the IRS/GPS/AIME platform at intervals Δt. 
     
         ______________________________________Symbol  Definition______________________________________φ, λ, h   latitude, longitude, altitude;V.sub.N, V.sub.z   northerly and easterly velocity components;A.sub.T, A.sub.C, A.sub.V   along-track, cross-track, and vertical acceleration   components;Ψ.sub.T   track angle;Ψ.sub.H, θ, φ   heading, pitch, and roll.______________________________________ 
    
     The transition matrix φ(t) is defined by the equation ##EQU1## where I (=Kronecker delta δ ij ) is the unit matrix and the integer t measures time in increments of Δt. The integer takes on values from 1 to T, T being a design parameter. The value of T for the preferred embodiment is 150. 
     In step 9 of FIG. 2, the transition matrix φ(t) is obtained by adding F(t)Δt to the prior value of φ(t), the prior value of φ(t) being the unit matrix when t equals 1. 
     The dynamics matrix F=[F ij  ] transforms the error-state vector into the time rate of change of the error-state vector, as shown by the equation 
     
         x=Fx                                                       (2) 
    
     For M=8 the dynamics matrix has 23 rows and 23 columns. The non-zero components of the dynamics matrix are defined as follows: 
     
         ______________________________________F.sub.1,4 = -(1/R.sub.y)F.sub.2,3 = 1/R.sub.xF.sub.3,6 = -(A.sub.z)      F.sub.3,7 = A.sub.y                    F.sub.3,11 =                              F.sub.3,12 =                    C.sub.xx  C.sub.xyF.sub.4,5 = A.sub.z      F.sub.4,7 = -(A.sub.x)                    F.sub.4,11 =                              F.sub.4,12 =                    C.sub.yx  C.sub.yyF.sub.5,2 = -ω.sub.E      F.sub.5,4 = -(1/R.sub.y)                    F.sub.5,6 =                              F.sub.5,7 =                    ω.sub.z                              -ω.sub.yF.sub.5,8 = C.sub.xx      F.sub.5,9 = C.sub.xy                    F.sub.5,10 =                    C.sub.xzF.sub.6,1 = ω.sub.z      F.sub.6,3 = 1/R.sub.x                    F.sub.6,5 =                              F.sub.6,7 =                    -ω.sub.z                              ω.sub.xF.sub.6,8 = C.sub.yx      F.sub.6,9 = C.sub.yy                    F.sub.6,10 =                    C.sub.yzF.sub.7,1 = -ω.sub.y      F.sub.7,2 = ω.sub.x                    F.sub.7,5 =                              F.sub.7,6 =                    ω.sub.y                              -ω.sub.xF.sub.7,8 = C.sub.zx      F.sub.7,9 = C.sub.zy                    F.sub.7,10 =                    C.sub.zzF.sub.8,8 = -(1/τ.sub.G)      F.sub.9,9 =   F.sub.10,10 =      -(1/τ.sub.G)                    -(1/τ.sub.G)F.sub.11,11 = -(1/τ.sub.A)      F.sub.12,12 =      -(1/τ.sub.A)F.sub.13,14 = 1F.sub.14,14 = -(1/τ.sub.r)F.sub.15,15 = -(1/τ.sub.h)F.sub.16,16 = -(1/τ.sub.R)      F.sub.17,17 = -(1/τ.sub.R)                    F.sub.18,18 =                              F.sub.19,19 =                    -(1/τ.sub.R)                              -(1/τ.sub.R)F.sub.20,20 = -(1/τ.sub.R)      F.sub.21,21 = -(1/τ.sub.R)                    F.sub.22,22 =                              F.sub.23,23 =                    -(1/τ.sub.R)                              -(1/τ.sub.R)______________________________________ 
    
     The quantities R x  and R y  are the radii of curvature in the x and y directions respectively of the oblate spheroid that is used to model the earth. The values of these quantities are obtained from the equations ##EQU2## The radius of the earth along a meridian R M  and the radius normal to a meridian R N  are defined by equations (4) in terms of the equatorial radius a, the eccentricity e of the oblate spheroid that is used to model the earth, the wander-azimuth angle α, and the latitude φ. ##EQU3## The wander-azimuth angle α is the angle of rotation of the y-axis counter-clockwise from North. The wander-azimuth angle is obtained from the equation ##EQU4## where α 0  is equal to the IRS platform heading ψ H  for the first summation and is equal to the α(T) of the previous summation for each subsequent summation. 
     The IRS platform acceleration components in the x-y-z coordinate system are given by the equations 
     
         A.sub.x =A.sub.T sin(α+ψ.sub.T)+A.sub.C cos(α+ψ.sub.T) 
    
     
         A.sub.y =A.sub.T cos(α+ψ.sub.T)-A.sub.C sin(α+ψ.sub.T) (6) 
    
     
         A.sub.z =A.sub.V +g 
    
     where g is the acceleration of gravity. 
     The angular velocity components in the x-y-z coordinate system are given by the equations 
     
         ω.sub.x =ρ.sub.x +Ω.sub.x 
    
     
         ω.sub.y =ρ.sub.y +Ω.sub.y                  (7) 
    
     
         ω.sub.z =ρ.sub.z +Ω.sub.z 
    
     The components in the x-y-z coordinate system of the IRS platform angular velocity ρ are given by the equations ##EQU5## where 
     
         V.sub.x =V.sub.E cosα+V.sub.N sinα 
    
     
         V.sub.y =-V.sub.E sinα+V.sub.N cosα            (9) 
    
     The components in the x-y-z coordinate system of the earth angular velocity Ω E  are given by the equations 
     
         Ω.sub.x =Ω.sub.E cosφsinα 
    
     
         Ω.sub.y =Ω.sub.E cosφcosα            (10) 
    
     
         Ω.sub.z =Ω.sub.E sinφ 
    
     The coordinate transformation matrix C=[C ij  ], where the indices i and j take on the values x, y, and z, transforms vector components referenced to a body-fixed coordinate system on the IRS platform to vector components referenced to the x-y-z coordinate system. For example, the transformation from body-fixed acceleration components [A B   ij  ] to x-y-z components [A ij  ] is accomplished in the following way. ##EQU6## The direction cosines C ij  in these equations are computed from the IRS ARINC 704 heading, pitch, and roll outputs. 
     The τ&#39;s are the correlation times for the correlated error states. The values are as follows: τ G  =3600 s, τ A  =300 s, τ r  =600 s, τ h  =1200 s, and τ R  =3600 s. The diagonal elements of the process noise covariance matrix Q are obtained from the correlation times and the initial values for the diagonal elements of the error-state covariance matrix P(0) by means of the equation ##EQU7## The values for the error-state covariance matrix are as follows: P GG  (0)=(0.1 degrees/hr) 2 , P AA  (0)=(25 ug) 2 , P rr  (0)=(0.1 m/s) 2 , P hh  (0)=(100 m) 2 , and P RR  (0)=(30 m) 2 . In the case of Kalman filters denoted below by indices between 1 and M, the value of P RR  (0) for the satellite being tested is (1000 m) 2 . The double subscripts are intended to identify the quantities and also to indicate that the quantities are the diagonal elements of the covariance matrix. The zero in parentheses indicates that the quantities are initial values. For satellite-related quantities, the elements are inserted when a satellite first comes into view. For IRS quantities, the elements are inserted at equipment startup. 
     The 23 components of the error-state vector x(t)=[x i  ] for the Kalman filter processing are defined as follows: 
     
         ______________________________________x.sub.1 = dθ.sub.x   x.sub.2 = dθ.sub.y             x.sub.3 = dV.sub.x                       x.sub.4 = dV.sub.y                               x.sub.5 = dφ.sub.xx.sub.6 = dφ.sub.y   x.sub.7 = dφ.sub.z             x.sub.8 = dGB.sub.x                       x.sub.9 = dGB.sub.y                               x.sub.10 = dGB.sub.zx.sub.11 = dAB.sub.x   x.sub.12 = dAB.sub.y             x.sub.13 = dB                       x.sub.14 = dB.sub.r                               x.sub.15 = dh.sub.Bx.sub.16 = dRB.sub.1   x.sub.17 = dRB.sub.2             x.sub.18 = dRB.sub.3                       x.sub.19 = dRB.sub.4                               x.sub.20 = DRB.sub.5x.sub.21 = dRB.sub.6   x.sub.22 = dRB.sub.7             x.sub.23 = dRB.sub.8______________________________________ 
    
     The error-state terms are referenced to a local-level wander-azimuth coordinate system having its origin at the IRS. The error-state terms have the following meanings. 
     
         ______________________________________Symbol      Definition______________________________________dθ.sub.x, dθ.sub.y       horizontal angular position errors;dV.sub.x, dV.sub.y       horizontal velocity errors;dφ.sub.x, dφ.sub.y, dφ.sub.z       alignment errors;dGB.sub.x, dGB.sub.y, DGB.sub.z       gyro bias errors;dAB.sub.x, dAB.sub.y       horizontal accelerometer bias errors;dB          GPS receiver clock bias error;dB.sub.r    GPS receiver clock rate bias error;dh.sub.B    error in barometric-inertial output;dRB.sub.i   GPS range bias error for i&#39;th satellite, i       taking on the values from 1 through M.       (This error is caused by satellite clock drift,       atmospheric errors, or low-frequency       &#34;selective availability&#34; errors. &#34;Selective       availability&#34; is the process by which the       GPS managers deliberately introduce       satellite timing and position errors into the       satellite transmissions for the purpose of       reducing the accuracy of position deter-       mination by civilian and unauthorized users       of the system.)______________________________________ 
    
     The error-state vector extrapolated to time t is defined by the equation 
     
         x(t)=φ(t)x(k=K)                                        (13) 
    
     where x M+1  (k=K) is the present estimate of the error-state vector obtained during the previous execution of the main program. 
     In step 11 of FIG. 2 x(t) is obtained using equation (13). 
     The measurements vector z(t) is obtained from the components of x(t). New values of longitude, latitude, and altitude are first determined from the equations 
     
         dθ.sub.N =dθ.sub.x sinα+dθ.sub.y cosα 
    
     
         dθ.sub.E =dθ.sub.x cosα-dθ.sub.y sinα(14) 
    
     
         dλ=dθ.sub.N cosφ 
    
     
         dφ=-dθ.sub.E                                     (15) 
    
     
         λ=λ.sub.ARINC704 +dλ 
    
     
         φ=φ.sub.ARINC704 +dφ                           (16) 
    
     
         h.sub.B =H.sub.B ARINC704 +dh.sub.B 
    
     The quantities λ ARINC704 , φ ARINC704 , and h B  ARINC704 in equation (16) denote the ARINC 704 values of λ, φ, and h B . 
     The updated values of λ, φ, and h B  from equation (16) are used to calculate updated values for the position coordinates X I , Y I , and Z I  of the IRS in an earth-fixed/earth-centered coordinate system by means of the equations 
     
         X.sub.I =(R.sub.N +h.sub.B)cosφcosλ 
    
     
         Y.sub.I =(R.sub.N +h.sub.B)cosφsinλ             (17) 
    
     
         Z.sub.I=[R.sub.N (1-e.sup.2)+h.sub.B ]sinφ 
    
     The ranges R ci  to the satellites and the direction cosines of the vector connecting the IRS platform to each of the satellites in the earth-fixed/earth-centered coordinate system are calculated using equations (18) and (19). The index i denotes a particular satellite. ##EQU8## 
     The direction cosines to local level reference axes are obtained using equation (20). The symbol &#34;C&#34; denotes &#34;cosine&#34; and the symbol &#34;S&#34; denotes &#34;sine&#34;. ##EQU9## 
     The computed pseudorange to the i&#39;th satellite PR ic  is obtained using equation (21). The quantity B is the GPS receiver clock bias. 
     
         PR.sub.ic =R.sub.ci -B-dB-dRB.sub.i                        (21) 
    
     Finally, the value of zi for each satellite is obtained using equation (22) and the pre-filtered measured pseudorange PR i   + . 
     
         z.sub.i =PR.sub.ic -PR.sub.i.sup.+                         (22) 
    
     Equation (22) is solved with the digitally-implemented processor shown in block diagram form in FIG. 3. The function of the processor is to reduce the high-frequency noise due to &#34;selective availability&#34;. &#34;Selective availability&#34; is the process by which the GPS managers deliberately introduce satellite timing and position errors into the satellite transmissions for the purpose of reducing the accuracy of position determination by civilian and unauthorized users of the system. 
     The processor in FIG. 3 consists of the scaler 25, the lowpass filter 27, the adder 29, and the adder 31. The output of the adder 31 is the difference e i  between the filtered pseudorange PR +   i  and the pseudorange PR i  supplied by the GPS receiver. This difference is substantially increased in amplitude by the scaler 25 and then filtered by the lowpass filter 27 having a time constant of about TΔt thereby rapidly attenuating noise components with frequencies above about 1/TΔt Hz. The output z i  of the lowpass filter 27 is subtracted from PR ic  by adder 29 to give PR +   i  in accordance with equation (22). 
     The sum of z(t) over all values of t, denoted by sm.z(t), is defined by the equation ##EQU10## The quantity sm.z(t) is obtained by adding z(t) to the prior value of sm.z(t). 
     The vector z(t) (=[z i  (t)]) is related to the error-state vector x(t) (=[x j  ]) by the equation 
     
         z(t)=H(t)x(t)+v(t)                                         (24) 
    
     The matrix H (=[H ij  ]) is called the observation matrix. The vector components v i  (t) are measurement noise. The index i denotes an association with the i&#39;th satellite and takes on the values from 1 to M. 
     The index j takes on the values from 1 to 23, the number of error-state components. 
     The values of H ij  are zero except as follows: H i ,1 =-R y  e yi , H i ,2 =R x  e xi , H i ,13 =1, H i ,15 =e zi , H i ,i+15 =1. The values of H ij  are calculated in step 17. 
     The weighted sum of H(t), denoted by wt.sm.H(t), is defined by the equation ##EQU11## 
     In step 19 of FIG. 2, wt.sm.H(t) is obtained by adding H(t)φ(t) to the prior value of wt.sm.H(t). 
     In step 21 the value of t is tested. If t is not equal to T, t is incremented in step 22 and a return to the main program is executed. If t is equal to T, the vectors x(t) and (1/T)sm.z(t) and the matrices Φ(t) and (1/T)wt.sm.H(t) are stored in memory in step 23 with the following names: ##EQU12## A &#34;new data&#34; flag is set and a return to the main program is then executed. 
     Previously stored data are assigned k-values ranging from 1 to K, the k=1 data being the oldest and the k=K data being the most recent. Newly-calculated data replaces the oldest data so that there are always K sets of data available in memory. The parameter K is equal to 12 in the preferred embodiment. 
     A range bias validity flag VRB i  (k) is associated with each set of k-indexed data. If satellite i goes out of view, VRB i  is set equal to 0. If satellite i is new in view, VRB i  is set equal to 1. 
     The main program is comprised of M+2 Kalman filters--filters 1 through M for testing each of the M satellites, the (M+1)&#39;th filter for updating present position, and the (M+2)&#39;th filter for updating position 12 iterations in the past. 
     A Kalman filter is a minimal mean-square-error method for estimating the error-state vector x(k) and its covariance matrix P(k) based on new measured data z(k), the previous estimates x(k-1) and P(k-1), the transition matrix φ(k), and the observation matrix H(k). Since the Kalman filter methodology is well understood in the art and details are readily available in a number of textbooks (e.g. A. Gelb, ed., Applied Optimal Estimation, The Analytical Sciences Corporation, The M.I.T. Press, Cambridge, Mass., 1974), details of the Kalman filter calculations will not be discussed herein. 
     Satellite data for a maximum of M satellites are saved in tables in the k-indexed portion of memory. As each satellite goes out of view, its entries in the table are zeroed, and the corresponding row and column of the covariance matrix for the range bias for that satellite are zeroed. The diagonal element is reinitialized with the initial variance of the range bias error. 
     When a new satellite comes into view, the data associated with the new satellite is placed in the first available empty position in the table. When a satellite represented in the table goes out of view, its data entries in the k-indexed memory are zeroed. The measurements for a newly-viewable satellite and its observation matrix are entered into the first available satellite slot at k=K. 
     The value of M is chosen such that the probability of more than M satellites being viewable at one time is low. However, if more than M satellites are viewable, those satellites that will remain in view for the longest periods of time are entered and allowed to remain in the tables. 
     The flow diagram for the main program is shown in FIG. 4. In step 41, the microprocessor continually checks the status of the &#34;new data&#34; flag. When the flag indicates that new data is available in memory, the microprocessor proceeds to simultaneously test the validity of individual satellite data for all satellites represented in the satellite tables by means of M Kalman filters operating in parallel. 
     The i&#39;th Kalman filter, which is used to test satellite i, has an extra error-state component dRB ri  which is defined as the range bias rate error for satellite i. For M=8, this component becomes error-state component x 24 . The additional non-zero dynamics matrix elements for this state are: F 15+i ,24 =1 and F 24 ,24 =-(1/τ Rr ). The value of the correlation time τ Rr  is 3600 s. The value of the diagonal element in the covariance matrix is: P RrRr  (0)=(1 m/s) 2 . 
     Each of the testing Kalman filters uses all of the measured satellite pseudorange data but is initialized with large variances for the range bias error and the range bias rate error for the satellite it is testing when that satellite first comes into view. 
     In step 43 the M Kalman filters update their calculations of the error-state vector and the covariance matrix utilizing the k=K data. The error-state vector used in calculating the measurement vector z i  (k=K) was x z  (k=K)=x.sub.(M+1) (k=K) from the (M+1)&#39;th Kalman filter. The error-state vector x j  (k=K-) was obtained by the j&#39;th Kalman filter as a result of the previous updating. A measurement vector z ij  (k=K) consistent with x j  (k=K-) is obtained from the equation 
     
         z.sub.ij (k=K)=z.sub.i (k=K)+H[x.sub.j (k=K-)-x.sub.z (k=K)](27) 
    
     Using x j  (k=K-) and z ij  (k=K) the M testing Kalman filters update the error-state vector and the covariance matrix. The updated error-state vector and covariance matrix are stored in memory locations indexed by k=1 which will be reindexed later in the program to k=K prior to the next updating. 
     In step 45 the validity flags VRB i  are set. The Kalman filter model for testing a satellite is based on the assumption that the particular satellite it is testing may be out of specification insofar as the satellite&#39;s clock drift is concerned. If for satellite i, the i&#39;th Kalman filter estimated standard deviation of the range bias error is less than a specified maximum acceptable standard deviation for testing, and the estimated range bias error is less than a specified maximum acceptable value, the validity flag VRB i  (k) is set equal to 2 for k=K. 
     If for satellite i, the Kalman filter estimated standard deviation of the range bias rate error is less than a specified maximum acceptable standard deviation for testing, and the range bias rate error estimate is less than a specified maximum acceptable value, the validity flag VRB i  (k) is set equal to 3 for all values of k for which the satellite has been in view. 
     The test period is equal to KTΔt which for the preferred embodiment is equal to 30 minutes. The probability of two satellites unexpectedly failing during the same 30-minute interval is negligible. It is therefore reasonable to assume that all satellites other than satellite i are within specification when testing satellite i for failure. The test hypotheses are therefore: 
     H 0  (i): All satellites other than satellite i are within specification and satellite i is also within specification; 
     H 1  (i): All satellites other than satellite i are within specification and satellite i is out of specification. 
     When the failure hypothesis for all satellites in view has been tested, all satellites which have been determined to be within specification 30 minutes in the past with validity flag VRB i  (k=1) =3 are used by the (M+2)&#39;th Kalman filter to determine the error-state vector x M+2  (k=1+) and the associated covariance matrix in step 47. The Kalman filter utilizes error-state vector x M+2  (k=1-), its associated covariance matrix, and the other data indexed at k=1. 
     The error-state vector used in calculating the measurement vector z i  (k=1) was x z  (k=1) from the (M+1)&#39;th Kalman filter with k=K at that time in the past. The error-state vector x M+2  (k=1-) was obtained by the (M+2)&#39;th Kalman filter as a result of the previous updating. A measurement vector z ii  (k=1) consistent with x M+2  (k=1-) is obtained from the equation 
     
         z.sub.M (k=1)=z.sub.i (k=1)+H[x.sub.M+2 (k=1-)-x.sub.z (k=1)](28) 
    
     In step 49 all satellites which have been determined to be within specification with validity flag VRB i  (k)&gt;1 are used by the (M+1)&#39;th Kalman filter in the k&#39;th iteration to determine the error-state vector x M+1  (k=K+) and its associated covariance matrix. The (M+1)&#39;th Kalman filter begins the updating process with the k=1 data. The Kalman filter utilizes error-state vector x M+2  (k=1-), its associated covariance matrix, and the other data indexed at k=1 to obtain updated error-state vector x M+1  (k=1+). 
     The error-state vector used in calculating the measurement vector z i  (k=1) was x z  (k) from the (M+1)&#39;th Kalman filter with k=K at that time in the past. The error-state vector x M+2  (k=1-) was obtained by the (M+2)&#39;th Kalman filter as a result of the microprocessor&#39;s previous execution of the main program. The measurement vector z ii  (k=1) is again defined by equation (27). 
     The (M+1)&#39;th Kalman filter continues the updating process with the k=2 data. The Kalman filter utilizes error-state vector x M+1  (k=2-)=φ(k=1)x M+1  (k=1+), its associated covariance matrix, and the data indexed at k=2 to obtain updated error-state vector x M+1  (k=2+). 
     The error-state vector used in calculating the measurement vector z i  (k=2) was x z  (k=2) from the (M+1)&#39;th Kalman filter with k=K at that time in the past. The error-state vector x M+1  (k=1+) was obtained by the (M+1)&#39;th Kalman filter as a result of the k=1 updating. A measurement vector z ii  (k=2) consistent with x M+1  (k=1+) is obtained from the equations 
     
         x.sub.M+1 (k=2-)=φ(k=1)x.sub.M+1 (k=1+) Z.sub.ii (k=2)=z.sub.i (k=2)+H[x.sub.M+1 (k=2-)-x.sub.z (k=2)]                   (29) 
    
     The (M+1)&#39;th Kalman filter continues the updating process in the same manner for k=3, k=4, . . . , k=K. At each step, the residuals for each measurement are saved in memory. After k=K, the residuals for each satellite are averaged over the entire interval to detect a slow satellite clock drift. 
     In step 51 the k indices of the memory locations are decremented by 1 so that K becomes K-1, K-1 becomes K-2, . . . , 2 becomes 1, and 1 becomes K. The measurements z i  (k=K) and x z  (k=K) will not be available until they are calculated in equation (26) as z(k=K) and x(k=K) in step 23 of FIG. 2. In step 53 the &#34;new data&#34; flag is reset. The updating process is now complete and the microprocessor returns to the beginning of the main program. 
     The preferred embodiment as described herein performs the measurements that establish the quality of the measurements supplied by the GPS for determining platform position. In particular, if a slow clock drift for a particular satellite is detected, that satellite&#39;s measurements are not used. The AIME apparatus could also perform its intended function if the quality measurements were supplied by an external source.