# Patent

## Title
Mobile computing device geographic location determination

## Abstract

A wireless connection between a mobile device and an IP-based wireless telecommunications network is established when the mobile device registers with a network controller (NC) through an access point (AP). When a geographical position is needed for the mobile device (e.g., a 911 call), messages are exchanged between the NC and a serving mobile location center (SMLC), where the SMLC retrieves information from a database that is used to identify the geographic position of the mobile device. The database can store a variety of information related to mobile devices such as: last known position, IP address, MAC address, a mobile or subscriber identifier (such as an International Mobile Subscriber Identity (IMSI)), last CGI, etc. The geographical position is communicated back to the NC, which can then forward the position information to a switch for processing such as for 911 calls.

## Background
RELATED APPLICATION
This utility patent application is a continuation of U.S. patent application Ser. No. 12/297,053, filed Oct. 13, 2008, which is a U.S. National Stage application of International Application No. PCT/US2007/066579, entitled “MOBILE COMPUTING DEVICE GEOGRAPHIC LOCATION DETERMINATION,” filed Apr. 12, 2007, which claims the benefit under 35 United States Code §119(e) of United States Provisional Patent Application No. 60/791,682 filed on Apr. 13, 2006, each of which is hereby incorporated by reference in its entirety.


FIELD OF INVENTION
The present description relates to a positioning system that can be used to estimate the geographic position of a mobile computing device on an IP-based wireless telecommunications network. Dual-mode mobile computing devices may access conventional cellular networks and IP-based wireless telecommunications networks using wireless local area network access points at home, in the office and at public areas (e.g., hotspots). Voice, data and multimedia calls may be established on an IP-based wireless telecommunications network regardless of whether the user is in reach of an access point or cellular network, allowing consumers to connect to the fastest or lowest cost network.
BACKGROUND
A variety of technologies enable telecommunication services to be offered using Internet Protocol (IP). Commonly referred to as Voice over IP, or VoIP, such technologies enable telecommunications on any public or private IP network, including the Internet. VoIP technology permits a user to receive IP-based telecommunications services through a variety of devices, including a desktop computer, a notebook computer, an analog handset used in conjunction with a VoIP telephone adapter, a VoIP-enabled handset, or other like device.
Increasingly, mobile devices, such as notebook computers, personal digital assistants (PDAs), wireless handheld devices, wireless handset devices, or other similar mobile devices, are also being enabled to receive IP-based telecommunications services. Such services are provided by enabling the mobile device to communicate with a wireless router and access any IP-based wireless access network, such as a network based on the IEEE 802.16 (WiMAX), IEEE 802.20 Mobile Broadband Wireless Access (MBWA), Ultra Wideband (UWB), 802.11 wireless fidelity (Wi-Fi), and Bluetooth standards.
Moreover, dual-mode mobile telecommunications devices may be enabled to communicate with any IP-based wireless access network. For instance, Unlicensed Mobile Access (UMA) technology allows wireless service providers to merge cellular networks, such as Global System for Mobile Communications (GSM) networks, and IP-based wireless networks into one seamless service with one mobile device, one user interface, and a common set of network services for both voice and data. UMA technology has recently been accepted into release 6 of the 3rd Generation Partnership Project (3GPP) standard as a General Access Network (GAN). With UMA or GAN solutions, subscribers may move between cellular networks and IP-based wireless networks with seamless voice and data session continuity as transparently as they move between cells within the cellular network. Seamless in all handover between the IP-based wireless network and cellular network ensures that the user's location and mobility do not affect the services delivered to the user. Services may be identical whether connected over the IP-based wireless network or the cellular network. UMA technology effectively creates a parallel radio access network, the UMA network, which interfaces to the mobile core network using standard mobility-enabled interfaces. The mobile core network remains unchanged. The common mobile core network makes it possible for the service provider to have full service and operational transparency. The existing service provider Business Support Systems (BSS), service delivery systems, content services, regulatory compliance systems, and Operation Support Systems (OSS) can support the UMA network without change. Service enhancements and technology evolution of the mobile core network apply transparently to both cellular access and UMA.
The present disclosure has identified a number of problems in locating a mobile device on an IP-based wireless telecommunications network and providing location based services to the mobile device. Telecommunications service providers increasingly offer location-based services that deliver information specific to the mobile device's current location. Telecommunications service providers also wish to route certain calls, such as 911 or “emergency” calls, to an office that is geographically relevant to the user of a mobile device. Service providers who operate IP-based wireless telecommunications networks must therefore implement systems and methods that determine the mobile device's location on an IP-based wireless telecommunications network.



BRIEF DESCRIPTION OF THE DRAWINGS
Non-limiting and non-exhaustive embodiments of the present invention are described with reference to the following drawings.
FIG. 1 is an illustration of an example Voice over IP system.
FIG. 2A is an illustration of an example converged wireless network combining a cellular network with an IP-based access network.
FIG. 2B is another illustration of an example converged wireless network combining a cellular network with an IP-based access network.
FIG. 3 is an illustration of a positioning system for estimating the geographic position of a mobile computing device.
FIG. 4 is an illustration of the transfer of information between a serving mobile location center and a network controller.
FIG. 5 is an illustration of a process for the transfer of information between system components when a 911 emergency call is executed from a mobile computing device.
FIG. 6 is an illustration of a process for determining a mobile computing device location from the perspective of the serving mobile location center.
FIG. 7 is an illustration of a process for determining a mobile computing device location from the perspective of a network controller.
FIG. 8 is an illustration of a system for estimating the location of the mobile computing device when a mobile computing device accesses a data network via an access point.
FIG. 9 is an illustration of a process for estimating the location of a mobile computing device.
FIG. 10 is an illustration of a process for estimating the location of a mobile computing device.
FIG. 11 is an illustration of a process for estimating the location of a mobile computing device.
FIG. 12 is an illustration of a process for estimating a location of a mobile computing device.



DETAILED DESCRIPTION
The following description provides specific details for a thorough understanding of, and enabling description for, various embodiments of the technology. One skilled in the art will understand that embodiments of the technology of the present disclosure may be practiced without these details. In some instances, well-known structures and functions have not been shown or described in detail to avoid unnecessarily obscuring the description of the embodiments of the technology. It is intended that the terminology used in the description presented below be interpreted in its broadest reasonable manner, even though it is being used in conjunction with a detailed description of certain embodiments of the technology. Although certain terms may be emphasized below, any terminology intended to be interpreted in any restricted manner will be overtly and specifically defined as such in this specification.
Various embodiments will be described in detail with reference to the drawings, where like reference numerals represent like parts and assemblies throughout the several views. References to various embodiments do not limit the scope of the invention, which is limited only by the scope of the claims attached hereto. Additionally, any examples set forth in this specification are not intended to be limiting and merely set forth some of the many possible embodiments for the claimed invention.
Briefly stated, the present disclosure relates to a system and method for locating the geographic position of a mobile device when in communication with an IP-based wireless telecommunications network. A wireless connection between the mobile device and the IP-based wireless telecommunications network is established when the mobile device registers with a network controller (NC) through an access point (AP). When a geographical position is needed for the mobile device (e.g., a 911 call), messages are exchanged between the NC and a serving mobile location center (SMLC), where the SMLC retrieves information from a database that is used to identify the geographic position of the mobile device. The database can store a variety of information related to mobile devices such as: last known position, IP address, MAC address, a mobile or subscriber identifier (such as an International Mobile Subscriber Identity (IMSI)), last CGI, etc. The geographical position is communicated back to the NC, which can then forward the position information to a switch for processing such as for 911 calls.
Example IP-based wireless communication networks include VoIP networks and/or converged wireless networks that include a combination of cellular networks and IP-based wireless telecommunications network (e.g., unlicensed mobile access or UMA network technologies). A mobile device can access a VoIP network via a wireless connection with an access point (AP). A dual-mode wireless telecommunication device can access either a cellular network or an IP-based wireless telecommunications network, such as a UMA network, thereby allowing mobile devices to roam voice, data and multimedia communications between conventional cellular networks and wireless local area network access points at home, in the office and at public areas (e.g., hot spots). Calls are transferred between the networks depending on whether the access point is in range or not, permitting users to transparently connect to the fastest or lowest cost network.
The positioning system may be useful when the mobile subscriber issues a 911 emergency call or when a mobile subscriber (MS) wishes to receive value added location based services (such as information regarding nearby restaurants, gas stations, entertainment complexes and similar locations of interest). In the case of emergency services the call is routed to a public safety answering point (PSAP) and is forwarded to the proper services. The PSAP receives the caller's phone number and the exact geographic location of the mobile device from which the call was made.
Example VoIP and IP-Based Wireless Telecommunications Networks
FIG. 1 illustrates the components of a generalized Voice over Internet Protocol (VoIP) system 100 for mobile communication devices. The system comprises one or more access points (APs) 115 that can accept communications 120 from mobile devices 125. The access point includes a wireless router 130 and a broadband modem 135 that enable connection to an Internet Protocol (IP) network 140. IP network 140 may be one or more public networks, private networks, or combination of public and private networks. IP packets that carry communications from the mobile device 125 are received at the access point 115 and transported through the IP network 140 to a signaling gateway 145. Signaling gateway 145 can typically be operated by a service provider and converts the VoIP signal to a traditional phone service signal. The phone signal is then conveyed to the intended recipient via a public switched telephone network (PSTN) 150. A call controller 155 that is located in the service provider's network provides call logic and call control functions. An application server 160 that is located in the service provider's network provides logic and execution of one or more applications or services that are offered by the server provider, such as implementing various access and security rules.
The VoIP system depicted in FIG. 1 is an architecture that broadly enables a mobile device to receive IP-formatted telecommunication services. One example application of the described technology is for an Unlicensed Mobile Access (UMA) network that allows cellular service providers to offer their products and services seamlessly over Internet-connected broadband networks. Mobile devices may utilize licensed spectrums (such as spectrums for cellular communications) and alternate licensed, semilicensed and unlicensed spectrums (such as spectrums for IP-based wireless communication). For example, dual-mode cellular phones may access a cellular network, such as a GSM network, or an IP-based wireless network, such as a network based on the IEEE 802.16 (WiMAX), IEEE 802.20 Mobile Broadband Wireless Access (MBWA), Ultra Wideband (UWB), 802.11 wireless fidelity (Wi-Fi), or Bluetooth standards. The IP-based networks are accessed via wireless access points (APs) that are typically connected to a DSL (Digital Subscriber Line) modem, a cable modem, a satellite modem, or any other broadband Internet connection. The access points (APs) may be public or private, and may be located in a subscriber's home, in other apartments or residences, in public locations such as coffee shops, libraries, or schools, or in corporate locations.
When a mobile device accesses an IP-based wireless network, information is initially formatted in the cellular system's native protocol and then encapsulated into Internet Protocol (IP) packets, transmitted to the access point (AP), and communicated over the Internet to the cellular service provider's mobile core network. Such transmissions bypass the service provider's existing network of radio towers. Because the same cellular protocols are used in communications involving IP access points (APs) as with traditional radio towers, the cellular service provider maintains a large degree of system compatibility even though using an IP-based network. The systems of the cellular service provider that deliver content and handle mobility may not even need to be aware that a subscriber's mobile device is on an IP-based wireless telecommunications network. The system may instead assume the mobile device is on its native cellular network. The IP network is therefore abstracted with respect to the cellular network, regardless of whether the mobile device connects to the cellular network via a base station (for licensed spectrum access) or a wireless access point (for licensed, semilicensed and/or unlicensed spectrum access).
A non-exhaustive list of products and services available on IP-based wireless telecommunications networks includes not only voice services, but also supplementary services like call forwarding and call waiting, text messaging services like SMS, and data-based services like ringtone downloads, game downloads, picture messaging, email and web browsing. Further, since a mobile device is connected to an IP network, a wide variety of data services available over such networks may be provided to the mobile device.
FIG. 2A is an illustration of an example system 200 that combines a cellular telephone network with an IP-based wireless telecommunications network into a converged wireless network. The described system 200 accepts registration requests and call connections from a mobile device 210 to either a cellular telephone network or to an IP-based wireless network.
The example cellular telephone network includes one or more cell towers 220 that are configured to accept cellular communications 212 from mobile device 210. The cell towers 220 are connected to a controller (such as a base station controller/radio network controller (BSC/RNC)) 276 via a private network 230. The private network 230 can include a variety of connections such as T1 lines, a wide area network (WAN), a local area network (LAN), various network switches, and other similar components. Cell tower controller 276 controls network communication traffic to the carrier network 290, where all communications are managed. An example carrier network 290 includes a switch (such as a mobile switching center (switch)) 292, which is configured to control data/call flows, perform load balancing, as well as other functions. A variety of system databases may also be accessed in the carrier network such as, e.g., an operation support subsystem (OSS) database 294, a business support system (BSS) database 296, and a central subscriber database that contains details of a carriers' subscribers (such as a home location register (HLR)) 298, for billing, call logging, etc.
The example IP-based wireless network includes one or more access points (APs) 240 that can accept IP communications 214 from mobile device 210. An access point can be configured as part of a wireless network in one or more locations such as a public network 242, a home network 244, or a private business network 246. Each access point is coupled to an Internet Protocol (IP) network 250 through a broadband connection. IP packets that carry communications (data, voice, SMS, etc.) are routed from the access points to a security gateway (SGW) 271 through the IP network 250. The security gateway controls access to the network controller (such as a UMA Network Controller (UNC)) 266, which communicates with a database 268 for logging and/or accessing various data associated with communications. The network controller 266 is also configured to manage access with the carrier network 290 in a similar manner to that performed by the BSC/RNC 276.
Authentication of a request for access by a mobile device over the IP-based network is handled by the security gateway 271, which communicates with an authentication, accounting and authorization (AAA) module 272 as shown in FIG. 2A. Challenges and responses to requests for access by the mobile device are communicated between a central subscriber database 298 and the AAA module 272. When authorization is granted, the security gateway 271 communicates the assignment of an IP address to the mobile device 210 that requested access. Once the IP address is passed to the mobile device 210 by the security gateway 271, the public IP address assigned to the device is passed to the network controller 266.
FIG. 2B illustrates another example system that combines a cellular telephone network with an IP-based network (in this case, a UMA network) into a converged wireless network. The described system 200′ accepts registration requests and call connections from a mobile device 210 to either a cellular telephone network (not shown) or to an IP-based wireless network. The system 200′ includes one or more access points (AP) 240 that accept communications 214 from mobile device 210. Each access point is coupled to an IP network 250 through a broadband connection. IP network 250 routes communications (data, voice, SMS, etc.) between the access points and a security gateway (SGW) 271. The security gateway 271 controls access to the network controller 266, which communicates with a database (not shown) for logging and accessing various data associated with communications. Authentication, accounting, and authorization are handled by SGW 271 via AAA module 272, as previously described.
For the example system 200′, the signaling path of an IP-based call is routed through the network controller 266 to a mobile switching system (MSS) 280, while the voice bearer path is routed through the network controller 266 to a media gateway (MGW) 282. The signaling portion of a communication governs various overhead aspects of the communication such as, for example, when the call starts, when the call stops, initiating a telephone ring, etc. The voice bearer portion of the communication contains the actual content (either data or voice information) of the communication. The MGW 282 controls the content flow between the service provider and the mobile device 210, while the MSS 280 controls the signaling flow (or controls overhead-related flow) between the service provider and the mobile device 210.
Example Location System in an IP-Based Wireless Telecommunications Network
FIG. 3 illustrates a positioning system for locating the geographic position of a mobile device in either a wireless VoIP network or a converged cellular network and IP-based wireless telecommunications network (in this case, a UMA network). The system includes a mobile device 210, one or more access points 240, a network controller (NC) 266, a data store such as an NC database 268, a serving mobile location center (SMLC) 310, and a switch 292. Switch 292 may access a central subscriber database 298, a public switched telephone network (PSTN) 320, and a local subscriber database 330. In one embodiment, mobile device 210 is a dual-mode unit capable of communicating on a cellular network via cell tower 220 and an IP-based wireless telecommunications network via access point 240. SMLC 310 includes a location algorithm for different access networks. NC database 268 may be internal or external relative to NC 266. NC database 268 may serve more than one NC 266.
FIG. 4 is a functional block diagram that illustrates the transfer of information between the serving mobile location center (SMLC) and the network controller (NC). The positioning request is received at the NC. The NC serves as a particular target mobile device. The SMLC obtains information related to the location of the mobile computing device from the NC.
The SMLC passes a base station subsystem mobile application part-location extraction (BSSAP-LE) connection oriented information message to the NC. The NC contains an embedded BSSLAP message. BSSLAP defines the SMLC-BSS layer 3 protocol. The BSSAP-LE message is transferred using a Signaling Connection Control Part (SCCP) connection that was previously established between the SMLC and the NC when the positioning request for the target mobile device was initially sent to the SMLC. The NC recognizes that it is the final destination due to the presence of the embedded BSSLAP message.
When the NC has positioning information for the target mobile device to return the SMLC, the NC sends a BSSAP-LE connection oriented message to the SMLC containing an embedded BSSLAP message. The message is sent using the SCCP connection previously established for locating the target mobile device.
Example Process Flows for a Location System
FIG. 5 is a process flow diagram that illustrates the transfer of information between system components when a 911 emergency call is executed from a mobile computing device or mobile subscriber (MS). While the invention is described with reference to a 911 emergency call, it is understood that the method described could be used with reference to any call executed from a mobile computing device for location determination purposes. The process flow is described below with reference to processing steps 500-565.
Step 500: The mobile subscriber (MS) registers for access as a wireless device using an IP-based telecommunications network. The registration process is initiated between the MS and the network controller (NC) via the access point (AP). The MS also identifies a wireless radio resource (e.g. a GSM CGI radio resource) and a corresponding MAC address during the registration request. For this example, the MS dials 911, which is communicated to the NC.
Step 505: The NC forwards the 911 call to the switch for routing. The cell global identity (CGI) associated with the MS is forwarded to the switch for further processing.
Step 510: The switch sends a position location request (PLRQ) message to the NC based on the received 911 call. The PLRQ message includes MS information associated with a quality of service (QoS), a device or subscriber identifier (MSID), and an SCCP identifier (SCCPID). The MSID is registered with the network when the MS accesses the network.
Step 515: The NC forwards the PLRQ message to the SMLC. The PLRQ message includes QoS, CGI, and MSID information for the MS.
Step 520: The SMLC sends a positioning request message to the NC.
Step 525: The NC sends a database location request message to the NC database. The database location request message includes MS information for the MSID associated with the mobile device, a MAC address associated with the AP, and an IP address associated with the AP.
Step 530: The NC database provides information for one or more locations to the NC in the form of a database location response message, which may include the subscriber's address, AP location and public IP address serving area. The NC database may also provide an uncertainty rating that provides the likelihood that the identified location of the MS is accurate.
Step 535: The NC sends a positioning response message to the SMLC, where the positioning response message includes all the locations information from the NC database to the SMLC. The SMLC executes an algorithmic process to calculate the location of the MS using the information received above to determine the final latitudinal-longitudinal coordinates and the associated uncertainty rating. The algorithmic processes are discussed in detail below with reference to FIGS. 8-12.
Step 540: The SMLC returns the calculated location information to the NC via a position location response (PLRS) message. The PLRS message includes the latitudinal-longitudinal coordinates (L/L), the uncertainty rating and the SCCPID.
Step 545: The NC forwards the PLRS message with the location information to the switch.
Step 550: The switch communicates a service location request (SLR) emergency service routing key (ESRK) Request message to the gateway mobile location center (GMLC), which reqests a determination of the PSAP information based on the location of the MS.
Step 555: The GMLC communicates an SLR Ack message, which returns PSAP information with an ESRK.
Step 560: The switch routes the call to the proper PSAP based on the ESRK received from the GMLC.
Step 565: The location of the MS is delivered to an application location interface (ALI) for PSAP access.
FIG. 6 is an operational flow diagram illustrating a process for determining a mobile computing device or mobile subscriber (MS) location from the perspective of the SMLC. The SMLC maintains an idle state at block 600.
Continuing to decision block 610, a determination is made whether a position location request (PLRQ) message is received from the NC. If a PLRQ message is not received, processing continues at block 600 where the SMLC waits in an idle state for the PLRQ message. If a PLRQ message is received, processing continues from block 610 to block 620.
The PLRQ message is processed at block 620. The SMLC sends a positioning request to the NC. The NC returns a positioning response to the SMLC.
Moving to block 630 the parameters are evaluated. The SMLC executes an algorithm to calculate the location of the MS using at least one of: the subscriber's address based on a mobile or subscriber identifier (such as an IMSI) associated with the mobile computing device; the access point location based on the MAC address associated with the access point; the serving area of the IP address associated with the access point and the uncertainty rating for each of the above locations.
Advancing to decision block 640, a determination is made whether to reject the positioning request. If the request is to be rejected, processing continues to block 650 where the request is rejected. Otherwise, processing proceeds to block 660 where the SMLC returns the location information to the NC via a position location response (PLRS) message.
FIG. 7 is an operational flow diagram illustrating a process for determining a mobile computing device location from the perspective of the network controller (NC). The NC maintains an idle state at block 700.
Continuing to decision block 710, a determination is made whether a PLRQ message is received from the switch. If a PLRQ message is not received, processing continues at block 700 where the NC waits in an idle state for the PLRQ message. If a PLRQ message is received, processing continues at block 720.
The NC forwards the PLRQ message to the SMLC at block 720.
Continuing to block 730, the NC receives a positioning request from the SMLC.
Advancing to block 740, the NC forwards a location request (e.g., a database location request message) to the data store (e.g., an NC database).
Moving to block 750, the NC receives a location response (e.g., a database location response message) from the data store (e.g., an NC database). The location response includes at least one of: the subscriber's address based on a mobile or subscriber identifier (such as an IMSI) associated with the MS, the access point location based on the MAC address associated with the access point, the serving area of the IP address associated with the access point and the uncertainty rating for each of the above locations.
Proceeding to block 760, the NC forwards a positioning response to the SMLC.
Transitioning to block 770, the NC receives a position location response (PLRS) message from the SMLC. The PLRS message includes the location information for the mobile computing device (e.g., latitudinal-longitudinal information, uncertainty rating, and SCCPID).
The NC forwards the PLRS message with the location information to the switch at block 780.
A location-based services algorithm determines the location of a mobile computing device when a call is initiated based on different information. The algorithm is useful in any application that utilizes positioning technology, e.g. for routing emergency calls (911) to the correct location, and for locating mobile subscribers for location service applications. The algorithm may also be useful for billing based on caller location and call destination. The algorithm is executed in the serving mobile location center to generate estimated latitude/longitude coordinates of the mobile computing device location.
Example Location Estimation System
FIG. 8 illustrates a system for estimating the location of the mobile computing device when a mobile computing device accesses a data network via an access point. The system may execute a positioning technology known as a “scrubbing process” to locate the mobile computing device. The system includes at least one cell tower 800 that has a defined coverage area 810. The geographic location of each cell tower is known such that latitude/longitude coordinates for each cell tower are available. An access point 820 to the data network may have a coverage area that overlaps coverage area 810.
The scrubbing process is implemented as an algorithm on a selected network element of the system. In some embodiments, the algorithm is implemented as a software program that is executed by a processor (e.g., a micro-processor, a micro-controller, a special purpose processor, or a general purpose processor) in the selected network element. In other embodiments, the algorithm is implemented by one or more hardware components that are arranged to process algorithmically in the selected network element. In still other embodiments, the algorithm is implemented by a combination of hardware and software components in the selected network element.
Registration messages are sent from all of the mobile computing devices accessing the data network. Each registration message can identify an access point (AP) that is associated with the entry point into the data network. The registration message is associated with a cell global identity (CGI) record, which can identify a particular cell tower along with an access time (e.g., time-date stamp). The registration message information is analyzed to associate an access point identity (e.g., a MAC Address of the access point, an IP Address of the access point, etc.) with one or more cell towers. The mapping between access points with cell global identities can be implemented according to a statistical model. Historical information concerning the association between access points and cell towers can be maintained by the system for later use.
The mobile computing device may be identified when the mobile computing device accesses the data network. In one embodiment, the mobile computing device is identified using global positioning system coordinates that are communicated to the data network from the mobile computing device. In another embodiment, the mobile computing device is identified based on an identifier reported by the mobile computing device. Example identifiers include an access point MAC or IP address. The identifier is compared to a database of geographic locations indexed by the reported identifier. An example database includes a look-up table of MAC address locations. In yet another embodiment, the identifier is sent from the mobile computing device as a query to a provider of the data network to determine the geographic location of a particular IP address.
In one example, a mobile computing device attempts to access a data network through an access point, where the mobile computing device is unable to detect a nearby cell tower. For this example, cell tower information reported by another mobile computing device can be used to map the access point to a particular location, where the other mobile computing device obtained access to the data network through the same access point with a successfully detected cell tower identified from its registration. Since the historic information is retained by the system, subsequent mobile computing devices that are unable to detect a cell tower are able to take advantage of cell tower information from previous mobile computing devices that were able to detect a cell tower with a recent registration message.
A mobile computing device registers with the UMA system by submitting a registration message when connecting to the data network. The registration message contains the location information of the access point through which the mobile computing device is connecting to the data network. The registration message may also contain cell information (if such information is available). The mobile computing device reports the current cell information if the mobile computing device is currently associated with a cell tower. If the mobile computing device is not currently associated with a cell tower, the mobile computing device reports the cell information of the last associated cell tower within a pre-defined time limit (e.g., 1 hour). Otherwise, the mobile computing device does not report cell information.
If the mobile computing device reports cell tower information, an indicator is also supplied in the message to identify if the cell information is for a current cell tower or a most recent cell tower accessed by the mobile computing device. For example, mobile computing device 830 may access the data network via cell tower 800. Mobile computing device 830 may then connect to the network via access point 820. Mobile computing device 830 sends a registration message that identifies the location information associated with access point 820 and cell tower 800 (e.g., a cell global identity to MAC address mapping of latitude/longitude coordinates), and an indicator that cell tower 800 is current rather than recent.
The network controller (NC) can receive registration messages from different mobile computing devices. The scrubbing process uses the information received from NCs in the data network to associate each AP with a specific cell tower. Latitude/longitude coordinates for each AP may be determined based on the known location of the associated cell tower. For example, AP 820 may be within a building. Data network coverage may be available in one area of the building such that mobile computing device may access the network via cell tower 800 or AP 820. However, coverage may not be available in another area of the building (e.g., the basement) such that mobile computing device 840 may only access the network via AP 820. Mobile computing device 840 may attempt to use a service that requires location information (e.g., initiate an emergency call). Although a specific cell tower is not identified with the registration information from mobile computing device 840, the device is determined to be located at AP 820 as a result of the reported cell information from mobile computing device 830, which previously reported the cell information when registering for access through AP 820.
Since many mobile computing devices can access the data network through different access points, a database may be created that maps the APs to the corresponding cell towers via a CGI to MAC address mapping of locations (e.g., latitude/longitude coordinates). The database can be accessed to locate mobile computing devices that have registered through an AP without reporting a cell tower. In one embodiment, the database of access point/cell tower mappings is periodically purged (e.g., data is deleted after sixty hours). In another embodiment, the database is constrained to a fixed size.
APs are generally positioned at fixed locations. However, a mobile access point may be moved closer to a different cell tower. For example, AP 820 may be moved manually or via some other means (e.g., the AP is located on a train) such that AP 820′ is closer to cell tower 850. Mobile computing device 860 accesses the network at AP 820′ and submits a registration that identifies cell tower 850 rather than cell tower 800. The scrubbing process may be arranged to recognize that other mobile computing devices are registering on AP 820′ with cell tower 850. The database may be updated when a number (e.g., a predetermined threshold, a majority, an average, recent registration requests, etc.) of the records indicate that the location of AP 820′ should be mapped to the location of cell tower 850 (e.g., latitude/longitude coordinates for cell tower 850). Thus, a dynamic relationship is established between APs and corresponding cell towers. In one embodiment, the AP may be constantly moving between two cell towers (e.g., on a ferry). The location of the mobile computing device may be identified at a median distance between the two cell towers.
FIGS. 9, 10 and 11 are operational flow diagrams illustrating a process for estimating the location of a mobile computing device. Referring to FIG. 9, a caller initiates an emergency call using a mobile computing device at a start block. The SMLC is arranged to algorithmically estimate the location of the mobile computing device. As discussed in detail below, the location estimate may be derived from: 1) the geographical location data of the access point (AP) on which the mobile computing device establishes an IP connection with the network controller (NC); 2) a mobile subscriber's home location when the subscriber accesses the network from home; 3) the last known cell global identity (CGI) associated with the mobile computing device; or 4) the public IP address of the mobile computing device.
Continuing to decision block 900, a determination is made whether regular data network coverage exists. Examples of a regular data network include a cellular network, a GSM network, or some other telephony network. If regular network coverage exists, processing continues at block 910 where the mobile computing device may be located on the regular data network because reliable positioning technologies support such devices on the regular data network. Processing then terminates at an end block. If regular data network coverage does not exist, processing continues from decision block 900 to block 920 where the mobile computing device initiates the call on the alternative IP-based telecommunications network (e.g., a UMA network, broadband internet, a digital subscriber line network, a cable network, etc.).
Advancing to decision block 930, a determination is made whether the mobile computing device utilizes routing based on latitude/longitude coordinate routing. If the mobile computing device utilizes routing based on latitude/longitude coordinate routing, processing continues at block 960. If the mobile computing device utilizes routing based on cell routing, processing continues at decision block 940 where a determination is made whether the last known cell global identity (CGI) is available. The last known CGI may be available from when the mobile computing device first connected to the data network as discussed above with reference to the scrubbing process. If the last known CGI is available, processing continues to block 950 where the call is routed based on the last known CGI. Processing then terminates at the end block. If the last known CGI is not available, processing continues to block 960 where the call is routed based on latitude/longitude coordinates. The last known CGI may not be available because the mobile computing device did not have a record of the last known CGI when the device connected to the network or the validity time period associated with the CGI has expired.
Moving to decision block 970, a determination is made whether the mobile computing device is accessing the network via an AP that is identified on a white list. The white list is a database of location information for APs that an operator owns and operates. The location information includes the MAC address associated with the AP. If the caller is initiating a call from a white listed AP, processing continues at block 980 where the call is routed based on the latitude/longitude coordinates associated with the MAC address of the AP. If the mobile computing device is accessing the network via an AP that is not identified on the white list, processing continues to decision block 990 where a determination is made whether a CGI to MAC address mapping of latitude/longitude coordinates is available. The CGI to MAC address mapping of latitude/longitude coordinates may be available in the data base discussed above with reference to the scrubbing process. If a CGI to MAC address mapping of latitude/longitude coordinates is available, processing continues to FIG. 10. If a CGI to MAC address mapping of latitude/longitude coordinates is not available, processing continues to FIG. 11.
Referring to FIG. 10, a CGI to MAC address mapping of latitude/longitude coordinates is available. A determination is made whether the CGI to MAC address mapping of latitude/longitude coordinates is within a first predetermined distance (e.g., 15 kms) of latitude/longitude coordinates of an address provided by the mobile subscriber at decision block 1000. If the CGI to MAC address mapping of latitude/longitude coordinates is not within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1010 where the latitude/longitude coordinates are identified from the CGI to MAC address mapping. If the CGI to MAC address mapping of latitude/longitude coordinates is within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1020 where the latitude/longitude coordinates are identified from the mobile subscriber's address (i.e., the caller is probably at home). In one embodiment, the mobile subscriber submits an emergency address to the service provider when mobile service is initiated. At block 1030, the call is routed based on the identified latitude/longitude coordinates. In an alternative embodiment, an internet address (e.g., a fully qualified domain name (FQDN)) is created based on the identified latitude/longitude coordinates at block 1040. A domain name server (DNS) query is performed using the FQDN to establish a connection between the mobile computing device and the data network at block 1050.
Referring to FIG. 11, a CGI to MAC address mapping of latitude/longitude coordinates is not available. A determination is made whether the latitude/longitude coordinates of the IP address associated with the AP is within a second predetermined distance (e.g., 50 kms) of the latitude/longitude coordinates of the address provided by the mobile subscriber at decision block 1100. If the latitude/longitude coordinates of the access point IP address is not within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1110 where the latitude/longitude coordinates are identified from the IP address of the AP. If the latitude/longitude coordinates of the IP address of the AP is within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1120 where the latitude/longitude coordinates are identified from the mobile subscriber's address (i.e., the caller is probably at home). At block 1130, the call is routed based on the identified latitude/longitude coordinates. In an alternative embodiment, an internet address (e.g., FQDN) is created based on the identified latitude/longitude coordinates at block 1140. A DNS query is performed using the FQDN to establish a connection between the MS and the data network at block 1150.
FIG. 12 is an operational flow diagram illustrating a process for estimating a location of a mobile computing device or mobile subscriber (MS). A determination is made whether the MS is accessing the network via an AP that is identified on a white list at decision block 1200. The white list is a database of location information for APs that an operator owns and operates. The location information includes the MAC address associated with the AP. If the caller is initiating a call from a white listed AP, processing continues at block 1210 where the latitude/longitude coordinates associated with the MAC address of the AP is returned as the location of the MS. If the MS is accessing the network via an AP that is not identified on the white list, processing continues to decision block 1220 where a determination is made whether a CGI to MAC address mapping of latitude/longitude coordinates is available. The CGI to MAC address mapping of latitude/longitude coordinates may be available in the database discussed above with reference to the scrubbing process. If a CGI to MAC address mapping of latitude/longitude coordinates is available, processing continues to decision block 1230. If a CGI to MAC address mapping of latitude/longitude coordinates is not available, processing continues to decision block 1260.
Moving to decision block 1230, a determination is made whether the CGI to MAC address mapping of latitude/longitude coordinates is within a first predetermined distance (e.g., 15 kms) of latitude/longitude coordinates of an address provided by the MS. If the CGI to MAC address mapping of latitude/longitude coordinates is not within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1240 where a position failure results. If the CGI to MAC address mapping of latitude/longitude coordinates is within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1250 where the latitude/longitude coordinates associated with the mobile subscriber's address is returned as the location of the MS.
Continuing to decision block 1260, a determination is made whether the latitude/longitude coordinates of the IP address of the AP is within a second predetermined distance (e.g., 50 kms) of the latitude/longitude coordinates of the address provided by the mobile subscriber. If the latitude/longitude coordinates of the access point IP address is not within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1270 where a position failure results. If the latitude/longitude coordinates of the access point IP address is within the predetermined distance of latitude/longitude coordinates of the address provided by the mobile subscriber, processing continues to block 1280 where the latitude/longitude coordinates associated with the mobile subscriber's address is returned as the location of the MS.
The location of a mobile computing device is determined based on the latitude/longitude coordinates of at least one of: an AP, a cell tower, an IP address, and a subscriber provided address. Many location service applications are not related to locating a mobile subscriber for emergency purposes. Each location determination for non-emergency purposes is associated with an uncertainty rating that identifies the reliability of the location determination. For example, latitude/longitude coordinates for a cell tower may have an uncertainty rating of 15 kms. Latitude/longitude coordinates for an AP identified by MAC address may have an uncertainty rating of 50 kms. Latitude/longitude coordinates for an AP at a specific known location may have an uncertainty rating of 100 meters. Latitude/longitude coordinates for a subscriber provided address may have an uncertainty rating of 200 meters. A request to locate the mobile computing device may identify a minimum accuracy requirement such that the location determination with the highest uncertainty rating that satisfies the request is returned.
The location service application determines what level of accuracy is necessary. For example, a weather reporting application may not require a high level of accuracy when determining the mobile subscriber's location to forward an accurate weather report to the subscriber's mobile computing device. In contrast, a law enforcement locator application may require a much higher level of accuracy when locating a suspect. Furthermore, a suspect provided address may be deemed highly inaccurate by law enforcement. If the location service application does not specify a minimum uncertainty rating, the location determination with the highest uncertainty value is returned.
In some example systems, one or more mobile subscriber devices may include facility for determining their own location utilizing global positioning system (GPS) technology. GPS data (e.g., lat/long coordinates) from the mobile subscriber device can then be communicated to the network controller (NC) during the registration process. The network controller can subsequently store the GPS data in a database such as the NC database previously described. Once the GPS data is in the database, other registration requests from non-GPS devices can located by evaluating information in the database including the GPS data from other devices.
Although the invention has been described herein by way of exemplary embodiments, variations in the structures, systems, methods and processes described herein may be made without departing from the spirit and scope of the invention. For example, the positioning of the various functional or physical components may be varied. Individual components and arrangements of components may be substituted as known to the art. Since many embodiments of the invention can be made without departing from the spirit and scope of the invention, the invention is not limited except as by the appended claims.

## Claims

1. A method of estimating a location of a mobile device that is accessing an IP-based network, the method comprising:
receiving an identifier of an access point used by a mobile device to access an IP-based network;
receiving, from the mobile device over the IP-based network, an identifier of a cell tower proximate to the access point;
associating the access point identifier with the cell tower identifier;
storing the association between the access point identifier and the cell tower identifier; and
estimating a location of the mobile device based at least in part upon the stored cell tower identifier.

2. The method of claim 1, wherein the access point identifier is received from the mobile device.

3. The method of claim 1, wherein the cell tower identifier includes a cell global identity (CGI), and wherein the access point identifier includes at least one of a Media Access Control (MAC) address and an Internet Protocol (IP) address.

4. The method of claim 1, further comprising:
receiving, from the mobile device over the IP-based network, global positioning system (GPS) coordinates of the mobile device;
associating the access point identifier with the GPS coordinates;
storing the association between the access point identifier and the GPS coordinates; and
estimating a location of the mobile device based at least in part upon the stored GPS coordinates.

5. The method of claim 1, further comprises:
receiving the access point identifier when a second mobile device accesses the IP-based network via the access point;
receiving, from the second mobile device over the IP-based network, an identifier of a second cell tower;
associating the access point identifier with the second cell tower identifier; and
storing the association between the access point identifier and the second cell tower identifier.

6. The method of claim 1, further comprising receiving either an indication that the mobile device is currently associated with the cell tower or an indication that the mobile device was previously associated with the cell tower.

7. The method of claim 1, further comprising deactivating the stored association between the access point identifier and the cell tower identifier.

8. A method of estimating a location of a mobile device, the method comprising:
receiving an identifier of an access point used by a mobile device to access an IP-based network;
accessing a set of stored associations between the access point and one or more cell towers, the one or more cell towers identified by mobile devices that had previously utilized the access point to access the IP-based network, and selecting a cell tower that has a location that is believed proximate to the location of the access point;
determining the location of the selected cell tower; and
estimating a location of the mobile device based at least in part upon the determined location of the selected cell tower.

9. The method of claim 8, further comprising:
receiving, from the mobile device over the IP-based network, an identifier of a cell tower proximate to the access point;
associating the cell tower identifier with the access point identifier; and
storing the association between the two identifiers.

10. The method of claim 8, wherein the cell tower identifier includes a cell global identity (CGI), and wherein the access point identifier includes at least one of a Media Access Control (MAC) address and an IP address.

11. The method of claim 8, further comprising:
receiving a request for the estimated location of the mobile device; and
providing the estimated location of the mobile device in response to the request.

12. The method of claim 8, further comprising:
determining an address associated with the mobile device; and
estimating a location of the mobile device based at least in part upon the address associated with the mobile device.

13. The method of claim 8, further comprising:
determining a location of an address associated with the mobile device;
determining whether the location of the address is within a predetermined distance from the location of the selected cell tower; and
if the location of the address is within a predetermined distance from the location of the selected cell tower, then estimating a location of the mobile device based upon the location of the address.

14. The method of claim 8, further comprising:
receiving the identifier of the access point when a second mobile device uses the access point to access the IP-based network;
receiving, from the second mobile device over the IP-based network, an identifier of a second cell tower proximate to the access point;
associating the second cell tower identifier with the access point identifier; and
storing the association between the two identifiers.

15. The method of claim 8, wherein selecting a cell tower includes selecting a cell tower having the most recent stored association between its identifier and the access point identifier.

16. The method of claim 8, wherein selecting a cell tower includes selecting a cell tower for which a number of stored associations between the cell tower and the access point is greater than a number of stored associations between any other cell tower and the access point.

17. The method of claim 8, wherein selecting a cell tower further includes selecting a cell tower for which a number of stored associations between it and the access point exceeds a threshold number.

18. A system for estimating a location of a mobile device, the system comprising:
means for receiving an identifier of an access point used by a mobile device to access an IP-based network;
means for selecting a cell tower based at least in part upon the access point identifier, wherein the selected cell tower has a location that is proximate to a location of the access point;
means for determining the location of the selected cell tower; and
means for estimating a location of the mobile device based at least in part upon the determined location of the selected cell tower.

19. The system of claim 18, further comprising:
means for receiving a request for the estimated location of the mobile device; and
means for providing the estimated location of the mobile device.