summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRefik Hadzialic2012-09-04 23:26:59 +0200
committerRefik Hadzialic2012-09-04 23:26:59 +0200
commitff4bb8483ce96e6382f89140e9d2739a99a48ede (patch)
treecebb36cce6c173f60569149cad761e99f22e7c8b
parentIntro modification (diff)
downloadmalign-ff4bb8483ce96e6382f89140e9d2739a99a48ede.tar.gz
malign-ff4bb8483ce96e6382f89140e9d2739a99a48ede.tar.xz
malign-ff4bb8483ce96e6382f89140e9d2739a99a48ede.zip
changes
-rw-r--r--vorlagen/thesis/maindoc.pdfbin17593509 -> 15868709 bytes
-rw-r--r--vorlagen/thesis/src/.kapitel_x.tex.kate-swpbin818 -> 0 bytes
-rw-r--r--vorlagen/thesis/src/img/GSMFreqTime.pdfbin8334 -> 8337 bytes
-rw-r--r--vorlagen/thesis/src/img/GSMFreqTime.svg68
-rw-r--r--vorlagen/thesis/src/img/RRLPReqExplained.pdfbin29055 -> 29048 bytes
-rw-r--r--vorlagen/thesis/src/img/RRLPReqExplained.svg144
-rw-r--r--vorlagen/thesis/src/kapitel_A.tex284
-rw-r--r--vorlagen/thesis/src/kapitel_x.tex1255
-rw-r--r--vorlagen/thesis/src/maindoc.lof85
-rw-r--r--vorlagen/thesis/src/maindoc.lot29
10 files changed, 876 insertions, 989 deletions
diff --git a/vorlagen/thesis/maindoc.pdf b/vorlagen/thesis/maindoc.pdf
index 69ca02c..5b75733 100644
--- a/vorlagen/thesis/maindoc.pdf
+++ b/vorlagen/thesis/maindoc.pdf
Binary files differ
diff --git a/vorlagen/thesis/src/.kapitel_x.tex.kate-swp b/vorlagen/thesis/src/.kapitel_x.tex.kate-swp
deleted file mode 100644
index 9c01380..0000000
--- a/vorlagen/thesis/src/.kapitel_x.tex.kate-swp
+++ /dev/null
Binary files differ
diff --git a/vorlagen/thesis/src/img/GSMFreqTime.pdf b/vorlagen/thesis/src/img/GSMFreqTime.pdf
index 5a27035..e668d43 100644
--- a/vorlagen/thesis/src/img/GSMFreqTime.pdf
+++ b/vorlagen/thesis/src/img/GSMFreqTime.pdf
Binary files differ
diff --git a/vorlagen/thesis/src/img/GSMFreqTime.svg b/vorlagen/thesis/src/img/GSMFreqTime.svg
index c027d5d..073de0c 100644
--- a/vorlagen/thesis/src/img/GSMFreqTime.svg
+++ b/vorlagen/thesis/src/img/GSMFreqTime.svg
@@ -9,7 +9,7 @@
xmlns="http://www.w3.org/2000/svg"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
- sodipodi:docname="GSMUpDownFreq.svg"
+ sodipodi:docname="GSMFreqTime.svg"
inkscape:version="0.48.3.1 r9886"
version="1.1"
id="svg2"
@@ -302,7 +302,7 @@
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
- <dc:title></dc:title>
+ <dc:title />
</cc:Work>
</rdf:RDF>
</metadata>
@@ -877,7 +877,7 @@
y="169.97993"
x="157.65858"
id="tspan10550"
- sodipodi:role="line">1</tspan></text>
+ sodipodi:role="line">0</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10552"
@@ -888,7 +888,7 @@
y="169.97993"
x="181.56485"
id="tspan10554"
- sodipodi:role="line">2</tspan></text>
+ sodipodi:role="line">1</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10556"
@@ -899,7 +899,7 @@
y="169.75337"
x="204.93404"
id="tspan10558"
- sodipodi:role="line">3</tspan></text>
+ sodipodi:role="line">2</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10560"
@@ -910,7 +910,7 @@
y="169.97993"
x="228.51218"
id="tspan10562"
- sodipodi:role="line">4</tspan></text>
+ sodipodi:role="line">3</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10564"
@@ -921,7 +921,7 @@
y="169.75337"
x="252.08717"
id="tspan10566"
- sodipodi:role="line">5</tspan></text>
+ sodipodi:role="line">4</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10568"
@@ -932,7 +932,7 @@
y="169.75337"
x="275.50125"
id="tspan10570"
- sodipodi:role="line">6</tspan></text>
+ sodipodi:role="line">5</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10572"
@@ -943,7 +943,7 @@
y="169.97993"
x="299.13605"
id="tspan10574"
- sodipodi:role="line">7</tspan></text>
+ sodipodi:role="line">6</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10576"
@@ -954,7 +954,7 @@
y="169.75337"
x="322.66342"
id="tspan10578"
- sodipodi:role="line">8</tspan></text>
+ sodipodi:role="line">7</tspan></text>
</g>
<g
transform="translate(0,101.30894)"
@@ -969,7 +969,7 @@
y="169.97993"
x="157.65858"
id="tspan10550-9"
- sodipodi:role="line">1</tspan></text>
+ sodipodi:role="line">0</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10552-7"
@@ -980,7 +980,7 @@
y="169.97993"
x="181.56485"
id="tspan10554-1"
- sodipodi:role="line">2</tspan></text>
+ sodipodi:role="line">1</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10556-8"
@@ -991,7 +991,7 @@
y="169.75337"
x="204.93404"
id="tspan10558-9"
- sodipodi:role="line">3</tspan></text>
+ sodipodi:role="line">2</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10560-6"
@@ -1002,7 +1002,7 @@
y="169.97993"
x="228.51218"
id="tspan10562-7"
- sodipodi:role="line">4</tspan></text>
+ sodipodi:role="line">3</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10564-5"
@@ -1013,7 +1013,7 @@
y="169.75337"
x="252.08717"
id="tspan10566-5"
- sodipodi:role="line">5</tspan></text>
+ sodipodi:role="line">4</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10568-1"
@@ -1024,7 +1024,7 @@
y="169.75337"
x="275.50125"
id="tspan10570-5"
- sodipodi:role="line">6</tspan></text>
+ sodipodi:role="line">5</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10572-5"
@@ -1035,7 +1035,7 @@
y="169.97993"
x="299.13605"
id="tspan10574-4"
- sodipodi:role="line">7</tspan></text>
+ sodipodi:role="line">6</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10576-3"
@@ -1046,7 +1046,7 @@
y="169.75337"
x="322.66342"
id="tspan10578-5"
- sodipodi:role="line">8</tspan></text>
+ sodipodi:role="line">7</tspan></text>
</g>
<g
transform="translate(0,212.52077)"
@@ -1061,7 +1061,7 @@
y="169.97993"
x="157.65858"
id="tspan10550-8"
- sodipodi:role="line">1</tspan></text>
+ sodipodi:role="line">0</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10552-1"
@@ -1072,7 +1072,7 @@
y="169.97993"
x="181.56485"
id="tspan10554-2"
- sodipodi:role="line">2</tspan></text>
+ sodipodi:role="line">1</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10556-9"
@@ -1083,7 +1083,7 @@
y="169.75337"
x="204.93404"
id="tspan10558-90"
- sodipodi:role="line">3</tspan></text>
+ sodipodi:role="line">2</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10560-5"
@@ -1094,7 +1094,7 @@
y="169.97993"
x="228.51218"
id="tspan10562-1"
- sodipodi:role="line">4</tspan></text>
+ sodipodi:role="line">3</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10564-2"
@@ -1105,7 +1105,7 @@
y="169.75337"
x="252.08717"
id="tspan10566-7"
- sodipodi:role="line">5</tspan></text>
+ sodipodi:role="line">4</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10568-4"
@@ -1116,7 +1116,7 @@
y="169.75337"
x="275.50125"
id="tspan10570-54"
- sodipodi:role="line">6</tspan></text>
+ sodipodi:role="line">5</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10572-3"
@@ -1127,7 +1127,7 @@
y="169.97993"
x="299.13605"
id="tspan10574-2"
- sodipodi:role="line">7</tspan></text>
+ sodipodi:role="line">6</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10576-8"
@@ -1138,7 +1138,7 @@
y="169.75337"
x="322.66342"
id="tspan10578-1"
- sodipodi:role="line">8</tspan></text>
+ sodipodi:role="line">7</tspan></text>
</g>
<g
transform="translate(0,313.61097)"
@@ -1153,7 +1153,7 @@
y="169.97993"
x="157.65858"
id="tspan10550-7"
- sodipodi:role="line">1</tspan></text>
+ sodipodi:role="line">0</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10552-8"
@@ -1164,7 +1164,7 @@
y="169.97993"
x="181.56485"
id="tspan10554-3"
- sodipodi:role="line">2</tspan></text>
+ sodipodi:role="line">1</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10556-5"
@@ -1175,7 +1175,7 @@
y="169.75337"
x="204.93404"
id="tspan10558-7"
- sodipodi:role="line">3</tspan></text>
+ sodipodi:role="line">2</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10560-8"
@@ -1186,7 +1186,7 @@
y="169.97993"
x="228.51218"
id="tspan10562-8"
- sodipodi:role="line">4</tspan></text>
+ sodipodi:role="line">3</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10564-7"
@@ -1197,7 +1197,7 @@
y="169.75337"
x="252.08717"
id="tspan10566-2"
- sodipodi:role="line">5</tspan></text>
+ sodipodi:role="line">4</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10568-42"
@@ -1208,7 +1208,7 @@
y="169.75337"
x="275.50125"
id="tspan10570-3"
- sodipodi:role="line">6</tspan></text>
+ sodipodi:role="line">5</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10572-1"
@@ -1219,7 +1219,7 @@
y="169.97993"
x="299.13605"
id="tspan10574-5"
- sodipodi:role="line">7</tspan></text>
+ sodipodi:role="line">6</tspan></text>
<text
sodipodi:linespacing="125%"
id="text10576-6"
@@ -1230,7 +1230,7 @@
y="169.75337"
x="322.66342"
id="tspan10578-2"
- sodipodi:role="line">8</tspan></text>
+ sodipodi:role="line">7</tspan></text>
</g>
</g>
</g>
diff --git a/vorlagen/thesis/src/img/RRLPReqExplained.pdf b/vorlagen/thesis/src/img/RRLPReqExplained.pdf
index 94877be..63a5336 100644
--- a/vorlagen/thesis/src/img/RRLPReqExplained.pdf
+++ b/vorlagen/thesis/src/img/RRLPReqExplained.pdf
Binary files differ
diff --git a/vorlagen/thesis/src/img/RRLPReqExplained.svg b/vorlagen/thesis/src/img/RRLPReqExplained.svg
index 4965e2d..13e12ce 100644
--- a/vorlagen/thesis/src/img/RRLPReqExplained.svg
+++ b/vorlagen/thesis/src/img/RRLPReqExplained.svg
@@ -9,8 +9,8 @@
xmlns="http://www.w3.org/2000/svg"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
- width="704.65173"
- height="178.84155"
+ width="606.50525"
+ height="164.6973"
id="svg2"
version="1.1"
inkscape:version="0.48.3.1 r9886"
@@ -138,8 +138,8 @@
inkscape:pageopacity="0.0"
inkscape:pageshadow="2"
inkscape:zoom="2.8"
- inkscape:cx="368.4111"
- inkscape:cy="79.13056"
+ inkscape:cx="99.461614"
+ inkscape:cy="71.59406"
inkscape:document-units="mm"
inkscape:current-layer="layer1"
showgrid="true"
@@ -156,7 +156,8 @@
fit-margin-top="0"
fit-margin-left="0"
fit-margin-right="0"
- fit-margin-bottom="0">
+ fit-margin-bottom="0"
+ units="mm">
<inkscape:grid
type="xygrid"
id="grid2985"
@@ -167,8 +168,8 @@
units="mm"
spacingx="0.2mm"
spacingy="0.2mm"
- originx="27.50974mm"
- originy="-159.02026mm" />
+ originx="17.34974mm"
+ originy="-161.72555mm" />
</sodipodi:namedview>
<metadata
id="metadata7">
@@ -178,7 +179,7 @@
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
- <dc:title />
+ <dc:title></dc:title>
</cc:Work>
</rdf:RDF>
</metadata>
@@ -186,7 +187,7 @@
inkscape:label="Layer 1"
inkscape:groupmode="layer"
id="layer1"
- transform="translate(97.475456,-310.06305)">
+ transform="translate(61.475456,-314.62164)">
<path
style="fill:none;stroke:#989898;stroke-width:1px;stroke-linecap:butt;stroke-linejoin:miter;stroke-opacity:1"
d="m 35.433068,422.11889 0,3.07797 60.6629,0 0,-3.43511"
@@ -259,10 +260,12 @@
x="38.385796"
id="tspan3773"
sodipodi:role="line"><tspan
- style="fill:#b0e57c;fill-opacity:1"
+ style="fill:#008000;fill-opacity:1"
id="tspan3821">0 1 0</tspan><tspan
- style="fill:#fff0aa;fill-opacity:1"
- id="tspan3837"> 0 </tspan></tspan></text>
+ style="fill:#ff6600;fill-opacity:1"
+ id="tspan3837"><tspan
+ style="fill:#800080"
+ id="tspan14369"> 0 </tspan></tspan></tspan></text>
<text
sodipodi:linespacing="125%"
id="text3775"
@@ -274,9 +277,9 @@
x="100.83157"
id="tspan3777"
sodipodi:role="line"><tspan
- style="fill:#b4d8e7;fill-opacity:1"
+ style="fill:#0000ff;fill-opacity:1"
id="tspan3839">0 0 0</tspan><tspan
- style="fill:#fff0aa;fill-opacity:1"
+ style="fill:#800080;fill-opacity:1"
id="tspan3841"> 0</tspan></tspan></text>
<text
sodipodi:linespacing="125%"
@@ -289,7 +292,7 @@
x="163.27736"
id="tspan3781"
sodipodi:role="line"
- style="fill:#ffaeae;fill-opacity:1">0 0 0 0</tspan></text>
+ style="fill:#ff0000;fill-opacity:1">0 0 0 0</tspan></text>
<text
sodipodi:linespacing="125%"
id="text3783"
@@ -301,9 +304,9 @@
x="225.72314"
id="tspan3785"
sodipodi:role="line"><tspan
- style="fill:#ffaeae;fill-opacity:1"
+ style="fill:#ff0000;fill-opacity:1"
id="tspan3843">0 0</tspan><tspan
- style="fill:#b0e57c;fill-opacity:1"
+ style="fill:#008000;fill-opacity:1"
id="tspan3845"> 0 1</tspan></tspan></text>
<text
sodipodi:linespacing="125%"
@@ -316,7 +319,7 @@
x="288.16891"
id="tspan3789"
sodipodi:role="line"
- style="fill:#b4d8e7;fill-opacity:1">0 1 1 1</tspan></text>
+ style="fill:#0000ff;fill-opacity:1">0 1 1 1</tspan></text>
<text
sodipodi:linespacing="125%"
id="text3791"
@@ -328,9 +331,9 @@
x="349.91159"
id="tspan3793"
sodipodi:role="line"><tspan
- style="fill:#b4d8e7;fill-opacity:1"
+ style="fill:#0000ff;fill-opacity:1"
id="tspan3847">1 0 0</tspan><tspan
- style="fill:#ffaeae;fill-opacity:1"
+ style="fill:#ff0000;fill-opacity:1"
id="tspan3849"> 0</tspan></tspan></text>
<text
sodipodi:linespacing="125%"
@@ -343,9 +346,9 @@
x="412.35736"
id="tspan3797"
sodipodi:role="line"><tspan
- style="fill:#ffaeae;fill-opacity:1"
+ style="fill:#ff0000;fill-opacity:1"
id="tspan3851">1</tspan><tspan
- style="fill:#b0e57c;fill-opacity:1"
+ style="fill:#008000;fill-opacity:1"
id="tspan3853"> 1 1 1</tspan></tspan></text>
<text
sodipodi:linespacing="125%"
@@ -358,9 +361,9 @@
x="474.80316"
id="tspan3801"
sodipodi:role="line"><tspan
- style="fill:#b4d8e7;fill-opacity:1"
+ style="fill:#0000ff;fill-opacity:1"
id="tspan3855">1</tspan><tspan
- style="fill:#fff0aa;fill-opacity:1"
+ style="fill:#800080;fill-opacity:1"
id="tspan3857"> 0 0 0</tspan></tspan></text>
</g>
<rect
@@ -422,14 +425,15 @@
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="-58.92857"
+ x="5.0714302"
y="350.78738"
id="text3969"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan3971"
- x="-58.92857"
- y="350.78738">referenceNumber = 2</tspan></text>
+ x="5.0714302"
+ y="350.78738"
+ style="font-size:10px">referenceNumber = 2</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 60.23622,354.33069 0,27.31721"
@@ -443,18 +447,20 @@
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;text-align:center;line-height:125%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="67.734932"
- y="465.21933"
+ x="122.02065"
+ y="462.71933"
id="text4443"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
- x="67.734932"
- y="465.21933"
- id="tspan4447">RRLP-Component = 0</tspan><tspan
+ x="122.02065"
+ y="462.71933"
+ id="tspan4447"
+ style="font-size:10px">RRLP-Component = 0</tspan><tspan
sodipodi:role="line"
- x="67.734932"
- y="485.21933"
- id="tspan4543">(msrPositionReq)</tspan></text>
+ x="122.02065"
+ y="475.21933"
+ id="tspan4543"
+ style="font-size:10px">(msrPositionReq)</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 206.42857,345.1198 0,36.5281"
@@ -463,18 +469,20 @@
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;text-align:center;line-height:125%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="206.68185"
- y="322.2193"
+ x="202.68185"
+ y="326.2193"
id="text3969-6"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan3971-5"
- x="206.68185"
- y="322.2193">Type of included</tspan><tspan
+ x="202.68185"
+ y="326.2193"
+ style="font-size:10px">Type of included</tspan><tspan
sodipodi:role="line"
- x="206.68185"
- y="342.2193"
- id="tspan4696">data in the packet</tspan></text>
+ x="202.68185"
+ y="338.7193"
+ id="tspan4696"
+ style="font-size:10px">data in the packet</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 269.71425,450.78457 0,-27.31721"
@@ -490,11 +498,13 @@
sodipodi:role="line"
x="270.14151"
y="465.50058"
- id="tspan4539">methodType = 1</tspan><tspan
+ id="tspan4539"
+ style="font-size:10px">methodType = 1</tspan><tspan
sodipodi:role="line"
x="270.14151"
- y="485.50058"
- id="tspan4547">(msBased)</tspan></text>
+ y="478.00058"
+ id="tspan4547"
+ style="font-size:10px">(msBased)</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 347.85714,354.33069 0,27.31721"
@@ -503,29 +513,32 @@
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="294.5"
- y="350.86218"
+ x="312.5"
+ y="350.6864"
id="text4573"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan4575"
- x="294.5"
- y="350.86218">Accuracy = 60</tspan></text>
+ x="312.5"
+ y="350.6864"
+ style="font-size:10px">Accuracy = 60</tspan></text>
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;text-align:center;line-height:125%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="466.48996"
- y="465.57648"
+ x="399.70425"
+ y="463.79077"
id="text4577"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan4579"
- x="466.48996"
- y="465.57648">PositionMethod = 1</tspan><tspan
+ x="399.70425"
+ y="463.79077"
+ style="font-size:10px">PositionMethod = 1</tspan><tspan
sodipodi:role="line"
- x="466.48996"
- y="485.57648"
- id="tspan4581">(gps)</tspan></text>
+ x="399.70425"
+ y="476.29077"
+ id="tspan4581"
+ style="font-size:10px">(gps)</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 402.07645,450.78457 0,-27.31721"
@@ -546,7 +559,8 @@
sodipodi:role="line"
x="441.83612"
y="322.2193"
- id="tspan4637">MeasureResponseTime = 7</tspan></text>
+ id="tspan4637"
+ style="font-size:10px">MeasureResponseTime = 7</tspan></text>
<path
style="fill:none;stroke:#000000;stroke-width:0.88582677;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;marker-end:url(#Arrow1Lend)"
d="m 478.21429,354.33069 0,27.31721"
@@ -555,26 +569,28 @@
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="446.78568"
+ x="444.78568"
y="350.86218"
id="text4667"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan4669"
- x="446.78568"
- y="350.86218">UseMultipleSets = 1</tspan></text>
+ x="444.78568"
+ y="350.86218"
+ style="font-size:10px">UseMultipleSets = 1</tspan></text>
<text
xml:space="preserve"
style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
- x="-98.530144"
+ x="-57.679974"
y="322.2193"
id="text4671"
sodipodi:linespacing="125%"><tspan
sodipodi:role="line"
id="tspan4673"
- x="-98.530144"
- y="322.2193"><tspan
- style="fill:#fff0aa;fill-opacity:1"
+ x="-57.679974"
+ y="322.2193"
+ style="font-size:10px"><tspan
+ style="font-size:10px;fill:#800080;fill-opacity:1"
id="tspan4675">0</tspan> - Extension or spare bits</tspan></text>
<text
xml:space="preserve"
diff --git a/vorlagen/thesis/src/kapitel_A.tex b/vorlagen/thesis/src/kapitel_A.tex
index 2f7fae9..f25587a 100644
--- a/vorlagen/thesis/src/kapitel_A.tex
+++ b/vorlagen/thesis/src/kapitel_A.tex
@@ -446,68 +446,228 @@ usually every day\footnote{Almanac update times can be found here:
\url{http://www.navcen.uscg.gov/?pageName=currentNanus&format=txt}} \citep{GPS-Pentagon}.
\newpage
-\section{Sourcecode}
-Example:
-\lstset{%
-caption=,%
-label=lst:example,%
-}
-\begin{lstlisting}
-#include <stdio.h>
-
-int main(void)
-{
- printf("Hallo Welt!\n");
- return 0;
-}
-\end{lstlisting}
+\clearpage
+\section{GPS assistance data}
+Description of assistance data is given in the following tables. These
+are the RRLP assistance data converted in the RRLP packet generator software.
+
+\begin {table}[h]
+\caption{GPS UTC Model content. Table courtesy of \citep{harper2010server-side}.}
+\label{tbl:utcModel}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{lllcc}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Field (IE) & Description\\\toprule
+$A_{1}$&Drift coefficient of GPS time scale relative\\
+&to UTC time scale\\\midrule
+$A_{0}$&Bias coefficient of GPS time scale relative\\
+&to UTC time scale\\\midrule
+$t_{ot}$&Time data reference time of week\\\midrule
+$\Delta t_{LS}$&Current or past leap second count\\\midrule
+$WN_{0}$&Time data reference week number\\\midrule
+$WN_{LSF}$&Leap second reference week number\\\midrule
+$DN$&Leap second reference day number\\\midrule
+$\Delta t_{LSF}$&Current of future leap second count
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+\begin {table}[h]
+\caption{GPS Ionosphere Model content. Table courtesy of \citep{harper2010server-side}.}
+\label{tbl:ionoModel}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{llllc}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Field (IE) & Description\\\toprule
+$\alpha_{0}$&Coefficient 0 of vertical delay\\\midrule
+$\alpha_{1}$&Coefficient 1 of vertical delay\\\midrule
+$\alpha_{2}$&Coefficient 2 of vertical delay\\\midrule
+$\alpha_{3}$&Coefficient 3 of vertical delay\\\midrule
+$\beta_{0}$&Coefficient 0 of period of the model\\\midrule
+$\beta_{1}$&Coefficient 1 of period of the model\\\midrule
+$\beta_{2}$&Coefficient 2 of period of the model\\\midrule
+$\beta_{3}$&Coefficient 3 of period of the model
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+\begin {table}[ht]
+\caption{Navigation message (ephemeris) content. Table courtesy of \citep{harper2010server-side}.}
+\label{tbl:navMessage}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{llll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Field (IE) & Description\\\toprule
+Satellite ID&This is the satellite ID that is in the range of 0 to 63. PRN=SatelliteID + 1\\\midrule
+Satellite status&This is an indicator of whether this is a new or existing satellite and whether\\
+&the navigation model is new or the same.\\\midrule
+C/A or P on L2&Code(s) on L2 channel\\\midrule
+URA Index&User range accuracy\\\midrule
+SV Health&Satellite health\\\midrule
+IODC&Issue of data, clock\\\midrule
+L2 P Data flag& \\\midrule
+SF 1 Reserved& \\\midrule
+$T_{GD}$&Estimated group delay differential\\\midrule
+$t_{oc}$&Apparent clock correction\\\midrule
+$a_{f2}$&Apparent clock correction\\\midrule
+$a_{f1}$&Apparent clock correction\\\midrule
+$a_{f0}$&Apparent clock correction\\\midrule
+$C_{rs}$&Ampltitude of the sine harmonic correction term to the orbit radius (meters)\\\midrule
+$\Delta n$&Mean motion difference from computed value (semicircles/second)\\\midrule
+$M_{0}$&Mean anomaly at reference time (semicircles)\\\midrule
+$C_{uc}$&Ampltitude of the cosine harmonic correction term to the\\
+&argument of latitude (radians)\\\midrule
+$e$&Eccentricity\\\midrule
+$C_{us}$&Amplitude of the sine harmonic correction term to the argument of latitude\\
+&(radians)\\\midrule
+$A^{1/2}$&Square root of semi-major axis (meters)\\\midrule
+$t_{oe}$&Reference time ephemeris\\\midrule
+Fit Interval Flag&\\\midrule
+AODO&Age of data offset\\\midrule
+$C_{ic}$&Amplitude of the cosine harmonic correction term to the angle of inclination\\
+&(radians)\\\midrule
+$\Omega_0$&Longitude of ascending node of orbit plane at weekly epoch (semicircles)\\\midrule
+$C_{is}$&Amplitude of the cosine harmonic correction term to the angle of inclination\\
+&(radians)\\\midrule
+$i_{0}$&Inclination angle at reference time (semicircles)\\\midrule
+$C_{rc}$&Amplitude of the cosine harmonic correction term to the orbit radius (meters)\\\midrule
+$\omega$&Argument of perigee (semicircles)\\\midrule
+OMEGAdot&Rate of right ascension (semicircles/second)\\\midrule
+Idot&Rate of inclination angle (semicircles/second)
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+\begin {table}[ht]
+\caption{Almanac message content. Table courtesy of \citep{harper2010server-side}.}
+\label{tbl:almanacMessage}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{lll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Field (IE) & Description\\\toprule
+SatelliteID&This is the satellite ID that is in the range of 0 to 63. PRN=SatelliteID + 1\\\midrule
+SV Health&Satellite health (e.q. 000 means the satellite is fully operational)\\\midrule
+$e$&``Eccentricity shows the amount of the orbit deviation from circular (orbit).\\
+&It is the distance between the foci divided by the length of the semi-major axis'' \citep{ubxGPSDict}\\\midrule
+TOA&Time of applicability, reference time for orbit and clock parameters (seconds).\\
+&``The number of seconds in the orbit when the almanac data were generated'' \citep{ubxGPSDict}\\\midrule
+OI&Orbital inclination (radians). The angle to which the SV orbit meets\\
+&the equator \citep{ubxGPSDict}\\\midrule
+RORA&Rate or right ascension (radians/second). ``Rate of change of the angle of right ascension\\
+&as defined in the Right Ascension mnemonic'' \citep{ubxGPSDict}\\\midrule
+$A^{1/2}$& Square root of semi-major axis (meters$^{1/2}$). `` This is defined as the measurement\\
+&from the center of the orbit to either the point of apogee or the point of perigee'' \citep{ubxGPSDict}\\\midrule
+$\Omega_0$& Right Ascension at Week (radians). Longitude of ascending node of orbit plane at\\
+&weekly epoch\\\midrule
+$\omega$&Argument of perigee (semicircles). ``An angular measurement along the orbital path\\
+&measured from the ascending node to the point of perigee, measured in the direction of\\
+&the SV's motion'' \citep{ubxGPSDict}\\\midrule
+$M_0$&Mean anomaly (radians)\\\midrule
+$a_{f0}$&Satellite clock bias (seconds). Satellite clock error at reference time\\\midrule
+$a_{f1}$&Satellite clock drift (seconds per second). Satellite clock error rate\\\midrule
+Week&Week number since the last reset (i.e. since year 1980 modulo 1024 weeks)
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+\clearpage
+\section{Troubleshooting the BTS}
+While the work has been performed on OpenBSC, to open a data channel (SDCCH),
+the BTS was sometimes sent in erroneous states. These states are reported
+through a LED light on the BTS. Based on the color and flash type of the LED
+one can find out the state of the BTS. These states are given in table
+\ref{tbl:LEDStatus} with their appropriate meaning. They may help the
+developer to troubleshoot and find the bug.
+
+\begin {table}[ht]
+\caption{Indicator LED status on the nanoBTS. Table courtesy of \citep{installnanoBTS}.}
+\label{tbl:LEDStatus}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{llll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+State&Color \& Pattern&When&Precedence\\\toprule
+Self-test failure&Red - Steady &In boot or application code when a power&1 (High) \\
+ &&on self-test fails\\\midrule
+Unspecified failure&Red - Steady &On software fatal errors&2\\\midrule
+No ethernet&Orange - Slow flash &Ethernet disconnected&3\\\midrule
+Factory reset&Red - Fast blink &Dongle detected at start up and the&4\\
+ &&factory defaults have been applied\\\midrule
+Not configured&Alternating Red/&The unit has not been configured&5\\
+ &Green Fast flash\\\midrule
+Downloading code&Orange - Fast flash &Code download procedure is in progress&6\\\midrule
+Establishing XML&Orange - Slow blink &A management link has not yet been established&7\\
+ &&but is needed for the TRX to become operational.\\
+ &&Specifically: for a master a Primary OML or\\
+ &&Secondary OML is not yet established; for a\\
+ &&slave an IML to its master or a Secondary \\
+ &&OML is not yet established. \\\midrule
+Self-test &Orange - Steady &From power on until end of backhaul&8\\
+ &&power on self-test\\\midrule
+NWL-test &Green - Fast flash& OML established, NWL test in progress&9\\\midrule
+OCXO Calibration &Alternating Green/& The unit is in the fast calibrating state [SYNC]&10\\
+ &Orange - Slow blink\\\midrule
+Not transmitting &Green - Slow flash & The radio carrier is not being transmitted &11\\\midrule
+Operational &Green - Steady & Default condition if none of the above apply&12 (Low)\\\bottomrule
+\end {tabular}
+\end {table}
+
+%\clearpage
+%\section{GPS Constants and equations}
+%\label{sec:gpsConsAndEq}
+%\begin{alignat}{4}
+% & A & = & \; (\sqrt{A})^2 \nonumber \\
+% & n_{0} & = &\; \sqrt{\frac{\mu}{A^3}} \nonumber \\
+% & t_{k} & = &\; t-t_{oe} \nonumber \\
+% & n & = &\; n_{0} + \Delta n \nonumber \\
+% & M_{k} & = &\; M_{0} + nt_{k} \nonumber \\
+% & M_{k} & = &\; E_{k} - e\sin E_{k} \nonumber \\
+% & v_{k} & = & \tan ^{-1} \left( \frac{\sin v_{k}}{\cos v_{k}} \right) = \tan ^{-1} \left( \frac{\frac{\sqrt{1-e^2} \sin E_{k}}{1-e \cos E_{k}}}{\frac{\cos E_{k}-e}{1-e\cos E_{k}}} \right) \nonumber \\
+% & v_{k} & = & \tan ^{-1} \left( \frac{\sin v_{k}}{\cos v_{k}} \right) = \tan ^{-1} \left( \frac{\sqrt{1-e^2} \sin E_{k}/(1-e \cos E_{k})}{(\cos E_{k}-e)/(1-e\cos E_{k})} \right) = \tan ^{-1} \left( \frac{\sqrt{1-e^2} \sin E_{k}}{\cos E_{k} - e} \right) \nonumber \\
+% & E_{k} & = & \cos ^{-1} \left( \frac{e+\cos v_{k}}{1+e \cos v_{k}} \right) \nonumber \\
+% & \Phi_{k} & = &\; v_{k} + \omega \nonumber \\
+% & \delta u_{k} & = &\; c_{us} \sin{2\Phi_{k}} + C_{us} \cos{2\Phi_{k}} \\
+% & \delta r_{k} & = &\; c_{rc} \cos{2\Phi_{k}} + C_{rs} \sin{2\Phi_{k}} \nonumber \\
+% & \delta i_{k} & = &\; c_{ic} \cos{2\Phi_{k}} + C_{is} \sin{2\Phi_{k}} \nonumber \\
+% & u_{k} & = &\; \Phi_{k} + \delta u_{k} \nonumber \\
+% & r_{k} & = &\; A(1-e\cos{E_{k}})+\delta r_{k} \nonumber \\
+% & i_{k} & = &\; i_{0} + \delta i_{k} + (IDOT)t_{k} \nonumber \\
+% & x_{k}^{'} & = &\; r_{k} \cos{u_{k}} \nonumber \\
+% & y_{k}^{'} & = &\; r_{k} \sin{u_{k}} \nonumber \\
+% & \Omega_{k} & = &\; \Omega_{0} + (\Omega - \Omega_{e})t_{k} - \Omega_{e}t_{oe} \nonumber \\
+% & x & = &\; x_{k}^{'} \cos{\Omega_{k}}-y_{k}^{'}\cos{i_{k}}\sin{\Omega_{k}} \nonumber \\
+% & y & = &\; x_{k}^{'} \sin{\Omega_{k}}-y_{k}^{'}\cos{i_{k}}\cos{\Omega_{k}} \nonumber \\
+% & z & = &\; y_{k}^{'} \sin{i_{k}} \nonumber
+%\end{alignat}
-\section{GPS Constants and equations}
-\label{sec:gpsConsAndEq}
-\begin{alignat}{4}
- & A & = & \; (\sqrt{A})^2 \nonumber \\
- & n_{0} & = &\; \sqrt{\frac{\mu}{A^3}} \nonumber \\
- & t_{k} & = &\; t-t_{oe} \nonumber \\
- & n & = &\; n_{0} + \Delta n \nonumber \\
- & M_{k} & = &\; M_{0} + nt_{k} \nonumber \\
- & M_{k} & = &\; E_{k} - e\sin E_{k} \nonumber \\
- & v_{k} & = & \tan ^{-1} \left( \frac{\sin v_{k}}{\cos v_{k}} \right) = \tan ^{-1} \left( \frac{\frac{\sqrt{1-e^2} \sin E_{k}}{1-e \cos E_{k}}}{\frac{\cos E_{k}-e}{1-e\cos E_{k}}} \right) \nonumber \\
- & v_{k} & = & \tan ^{-1} \left( \frac{\sin v_{k}}{\cos v_{k}} \right) = \tan ^{-1} \left( \frac{\sqrt{1-e^2} \sin E_{k}/(1-e \cos E_{k})}{(\cos E_{k}-e)/(1-e\cos E_{k})} \right) = \tan ^{-1} \left( \frac{\sqrt{1-e^2} \sin E_{k}}{\cos E_{k} - e} \right) \nonumber \\
- & E_{k} & = & \cos ^{-1} \left( \frac{e+\cos v_{k}}{1+e \cos v_{k}} \right) \nonumber \\
- & \Phi_{k} & = &\; v_{k} + \omega \nonumber \\
- & \delta u_{k} & = &\; c_{us} \sin{2\Phi_{k}} + C_{us} \cos{2\Phi_{k}} \\
- & \delta r_{k} & = &\; c_{rc} \cos{2\Phi_{k}} + C_{rs} \sin{2\Phi_{k}} \nonumber \\
- & \delta i_{k} & = &\; c_{ic} \cos{2\Phi_{k}} + C_{is} \sin{2\Phi_{k}} \nonumber \\
- & u_{k} & = &\; \Phi_{k} + \delta u_{k} \nonumber \\
- & r_{k} & = &\; A(1-e\cos{E_{k}})+\delta r_{k} \nonumber \\
- & i_{k} & = &\; i_{0} + \delta i_{k} + (IDOT)t_{k} \nonumber \\
- & x_{k}^{'} & = &\; r_{k} \cos{u_{k}} \nonumber \\
- & y_{k}^{'} & = &\; r_{k} \sin{u_{k}} \nonumber \\
- & \Omega_{k} & = &\; \Omega_{0} + (\Omega - \Omega_{e})t_{k} - \Omega_{e}t_{oe} \nonumber \\
- & x & = &\; x_{k}^{'} \cos{\Omega_{k}}-y_{k}^{'}\cos{i_{k}}\sin{\Omega_{k}} \nonumber \\
- & y & = &\; x_{k}^{'} \sin{\Omega_{k}}-y_{k}^{'}\cos{i_{k}}\cos{\Omega_{k}} \nonumber \\
- & z & = &\; y_{k}^{'} \sin{i_{k}} \nonumber
-\end{alignat}
-
-\begin{equation}
-\label{eq:paramconst1}
- \begin{split}
- \mu_{e} = 3.986004418\cdot 10^{14} \frac{m^3}{s^2}
- \end{split}
-\quad\Longleftarrow\quad
- \begin{split}
- \mbox{Geocentric gravitational constant}
- \end{split}
-\end{equation}
+%\begin{equation}
+%\label{eq:paramconst1}
+% \begin{split}
+% \mu_{e} = 3.986004418\cdot 10^{14} \frac{m^3}{s^2}
+% \end{split}
+%\quad\Longleftarrow\quad
+% \begin{split}
+% \mbox{Geocentric gravitational constant}
+% \end{split}
+%\end{equation}
-\begin{equation}
-\label{eq:paramconst2}
- \begin{split}
- c= 2.99792458\cdot 10^{8} \frac{m}{s}
- \end{split}
-\quad\Longleftarrow\quad
- \begin{split}
- \mbox{speed of light}
- \end{split}
-\end{equation} \ No newline at end of file
+%\begin{equation}
+%\label{eq:paramconst2}
+% \begin{split}
+% c= 2.99792458\cdot 10^{8} \frac{m}{s}
+% \end{split}
+%\quad\Longleftarrow\quad
+% \begin{split}
+% \mbox{speed of light}
+% \end{split}
+%\end{equation} \ No newline at end of file
diff --git a/vorlagen/thesis/src/kapitel_x.tex b/vorlagen/thesis/src/kapitel_x.tex
index 9c77fbd..1ae0bcc 100644
--- a/vorlagen/thesis/src/kapitel_x.tex
+++ b/vorlagen/thesis/src/kapitel_x.tex
@@ -42,9 +42,320 @@ In this thesis the author will provide the theoretical and practical
knowledge required for building a localization system of mobile users
inside of a 2G GSM network by taking advantage of the already-existing AGPS receivers inside of smart phones.
+\section{Goals and overview of the thesis}
+%In this thesis the author shall provide theoretical and practical
+%background knowledge required for building a localization system of mobile users
+%inside of a 2G GSM network by taking the advantage of AGPS receivers inside of smart phones.
+In the lab a 2G GSM network was set up similar to the real network environment
+provided by network operators. Software for generating assistance data
+was developed. Then the GSM software was modified to deliver requests and
+assistance data to cell phones according to a protocol described in the thesis.
+
+The reason why the AGPS method was prefered over other localization methods is because
+the position estimation is sufficiently precise and accurate compared to other methods.
+Further advantage over other positioning techniques is that smart phones with an AGPS
+receiver represent slightly less than 50\% of the total cell phone market in the most
+solvent EU economies and the US \citep{smartPhoneUsage}. The functional aspects and
+abuse risks of AGPS receivers in smart phones are relatively unknown,
+no relevant studies have been found and thus will be further analysed in this work.
+A certain privacy risk exists that it is possible to obtain the position of a mobile user
+without its knowledge of being surveillanced. This work may be seen as a scenario what
+kind of information can be gained by a third persons having access to a GSM network.
+This thesis may be perceived as pioneer work in the field of localizing mobile users by
+taking advantage of AGPS receivers in smart phones.
-\newpage
-\section{Positioning techniques}
+The thesis is divided into three parts. The first is a theoretical introduction to GSM and GPS systems
+as well as the protocol required for the positioning of mobile users.
+The second part provides more details on the software implementation and the hardware required
+to construct the equivalent set up. The last section is a discussion and analysis of the findings and
+accomplished results in the test environment. It is followed by the conclusion and provides
+a discussion of security issues.
+
+Chapters 2 and 3 will provide a theoretical introduction of the GSM operational principles
+as well as of the GPS and AGPS receivers required for understanding the basic functioning
+principles of the entire positioning system. The theoretical concepts of GPS receivers
+will be analysed and discussed in depth since they provide evidence for the advantages
+and limitations of this method. These two chapters will provide an explanation for the achieved
+and observed results in this thesis. Once the GSM and GPS working principles have
+been explained, the author shall proceed with introducing the reader to the
+Radio Resource Location Protocol (RRLP), responsible for transmission of
+assistance data and obtaining the position of the mobile user. More details on RRLP
+will be provided in chapter 4. In chapter 5, the reader will be introduced to the software
+development and implementation process. More details on the hardware connections and set up
+shall be provided in chapter 6. In chapter 7 test results and the test environment
+will be presented. Chapter 8 will provide a summary of the entire system. The appendix
+contains details for configuring the entire system and for obtaining the same results.
+This thesis includes a USB stick with the source code developed during the work on this thesis.
+
+
+
+\chapter{GSM}
+In the past two decades we have been witness to an increasing development of wireless communication technologies,
+one of the most rapidly developing fields of engineering. Global System for Mobile Communications\footnote{First
+time when the standard was developed, GSM meant \textit{Groupe Spéciale Mobile} \citep{0890064717}} (GSM) networks
+played a major role in wide-spreading wireless voice services in every corner of the planet \citep{gsmConnection}. According
+to the GSM Association (GSMA) in 2011 there have been 6 billion registered wireless connections world wide \citep{gsmConnection}. In
+this chapter more details shall be given on the second generation GSM network which was employed in this work for
+delivering GPS assistance data to cell phones. More information shall be provided on the general working principles of GSM
+and how a data channel is initialized to deliver data to cell phones.
+
+
+\section{GSM Network structure}
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.50]{img/GSMBig.pdf}
+ \caption{Basic GSM network block diagram. Image courtesy of \citep{konrad} and \citep{dennis}.}
+\label{img:GSMBig}
+\end{figure}
+\label{sec:GSMNetStruct}
+To build a ``physical'' connection to the cell phone a special purpose hardware must exist.
+This hardware is the Base Transceiver Station (BTS). BTS is the first hardware unit the cell phone is communicating with over the air interface
+and provides a ``physical'' connection with the cell phone \citep[Chapter 3]{0890064717}. This physical connection between the
+BTS and the cell phone is the \textit{$U_m$ interface}, as shown in figure \ref{img:GSMBig}. A BTS can serve up
+to six users on one frequency in full duplex mode since two out of eight time slot are used for broadcasting of signalling and system information.
+%transmitted in the broadcast control channel (BCCH).
+By sectorizing BTSs with different frequencies and by altering the configuration
+the number of six mobile users can be increased per sector.
+The BTS are divided into geographical regions\footnote{Usually they are represented as hexagons but it could take
+any other geometric shape.} by their signal coverage. A BTS consists of a RF tranceiver, internal clock and modulator/demodulator. The function of the RF transceiver is
+to enable the reception and transmission on the uplink and downlink channel for the cell frequency where the
+BTS is located\footnote{Cell is the area covered with GSM signal and from which a cell phone can communicate with a BTS.}.
+The main function of the internal clock is to supply the BTS with a frequency such that the internal
+circuits can produce frames seperated in time domain. The internal clock has to be sufficiently accurate for the GSM
+network to work, an accuracy of at least $\pm$5 ppm (parts per million) \citep{dennis}. If the GSM network is synchronized,
+this internal clock is not employed but an external clock generated signal from an atomic clock. The GSM network
+must be synchronized for some of the position localization techniques discussed in this chapter. Devices providing the
+synchronous clock are called Location Measurement Units (LMU).
+Modulator/demodulator main function is the modulation and demodulation of the received and transmitted signals.
+The transmission from the cell phone to the BTS is shifted for 3 time slots compared to the reception
+of the signal from the BTS\footnote{Timing advance factor is added to the three time slots. The numbering of
+the time slots remains the same, i.e. if time slot 0 is used for downlink, it is named 0 in the uplink as well
+although it is shifted.}
+\citep[Chapter 7]{0890064717} \citep{konrad} \citep[Chapter 4]{0470742984}. This frequency shift was introduced so
+that the cell phone has sufficient time to switch its reception unit to transmission unit \citep{dennis}.
+
+
+One or more BTSs are connected to the Base Station Controller (BSC). The main task of the BSC is to control the radio
+resources of the connected BTSs such as assigning radio channels to different BTS, frequency hopping in case of an \textit{handover}
+and controlling the power levels within channel \citep[Chapter 4]{0470742984} \citep{konrad} \citep[Chapter 3]{0890064717}.
+Handover is the process of switching\footnote{Disconnecting from the BTS currently connected to and connecting to the neighboring one with
+another frequency} from one BTS to another during an active connection when the signal reception
+strength is higher than on the currently-connected BTS. This signal reception strength is known as Received signal strength (RSS).
+RSS are measurement reports transmitted from the cell phone to the BTS.
+RSS is used to determine if the handover process should be triggered or not \citep{Richard2011Master}.
+BSC is connected to the Transcoding Rate and Adaptation Unit (TRAU). This builds the Base Station Subsystem (BSS), as it can
+be seen in figure \ref{img:GSMBig}, on left side inside of the gray dashed line rectangle. Inside of the BSS, TRAU
+is responsibe for compressing and decompressing speech between the cell phone and a speech signal from the other side,
+from 64 kbps to 16 or 8 kbps depending if it is a full or half rate channel.
+
+The next subsystem block is the Network Switching Subsystem (NSS), as it can be seen on figure \ref{img:GSMBig}, on right
+side inside of the gray dashed line rectangle. The main task of NSS is to connect the GSM with other telephony networks
+(GSM networks from other providers or the Public Switched Telephone Network) \citep[Chapter 4]{0470742984}. It consists of
+Mobile Switching Center (MSC), Gateway Mobile Switching Center (GMSC) and databases.
+
+MSC's main function is to route incoming and outgoing calls between the moving mobile users,
+``the assignment of user channels toward the BSS'' \citep[Chapter 4]{0890064717} \citep{konrad}. GMSC is
+a type of MSC for external networks, GSM networks from other providers or telephone networks are
+routed through the GMSC\citep[Chapter 4]{0890064717}.
+
+There are four databases: Home Location Register (HLR), Visitor Location Register (VLR), Authentication Center (AUC)
+and Equipment Identity Register (EIR). HLR database stores data about the GSM subscribers of a network provider.
+The data, contained in the HLR database, are subscriber's unique International Mobile Subscriber Identity (IMSI) code,
+subscriber's phone numbers (MSISDN), subscriber's current location and subscriber's usage statistics.
+IMSI is the serial number of the Subscriber Identification Module (SIM) card. The SIM card is inserted in the
+cell phone. Subscriber's usage statistics are information that contain data for the billing system.
+The current location of a mobile user is acquired through the location of the BSC which controls the BTS currently
+serving the mobile user, i.e. the BTS to which the cell phone is connected now \citep{konrad}.
+VLR serves as a temporary data storage of important parts of HLR data (not all data known for the particular user)
+of all the visiting mobile subscribers served by the current MSC. For instance if a cell phone from its home MSC enters an
+area covered by the newly entered MSC, its VLR will request some of the HLR data from the HLR database of the MSC where
+the cell phone is registered \citep{dennis} \citep[Chapter 4]{0470742984}. AUC contains confidential keys for each mobile subscriber
+required for encrypting the data before they are transmitted to the cell phone from the BTS \citep[Chapter 3]{0470030704}.
+The keys located in AUC are also required for the cell phone to register
+in the network \citep{konrad}. EIR is an optional database but contains data about approved types of
+mobile equipment (not stolen cell phones), black listed cell phones (they are identified by their International
+Mobile Equipment Identity number which is unique for every manufactured cell phone) and cell phones which
+ought to be tracked if they register \citep[Chapter 4]{0890064717}.
+
+\section{Overview of the air interface (Um)}
+The main task of GSM networks was to enable wireless voice transmission between GSM and other GSM/telephone users
+inside of switched networks. It was not designed to be used with data services which are a necessity in today's standards.
+GSM networks are worldwide spread and work on different frequency spectrums depending on the country where
+the networks are employed. The reason why different frequencies are used is because of intereference with different
+wireless systems and used telecommunication standards. Particularly in Germany, the Federal Network Agency (German: $Bundesnetzagentur$) is the
+responsible organisation for assigning different frequencies to GSM operators since these frequencies belong
+to the group of licensed frequencies and are not allowed to be used by everyone. In Germany the used frequency bands
+are EGSM900 and GSM1800, their frequency ranges can be seen in table \ref{tbl:GSMfreqs} \citep{konrad}.
+These frequency bands are divided into 200 KHz channels,
+for a frequency band range of 35 MHz there are 175 operating
+channels. This technique is called Frequency Division Multiple Access (FDMA) and
+supports using parallely more frequency channels inside of the same covered area with GSM RF signal.
+FDMA is employed when the frequency bandwidth is limited like in the GSM networks. By utilising FDMA the network throughput
+is used more efficiently since different users can send or receive information at different
+frequency slots instead of waiting for their turn.
+These frequency channels have a unique identifier number. They are named as Absolute Radio Frequency
+Channel Numbers (ARFCN). The basic idea of FDMA inside of the frequency spectrum GSM900 for GSM can be
+seen in figure \ref{img:GSMFreqRangChannel}, ARFCN numbers are assigned according to the
+frequencies which are employed.
+It is important to distinguish uplink and downlink frequencies.
+Uplink frequency is used when the cell phone transmits data
+to the network operator, whereas downlink from the network operator to the cell phone. GSM is a full duplex communication
+system, at the same time the cell phone or the network operator can send and receive data.
+Although the equivalent ARFCN number is used for uplink and downlink, the frequencies are shifted 45 MHz in EGSM900/GSM900 and
+95 MHz in GSM1800 as it can be seen in figure \ref{img:GSMFreqRangChannel} for GSM900.
+\begin {table}[ht]
+\caption{GSM operating frequencies in Germany}
+\label{tbl:GSMfreqs}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{lllll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Frequency band&Uplink frequency (MHz)&Downlink frequency (MHz)& Channel number\\\toprule
+GSM900&880 - 915&925 - 960&0, 1 - 124, 975 - 1023\\\midrule
+GSM1800&1710 - 1785&1805 - 1880& 512 - 885\\\bottomrule
+\end {tabular}
+\end {table}
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.50]{img/GSMUpDownFreq.pdf}
+ \caption{Frequency ranges of uplink and downlink channels in the GSM900 band. Each box represents a frequency band (channel).
+ Image courtesy of \citep{konrad} and \citep{dennis}.}
+\label{img:GSMFreqRangChannel}
+\end{figure}
+\par Aside from using different frequency channels, each frequency channel (ARFCN) is split up into eight time slots \ref{img:GSMFreqTime}.
+This technique of dividing a frequency into time slots is named Time Division Multiple Access (TDMA).
+TDMA allows several users to share the same frequency
+channel but in different time slots. Using this technique the voice throughput is better utilised and a broader amount
+of users can be served at the ``same'' time, i.e. the capacity of parallely speaking GSM users is increased.
+TDMA was employed because the voice could be compressed with Linear Predictive Coding (LPC) without the human
+noting a difference in the call quality \citep{0824740408}. By taking advantage of LPC, instead of the 64 kbps required for transmission of voice
+it was possible to compress the voice without losing much of the call quality into 8 kbps for half rate and 16 kbps for
+full rate\footnote{Human speech has a frequency bandwidth between 0 and 4000 Hz \citep{humanFreq}.
+Human voice is by its nature analog and requires to be converted into a digital stream of ones and zeros.
+By Nyquist-Shannon sampling theorem the sampling frequency must be at least two times greater
+than the sampled frequency and with an 8 bit Analog to Digital Converter (ADC) this defines the
+64 kbps required to transfer voice ($2\cdot4000 Hz\cdot8 = 64000$).}. Since new wireless services are
+data oriented and the networks become packet networks this type of modulating data had to be changed,
+3G and 4G networks use different frequency ranges and technique to modulate and demodulate data.
+
+The idea of employing TDMA on FDMA in the GSM900 band can be seen in figure \ref{img:GSMFreqTime}.
+Each time slot duration is $\approx$577 $\mu s$, all 8 time slots have a period of $\approx$ 4.615 $ms$
+\citep{dennis} \citep{0890064717}. By applying this technique each GSM user can send data inside of the assigned time slot
+without disturbing users on different time slots.
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.50]{img/GSMFreqTime.pdf}
+ \caption{Each frequency channel (ARFCN) is split into 8 time slots. With this approach more GSM users can be served at the ``same'' time. Image courtesy of \citep{0890064717}.}
+\label{img:GSMFreqTime}
+\end{figure}
+
+Eight time slots in GSM are called a TDMA frame. Each time slot
+in GSM is known as a physical channel, on the physical channels are built up the logical
+channels. Logical channels have a predefined pattern of time slot they are assigned. Logical channels
+can be divided in two groups, traffic channels (TCH) and signalling/controlling channels (CCH).
+User payload data like speech and message data are transmitted in the TCH channels whereas control data
+for control, synchronization and management of the GSM network are transmitted through the
+CCH channels \citep[Chapter 4]{0470030704}.
+
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.70]{img/GSMHierarchy.pdf}
+ \caption{Hierarchy of the GSM frames. Image courtesy of \citep{0890064717}.}
+\label{img:GSMHierarchy}
+\end{figure}
+
+Every TDMA frame is assigned a unique integer number which is then repeated and reassigned
+every 3h:28m:53s:760ms, also known as \textit{hyperframe} \citep[Chapter 7]{0890064717}. In the hierarchy pyramid,
+a layer lower of the hyperframe is the \textit{superframe}. There are two types of superframes, consisting of two types
+of \textit{multiframes}, differing in their length \citep[Chapter 7]{0890064717}. The relations can be seen in figure
+\ref{img:GSMHierarchy} with their duration periods. The multiframe with 26 TDMA frames carries only traffic channels.
+The other multiframe type, with 51 TDMA frames carries solely signalling data. This hierarchy constrain
+was defined due to internal synchronization of the GSM network and cyphering between the cell phone and the BTS
+\citep[Chapter 7]{0890064717}.
+
+\section{Logical channels and the data channel}
+\label{sec:SDCCHChan}
+In this section more details will be given on logical channels and the procedure to initialize (open) a Standalone Dedicated Control Channel (SDCCH).
+As stated in section \ref{sec:GSMNetStruct}, logical channels can be divided in two groups,
+traffic channels (TCH) and signalling/controlling channels (CCH). The former are employed for transfering payload data like speech and message data
+and the latter for managing and synchronizing the GSM network \citep[Chapter 4]{0470030704}. For the purposes of this thesis,
+the term ``Mobile Station'' (MS) will be used to refer to a cell phone or to designate the user one intends to locate.
+Traffic and signalling channels can be split up by their usage, as given in tables \ref{tbl:tchChannels} and \ref{tbl:cchChannels}.
+
+\begin {table}[hb]
+\caption{Traffic channels on the air interface. Table courtesy of \citep{0890064717}.}
+\label{tbl:tchChannels}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{llll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Channel name & Abbreviation & Function & Direction\\\toprule
+Traffic channel full rate &TCH/F & Full rate traffic transmission & MS$\leftrightarrow$BSS\\\midrule
+Traffic channel half rate&TCH/H& Half rate traffic transmission & MS$\leftrightarrow$BSS
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+\begin {table}[hb!]
+\caption{Control channels on the air interface. Table courtesy of \citep{0890064717}.}
+\label{tbl:cchChannels}\centering
+%\rowcolor{2}{light-gray}{}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{llll}
+\toprule
+%$D$&&$P_u$&$\sigma_N$\\
+Channel name & Abbreviation & Function & Direction\\\toprule
+Frequency correction channel&FCCH &Frequency correction for oscillator on MS & MS$\leftarrow$BSS\\\midrule
+Synchronization channel&SCH&Synchronization information (TDMA frame& MS$\leftarrow$BSS\\
+ &&number to know current location in hyperframe)\\\midrule
+Broadcast common control channel&BCCH&Broadcast information about & MS$\leftarrow$BSS\\
+ &&current BTS and its neighbouring cells\\\midrule
+Access grant channel&AGCH&Required to assign the MS an SDCCH& MS$\leftarrow$BSS\\
+&&or TCH channels\\\midrule
+Paging channel&PCH &Paging request is sent out when MS has& MS$\leftarrow$BSS\\
+ &&incoming traffic (phone call, SMS, etc.)\\\midrule
+Cell broadcast channel&CBCH&Required to broadcast a message to all& MS$\leftarrow$BSS\\
+ &&MS inside of a MSC (e.q. weather forecast)\\\midrule
+Standalone dedicated control channel&SDCCH&Exchange of signalling information between&MS$\leftrightarrow$BSS\\
+ &&MS and BTS when no TCH is active\\\midrule
+Slow associated control channel&SACCH&Transmission of signalling data during an active&MS$\leftrightarrow$BSS\\
+ &&TCH connection (signal strength and sync. data)\\\midrule
+Fast associated control channel&FACCH&Transmission of signalling data during an active&MS$\leftrightarrow$BSS\\
+ &&connection but used only if necessary \\
+ &&(e.q. handover)\\\midrule
+Random access channel&RACH&Request from MS to BTS for a communication& MS$\rightarrow$BSS\\
+ &&channel (e.g. a phone call from MS)
+\\\bottomrule
+\end {tabular}
+\end {table}
+
+The protocol scenario occuring in this work can be seen in figure \ref{img:SDCCHReq} \citep{0470844574}.
+In order for the assistance data to be delivered to the MS, an SDCCH channel has to be initialized.
+This occurs in the following procedure, the BTS where the MS has been lastly active or idle
+broadcast a paging request (PCH channel) to the selected MS. After the MS obtains the paging request, the MS shall
+try to send a random access request (RACH channel) using the Slotted Aloha protocol. Another MS could
+transmit a random access request in the same time slot allowing collisions to occur. In case there was no collision,
+if the BTS successfully received the random access request and at the moment of reception has a free SDCCH channels,
+it will immediatelly reserve an SDCCH channel and send the MS an assignment request (AGCH channel) back.
+After the MS obtains the assignment request, the SDCCH channel is initialized and data can be transferred in both
+directions. In this particular case, in the thesis, assistance data are sent to the MS (BTS$\rightarrow$MS),
+whereas the acknowledgements, errors or the position are delivered to the BTS (BTS$\leftarrow$MS).
+In the case if all SDCCH channels are reserved, the network will queue an SDCCH request for later assignment
+or it may send an assignment reject.
+%Once the SDCCH channel connection has been established, data can be transmitted in both directions.
+While an active SDCCH conection exists, the MS will receive and transmit radio link control
+messages (signal strength and synchronization data) on the SACCH channel \citep{0470844574}.
+
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.50]{img/SDCCHRequest.pdf}
+ \caption{Initializing an SDCCH channel. Image courtesy of \citep{0470844574}.}
+\label{img:SDCCHReq}
+\end{figure}
+
+\section{Positioning techniques in GSM networks}
In this section, the current technologies for estimating the position of a mobile user shall be presented
and their working principle.
When the GSM network was designed, its primary goal was to enable wireless
@@ -62,22 +373,16 @@ distinguish between three different approaches to positioning mobile users, hand
With handset-based techniques, the handset itself tries to estimate its position on its own using the available information.
In the network-based approach, the network makes
all the required measurements and the handset itself is passive. The last, hybrid-based, approach uses
-resources from the handset and network together; both are active participants in the position estimation process.
-For the purposes of this thesis, the term ``Mobile Station'' will be used to designate the user one intends to locate.
+resources from the handset and network together; both are active participants in the position estimation process.
A few different methods, varying by their complexity and precision, shall be presented, in order of their complexity.
\subsection{Cell-ID}
The cell-identification method is the simplest known GSM positioning method \citep[Chapter 8]{0470092319}.
-By knowing the geographical location of the Base Transceiver
-Station (BTS), one can roughly estimate the position of the Mobile Station (MS) \citep[Chapter 4]{0470694513}.
+By knowing the geographical location of the BTS, one can roughly estimate the position of the MS \citep[Chapter 4]{0470694513}.
It is important to build maps where the BTS signal can be received and where the border \textit{handover} points
-are located. Handover is the process of switching from one BTS to another where the signal reception strength
-is higher than on the currently-connected BTS.
-The basic principle is shown in figure \ref{img:cellid}. The BTS are
-divided into geographical regions\footnote{Usually they are represented as hexagons but it could take
-any other geometric shape.} by their signal coverage. The MS is in the region of the currently-connected BTS
-and it could be at any point inside of the hexagon. Every
-BTS has a unique identifier code name and hence can be distinguished from other BTS's.
+are located. The basic principle is shown in figure \ref{img:cellid}. The MS is in the region of the currently-connected BTS
+and it could be at any point inside of the hexagon. Every BTS has a unique identifier code name and hence can be
+distinguished from other BTS's.
\begin{figure}[ht!]
\centering
@@ -86,30 +391,28 @@ BTS has a unique identifier code name and hence can be distinguished from other
\label{img:cellid}
\end{figure}
-Using this method even higher accuracies
-can be achieved than the known shape of signal reception \citep[Chapter 8]{0470092319}, provided that the
-\textit{timing advance} (TA) value is known. The TA is the rough prediction of the \textit{round trip time} (RTT), time
-required for a data packet to be received and acknowledged by the MS. Using this measure a rough circle can be made between
-the BTS and the bordering points of the Cell-ID region since TA multiplied by the speed of light produces the radius distance
-of the circle. To obtain the TA value a connection between the MS and the BTS has to exist or a silent call can be made
-where the GSM subscriber does not even notice that he/she is being called since there is no ringing
-or any other sign that an idle connection is being performed on the MS \citep[Chapter 4]{3GPPTS03.71}.
-If there are more antennas than one, then the MS location can be even more precisely specified.
-This can still be inaccurate, however, because of multipath signal reflections.
-In urban environments it is usually the case that there is no optical line of sight between the BTS and MS,
-so while the signal propagates from the BTS to the MS and vice versa it may be reflected by buildings
-or other objects which add extra propagation time (extra range to the distance). The accuracy of this method is typically
-in a range of 200 m \citep{Zeimpekis}.
+%Using this method even higher accuracies
+%can be achieved than the known shape of signal reception \citep[Chapter 8]{0470092319}, provided that the
+%\textit{timing advance} (TA) value is known. The TA is the rough prediction of the \textit{round trip time} (RTT), time
+%required for a data packet to be received and acknowledged by the MS. Using this measure a rough circle can be made between
+%the BTS and the bordering points of the Cell-ID region.
+%To obtain the TA value a connection between the MS and the BTS has to exist or a silent call can be made
+%where the GSM subscriber does not even notice that he/she is being called since there is no ringing
+%or any other sign that an idle connection is being performed on the MS \citep[Chapter 4]{3GPPTS03.71}.
+%If there are more than one antenna, then the MS location can be even more precisely specified.
+%This can still be inaccurate, however, because of multipath signal reflections.
+%In urban environments it is usually the case that there is no optical line of sight between the BTS and MS,
+%so while the signal propagates from the BTS to the MS and vice versa it may be reflected by buildings
+%or other objects which add extra propagation time (extra range to the distance).
+The accuracy of this method is typically in a range of 200 m \citep{Zeimpekis}.
This method can be seen both as a handset- and network-based position
estimation technique, due to the fact that the user may run his/her own application on the cell phone or it can be applied by
the network operator himself. This estimation technique does not require the MS to be a smart phone; it works with
any type of cell phone.
\subsection{Received Signal Strength}
-The Received Signal Strength (RSS) position estimation technique, as the name states,
-uses the signal strength measurement reports to localize the MS. RSS measurement
-reports in GSM networks are transmitted from the MS to the BTS and they
-are used to determine if the handover process should be triggered or not \citep{Richard2011Master}.
+The RSS position estimation technique, as the name states,
+uses the signal strength measurement reports to localize the MS.
\begin{figure}[ht!]
\centering
@@ -180,41 +483,6 @@ an error of around 300 m. The advantage of UL-TDOA over E-OTD lies in the fact t
have to be made to the cell phone and this technique works on every cell phone. UL-TDOA is a network-based position
estimation technique.
-\subsection{Assisted-GPS}
-Another positioning technique is Assisted-GPS (AGPS). It has recently gained popularity
-because of the great number of smart phones with an embedded AGPS receiver and the introduction
-of 3G/4G networks. These networks are clock-synchronized since
-high-bandwidth wireless services require synchronous working operation \citep{oscilloquartz} \citep{3gNetworkSpeed}.
-AGPS receivers can decrease the waiting time required to estimate the position if the
-``exact'' time is known \citep[Chapter 4]{diggelen2009a-gps}.
-It works by exploiting the existing
-navigation satellite network.
-In the event where mobile users are in urban environments, the GPS satellite signals are blocked
-by the buildings. Further analyses showed that the received signals arrive at the cell phone
-with errors because of multiple propagation reflection and are often hardly
-distinguishable from noise \citep[Chapter 2]{diggelen2009a-gps}.
-The power of received signals on a GPS receiver is in the range
-of 100 attowatts\footnote{1 attowatt = $10^{-16} W$.
-The reception quality depends on the receiver's antenna and RF front-end design as well.}
-when the GPS receiver is outdoors.
-The signal strength becomes even smaller by a factor of 10-1000 if the user is
-between tall buildings or indoors \citep[Chapter 2]{diggelen2009a-gps}. All these factors
-affect the acquisition of GPS signals and make the correct reception of GPS signals unrealisable
-and impractical.
-Instead of searching manually for the GPS satellites and waiting
-for the orbiting parameters to arrive from the satellites, which are required to estimate the
-position, information about the orbiting GPS satellites is transmitted over an existing GSM
-network infrastructure. This provides the AGPS receiver additional data to track weak signals.
-The theoretical foundation of how GPS and AGPS receivers estimate the position is addressed
-in more detail in chapter \ref{gpsTheoryChatper}.
-This method does not work on every cell phone as do the aforementioned methods.
-It requires the cell phones to be equiped with an AGPS receiver.
-From this point on, cell phones with an AGPS receiver shall be refered to as smart phones
-since they have another potential use aside from the default communication application. The AGPS
-position estimation technique is a hybrid-based technique because the position is estimated
-with the help of the handset, that estimates the position, and the network provider since
-it delivers the required data for faster acquisition time.
-
\subsection{Other techniques}
The previously-mentioned localization techniques are not the only existing methods but are the standardized ones.
In this section, two more techniques shall be briefly described: Angle-of-Arrival and Google Maps' WiFi tagging.
@@ -254,89 +522,74 @@ ranges of 801.11 b/g wireless networks are not more than 30-150 m, though the ne
A simple overview of all the discussed techniques is given in
table \ref{tbl:overviewLoc}.
-\begin {table}[tp!]
+\begin {table}[h]
\caption{Overview of the localization techniques.}
\label{tbl:overviewLoc}\centering
%\rowcolor{2}{light-gray}{}
-\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
+\scriptsize\fontfamily{iwona}\selectfont
+\begin{tabular}{lllll}
\toprule
%$D$&&$P_u$&$\sigma_N$\\
Method&Sync.&Advantage\&Disadvantage&Accuracy&Type\\\toprule
-\rowcolor{light-gray}Cell-ID& No& Works on any cell phone,& Anywhere in cell& Network\\
-\rowcolor{light-gray} & &Imprecise&&\\%\midrule
-Cell-ID + TA& No& Works on any cell phone,& Anywhere in cell& Network\\
- & &Imprecise but better& but with a radius\\
- & &than Cell-ID alone&\\%\midrule
-\rowcolor{light-gray}RSS & No& Works on any cell phone,& $\approx 300$ m& Network\\
-\rowcolor{light-gray} & &Depends on cell phone&&\\
-\rowcolor{light-gray} & &model and environment&&\\ %\midrule
+Cell-ID& No& Works on any cell phone;& Anywhere in cell& Network\\
+ & &Imprecise&&\\%\midrule
+RSS & No& Works on any cell phone;& $\approx 300$ m& Network\\
+ & &Depends on cell phone&&\\
+ & &model and environment&&\\ \midrule
E-OTD &Yes& Works on most new& $\approx 50-200$ m& Handset\\
- & &cell phone models,&\\
- & &Expensive because LMU&\\ %\midrule
-\rowcolor{light-gray}UL-TDOA&Yes&Works on any cell phone& $\approx 50-300$ m& Network\\
-\rowcolor{light-gray} & &Expensive because LMU&&\\ %\midrule
+ & &cell phone models;&\\
+ & &Expensive because LMU&\\ \midrule
+UL-TDOA&Yes&Works on any cell phone& $\approx 50-300$ m& Network\\
+ & &Expensive because LMU&&\\ \midrule
AGPS&Yes/No&Works on some cell& $\approx 5-20$ m& Hybrid\\
& &phones with AGPS&\\
- & &receivers, Very precise&\\ %\midrule
-\rowcolor{light-gray}AOA &Yes&Works on any cell phone,& Depends if MS is& Network\\
-\rowcolor{light-gray} & &Expensive because LMU&in line of sight&\\%\midrule
+ & &receivers, Very precise&\\ \midrule
+AOA &Yes&Works on any cell phone;& Depends if MS is& Network\\
+ & &Expensive because LMU&in line of sight&\\\midrule
Google maps&No&Requires a smart phone&$\approx 5-30$ m& Handset\\
with WiFi& &with Google maps and& &with aid\\
- & &Wireless 801.11 b/g/n,& &of\\
+ & &Wireless 801.11 b/g/n;& &of\\
& &Does not work outside & &Network\\
& &of cities or missing \&& \\
& &unknown WiFi signal&\\\bottomrule
\end {tabular}
\end {table}
-\clearpage
-\section{Goals of the thesis}
-In this thesis the author shall provide theoretical and practical
-background knowledge required for building a localization system of mobile users
-inside of a 2G GSM network by taking the advantage of AGPS receivers inside of smart phones.
-In the lab a 2G GSM network environment will be set up similar to the real network
-provided by big telecommunication providers.
-
-The AGPS method is prefered over other methods because the position estimation is sufficiently
-precise and accurate compared to other methods. Further advantage over other positioning
-techniques is that smart phones with an AGPS receiver represent slightly less than 50\% of the
-total cell phone market in the most solvent EU economies and the US \citep{smartPhoneUsage}.
-The functional aspects and abuse risks of AGPS receivers in smart phones are relatively unknown,
-no relevant studies have been found and thus will be further analysed in this work.
-A certain privacy risk exists that it is possible to obtain the position of a mobile user
-without its knowledge of being surveillanced. This work may be seen as a scenario what
-kind of information can be gained by a third persons having access to the GSM network.
-This thesis may be perceived as pioneer work in the field of localizing mobile users by
-taking advantage of AGPS receivers in smart phones.
-
-The thesis is divided into three parts. The first is a theoretical introduction to GSM and GPS systems as well as
-the protocol required for the positioning of mobile users. The second part provides more details on
-the software implementation and the hardware used in this work. The last section is a discussion
-of the achieved results in the test environment and the author's conclusions.
-
-Chapters 2 and 3 will provide a theoretical introduction of GPS and AGPS receivers
-as well as of the GSM operational principles for understanding the basic functioning principles of the
-entire positioning system. The theoretical concepts of GPS receivers
-will be analysed and discussed in depth
-since they provide evidence for the advantages and limitations
-of this method. These two chapters will provide an explanation for the achieved
-and observed results in this thesis. Once the GPS and GSM working principles have
-been explained, the author shall proceed with introducing the reader to the
-Radio Resource Location Protocol (RRLP), responsible for transmission of
-assistance data and obtaining the position of the mobile user. More
-details on RRLP will be provided in chapter 4.
-
-In chapter 5, the reader will be introduced to the software
-development and implementation process. More details on the hardware connections and set up
-shall be provided in chapter 6.
-
-In chapter 7 test results and the test environment will be presented.
-Chapter 8 will provide a summary of the entire system.
+\subsection{Assisted-GPS}
+Another positioning technique is Assisted-GPS (AGPS). It has recently gained popularity
+because of the great number of smart phones with an embedded AGPS receiver and the introduction
+of 3G/4G networks. These networks are clock-synchronized since
+high-bandwidth wireless services require synchronous working operation \citep{oscilloquartz} \citep{3gNetworkSpeed}.
+AGPS receivers can decrease the waiting time required to estimate the position if the
+``exact'' time is known \citep[Chapter 4]{diggelen2009a-gps}.
+It works by exploiting the existing
+navigation satellite network.
+In the event where mobile users are in urban environments, the GPS satellite signals are blocked
+by the buildings. Further analyses showed that the received signals arrive at the cell phone
+with errors because of multiple propagation reflection and are often hardly
+distinguishable from noise \citep[Chapter 2]{diggelen2009a-gps}.
+The power of received signals on a GPS receiver is in the range
+of 100 attowatts\footnote{1 attowatt = $10^{-16} W$.
+The reception quality depends on the receiver's antenna and RF front-end design as well.}
+when the GPS receiver is outdoors.
+The signal strength becomes even smaller by a factor of 10-1000 if the user is
+between tall buildings or indoors \citep[Chapter 2]{diggelen2009a-gps}. All these factors
+affect the acquisition of GPS signals and make the correct reception of GPS signals unrealisable
+and impractical.
+Instead of searching manually for the GPS satellites and waiting
+for the orbiting parameters to arrive from the satellites, which are required to estimate the
+position, information about the orbiting GPS satellites is transmitted over an existing GSM
+network infrastructure. This provides the AGPS receiver additional data to track weak signals.
+The theoretical foundation of how GPS and AGPS receivers estimate the position is addressed
+in more detail in chapter \ref{gpsTheoryChatper}.
+This method does not work on every cell phone as do the aforementioned methods.
+It requires the cell phones to be equiped with an AGPS receiver.
+From this point on, cell phones with an AGPS receiver shall be refered to as smart phones
+since they have another potential use aside from the default communication application. The AGPS
+position estimation technique is a hybrid-based technique because the position is estimated
+with the help of the handset, that estimates the position, and the network provider since
+it delivers the required data for faster acquisition time.
-The appendix contains details for configuring the entire system and for obtaining the same results.
-This thesis includes a USB stick with the source code developed
-during the work on this thesis.
\setchapterpreamble[u]{%
@@ -383,7 +636,7 @@ In the next sections this general idea shall be developed in more details,
in an step by step approach, and the ideas shall be verified using the appropriate mathematical
models.
-\clearpage
+
\section{GPS data and signal modulation}
\label{sec:gpsDataAndSignal}
The aim of this section is to give the reader an overview of the transmitted GPS data and
@@ -537,7 +790,7 @@ correct time and position.
-\newpage
+
\section{GPS signal acquisition and demodulation}
\label{sec:SigDemod}
GPS satellites\footnote{Ssatellites are named as space vehicles
@@ -777,7 +1030,7 @@ in figure \ref{img:multCAPhase}.
\end{figure}
-\newpage
+
\subsection{C/A wave demodulation}
\label{sec:CAdemod}
As a result of the previous step, one can continue with
@@ -1028,7 +1281,7 @@ the search first is known this time \citep[Chapter 3]{diggelen2009a-gps}.
Hot start works in the same manner, only the ephemeris data and time data are precisely
known (time ought to be known in accuracy of submilliseconds).
-\newpage
+
\section{Distance and position estimation}
\label{sec:distanceAndPosition}
In this section the focus is set on distance and position estimation inside of the GPS receiver.
@@ -1312,8 +1565,8 @@ measurements \citep{pseudorangeError} \citep[Chapter 7]{understandGPS}.
-\newpage
-\section{Assisted GPS in Wireless networks}
+
+\section{Assisted GPS in wireless networks}
\label{sec:agps}
In the following paragraphs Assisted GPS (AGPS) shall be presented and how it works.
AGPS receivers work on the equivalent idea as warm/hot start on GPS receivers.
@@ -1372,269 +1625,14 @@ it takes more time to obtain (decode) assistance data from the satellite message
Numerous AGPS algorithms exist, some do not require the exact time component and navigation data to
be present in the assistance data \citep{998892}.
-\section{Error estimation}
-
-
-
-
-
-
-
-
-
-
-
-\chapter{GSM}
-In the past two decades we have been witness to an increasing development of wireless communication technologies,
-one of the most rapidly developing fields of engineering. Global System for Mobile Communications\footnote{First
-time when the standard was developed, GSM meant \textit{Groupe Spéciale Mobile} \citep{0890064717}} (GSM) networks
-played a major role in wide-spreading wireless voice services in every corner of the planet \citep{gsmConnection}. According
-to the GSM Association (GSMA) in 2011 there have been 6 billion registered wireless connections world wide \citep{gsmConnection}. In
-this chapter more details shall be given on the second generation GSM network which was employed in this work for
-delivering GPS assistance data to cell phones. More information shall be provided on the general working principles of GSM
-and how a Standalone Dedicated Control Channel (SDCCH) is initialized to deliver data to cell phones.
-\newpage
-\section{Overview of the Air interface}
-In this section the reader shall be provided with principles how the GSM network operates.
-The main task of GSM networks was to enable wireless voice transmission between GSM and other GSM/telephone users
-inside of switched networks. It was not designed to be used with data services which are a necessity in today's standards.
-GSM networks are worldwide spread and work on different frequency spectrums depending on the country where
-the networks are employed. The reason why different frequencies are used is because of intereference with different
-wireless systems and used telecommunication standards. Particularly in Germany, the Federal Network Agency (German: $Bundesnetzagentur$) is the
-responsible organisation for assigning different frequencies to GSM operators since these frequencies belong
-to the group of licensed frequencies and are not allowed to be used by everyone. In Germany the used frequency bands
-are GSM900, EGSM900 and GSM1800, their frequency ranges can be seen in table \ref{tbl:GSMfreqs} \citep{konrad}.
-These frequency bands are divided into 200 KHz channels,
-for a frequency band range of 25/35 MHz there are 124/175 operating
-channels. This technique is called Frequency Division Multiple Access (FDMA) and
-supports using parallely more frequency channels inside of the same covered area with GSM RF signal.
-FDMA is employed when the frequency bandwidth is limited like in the GSM networks. By utilising FDMA the network throughput
-is used more efficiently since different users can send or receive information at different
-frequency slots instead of waiting for their turn.
-These frequency channels have a unique identifier number. They are named as Absolute Radio Frequency
-Channel Numbers (ARFCN). The basic idea of FDMA inside of the frequency spectrum GSM900 for GSM can be
-seen in figure \ref{img:GSMFreqRangChannel}, ARFCN numbers are assigned according to the
-frequencies which are employed.
-It is important to distinguish uplink and downlink frequencies.
-Uplink frequency is used when the cell phone transmits data
-to the network operator, whereas downlink from the network operator to the cell phone. GSM is a full duplex communication
-system, at the same time the cell phone or the network operator can send and receive data.
-Although the equivalent ARFCN number is used for uplink and downlink, the frequencies are shifted 45 MHz in EGSM900/GSM900 and
-95 MHz in GSM1800 as it can be seen in figure \ref{img:GSMFreqRangChannel} for GSM900.
-\begin {table}[hb]
-\caption{GSM operating frequencies in Germany}
-\label{tbl:GSMfreqs}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{ccccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Frequency band&Uplink frequency (MHz)&Downlink frequency (MHz)& Channel number\\\toprule
-GSM900&890 - 915&935 - 960& 1 - 124\\\midrule
-EGSM900&880 - 915&925 - 960&0, 1 - 124, 975 - 1023\\\midrule
-GSM1800&1710 - 1785&1805 - 1880& 512 - 885\\\bottomrule
-\end {tabular}
-\end {table}
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.50]{img/GSMUpDownFreq.pdf}
- \caption{Frequency ranges of uplink and downlink channels in the GSM900 band. Each box represents a frequency band (channel).
- Image courtesy of \citep{konrad} and \citep{dennis}.}
-\label{img:GSMFreqRangChannel}
-\end{figure}
-\par Aside from using different frequency channels, each frequency channel is split up into eight time slots.
-This technique of dividing a frequency into time slots is named Time Division Multiple Access (TDMA).
-TDMA allows several users to share the same frequency
-channel but in different time slots. Using this technique the voice throughput is better utilised and a broader amount
-of users can be served at the ``same'' time, i.e. the capacity of parallely speaking GSM users is increased.
-TDMA was employed because the voice could be compressed with Linear Predictive Coding (LPC) without the human
-noting a difference in the call quality \citep{0824740408}. By taking advantage of LPC, instead of the 64 kbps required for transmission of voice
-it was possible to compress the voice without losing much of the call quality into 8 kbps for half rate and 16 kbps for
-full rate\footnote{Human speech has a frequency bandwidth between 0 and 4000 Hz \citep{humanFreq}.
-Human voice is by its nature analog and requires to be converted into a digital stream of ones and zeros.
-By Nyquist-Shannon sampling theorem the sampling frequency must be at least two times greater
-than the sampled frequency and with an 8 bit Analog to Digital Converter (ADC) this defines the
-64 kbps required to transfer voice ($2\cdot4000 Hz\cdot8 = 64000$).}. Since new wireless services are
-data oriented and the networks become packet networks this type of modulating data had to be changed,
-3G and 4G networks use different frequency ranges and technique to modulate and demodulate data.
-
-TDMA applied on the FDMA technique constrains the GSM air interface to be of
-2D structure. The idea of employing TDMA on FDMA in the GSM900 band can be seen in figure \ref{img:GSMFreqTime}.
-Each time slot duration is $\approx$577 $\mu s$, all 8 time slots have a period of $\approx$ 4.615 $ms$
-\citep{dennis} \citep{0890064717}. By applying this technique each GSM user can send data inside of the assigned time slot
-without disturbing users on different time slots.
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.50]{img/GSMFreqTime.pdf}
- \caption{Each frequency channel is split into 8 time slots. More GSM users can be served at the ``same'' time. Image courtesy of \citep{0890064717}.}
-\label{img:GSMFreqTime}
-\end{figure}
-Eight time slots in GSM are called a TDMA frame. Each time slot
-in GSM is known as a physical channel, on the physical channels are built up the logical
-channels. Logical channels have a predefined pattern of time slot they are assigned. Logical channels
-can be divided in two groups, traffic channels (TCH) and signalling channels (SCH).
-User payload data like speech and message data are transmitted in the TCH channels whereas control data
-for control, synchronization and management of the GSM network are transmitted through the
-SCH channels \citep[Chapter 4]{0470030704}.
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.70]{img/GSMHierarchy.pdf}
- \caption{Hierarchy of the GSM frames. Image courtesy of \citep{0890064717}.}
-\label{img:GSMHierarchy}
-\end{figure}
-Every TDMA frame is assigned a unique integer number which is then repeated and reassigned
-every 3h:28m:53s:760ms, also known as \textit{hyperframe} \citep[Chapter 7]{0890064717}. In the hierarchy pyramid,
-a layer lower of the hyperframe is the \textit{superframe}. There are two types of superframes, consisting of two types
-of \textit{multiframes}, differing in their length \citep[Chapter 7]{0890064717}. The relations can be seen in figure
-\ref{img:GSMHierarchy} with their duration periods. The multiframe with 26 TDMA frames carries only traffic channels and associated
-control channels. The other multiframe type, with 51 TDMA frames carries solely signalling data. This hierarchy constrain
-was defined due to internal synchronization of the GSM network and cyphering between the MS and the Base Transceiver Station (BTS)
-\citep[Chapter 7]{0890064717}.
-\newpage
-\section{GSM Network structure}
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.50]{img/GSMBig.pdf}
- \caption{Basic GSM network block diagram. Image courtesy of \citep{konrad} and \citep{dennis}.}
-\label{img:GSMBig}
-\end{figure}
-\label{sec:GSMNetStruct}
-BTS is the first hardware unit the cell phone is communicating with over the air interface
-and provides a ``physical'' connection with the cell phone \citep[Chapter 3]{0890064717}. This physical connection between the
-BTS and the cell phone is the \textit{$U_m$ interface}, as shown in figure \ref{img:GSMBig}. A BTS can serve up
-to seven users on one frequency in full duplex mode since one out of eight time slot is used for broadcasting of signalling and system information,
-transmitted in the broadcast control channel (BCCH). By sectorizing BTSs with different frequencies the number of seven mobile users
-can be increased. BTS consists of a RF tranceiver, internal clock and modulator/demodulator. The function of the RF transceiver is
-to enable the reception and transmission on the uplink and downlink channel for the cell frequency where the
-BTS is located\footnote{Cell is the area covered with GSM signal and from which a cell phone can communicate with a BTS.}.
-The main function of the internal clock is to supply the BTS with a frequency such that the internal
-circuits can produce the TDMA frames. The internal clock has to be sufficiently accure for the GSM network to work,
-an accuracy of at least $\pm$5 ppm (parts per million) \citep{dennis}. If the GSM network is synchronized,
-this internal clock is not employed but an external clock generator signal from an atomic clock,
-this is required for some of the position localization techniques, as described in section \ref{LMUSync}.
-Modulator/demodulator main function is the modulation and demodulation of the received and transmitted signals.
-The transmission from the cell phone to the BTS is shifted for 3 time slots compared to the reception
-of the signal from the BTS\footnote{Timing advance factor is added to the three time slots.}
-\citep[Chapter 7]{0890064717} \citep{konrad} \citep[Chapter 4]{0470742984}.
-One or more BTSs are connected to the Base Station Controller (BSC). The main task of the BSC is to control the radio
-resources of the connected BTSs such as assigning radio channels to different BTS, frequency hopping in case of an handover
-and controlling the power levels within channel \citep[Chapter 4]{0470742984} \citep{konrad} \citep[Chapter 3]{0890064717}.
-BSC is connected to the Transcoding Rate and Adaptation Unit (TRAU). This builds the Base Station Subsystem (BSS), as it can
-be seen in figure \ref{img:GSMBig}, on left side inside of the gray dashed line rectangle. Inside of the BSS, TRAU
-is responsibe for compressing and decompressing speech between the cell phone and a speech signal from the other side,
-from 64 kbps to 16 or 8 kbps depending if it is a full or half rate channel.
-The next subsystem block is the Network Switching Subsystem (NSS), as it can be seen on figure \ref{img:GSMBig}, on right
-side inside of the gray dashed line rectangle. The main task of NSS is to connect the GSM with other telephony networks
-(GSM networks from other providers or the Public Switched Telephone Network) \citep[Chapter 4]{0470742984}. It consists of
-Mobile Switching Center (MSC), Gateway Mobile Switching Center (GMSC) and databases.
-MSC's main function is to route incoming and outgoing calls between the moving mobile users,
-``the assignment of user channels toward the BSS'' \citep[Chapter 4]{0890064717} \citep{konrad}. GMSC is
-a type of MSC for external networks, GSM networks from other providers or telephone networks are
-routed through the GMSC\citep[Chapter 4]{0890064717}.
-
-There are four databases: Home Location Register (HLR), Visitor Location Register (VLR), Authentication Center (AUC)
-and Equipment Identity Register (EIR). HLR database stores data about the GSM subscribers of a network provider. The data that
-can be found in HLR: the unique International Mobile Subscriber Identity (IMSI) - that is stored on the SIM card of a mobile user;
-usage statistics; subscriber's number (MSISDN) and the current location of the mobile user acquired by knowing the location
-of the BSC controlling the BTS that provides at the current moment the GSM air interface to the mobile user \citep{konrad}.
-VLR serves as a temporary data storage of important parts of HLR data (not all data known for the particular user)
-of all the visiting mobile subscribers served by the current MSC. i.e. if a MS from its home MSC enters an area covered
-by the newly entered MSC, its VLR will request some of the HLR data from the HLR database of the MSC where
-the MS is registered \citep{dennis} \citep[Chapter 4]{0470742984}. AUC contains confidential keys for each mobile subscriber
-required for encrypting the data before they are transmitted to the MS from the BTS \citep[Chapter 3]{0470030704}.
-The keys located in AUC are also required for the MS to register
-in the network \citep{konrad}. EIR is an optional database but contains data about approved types of
-mobile equipment (not stolen cell phones), black listed cell phones (they are identified by their International
-Mobile Equipment Identity number which is unique for every manufactured cell phone) and cell phones which
-ought to be tracked if they register \citep[Chapter 4]{0890064717}.
-
-
-\newpage
-\section{Logical channels and the SDCCH channel}
-\label{sec:SDCCHChan}
-In this section more details will be given on logical channels and the procedure to initialize (open) an SDCCH channel (Standalone
-Dedicated Control Channel). As stated in section \ref{sec:GSMNetStruct}, logical channels can be divided in two groups,
-traffic channels (TCH) and signalling channels (SCH). The former are employed for transfering payload data like speech and message data
-and the latter for managing and synchronizing the GSM network \citep[Chapter 4]{0470030704}.
-Traffic and signalling channels can be split up by their usage, as given in tables \ref{tbl:tchChannels} and \ref{tbl:cchChannels}.
-
-\begin {table}[hb]
-\caption{Traffic channels on the Air interface. Table courtesy of \citep{0890064717}.}
-\label{tbl:tchChannels}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Channel name & Abbreviation & Function & Direction\\\toprule
-Traffic channel full rate &TCH/F & Full rate traffic transmission & MS$\leftrightarrow$BSS\\\midrule
-Traffic channel half rate&TCH/H& Half rate traffic transmission & MS$\leftrightarrow$BSS
-\\\bottomrule
-\end {tabular}
-\end {table}
-
-\begin {table}[hb]
-\caption{Control channels on the Air interface. Table courtesy of \citep{0890064717}.}
-\label{tbl:cchChannels}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Channel name & Abbreviation & Function & Direction\\\toprule
-Frequency correction channel&FCCH &Frequency correction for oscillator on MS & MS$\leftarrow$BSS\\\midrule
-Synchronization channel&SCH&Synchronization information (TDMA frame& MS$\leftarrow$BSS\\
- &&number to know current location in hyperframe)\\\midrule
-Broadcast common control channel&BCCH&Broadcast information about & MS$\leftarrow$BSS\\
- &&current BTS and its neighbouring cells\\\midrule
-Access grant channel&AGCH&Required to assign the MS an SDCCH& MS$\leftarrow$BSS\\
-&&or TCH channels\\\midrule
-Paging channel&PCH &Paging request is sent out when MS has& MS$\leftarrow$BSS\\
- &&incoming traffic (phone call, SMS, etc.)\\\midrule
-Cell broadcast channel&CBCH&Required to broadcast a message to all& MS$\leftarrow$BSS\\
- &&MS inside of a MSC (e.q. weather forecast)\\\midrule
-Standalone dedicated control channel&SDCCH&Exchange of signalling information between&MS$\leftrightarrow$BSS\\
- &&MS and BTS when no TCH is active\\\midrule
-Slow associated control channel&SACCH&Transmission of signalling data during an active&MS$\leftrightarrow$BSS\\
- &&TCH connection (signal strength and sync. data)\\\midrule
-Fast associated control channel&FACCH&Transmission of signalling data during an active&MS$\leftrightarrow$BSS\\
- &&connection but used only if necessary \\
- &&(e.q. handover)\\\midrule
-Random access channel&RACH&Request from MS to BTS for a communication& MS$\rightarrow$BSS\\
- &&channel (e.g. a phone call from MS)
-\\\bottomrule
-\end {tabular}
-\end {table}
-
-The protocol scenario occuring in this work can be seen in figure \ref{img:SDCCHReq} \citep{0470844574}.
-In order for the assistance data to be delivered to the MS, an SDCCH channel has to be initialized.
-This occurs in the following procedure, the BTS where the MS has been lastly active or idle
-broadcast a paging request (PCH channel) to the selected MS. After the MS obtains the paging request, the MS shall
-try to send a random access request (RACH channel) using the Slotted Aloha protocol. Another MS could
-transmit a random access request in the same time slot allowing collisions to occur. In case there was no collision,
-if the BTS successfully received the random access request and at the moment of reception has a free SDCCH channels,
-it will immediatelly reserve an SDCCH channel and send the MS an assignment request (AGCH channel) back.
-After the MS obtains the assignment request, the SDCCH channel is initialized and data can be transferred in both
-directions, in this case assistance data to the MS and acknowledgements, errors or the position from the MS back
-to the BTS. In the case if all SDCCH channels are reserved, the network will queue an SDCCH request for later assignment
-or it may send an assignment reject. While the SDCCH channel connection has been established assistance data can be
-transmitted to the MS. While an active SDCCH conecction exists, the MS will receive and transmit
-radio link control messages (signal strength and synchronization data) on the SACCH channel \citep{0470844574}.
-
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.50]{img/SDCCHRequest.pdf}
- \caption{Initializing an successful SDCCH channel. Image courtesy of \citep{0470844574}.}
-\label{img:SDCCHReq}
-\end{figure}
@@ -1663,7 +1661,7 @@ position estimation from the derived data in the previous stage. In this chapter
the description shall be given on how to make an RRLP request, how to send assistance
data and then more information shall be given on its response.
-\newpage
+
\section{RRLP Request}
In this section the RRLP protocol and its request shall be reviewed in more detail.
RRLP represents the connection/protocol between the Serving Mobile Location Center (SMLC)
@@ -1932,7 +1930,7 @@ folowing section \ref{sec:rrlpassistance} more details of how assistance data ar
\begin{figure}[ht!]
\centering
\includegraphics[scale=0.80]{img/RRLPReqExplained.pdf}
- \caption{An example RRLP request. Constructing a binary RRLP request in PER from ASN.1. Yellow zero bits
+ \caption{An example RRLP request. Constructing a binary RRLP request in PER from ASN.1. Violet zero bits
are extension markers or spare bits. Image courtesy of \citep{harper2010server-side}.}
\label{img:RRLPReqExplained}
\end{figure}
@@ -1971,7 +1969,7 @@ F8 1.......
\end{lstlisting}
-\newpage
+
\section{RRLP Assistance data}
\label{sec:rrlpassistance}
Assistance data are of the most important value when it comes to RRLP response time.
@@ -2100,13 +2098,10 @@ Longitude is encoded as second compliment binary number \citep{3gppequations}.
\caption{World Geodetic System 1984. Image courtesy of \citep{harper2010server-side}.}
\label{img:earthElipsoid}
\end{figure}
-The altitude is encoded as it is where one bit increments represent one meter incerements.
-The uncertainties for latitude, longitude and altitude are encoded using the equation
-given in \eqref{eq:uncerAltitudeStand}, where $r$ is the uncertainty in meters for
-latitude and longitude, and $h$ is the uncertainty in meters for altitude of the BTS.
-Both values, $U_L$ and $U_A$, are 7 bit numbers in the range between 0 and 127.
-Orientation of major axis is not used in this work so it was set to zero.
-Confidence describes the level by which the sent BTS reference position is
+The altitude is encoded as it is where one bit increments represent one meter increments.
+The uncertainties for latitude, longitude and altitude were not used since it did not affect
+the position estimation process. Orientation of major axis is not used in this work so it
+was set to zero. Confidence describes the level by which the sent BTS reference position is
known to be correct. The confidence is a 7 bit number but ought to take values
between 0 and 100 since it represents the percentage. In this work it was set
to zero, i.e. no information is available about the confidence for our reference
@@ -2150,154 +2145,6 @@ In the next section more details shall be given on the RRLP response from the MS
\end{array}
\end{equation}
-\begin{equation}
-\label{eq:uncerAltitudeStand}
-\begin{array}{l}
-\begin{split}
- U_L=\bigg\lceil\frac{ln(\frac{r}{10}+1)}{ln(1.1)}\bigg\rceil \bigg| U_A \in [0,127]
- \end{split}
-\quad\Longleftarrow\quad
- \begin{split}
- \mbox{Uncertainty for latitude and longitude}
- \end{split}\\
- \\
-\begin{split}
- U_A=\bigg\lceil\frac{ln(\frac{h}{45}+1)}{ln(1.025)}\bigg\rceil \bigg| U_A \in [0,127]
- \end{split}
-\quad\Longleftarrow\quad
- \begin{split}
- \mbox{Uncertainty for altitude}
- \end{split}
-\end{array}
-\end{equation}
-
-\begin {table}[hb]
-\caption{GPS UTC Model content. Table courtesy of \citep{harper2010server-side}.}
-\label{tbl:utcModel}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Field (IE) & Description\\\toprule
-$A_{1}$&Drift coefficient of GPS time scale relative\\
-&to UTC time scale\\\midrule
-$A_{0}$&Bias coefficient of GPS time scale relative\\
-&to UTC time scale\\\midrule
-$t_{ot}$&Time data reference time of week\\\midrule
-$\Delta t_{LS}$&Current or past leap second count\\\midrule
-$WN_{0}$&Time data reference week number\\\midrule
-$WN_{LSF}$&Leap second reference week number\\\midrule
-$DN$&Leap second reference day number\\\midrule
-$\Delta t_{LSF}$&Current of future leap second count
-\\\bottomrule
-\end {tabular}
-\end {table}
-
-\begin {table}[ht!]
-\caption{Navigation message (ephemeris) content. Table courtesy of \citep{harper2010server-side}.}
-\label{tbl:navMessage}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Field (IE) & Description\\\toprule
-Satellite ID&This is the satellite ID that is in the range of 0 to 63. PRN=SatelliteID + 1\\\midrule
-Satellite status&This is an indicator of whether this is a new or existing satellite and whether\\
-&the navigation model is new or the same.\\\midrule
-C/A or P on L2&Code(s) on L2 channel\\\midrule
-URA Index&User range accuracy\\\midrule
-SV Health&Satellite health\\\midrule
-IODC&Issue of data, clock\\\midrule
-L2 P Data flag& \\\midrule
-SF 1 Reserved& \\\midrule
-$T_{GD}$&Estimated group delay differential\\\midrule
-$t_{oc}$&Apparent clock correction\\\midrule
-$a_{f2}$&Apparent clock correction\\\midrule
-$a_{f1}$&Apparent clock correction\\\midrule
-$a_{f0}$&Apparent clock correction\\\midrule
-$C_{rs}$&Ampltitude of the sine harmonic correction term to the orbit radius (meters)\\\midrule
-$\Delta n$&Mean motion difference from computed value (semicircles/second)\\\midrule
-$M_{0}$&Mean anomaly at reference time (semicircles)\\\midrule
-$C_{uc}$&Ampltitude of the cosine harmonic correction term to the\\
-&argument of latitude (radians)\\\midrule
-$e$&Eccentricity\\\midrule
-$C_{us}$&Amplitude of the sine harmonic correction term to the argument of latitude\\
-&(radians)\\\midrule
-$A^{1/2}$&Square root of semi-major axis (meters)\\\midrule
-$t_{oe}$&Reference time ephemeris\\\midrule
-Fit Interval Flag&\\\midrule
-AODO&Age of data offset\\\midrule
-$C_{ic}$&Amplitude of the cosine harmonic correction term to the angle of inclination\\
-&(radians)\\\midrule
-$\Omega_0$&Longitude of ascending node of orbit plane at weekly epoch (semicircles)\\\midrule
-$C_{is}$&Amplitude of the cosine harmonic correction term to the angle of inclination\\
-&(radians)\\\midrule
-$i_{0}$&Inclination angle at reference time (semicircles)\\\midrule
-$C_{rc}$&Amplitude of the cosine harmonic correction term to the orbit radius (meters)\\\midrule
-$\omega$&Argument of perigee (semicircles)\\\midrule
-OMEGAdot&Rate of right ascension (semicircles/second)\\\midrule
-Idot&Rate of inclination angle (semicircles/second)
-\\\bottomrule
-\end {tabular}
-\end {table}
-
-\begin {table}[hb]
-\caption{Almanac message content. Table courtesy of \citep{harper2010server-side}.}
-\label{tbl:almanacMessage}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Field (IE) & Description\\\toprule
-SatelliteID&This is the satellite ID that is in the range of 0 to 63. PRN=SatelliteID + 1\\\midrule
-SV Health&Satellite health (e.q. 000 means the satellite is fully operational)\\\midrule
-$e$&``Eccentricity shows the amount of the orbit deviation from circular (orbit).\\
-&It is the distance between the foci divided by the length of the semi-major axis'' \citep{ubxGPSDict}\\\midrule
-TOA&Time of applicability, reference time for orbit and clock parameters (seconds).\\
-&``The number of seconds in the orbit when the almanac data were generated'' \citep{ubxGPSDict}\\\midrule
-OI&Orbital inclination (radians). The angle to which the SV orbit meets\\
-&the equator \citep{ubxGPSDict}\\\midrule
-RORA&Rate or right ascension (radians/second). ``Rate of change of the angle of right ascension\\
-&as defined in the Right Ascension mnemonic'' \citep{ubxGPSDict}\\\midrule
-$A^{1/2}$& Square root of semi-major axis (meters$^{1/2}$). `` This is defined as the measurement\\
-&from the center of the orbit to either the point of apogee or the point of perigee'' \citep{ubxGPSDict}\\\midrule
-$\Omega_0$& Right Ascension at Week (radians). Longitude of ascending node of orbit plane at\\
-&weekly epoch\\\midrule
-$\omega$&Argument of perigee (semicircles). ``An angular measurement along the orbital path\\
-&measured from the ascending node to the point of perigee, measured in the direction of\\
-&the SV's motion'' \citep{ubxGPSDict}\\\midrule
-$M_0$&Mean anomaly (radians)\\\midrule
-$a_{f0}$&Satellite clock bias (seconds). Satellite clock error at reference time\\\midrule
-$a_{f1}$&Satellite clock drift (seconds per second). Satellite clock error rate\\\midrule
-Week&Week number since the last reset (i.e. since year 1980 modulo 1024 weeks)
-\\\bottomrule
-\end {tabular}
-\end {table}
-
-\begin {table}[hb]
-\caption{GPS Ionosphere Model content. Table courtesy of \citep{harper2010server-side}.}
-\label{tbl:ionoModel}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-Field (IE) & Description\\\toprule
-$\alpha_{0}$&Coefficient 0 of vertical delay\\\midrule
-$\alpha_{1}$&Coefficient 1 of vertical delay\\\midrule
-$\alpha_{2}$&Coefficient 2 of vertical delay\\\midrule
-$\alpha_{3}$&Coefficient 3 of vertical delay\\\midrule
-$\beta_{0}$&Coefficient 0 of period of the model\\\midrule
-$\beta_{1}$&Coefficient 1 of period of the model\\\midrule
-$\beta_{2}$&Coefficient 2 of period of the model\\\midrule
-$\beta_{3}$&Coefficient 3 of period of the model
-\\\bottomrule
-\end {tabular}
-\end {table}
-
\clearpage
\begin{lstlisting}[label=lst:RRLPAssisPER,
caption={\textbf{Encoding reference location from ASN.1 to PER}},
@@ -2467,7 +2314,7 @@ If the IE \textit{locationInfo} bit is one and \textit{locationError} bit zero,
included in the response. Aside from the position information, the time when the position measurement
was performed is included as well however, only the least significant bits in the range of miliseconds. The
most significant bits shall be derived by the SMLC using the GSM frame number, included in the IE \textit{refFrame}.
-\textit{refFrame} contains the GSM frame number as observed by the MS without the TA factor taken into account \citep{49.031V8.1.0}!
+\textit{refFrame} contains the GSM frame number as observed by the MS \citep{49.031V8.1.0}!
The time of miliseconds can be found in the IE \textit{gpsTOW}. The included time is
not in UTC format and would require additional conversions.
The elements of \textit{locationInfo} can be seen in listing \ref{lst:RRLPLocInfo}. The IE \textit{fixType} contains
@@ -2477,7 +2324,7 @@ the information if the performed measurement was 2D or 3D.
\label{tbl:RRLPReqAss}\centering
%\rowcolor{2}{light-gray}{}
\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
+\begin{tabular}{lllcc}
\toprule
%$D$&&$P_u$&$\sigma_N$\\
Bit (IE) & Description\\\toprule
@@ -2609,19 +2456,91 @@ B6 1....... FixType = 1 :threeDFix
\chapter{Implementation}
\label{Implementation}
-The aim of this chapter is to give the reader a review of the employed hardware and the software implementation.
-The main idea of author's approach to the problem is discussed in this chapter.
-The implementation can be divided into two stages. The first stage being the inital phase of
-the thesis where the initial system has been set up to perform RRLP tests.
-The second stage can be divided into two implemantation parts. The
-first part of the second stage consists of the development of the application
-that generates RRLP assistance data. The second part of the second stage
-consists of modifying the existing open source GSM software and implementing the
-procedures for creating a data channel between the BTS and MS. This channel
-was deployed for the transmission of assistance data to the MS and for obtaining
-the response from the MS.
-
-\section{Initial phase}
+The aim of this chapter is to give the reader a review of the employed hardware
+and the implemented software. The main idea of author's approach to the problem is
+discussed in this chapter. The implementation can be divided into two stages.
+The first stage being the inital phase of the thesis where the initial system has
+been set up to perform RRLP tests. The second stage can be divided into two
+implemantation parts. The first part of the second stage consists of the
+development of the application that generates RRLP assistance data. The second
+part of the second stage consists of modifying the existing open source GSM
+software and implementing the procedures for creating a data channel
+between the BTS and MS. This channel was deployed for the transmission of
+assistance data to the MS and for obtaining the response from the MS.
+
+
+\section{Hardware and testbed setup}
+In the following section the author provides the testbed setup and
+presents the reader to the hardware components used in this thesis.
+The hardware components will be introduced according to their
+importance of building an operational and functional GSM
+network with GPS localization capabilities. Firstly the nanoBTS shall be
+introduced since it is the main hardware component used for building a basic
+GSM network infrastructure. Then a short insight into the used GPS receiver
+shall be given. Finally, a hardware connection diagram shall be given.
+
+\subsection{GSM BTS - nanoBTS}
+In recent years, there has been an increasing interest in deployment of
+private cellular networks in remote areas or for research which lead to
+the devolopment of diverse ``low-cost'' GSM hardware solutions. According to
+ip.access\footnote{http://www.ipaccess.com}, the manufacturer of nanoBTS,
+their hardware product is deployed for coverage of ``hard-to-reach places;
+in-buildings; remote areas; marine and aviation; and public spaces''.
+Our University GSM network consists of three nanoBTS stations. The deployed
+nanoBTS in author's thesis works in the 1800 MHz frequency range,
+for which the University of Freiburg had obtained a licence from the
+Federal Network Agency (German: $Bundesnetzagentur$). The transmission frequencies
+range between 1805-1880 MHz, with 200 kHz channel spacing and maximal output power
+of +23 dBm ($\approx$200 mW), whereas the receiving frequencies
+lie in the range between 1710-1785 MHz and same channel spacing as for transmission
+of 200 kHz \citep{nanoGSM2007brochure}. At the bottom of the nanoBTS there are 5 ports,
+as seen in Figure \ref{img:nanoBTSPorts}. The ports from left to right are: voltage supply,
+ethernet cable with power supply, USB port, TIB-IN and TIB-OUT. The ethernet cable with power supply
+is required to power the BTS and to connect its operating software (OpenBSC). The other ports are
+used to extend the GSM network performance operation but are not relevant to this work.
+
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.10]{img/nanoBTSPorts.jpg}
+ \caption{nanoBTS with two external antennas and five connection ports}
+\label{img:nanoBTSPorts}
+\end{figure}
+
+To determine the working state of the nanoBTS, an indicator status LED is located on the
+left side of the five ports region. After the nanoBTS is connected to the power supply
+with the ethernet cable, it changes its color and blink speed according to the state
+it is in. The states are given in appendix and can be seen in the table given in
+\ref{tbl:LEDStatus} \citep{installnanoBTS}. One of the key limitations of gathering more
+technical data and the critical aspect of this description lies in the fact,
+that nanoBTS is not an open source hardware platform and ip.access does not offer more
+details on their product. The lack of systematic hardware analysis can be seen as
+a major drawback of working with the nanoBTS hardware. However, the given technical data
+are sufficient for reproducing and conducting the RRLP tests described in this thesis.
+
+\subsection{GPS Receiver - NL-402U}
+\label{sec:gpsDevice}
+The Navilock NL-402U GPS receiver is based on the u-blox UBX-G5000 single chipset and is a one
+chip solution \citep{ubxDatasheet}. Receiver tracking sensitivity is -160 dBm ($10^{-16}$ mW).
+The GPS receiver was used as an indicator if there is any GPS signal in the tested room.
+
+\subsection{Testbed setup configuration}
+\label{sec:hardwareConfig}
+At least 4 ethernet cables with RJ45 connectors, on both sides, were required
+and one switch or hub connected to the internet. One ought to take notice
+of the cabling between the nanoBTS and the ethernet switch or hub, since wrong
+cabling with the power supply unit (PSU) could damage one of the devices.
+In Figure \ref{img:connectionDiagram}, the junction points are label according
+to the used configuration setting. The ethernet cables between the switch/hub,
+PSU and nanoBTS should not be longer than 100 m \citep{installnanoBTS}.
+
+\begin{figure}[ht!]
+ \centering
+ \includegraphics[scale=0.5]{img/hardwareConnection}
+ \caption{Cable connections, showing interconnection diagram}
+\label{img:connectionDiagram}
+\end{figure}
+
+\section{Initial phase of RRLP testbed setup}
Traditionally all radio communication systems are hard wired and
the hardware is developed to do only one fixed function as the
nanoBTS, to serve as a BTS. nanoBTS is a dedicated BTS hardware,
@@ -2893,207 +2812,6 @@ int response = gsm48_send_rr_app_info(conn, 0x00, AlmanacPackets[packNum].length
%spectrum analyser built on the USRP hardware.
-
-
-\chapter{Hardware}
-In the following chapter the author shall introduce the reader to the hardware
-components used in the thesis. The hardware components shall be presented
-according to their importance of building an operational and
-functional GSM network with GPS localization capabilities. Firstly the nanoBTS
-shall be introduced since it is the main hardware component used for building a
-basic GSM network infrastructure. Then a short insight into the used
-GPS receiver shall be given. Additionally the mobile stations used for
-testing of the system shall be reviewed. Finally, a hardware connection diagram
-shall be given.
-
-\section{GSM BTS - nanoBTS}
-In recent years, there has been an increasing interest in deployment of
-private cellular networks in remote areas or for research which lead to
-the devolopment of diverse ``low-cost'' GSM hardware solutions. According to
-ip.access\footnote{http://www.ipaccess.com}, the manufacturer of nanoBTS,
-their hardware product is deployed for coverage of ``hard-to-reach places;
-in-buildings; remote areas; marine and aviation; and public spaces''.
-A nanoBTS with its plastic cover can be seen in Figure \ref{img:nanoBTSPlastic}.
-Our University GSM network consists of three nanoBTS stations. The deployed
-nanoBTS in author's thesis works in the 1800 MHz frequency range,
-for which the University of Freiburg had obtained a licence from the
-Federal Network Agency (German: $Bundesnetzagentur$). The transmission frequencies
-range between 1805-1880 MHz, with 200 kHz channel spacing and maximal output power
-of +13 dBm ($\approx$20 mW)\todo{Check the output powere 20 dBm}, whereas the receiving frequencies
-lie in the range between 1710-1785 MHz and same channel spacing as for transmission
-of 200 kHz \citep{nanoGSM2007brochure}. \todo{Add the Abis over IP protocol}
-
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.50]{img/nanoBTS.jpg}
- \caption{nanoBTS with its plastic cover. Image courtesy of ip.access ltd}
-\label{img:nanoBTSPlastic}
-\end{figure}
-
-The nanoBTS is equiped with an internal 0 dBi (nominal) omni-directional antenna. However,
-two external antennas sized 30x36 mm, one for transmission (TX) and the other one for
-reception (RX) of radio waves were used to extend the coverage area. These
-antennas are connected via the SMA connectors. By using an RF amplifier
-and larger antennas, for these frequency ranges, the covered area with the GSM signal
-reception can be increased. For the gain estimation and radiation angle of the used antennas
-the measurement equipment was missing and therefore was not conducted and described
-in this work.\todo{Check for what NWL is}
-
-At the bottom of the nanoBTS there are 5 ports, as seen in Figure \ref{img:nanoBTSPorts}.
-The ports from left to right are: voltage supply, ethernet cable with power supply, USB
-port, TIB-IN and TIB-OUT. In the next paragraph a brief overview of each port shall be given.
-
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.15]{img/nanoBTSPorts.jpg}
- \caption{nanoBTS with two external antennas and five connection ports}
-\label{img:nanoBTSPorts}
-\end{figure}
-
-The left most port is the power supply port used for supplying the nanoBTS with 48 V DC
-and is optionally used depending on the cable configuration. In author's hardware
-configuration the power supply port is not used. The following port is for the ethernet
-connection with 48 V DC power supply. This port is connected to a power supply
-that is supplied with the nanoBTS. It extends the ethernet connection with 48 V DC
-for the normal operation mode of the nanoBTS which is in the range between 38-50 V DC.
-The power consumption of the nanoBTS is 13 W. More details on how to interconnect the cables
-shall be given in section \ref{sec:hardwareConfig}. In the middle of the five port region,
-the mini USB port can be found. It is used by the manufacturer to write the firmware software
-to the nanoBTS. The last two ports are the TIB-IN and TIB-OUT port\footnote{TIB stands
-for Timing Interface Bus}. These two ports are used if the GSM network operator requires more
-than 11 channels to increase the overall capacity of the network.
-``Up to 4 nanoBTS can be combined into a multiple TRX cell, increasing the number of
-supported users per TRX by up to 200\%. The TIB-OUT from the Master TRX must be connected to
-the TIB-IN of the slave TRX. This in turn has its TIB-OUT connected to the next TRX in the chain''
-\citep{multipleTRX}. The multiple TRX cell configuration shall not be further discussed in this work
-since the purpose of the work was not to boost the capacity of a GSM network but implementation
-and testing of the RRLP protocol.
-
-To determine the working state of the nanoBTS, an indicator status LED is located on the
-left side of the five ports region. After the nanoBTS is connected to the power suplly
-with the ethernet cable, it shall change its color and blink speed according to the state
-it is in. The states can be seen in the Table given in \ref{tbl:LEDStatus} \citep{installnanoBTS}.
-
-One of the key limitations of gathering more technical data and the critical aspect of this
-description lies in the fact, that nanoBTS is not an open source hardware platform and ip.access does not
-offer more details on their product. The lack of systematic hardware analysis can be seen as
-a major drawback of working with the nanoBTS hardware. However, the given technical data
-are sufficient for reproducing and conducting the RRLP tests described in this thesis.
-
-
-\begin {table}[hb]
-\caption{Indicator LED status on the nanoBTS. Table courtesy of \citep{installnanoBTS}.}
-\label{tbl:LEDStatus}\centering
-%\rowcolor{2}{light-gray}{}
-\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{cccc}
-\toprule
-%$D$&&$P_u$&$\sigma_N$\\
-State&Color \& Pattern&When&Precedence\\\toprule
-Self-test failure&Red - Steady &In boot or application code when a power&1 (High) \\
- &&on self-test fails\\\midrule
-Unspecified failure&Red - Steady &On software fatal errors&2\\\midrule
-No ethernet&Orange - Slow flash &Ethernet disconnected&3\\\midrule
-Factory reset&Red - Fast blink &Dongle detected at start up and the&4\\
- &&factory defaults have been applied\\\midrule
-Not configured&Alternating Red/&The unit has not been configured&5\\
- &Green Fast flash\\\midrule
-Downloading code&Orange - Fast flash &Code download procedure is in progress&6\\\midrule
-Establishing XML&Orange - Slow blink &A management link has not yet been established&7\\
- &&but is needed for the TRX to become operational.\\
- &&Specifically: for a master a Primary OML or\\
- &&Secondary OML is not yet established; for a\\
- &&slave an IML to its master or a Secondary \\
- &&OML is not yet established. \\\midrule
-Self-test &Orange - Steady &From power on until end of backhaul&8\\
- &&power on self-test\\\midrule
-NWL-test &Green - Fast flash& OML established, NWL test in progress&9\\\midrule
-OCXO Calibration &Alternating Green/& The unit is in the fast calibrating state [SYNC]&10\\
- &Orange - Slow blink\\\midrule
-Not transmitting &Green - Slow flash & The radio carrier is not being transmitted &11\\\midrule
-Operational &Green - Steady & Default condition if none of the above apply&12 (Low)\\\bottomrule
-\end {tabular}
-\end {table}
-
-
-%\begin{table}[h!t!p!]
-%\begin{center}
-%\caption{Indicator LED status on the nanoBTS}
-%\begin{tabular}{|c||p{3cm}|p{5cm}|c|c|}
-%\hline
-%% \T and \B would not work if it is placed here (needs to go inside cell)
-% State&Color \& Pattern&When&Precedence \\ \hline\hline
-% Self-test failure&Red - Steady&In boot or application code when a power on self-test fails&1 (High) \\ \hline
-% Unspecified failure&Red - Steady &On software fatal errors&2 \\ \hline
-% No ethernet&Orange - Slow flash &Ethernet disconnected&3 \\ \hline
-% Factory reset&Red - Fast blink &Dongle detected at start up and the factory defaults have been applied&4 \\ \hline
-% Not configured&Alternating Red/Green - Fast flash &The unit has not been configured&5 \\ \hline
-% Downloading code&Orange - Fast flash &Code download procedure is in progress&6 \\ \hline
-% Establishing XML&Orange - Slow blink &A management link has not yet been established&7\\
-% &&but is needed for the TRX to become operational.\\
-% &&Specifically: for a master a Primary OML or\\
-% &&Secondary OML is not yet established; for a\\
-% &&slave an IML to its master or a Secondary \\
-% &&OML is not yet established. \\ \hline
-% Self-test &Orange - Steady & From power on until end of backhaul powe on self-test&8 \\ \hline
-% NWL-test &Green - Fast flash & OML established, NWL test in progress&9 \\ \hline
-% OCXO Calibration &Alternating Green/Orange - Slow blink & The unit is in the fast calibrating state [SYNC]&10 \\ \hline
-% Not transmitting &Green - Slow flash & The radio carrier is not being transmitted &11 \\ \hline
-% Operational &Green - Steady & Default condition if none of the above apply&12 (Low) \\ \hline
-%
-%\end{tabular}
-%\end{center}
-%\label{tbl:LEDStatus}
-%\end{table}
-
-
-\newpage
-\section{GPS Receiver - NL-402U}
-\label{sec:gpsDevice}
-In the next paragraphs the used GPS device shall be described.
-In contrast to the earlier described hardware, nanoBTS, which the University of Freiburg
-already owned, the budget for the GPS receiver was limited and the Navilock NL-402U
-was bought considering only the single criterion, the price. The Navilock NL-402U
-GPS receiver is based on the u-blox UBX-G5000 single chipset and is a one
-chip solution \citep{ubxDatasheet}. It can be seen on Figure \ref{img:gpsNavilock}
-with its passive ceramic patch antenna. 1575,42 MHz is the operating frequency of
-the receiver which corresponds to the L1 civil frequencies and Coarse/Acquisition (C/A) code.
-The GPS chipset consists of 50 channels,
-each channel tracks the transmission from a single satellite \citep{understandGPS}.
-It is important to note, the number of channels inside a GPS receiver interrelates
-with the amount of time required to obtain the first fix. Receiver tracking sensitivity is
--160 dBm ($10^{-16}$ mW).
-The GPS receiver communicates with the computer ovet the USB port.
-Although the GPS receiver uses an USB interface, on the computer it emulates 2 UART ports,
-which are serial communication interfaces.
-
-
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.12]{img/gpsNavlock.jpg}
- \caption{Navilock NL-402U, opened up with the antenna and USB cable}
-\label{img:gpsNavilock}
-\end{figure}
-
-\section{Cable configuration}
-\label{sec:hardwareConfig}
-In the next section, the author shall focus on properly connecting the hardware.
-At least 4 ethernet cables with RJ45 connectors, on both sides, were required
-and one switch or hub connected to the internet. One should
-take notice of the cabling between the nanoBTS and the ethernet switch or hub,
-since wrong cabling with the power supply unit (PSU) could damage one of
-the devices. In Figure \ref{img:connectionDiagram}, the junction points are
-label according to the used configuration setting. The ethernet cables
-between the switch/hub, PSU and nanoBTS should not be longer
-than 100 m \citep{installnanoBTS}.
-
-\begin{figure}[ht!]
- \centering
- \includegraphics[scale=0.5]{img/hardwareConnection}
- \caption{Cable connections, showing interconnection diagram}
-\label{img:connectionDiagram}
-\end{figure}
-
\chapter{Results}
One of the most important parts of this thesis are the results that
shall be presented in this chapter. Tests will be explained and how the results
@@ -3130,7 +2848,7 @@ table \ref{tbl:smartphones}.
\label{tbl:smartphones}\centering
%\rowcolor{2}{light-gray}{}
\scriptsize\fontfamily{iwona}\selectfont
-\begin{tabular}{clccc}
+\begin{tabular}{ll}
\toprule
%$D$&&$P_u$&$\sigma_N$\\
Cell phone & Manufacturer \& Country\\\toprule
@@ -3486,12 +3204,9 @@ of cell phone users.
\item \emph{BTS} - Base Transceiver Station -
\item \emph{DC} - Direct Current
\item \emph{GNSS} - Global Navigation Satellite System - A satellite navigation system that allows a specialized receive to determine its location on Earth.
-\item \emph{LED} - Light Emitting Diode - A diode that emitts light.
-\item \emph{IP Address} - \todo{Write what an IP address is}.
\item \emph{PCB} - Printed Circuit Board - The board where electronic components are soldered onto and wired through conductive tracks.
\item \emph{RRLP} - Radio Resource Location Protocol - The employed protocol in GSM, UMTS and other wireless networks for providing and exchange of geolocation information.
\item \emph{SMA} - SubMiniature version A - SMA is a connector used for interconnecting coaxial cables or PCB electronics that work in the frequency range between 0-18 GHz.
-\item \emph{TIB} - Time Interface Bus - The TIB is used to provide the synchronization of the clock, frequency and frame number between the nanoBTS when operating in a single 2-4 BTS configuration.
\item \emph{TRX} -
\item \emph{UART} - Universal Asynchronous Receiver Transmitter - A serial communication interface used by computers or other peripheral devices to communicate.
\item \emph{UMTS} - Universal Mobile Telecommunications System - Third generation mobile network based on the GSM standards.
diff --git a/vorlagen/thesis/src/maindoc.lof b/vorlagen/thesis/src/maindoc.lof
index 24aa453..5cb7578 100644
--- a/vorlagen/thesis/src/maindoc.lof
+++ b/vorlagen/thesis/src/maindoc.lof
@@ -1,48 +1,45 @@
\select@language {english}
\addvspace {10\p@ }
-\contentsline {figure}{\numberline {1.1}{\ignorespaces Cell-ID position estimation technique where a mobile user can be connected to only one BTS.\relax }}{4}{figure.caption.5}
-\contentsline {figure}{\numberline {1.2}{\ignorespaces Basic idea of the RSS estimation technique. One rectangle location is represented by two RSS measurements for two BTS, blue indicates BTS1 and red indicates BTS2.\relax }}{5}{figure.caption.6}
-\contentsline {figure}{\numberline {1.3}{\ignorespaces Basic idea of the E-OTD positioning technique. Current time information is transmitted from 3 different BTS's at the same time. Then the MS observes the difference of time when the information arrive and using trilateration technique calculates the relative position of the MS.\relax }}{6}{figure.caption.7}
-\contentsline {figure}{\numberline {1.4}{\ignorespaces Basic idea of the Angle-of-Arrival positioning technique. The angle of the reception signal on the BTS antenna is measured. By knowing at least two angles on two BTS's, it is possible to interpolate the intersection point where the MS is located.\relax }}{8}{figure.caption.8}
-\contentsline {figure}{\numberline {1.5}{\ignorespaces Wireless Access Point tagging. The MS could be located anywhere where all three access points are visible, this area has a wavy background and is between access points 1, 2 and 4.\relax }}{9}{figure.caption.9}
\addvspace {10\p@ }
-\contentsline {figure}{\numberline {2.1}{\ignorespaces GPS Simple working principle, a) example in 3D space with spheres b) example in 2D space with circles.\relax }}{13}{figure.caption.11}
-\contentsline {figure}{\numberline {2.2}{\ignorespaces One frame of 1500 bits on L1 frequency carrier. Image courtesy of \citep {harper2010server-side}.\relax }}{15}{figure.caption.12}
-\contentsline {figure}{\numberline {2.3}{\ignorespaces Subframes always start with telemetry and handover words\relax }}{16}{figure.caption.13}
-\contentsline {figure}{\numberline {2.4}{\ignorespaces BPSK Modulation - First signal is the carrier wave, and it is multiplied (mixed) with the second signal, which are the data to be transmitted. The resulting signal at the output of the satellite antenna is the third one.\relax }}{17}{figure.caption.14}
-\contentsline {figure}{\numberline {2.5}{\ignorespaces Modulation of the GPS signal L1. Image courtesy of \citep {harper2010server-side}.\relax }}{18}{figure.caption.15}
-\contentsline {figure}{\numberline {2.6}{\ignorespaces Two equivalent carrier waves with the same frequency but different phase shift\relax }}{21}{figure.caption.16}
-\contentsline {figure}{\numberline {2.7}{\ignorespaces Demodulation of the L1 GPS signal\relax }}{21}{figure.caption.17}
-\contentsline {figure}{\numberline {2.8}{\ignorespaces Effects of the low frequency term on the demodulated output C/A wave on the GPS receiver (the explanations and figures are from top to bottom). If the synthesized frequency is correct, $f_{1}=f_{2}$, the low frequency term becomes a DC term and does not modify the output $d_{C/A}$ wave (first figure). If the frequency matches but the phase not, in this case the phase is shifted for $\pi $, then $d_{C/A}$ is inverted (second figure). If the phase shifts with time, then the amplitude and phase of $d_{C/A}$ shall vary as well (third figure). Image courtesy of \citep {diggelen2009a-gps}.\relax }}{23}{figure.caption.18}
-\contentsline {figure}{\numberline {2.9}{\ignorespaces Comparison between the original C/A code generated on the GPS satellite with two synthesized PRN codes with a different phase shift on the receiver. Image courtesy of \citep {understandGPS}.\relax }}{24}{figure.caption.19}
-\contentsline {figure}{\numberline {2.10}{\ignorespaces Cross-correlation on three different signals. Image courtesy of \citep {understandGPS}.\relax }}{25}{figure.caption.20}
-\contentsline {figure}{\numberline {2.11}{\ignorespaces Segment of the frequency/code delay search space for a single GPS satellite. Image courtesy of \citep {diggelen2009a-gps}.\relax }}{27}{figure.caption.21}
-\contentsline {figure}{\numberline {2.12}{\ignorespaces The total search space.\relax }}{28}{figure.caption.22}
-\contentsline {figure}{\numberline {2.13}{\ignorespaces Idea of the frequency searching algorithm.\relax }}{28}{figure.caption.23}
-\contentsline {figure}{\numberline {2.14}{\ignorespaces Basic distance estimation principle for one satellite. Image courtesy of \citep {understandGPS}.\relax }}{29}{figure.caption.24}
-\contentsline {figure}{\numberline {2.15}{\ignorespaces Estimating the distance by phase shift $\Delta t =t_2 - t_1 =\tau $. Image courtesy of \citep {understandGPS}.\relax }}{30}{figure.caption.25}
-\contentsline {figure}{\numberline {2.16}{\ignorespaces Taylor series approximation for a point $a=0.5$ where $n$ is the Taylor polynomial degree.\relax }}{32}{figure.caption.26}
-\contentsline {figure}{\numberline {2.17}{\ignorespaces Basic AGPS principle\relax }}{35}{figure.caption.27}
-\addvspace {10\p@ }
-\contentsline {figure}{\numberline {3.1}{\ignorespaces Frequency ranges of uplink and downlink channels in the GSM900 band. Each box represents a frequency band (channel). Image courtesy of \citep {konrad} and \citep {dennis}.\relax }}{39}{figure.caption.29}
-\contentsline {figure}{\numberline {3.2}{\ignorespaces Each frequency channel is split into 8 time slots. More GSM users can be served at the ``same'' time. Image courtesy of \citep {0890064717}.\relax }}{40}{figure.caption.30}
-\contentsline {figure}{\numberline {3.3}{\ignorespaces Hierarchy of the GSM frames. Image courtesy of \citep {0890064717}.\relax }}{40}{figure.caption.31}
-\contentsline {figure}{\numberline {3.4}{\ignorespaces Basic GSM network block diagram. Image courtesy of \citep {konrad} and \citep {dennis}.\relax }}{42}{figure.caption.32}
-\contentsline {figure}{\numberline {3.5}{\ignorespaces Initializing an successful SDCCH channel. Image courtesy of \citep {0470844574}.\relax }}{46}{figure.caption.35}
-\addvspace {10\p@ }
-\contentsline {figure}{\numberline {4.1}{\ignorespaces RRLP Request protocol. Assistance data can be sent before the request is made. If the assistance data are sent, their reception acknowledgement is sent as a response from the MS. Image courtesy of \citep {harper2010server-side} and \citep {04.31V8.18.0}.\relax }}{48}{figure.caption.36}
-\contentsline {figure}{\numberline {4.2}{\ignorespaces An example RRLP request. Constructing a binary RRLP request in PER from ASN.1. Yellow zero bits are extension markers or spare bits. Image courtesy of \citep {harper2010server-side}.\relax }}{54}{figure.caption.37}
-\contentsline {figure}{\numberline {4.3}{\ignorespaces Reference location is a 14 octet stream built according to the given rule as specified in the standard \citep {3gppequations} under section \textit {7.3.6}. Image courtesy of \citep {3gppequations}.\relax }}{58}{figure.caption.38}
-\contentsline {figure}{\numberline {4.4}{\ignorespaces World Geodetic System 1984. Image courtesy of \citep {harper2010server-side}.\relax }}{58}{figure.caption.39}
-\contentsline {figure}{\numberline {4.5}{\ignorespaces Requested AGPS assistance data to be delivered. Image courtesy of \citep {49.031V8.1.0}.\relax }}{65}{figure.caption.44}
-\addvspace {10\p@ }
-\contentsline {figure}{\numberline {5.1}{\ignorespaces Flowchart for the RRLP assistance data generators\relax }}{73}{figure.caption.46}
-\addvspace {10\p@ }
-\contentsline {figure}{\numberline {6.1}{\ignorespaces nanoBTS with its plastic cover. Image courtesy of ip.access ltd\relax }}{78}{figure.caption.49}
-\contentsline {figure}{\numberline {6.2}{\ignorespaces nanoBTS with two external antennas and five connection ports\relax }}{79}{figure.caption.51}
-\contentsline {figure}{\numberline {6.3}{\ignorespaces Navilock NL-402U, opened up with the antenna and USB cable\relax }}{80}{figure.caption.53}
-\contentsline {figure}{\numberline {6.4}{\ignorespaces Cable connections, showing interconnection diagram\relax }}{81}{figure.caption.54}
-\addvspace {10\p@ }
-\contentsline {figure}{\numberline {7.1}{\ignorespaces Test rooms as well as the results delivered by the smart phones. Image courtesy of Google Maps.\relax }}{85}{figure.caption.56}
-\contentsline {figure}{\numberline {7.2}{\ignorespaces Test room 2 with the positions of the smart phones\relax }}{86}{figure.caption.57}
+\contentsline {figure}{\numberline {2.1}{\ignorespaces Basic GSM network block diagram. Image courtesy of \citep {konrad} and \citep {dennis}.\relax }}{6}{figure.caption.5}
+\contentsline {figure}{\numberline {2.2}{\ignorespaces Frequency ranges of uplink and downlink channels in the GSM900 band. Each box represents a frequency band (channel). Image courtesy of \citep {konrad} and \citep {dennis}.\relax }}{9}{figure.caption.7}
+\contentsline {figure}{\numberline {2.3}{\ignorespaces Each frequency channel (ARFCN) is split into 8 time slots. With this approach more GSM users can be served at the ``same'' time. Image courtesy of \citep {0890064717}.\relax }}{10}{figure.caption.8}
+\contentsline {figure}{\numberline {2.4}{\ignorespaces Hierarchy of the GSM frames. Image courtesy of \citep {0890064717}.\relax }}{11}{figure.caption.9}
+\contentsline {figure}{\numberline {2.5}{\ignorespaces Initializing an SDCCH channel. Image courtesy of \citep {0470844574}.\relax }}{12}{figure.caption.12}
+\contentsline {figure}{\numberline {2.6}{\ignorespaces Cell-ID position estimation technique where a mobile user can be connected to only one BTS.\relax }}{14}{figure.caption.13}
+\contentsline {figure}{\numberline {2.7}{\ignorespaces Basic idea of the RSS estimation technique. One rectangle location is represented by two RSS measurements for two BTS, blue indicates BTS1 and red indicates BTS2.\relax }}{14}{figure.caption.14}
+\contentsline {figure}{\numberline {2.8}{\ignorespaces Basic idea of the E-OTD positioning technique. Current time information is transmitted from 3 different BTS's at the same time. Then the MS observes the difference of time when the information arrive and using trilateration technique calculates the relative position of the MS.\relax }}{16}{figure.caption.15}
+\contentsline {figure}{\numberline {2.9}{\ignorespaces Basic idea of the Angle-of-Arrival positioning technique. The angle of the reception signal on the BTS antenna is measured. By knowing at least two angles on two BTS's, it is possible to interpolate the intersection point where the MS is located.\relax }}{17}{figure.caption.16}
+\contentsline {figure}{\numberline {2.10}{\ignorespaces Wireless Access Point tagging. The MS could be located anywhere where all three access points are visible, this area has a wavy background and is between access points 1, 2 and 4.\relax }}{17}{figure.caption.17}
+\addvspace {10\p@ }
+\contentsline {figure}{\numberline {3.1}{\ignorespaces GPS Simple working principle, a) example in 3D space with spheres b) example in 2D space with circles.\relax }}{21}{figure.caption.19}
+\contentsline {figure}{\numberline {3.2}{\ignorespaces One frame of 1500 bits on L1 frequency carrier. Image courtesy of \citep {harper2010server-side}.\relax }}{23}{figure.caption.20}
+\contentsline {figure}{\numberline {3.3}{\ignorespaces Subframes always start with telemetry and handover words\relax }}{23}{figure.caption.21}
+\contentsline {figure}{\numberline {3.4}{\ignorespaces BPSK Modulation - First signal is the carrier wave, and it is multiplied (mixed) with the second signal, which are the data to be transmitted. The resulting signal at the output of the satellite antenna is the third one.\relax }}{25}{figure.caption.22}
+\contentsline {figure}{\numberline {3.5}{\ignorespaces Modulation of the GPS signal L1. Image courtesy of \citep {harper2010server-side}.\relax }}{25}{figure.caption.23}
+\contentsline {figure}{\numberline {3.6}{\ignorespaces Two equivalent carrier waves with the same frequency but different phase shift\relax }}{28}{figure.caption.24}
+\contentsline {figure}{\numberline {3.7}{\ignorespaces Demodulation of the L1 GPS signal\relax }}{29}{figure.caption.25}
+\contentsline {figure}{\numberline {3.8}{\ignorespaces Effects of the low frequency term on the demodulated output C/A wave on the GPS receiver (the explanations and figures are from top to bottom). If the synthesized frequency is correct, $f_{1}=f_{2}$, the low frequency term becomes a DC term and does not modify the output $d_{C/A}$ wave (first figure). If the frequency matches but the phase not, in this case the phase is shifted for $\pi $, then $d_{C/A}$ is inverted (second figure). If the phase shifts with time, then the amplitude and phase of $d_{C/A}$ shall vary as well (third figure). Image courtesy of \citep {diggelen2009a-gps}.\relax }}{30}{figure.caption.26}
+\contentsline {figure}{\numberline {3.9}{\ignorespaces Comparison between the original C/A code generated on the GPS satellite with two synthesized PRN codes with a different phase shift on the receiver. Image courtesy of \citep {understandGPS}.\relax }}{31}{figure.caption.27}
+\contentsline {figure}{\numberline {3.10}{\ignorespaces Cross-correlation on three different signals. Image courtesy of \citep {understandGPS}.\relax }}{32}{figure.caption.28}
+\contentsline {figure}{\numberline {3.11}{\ignorespaces Segment of the frequency/code delay search space for a single GPS satellite. Image courtesy of \citep {diggelen2009a-gps}.\relax }}{34}{figure.caption.29}
+\contentsline {figure}{\numberline {3.12}{\ignorespaces The total search space.\relax }}{35}{figure.caption.30}
+\contentsline {figure}{\numberline {3.13}{\ignorespaces Idea of the frequency searching algorithm.\relax }}{35}{figure.caption.31}
+\contentsline {figure}{\numberline {3.14}{\ignorespaces Basic distance estimation principle for one satellite. Image courtesy of \citep {understandGPS}.\relax }}{37}{figure.caption.32}
+\contentsline {figure}{\numberline {3.15}{\ignorespaces Estimating the distance by phase shift $\Delta t =t_2 - t_1 =\tau $. Image courtesy of \citep {understandGPS}.\relax }}{37}{figure.caption.33}
+\contentsline {figure}{\numberline {3.16}{\ignorespaces Taylor series approximation for a point $a=0.5$ where $n$ is the Taylor polynomial degree.\relax }}{40}{figure.caption.34}
+\contentsline {figure}{\numberline {3.17}{\ignorespaces Basic AGPS principle\relax }}{43}{figure.caption.35}
+\addvspace {10\p@ }
+\contentsline {figure}{\numberline {4.1}{\ignorespaces RRLP Request protocol. Assistance data can be sent before the request is made. If the assistance data are sent, their reception acknowledgement is sent as a response from the MS. Image courtesy of \citep {harper2010server-side} and \citep {04.31V8.18.0}.\relax }}{46}{figure.caption.36}
+\contentsline {figure}{\numberline {4.2}{\ignorespaces An example RRLP request. Constructing a binary RRLP request in PER from ASN.1. Violet zero bits are extension markers or spare bits. Image courtesy of \citep {harper2010server-side}.\relax }}{52}{figure.caption.37}
+\contentsline {figure}{\numberline {4.3}{\ignorespaces Reference location is a 14 octet stream built according to the given rule as specified in the standard \citep {3gppequations} under section \textit {7.3.6}. Image courtesy of \citep {3gppequations}.\relax }}{56}{figure.caption.38}
+\contentsline {figure}{\numberline {4.4}{\ignorespaces World Geodetic System 1984. Image courtesy of \citep {harper2010server-side}.\relax }}{56}{figure.caption.39}
+\contentsline {figure}{\numberline {4.5}{\ignorespaces Requested AGPS assistance data to be delivered. Image courtesy of \citep {49.031V8.1.0}.\relax }}{60}{figure.caption.40}
+\addvspace {10\p@ }
+\contentsline {figure}{\numberline {5.1}{\ignorespaces nanoBTS with two external antennas and five connection ports\relax }}{64}{figure.caption.42}
+\contentsline {figure}{\numberline {5.2}{\ignorespaces Cable connections, showing interconnection diagram\relax }}{65}{figure.caption.43}
+\contentsline {figure}{\numberline {5.3}{\ignorespaces Flowchart for the RRLP assistance data generators\relax }}{70}{figure.caption.44}
+\addvspace {10\p@ }
+\contentsline {figure}{\numberline {6.1}{\ignorespaces Test rooms as well as the results delivered by the smart phones. Image courtesy of Google Maps.\relax }}{75}{figure.caption.46}
+\contentsline {figure}{\numberline {6.2}{\ignorespaces Test room 2 with the positions of the smart phones\relax }}{76}{figure.caption.47}
\addvspace {10\p@ }
diff --git a/vorlagen/thesis/src/maindoc.lot b/vorlagen/thesis/src/maindoc.lot
index e4f88ba..6ef400b 100644
--- a/vorlagen/thesis/src/maindoc.lot
+++ b/vorlagen/thesis/src/maindoc.lot
@@ -1,23 +1,22 @@
\select@language {english}
\addvspace {10\p@ }
-\contentsline {table}{\numberline {1.1}{\ignorespaces Overview of the localization techniques.\relax }}{10}{table.caption.10}
\addvspace {10\p@ }
+\contentsline {table}{\numberline {2.1}{\ignorespaces GSM operating frequencies in Germany\relax }}{9}{table.caption.6}
+\contentsline {table}{\numberline {2.2}{\ignorespaces Traffic channels on the air interface. Table courtesy of \citep {0890064717}.\relax }}{11}{table.caption.10}
+\contentsline {table}{\numberline {2.3}{\ignorespaces Control channels on the air interface. Table courtesy of \citep {0890064717}.\relax }}{12}{table.caption.11}
+\contentsline {table}{\numberline {2.4}{\ignorespaces Overview of the localization techniques.\relax }}{18}{table.caption.18}
\addvspace {10\p@ }
-\contentsline {table}{\numberline {3.1}{\ignorespaces GSM operating frequencies in Germany\relax }}{38}{table.caption.28}
-\contentsline {table}{\numberline {3.2}{\ignorespaces Traffic channels on the Air interface. Table courtesy of \citep {0890064717}.\relax }}{45}{table.caption.33}
-\contentsline {table}{\numberline {3.3}{\ignorespaces Control channels on the Air interface. Table courtesy of \citep {0890064717}.\relax }}{45}{table.caption.34}
\addvspace {10\p@ }
-\contentsline {table}{\numberline {4.1}{\ignorespaces GPS UTC Model content. Table courtesy of \citep {harper2010server-side}.\relax }}{60}{table.caption.40}
-\contentsline {table}{\numberline {4.2}{\ignorespaces Navigation message (ephemeris) content. Table courtesy of \citep {harper2010server-side}.\relax }}{61}{table.caption.41}
-\contentsline {table}{\numberline {4.3}{\ignorespaces Almanac message content. Table courtesy of \citep {harper2010server-side}.\relax }}{62}{table.caption.42}
-\contentsline {table}{\numberline {4.4}{\ignorespaces GPS Ionosphere Model content. Table courtesy of \citep {harper2010server-side}.\relax }}{62}{table.caption.43}
-\contentsline {table}{\numberline {4.5}{\ignorespaces Requested AGPS assistance data bit meaning. Table courtesy of \citep {49.031V8.1.0}.\relax }}{66}{table.caption.45}
+\contentsline {table}{\numberline {4.1}{\ignorespaces Requested AGPS assistance data bit meaning. Table courtesy of \citep {49.031V8.1.0}.\relax }}{61}{table.caption.41}
\addvspace {10\p@ }
\addvspace {10\p@ }
-\contentsline {table}{\numberline {6.1}{\ignorespaces Indicator LED status on the nanoBTS. Table courtesy of \citep {installnanoBTS}.\relax }}{82}{table.caption.52}
+\contentsline {table}{\numberline {6.1}{\ignorespaces Smart phone models used for testing in the thesis.\relax }}{74}{table.caption.45}
+\contentsline {table}{\numberline {6.2}{\ignorespaces Smart phone RRLP test results\relax }}{78}{table.caption.48}
\addvspace {10\p@ }
-\contentsline {table}{\numberline {7.1}{\ignorespaces Smart phone models used for testing in the thesis.\relax }}{84}{table.caption.55}
-\contentsline {table}{\numberline {7.2}{\ignorespaces Smart phone RRLP test results\relax }}{88}{table.caption.58}
-\addvspace {10\p@ }
-\contentsline {table}{\numberline {A.3.1}{\ignorespaces Example uncertainties (latitude and longitude) for various integer values of $K$\relax }}{103}{table.caption.64}
-\contentsline {table}{\numberline {A.3.2}{\ignorespaces Example uncertainties (altitude) for various integer values of $K$\relax }}{104}{table.caption.65}
+\contentsline {table}{\numberline {A.3.1}{\ignorespaces Example uncertainties (latitude and longitude) for various integer values of $K$\relax }}{93}{table.caption.53}
+\contentsline {table}{\numberline {A.3.2}{\ignorespaces Example uncertainties (altitude) for various integer values of $K$\relax }}{94}{table.caption.54}
+\contentsline {table}{\numberline {B.0.3}{\ignorespaces GPS UTC Model content. Table courtesy of \citep {harper2010server-side}.\relax }}{96}{table.caption.56}
+\contentsline {table}{\numberline {B.0.4}{\ignorespaces GPS Ionosphere Model content. Table courtesy of \citep {harper2010server-side}.\relax }}{96}{table.caption.57}
+\contentsline {table}{\numberline {B.0.5}{\ignorespaces Navigation message (ephemeris) content. Table courtesy of \citep {harper2010server-side}.\relax }}{97}{table.caption.58}
+\contentsline {table}{\numberline {B.0.6}{\ignorespaces Almanac message content. Table courtesy of \citep {harper2010server-side}.\relax }}{98}{table.caption.59}
+\contentsline {table}{\numberline {C.0.7}{\ignorespaces Indicator LED status on the nanoBTS. Table courtesy of \citep {installnanoBTS}.\relax }}{99}{table.caption.60}