Due to the extremely weak strength of GPS satellite signals, relying on GPS alone for mission-critical security applications is not enough. This is especially true for the following security applications:

* Tracking valuable goods which are being transported in metal containers, or are located within park houses, warehouses or dense urban Cell locate image 1environments.
* Locating people such as children or the elderly who may be deep inside buildings.
* Recovering stolen vehicles in the presence of easily-obtainable GPS jamming devices.

In all these cases, global positioning performance can be augmented through the hybrid combination of GPS receivers together with 2G/3G wireless modems that can identify and report visible GSM or UMTS cell attributes. We at u-blox have developed and embedded a cellular positioning technology called CellLocate into its LEON family of 2G and LISA family of 3G wireless modules. The technology operates in conjunction with the company’s GPS receivers to support positioning even when GPS satellites are unavailable.

Technologies like CellLocate enable stand-alone location estimation based on surrounding GSM cell information in conjunction with GPS positioning data to improve positioning in several security applications, effectively eliminating “no-fix” scenarios by providing at least an approximate fix wherever cell phone coverage is available:

* GPS signals are blocked: a GPS receiver cannot determine a position when satellite signals are unavailable, such as within tunnels, buildings, or metallic containers. For fleet management, supply chain and anti-theft systems, this condition can be unacceptable. In this case a cell-based positioning system using GSM cell information can provide an estimated position. This is attractive for vehicle or container tracking applications where an approximate location of valuable assets is preferable to no position fix at all. This system is functional within warehouses, rail stations, airports and tunnels.

GPS signals are jammed: GPS jamming devices are easily obtained for less than a hundred dollars. These devices can neutralize GPS receivers, and are often employed during vehicle theft. A backup cell-based system in this case acts as a secondary system, as GSM cell signals are available even when satellite signals are blocked by jamming. The GPS receiver can also add intelligence to the system as u-blox GPS receivers can detect when a jamming signal is present, putting the system into an “attempted theft” condition.
The above scenarios exploit the combination of Cellular and GPS positioning data (Hybrid positioning) to deliver better results than GPS technology could accomplish alone.

How CellLocate Works

For any given location with cellphone coverage (2G or 3G), a specific combination of base stations will be visible. This proprietary feature is embedded in u-blox’ 2G (LEON) and 3G (LISA) wireless modems which allows them to report which base stations are visible at any specific location. With this information available, a device (for example a stolen vehicle tracker) can transmit the data to u-blox’ online CellLocate server.

The server then matches the visible base station data with observations made when a GPS fix taken previously at the same (or nearby) location. The server can then return an approximate location to the receiving device. The device is then able to forward the location to an end-application, for example an emergency response center for further action.

cell locate block diagramThe technology thus requires that a database of network cell attributes and corresponding GPS fixes has been previously seeded to function over specific areas of operation, for example:

* at a customers’ depots for a monitoring application where goods may be stored indoors, for example in a warehouse or inside a container
* within a specific local area for the security of people who may wander away from facilities such as children, hospital patients or the elderly.
* along motorways for tracking stolen vehicles.

Such a database can be quickly generated by users, or by a short survey using the device to collect cellular observations tagged with their GPS positions.

The CellLocate server adds intelligence by extrapolating location based on the areas where network cells are visible. A simplified example follows:

Cell Locate figure 1Step 1, seed the database: Observations of network cell A are reported, each matched with its corresponding GPS location. The data is transmitted to and stored on the CellLocate server. This is repeated over the desired region (also for network cells B, C, etc) where CellLocate should operate. Note that in some applications this process occurs automatically as part of normal system usage.







cell locate figure 2Step 2, a new observation in an unknown place: When a device enters the area of Cell A visibility and a CellLocate fix is required (circled red A, actual location), the cellular environment is observed, and the visible cells (here cell A), reported to the server. This is repeated for neighboring network cells B and C (for an example with 3 cells visible).






cell locate figure 3Step 3, derive location by matching network cell A visibility with historical observations: The server uses proprietary algorithms to match the current observation with previous observations in the database, and produce a position estimate P (we show the middle purely for illustration purposes), as well as an uncertainty factor.

This information is then returned to the device for use by the application.

This method of hybrid positioning works for locations where no GPS fix is possible (i.e. indoors): so long as cell A visibility is confirmed, a position based on samples where the cell has been previously seen can be assigned as this approximate position.

cell locate figure 4Increasing Accuracy

The simplified example above is based on visibility of a single network cell A. This will provide an approximate position as all observations of cell A will result in a location near the middle of the area where the cell has been previously seen.

The accuracy is increased by recording multiple cell visibilities for each location. This can be illustrated in the diagram on the left:

If the device can see the cells A, B, and C, then when it submits the request with the observation to the CellLocate server, the proprietary algorithms are able to match the current observation to the area where the 3 cells are visible, and report a more accurate location.

After initialization, the method described above may function without a GPS receiver, though typically this technology would be used in equipment with GPS to augment the GPS positioning in areas where GPS satellite visibility is limited or blocked (i.e. indoors), providing greater reliability and coverage.


The accuracy depends on the density of network cells and database population. Hence, the best results can be achieved in urban environments where cellular base stations are spaced a few hundred meters apart.

ec1112bwe103image3In rural areas the cell sizes are greater and the accuracy is less. However (and in contrast to the limited coverage offered by WiFi positioning techniques) cellular signals are still visible in rural areas, and a position estimate can still be provided by CellLocate.

The cellular network evolves, with changes made by network operators, for example during network maintenance, or to add communication network capacity. Despite this, devices using CellLocate are able to deliver best performance by scanning the cellular environment not only for the cells belonging to the serving cell network, but also for the cells of other network operators. The proprietary matching algorithms work equally well for the other network operators’ cells, and provide a position estimate that is not only more robust against network changes, but also has increased accuracy because of the greater number of cells observed.


The advantages of using CellLocate are the following:

ec1112bwe103image4* Indoor positioning: GPS doesn’t work during indoor segments of a journey. CellLocate augments GPS by providing an approximate fix even when GPS satellites are blocked such as within warehouses, airports, or shielded containers. Incidences such as unauthorized stops within a building can then be instantly identified and corrective actions taken.

* 100 percent positioning: for mission critical applications such as tracking of stolen vehicles, valuable goods or people, CellLocate in conjunction with GPS will always deliver a fix, even in the presence of GPS jammers. In addition, built-in jamming detection in u-blox GPS modules can pre-alert the system of potential criminal activity.

Easy initialization: for particular applications cellular observations in the key locations or area of interest can readily be gathered – or may indeed already be available.

It improves over time: as a “self-learning” system, the CellLocate database continuously improves over time, increasing the density of cellular observations with GPS fixes during normal operation. This is also important as operators continuously add new cells, as well as change the attributes of existing ones.