Wi-Fi CERTIFIED Location Orientation

Wi-Fi CERTIFIED Location™ Orientation
November 2017
Proprietary | © Wi-Fi Alliance Do not distribute or reproduce without permission of Wi-Fi Alliance Wi-Fi CERTIFIED Location Orientation 1
What is Wi-Fi Location?
Wi-Fi CERTIFIED Location
• Provides meter-level accuracy using the Fine
Timing Measurement (FTM) protocol from
the Institute of Electrical and Electronics
Engineers (IEEE) 802.11-2016
• Enables floor level vertical location indoors
• Can leverage existing infrastructure in
Wi-Fi Location enabled networks
• Provides connectivity to indoor location
services, such as analytics, user positioning,
and tracking
• Delivers better performance in multipath
environments than already existing angle-
based and received signal strength indication
(RSSI) methods
• Allows user control of when to share location
Underlying technologies
Wi-Fi Location – underlying technologies
Wi-Fi Location leverages existing and emerging industry standards and

Wi-Fi technologies
• IEEE 802.11n, 802.11ac
• IEEE 802.11-2016
– FTM
– Radio Measurement
• Location configuration information (LCI)
• FTM Range
• Location Civic
– Access network query protocol (ANQP)
• Access point (AP) Geospatial Location
• AP Civic Location
• AP Location Public Identifier URI/FQDN*
• WPA2™ with Protected Management Frames (PMF)
* URI: uniform resource identifier

FQDN: fully qualified domain name
Security considerations
Location Control Policy
• Allows the AP/client device to control how its location is used and shared
• Policy setting will determine if the AP can share the mobile device location with other
devices in the network
– Mobile device may choose to keep its location private (e.g.: child’s phone in public area)
– Mobile device and AP may choose to mutually share their locations
• Finding a nearby printer
• Person-down alerts in a manufacturing facility
• Shopper in mall wants access to venue’s sales and promotions
Protected Management Frames

• 802.11w ratification (merged into IEEE 802.11-2012 standard) ensures secure exchange of
classified management frames (Robust Management frames)
• The certification program ensures that PMF enabled access points and client/mobile devices
interoperate with other PMF enabled devices as well as devices that do not support PMF
• Unicast and multicast management action frames protected using WPA2
• Post association, Generic Advertisement Service (GAS) frames are protected using WPA2
and transmitted using protected dual of public action frames
Location sequence diagram
Access Point Mobile Device

User installs LBS app*
Beacon
Probe Request (Scan/Discovery)
Probe Response (FTM Capabilities)

AP and
ANQP/GAS exchange (Advertise capabilities)
device are
aware of
Association (Secured) each other’s
location
FTM session (LCI/Z, civic address)
Protected ANQP (URI/FQDN, LCI/Z, civic address)
Protected Radio Measurement, Neighbor Report
* Location-based services application
Program requirements
Access point and mobile device requirements
Prerequisite certification requirements

AP: Wi-Fi CERTIFIED™ ac certification
Mobile device: Wi-Fi CERTIFIED n certification (or higher)
AP & Mobile device: Protected Management Frames for Robust Action frames
FTM protocol requirements

AP: FTM protocol is mandatory when the AP is the responder – “Sending STA*” of the FTM
frame but receives the FTM Request frame
Mobile device: FTM protocol is mandatory when the mobile device is the initiator –
“Receiving STA*” of the FTM frame, but sends the FTM Request frame
* STA: station, client device
Location mandatory required capabilities
Capability/mechanism AP Mobile Device
FTM protocol ✓ ✓
AP location in FTM ✓ ✓
Set of AP locations in neighbor report ✓ ✓
Z sub-element ✓ ✓
AP requests associated device FTM
measurements ✓ ✓
Mobile device location in associated state ✓
AP location in ANQP ✓ ✓
Location optional and conditional mandatory capabilities
Optional capabilities
Capability/mechanism AP Mobile Device
Mobile device location in associated state ✓

Timestamp measurement on first FTM exchange ✓ ✓
Device requests Public Identifier URI/FQDN ✓ ✓
Conditionally mandatory capability for APs under test that support multiple basic
service set identifications (BSSIDs) sharing the same antenna connector
Capability/mechanism AP
AP supporting multiple BSSIDs advertises the
BSSID information in Neighbor Report and LCI ✓
Overview of location AP and client device capabilities
• FTM protocol
– Scheduled measurement (ASAP = 0)
– Immediate measurement (ASAP = 1)
Note: ASAP refers to device capability where timestamp measurement can be achieved on
first FTM exchange
• AP location in FTM (LCI/Z information, civic address)
• Set of neighboring APs location in neighbor report
• Associated mobile device FTM range measurements
• Associated mobile device location information
• AP location in ANQP (LCI/Z information, civic address, URI/FQDN)
• Co-located BSSIDs
Fine Timing Measurement (FTM) protocol
FTM protocol
• The FTM protocol allows a client device to obtain its range relative to another AP. In order
for a client to obtain its location, it may perform an FTM procedure with multiple APs
whose locations are known
• An FTM session is an instance of a FTM protocol between an initiating device and a
responding AP
– The mobile device is the initiator (“Receiving STA*” of the FTM frame, but sends the
FTM Request frame)
– The AP is the responder (“Sending STA*” of the FTM frame, but receives the FTM
Request frame)
• An FTM session may be requested by an initiating device in the pre-association or post-
association state
– FTM Request and FTM Action frames are public action frames which are transmitted in
open mode pre- or post-association
• Concurrent FTM sessions might occur with responding APs that are members of different
basic service sets (BSS), different extended service sets (ESS), or possibly outside of a
BSS, with each session using its own scheduling, channel and operational parameters
* STA: station, client device
Location measured by time of arrival:
a geometrical positioning algorithm
The range from mobile device to AP can be calculated using the signal propagation
properties:
• Time of arrival (ToA)
• Time of departure (ToD) STA: station, client device
• Timing offset (ToF)
• Round trip time (RTT)
• Speed of light (C)
ToF = [(t4-t1) – (t3-t2)]/2

Range = C * ToF
Note: Some variants exist optimizing on the medium usage, battery/power and AP responsiveness
Image from the IEEE 802.11-2016 specification
Mandatory supported physical layer (PHY) formats and
bandwidths for transmitting FTM frames
Better range accuracy is generally achieved measuring the arrival timestamps (ToA)
of a wider bandwidth physical protocol data unit (PPDU).
However, there are a range of client devices that might be 802.11n-only that need
their location.
PHY format For APs For clients For APs For clients
and that support that support that support that support
bandwidth 2.4 GHz 2.4 GHz 5 GHz 5 GHz
20 MHz HT_MF ✓ ✓ ✓ ✓
20 MHz VHT Not applicable Not applicable ✓ ✓
40 MHz HT MF Not tested Not tested ✓ ✓
FTM Request frame
• FTM Request frame is an action frame

• Mobile device that supports FTM procedure and acting as an initiator transmits this frame in
order to initiate FTM session
• Transmitted to negotiate scheduling and operational parameters of requested FTM session
• After transmission of this frame, the initiating device is deemed ready to receive a FTM
frame from the responding AP device
LCI Location Civic Fine Timing

Measurement Measurement Measurement
Category Public Action Trigger
Request Request Parameters
(optional) (optional) (optional)
Octets: 1 1 1 variable variable variable
Image recreated from the IEEE 802.11-2016 specification
FTM Parameters element
The FTM Parameters element contains a number of fields that are used to negotiate the
REQUESTED (from the mobile device) or ALLOCATED (from the AP device) FTM
configuration for an FTM session
Images from the IEEE 802.11-2016 specification
FTM Action frame
• The FTM frame is used to support the FTM procedure
– LCI Report field when present indicates the LCI of the transmitting device and includes
the Z and Usage Rules/Policy or unknown LCI
– Location Civic Report field when present indicates the civic address of the transmitting
device or an unknown civic address
• A responding device transmits FTM frames in overlapping pairs of consecutive frames
Follow Up
Category Public Action Dialog Token ToD ToA
Dialog Token
Octets: 1 1 1 1 6 6
Fine Timing
Location
LCI Report Measurement
ToD Error ToA Error Civic Report
(optional) Parameters
(optional)
(optional)
Octets: 2 2 variable variable variable
Images recreated from the IEEE 802.11-2016 specification
As soon as possible (ASAP) capability
• FTM protocol permits a mobile device to request either

– Scheduled measurement
• No urgent need to start FTM session, ASAP = 0
• FTM session operational parameters (example: start of FTM session) are
scheduled based on resource availability and capability
– Immediate measurement
• Urgent need to receive Location measurements, ASAP = 1
• The initiating device can request the responding AP to start the FTM session as
soon as possible
• The AP is capable of capturing timestamps associated with an initial FTM frame
and sending them in the following FTM frame
• ASAP measurements has less overhead, but involves more complexity and
resource contention
FTM session, ASAP = 0 (scheduled)
Image from IEEE 802.11-2016
FTM session, ASAP = 1 (immediate)
Image from IEEE 802.11-2016 * STA: station, client device
AP location in FTM:
LCI / Z information, civic address
AP location information delivery to client device using
FTM protocol
• Location is most valuable for a stranger at a new venue

– Immediately upon arrival
– Where they may not have credentials
• FTM trilateration requires the venue to have at least 3 APs installed
• It may be onerous if the client has to associate to an AP for better location accuracy
– Thus a pre-association method for delivering an AP’s location is valuable
– AP can deliver its location (civic and/or LCI) within the first two frames of an FTM session
Location configuration information (LCI)
• LCI as defined in Internet Engineering Task Force Request for Comments (IETF RFC) 6225
includes latitude, longitude and altitude with uncertainty indicators for each
• If the mobile device can use location information in geospatial format, then the LCI report
procedures can be used to obtain this information from AP
• Information that can be exchanged using LCI includes:
– Latitude, longitude, altitude
– Z information is used to report the floor and location of the device with respect to the
floor level
– Usage Rules/Policy information is used to report the usage rules of the reporting device
• LCI information exchange can also be used by devices to realize:

– Initiating device location (where am I?)
– Reporting AP location (where are you?)
– Third party device location, dependent on the usage rules and policies of the
target device
Location Civic information (civic address)
• Location Civic information formats the location information in accordance with IETF RFC
4776 starting with the country code
• Civic address is the number, the street or road name, and the community name assigned
to residential, commercial, institutional and industrial buildings
• Location Civic Report field when present indicates the civic address of the transmitting
device or an unknown civic address in the following format
• When IETF RFC 4776 is followed, other optional information can be retrieved including:
– Location Reference
– Location Shape
– Map Image
Neighbor report:
neighboring AP location
Neighbor report exchange extension to provide
location information
• Neighbor report exchange was ratified by IEEE 802.11k and later was merged into the
802.11-2012 standard
• IEEE 802.11-2016 has extended neighbor report to provide neighboring AP LCI and
Location Civic measurements in addition to providing neighboring APs information such as:
– Channel number
– Operating class
– Mobility domain
– Wide bandwidth channel information
• Post association, a mobile device can request neighboring AP location information using a
Neighbor Report Request frame
– Both Neighbor Report Request and Report frames are protected frames and are
transmitted using the pairwise keys derived during PMF enabled association
– Post-association advertisement with PMF provides integrity of the location data and
authenticity of the sender
Associated device FTM
range measurements
AP requests associated device FTM measurements
• Low capability devices such as asset tags may not be able to compute their location, nor
need the result. It may only be practical for them to initiate FTM measurements and report
the results to the network, where a location is computed
• This same mechanism is suitable for venues that wish only a trusted app to receive
precise location information (whereas an OS API might expose the same location to all
apps, regardless of venue trust). Here the app retrieves the device location via an upper
layer protocol
• The Measurement Request / Report protocol has been extended to include a request for
FTM range measurements
FTM Range report
• The FTM Range report provides a means for an AP to request the

associated device to measure and report the ranges between that device
and other nearby APs
• The client device determines the ranges using the FTM procedure
Range Entry Error Entry Optional Sub-

Range Entry Error Entry
Count Count elements
Octets: 1 M x 15 1 N x 11 variable
Max Range
Measurement
BSSID Range Error Reserved
Start Time
Exponent
Octets: 4 6 3 1 1
Images recreated from the IEEE 802.11-2016 specification
Location ranging sequence diagram
AP1 AP2 AP3
Beacon / Probe Request / Probe Response
Association
FTM range request (Neighbor report: AP1, AP2,

AP3)
FTM session
LCI exchange
FTM session
FTM session
FTM range report

Range
information for
AP1, AP2, AP3
Associated device location information
Reasonable Radio Measurement Request
• A client device under test acting as a responder shall accept all reasonable radio
measurement requests with Measurement Type set to FTM Range or LCI.
Unreasonable requests are those that are:
– Denied by user choice (privacy policy settings)
– Lead to the insecure transfer of range (e.g., no PMF)
– Require off-channel measurements that would preclude achieving current on-channel
Quality of Service (QoS) requirements
– Received while at an atypical low battery level or disallowed by an operating system low
power profile setting
– Indicative of a denial-of-service attack
– Excessive as defined by current client device policy
AP requests associated device location
• There are many benefits if the venue can determine the current location of mobile devices
within their venue
– Retailers, higher education and airport/train station operators want to understand where
guests spend their time, where the chokepoints are, how signage affects guest behavior,
what locations are more valuable (real estate in a mall, aisle in a supermarket), etc.
– Enterprises want to understand room/cube occupancy for space planning
– Healthcare wants to verify that doctors, entering a room, wash their hands (and many
other use cases)
– Manufacturing/heavy industries want person-down alerts
• The LCI request / report exchange meets these needs

– The responder may determine location using a combination of technologies
• Global Positioning System (GPS)
• Past measurements
• Accelerometer-indicating-no-movement
• FTM
Radio Measurement Request
• Radio Measurement Request and Report are robust Management Action frames
• A request frame is transmitted by the AP requesting the associated device to make one or
more LCI measurements on one or more channels
– Client device can accept the request and determine its location given:
• Privacy policy setting allows the LCI to be reported
• Power consumption constraints
• Other usage rules
Radio Measurement
Number of
Category Measurement Dialog Token Request
Repetitions
Action Elements
Octets: 1 1 1 2 variable
Image recreated from the IEEE 802.11-2016 specification
Location determination by mobile device
• Location algorithm running on a device may

be a function of proximity, triangulation,
fingerprinting, trilateration, etc.
• In the case that multiple sources of

measurements are available, the location
algorithm might fuse the different sources
together in order to provide an overall
better location estimate
• Mobile device may use FTM procedures

with multiple APs in its vicinity to determine
its LCI component
Trilateration
AP location in ANQP:
LCI/Z information, civic address,
URI/FQDN
ANQP for retrieving location information
• Access network query protocol (ANQP) is the query protocol for Access Network
information retrieval transported by GAS Public Action frames
• ANQP exchange can be performed both pre-association and post-association to
obtain access point’s location information
• Post-association, ANQP frames are transmitted in protected mode if PMF is
enabled, hence securing the management frame exchange between mobile
device and AP
ANQP information Action

AP Geospatial Location The AP Geospatial Location ANQP-element provides
the AP’s location in LCI format
AP Civic Location The AP Civic Location ANQP-element provides the
AP’s location in civic format
AP Location Public Identifier The AP Location Public Identifier URI/FQDN ANQP-
element provides an indirect reference to the location
information for the AP
AP Location Public Identifier URI/FQDN
• The indoor/Wi-Fi location eco-system is overlapped with the wider outdoor/cellular
location eco-system
• Cellular location (delivery of GPS assistance data, e911 client location, etc.) is enabled by:
– Control plane (~Wi-Fi management frames) or
– Data plane (~Wi-Fi data frames) where the Open Mobile Alliance (OMA) Secure User
Plane Location (SUPL) is the leading protocol. Also a role for Internet Engineering Task
Force’s HTTP-Enabled Location Delivery (IETF HELD)
• OMA’s SUPL has an architectural entity “Discovered SLP* server” that provides location
services for a venue (e.g. a mall/airport), but not the venue’s address
• Location supports an optional discovery mechanism that provides the network/Medium
Access Control (MAC)/Physical Layer (PHY) to enable SUPL server discovery
* SLP: SUPL Location Platform
AP supports multiple BSSIDs:
co-located BSSIDs
Co-located BSSID List
• Definition of co-located BSS – Basic service sets advertised by an AP which share the
same antenna connector
• The co-located BSSID List is used to report the list of BSSIDs, when there is at least one
other BSS which is co-located with the reporting BSS
• Co-located BSSID List can be provided by the access point in either:
– LCI report
– Civic Location report
– Neighbor report
– ANQP responses
Sub-element MaxBSSID BSSID #1 BSSID #n

Length …
ID Indicator (optional) (optional)
Octets: 1 1 1 6 6
Image recreated from the IEEE 802.11REVmc specification
FTM sequence diagram in presence of
co-located BSSID
References
References
• IEEE P802.11-2016: IEEE Standard for Information technology—Telecommunications and

information exchange between 223 systems; Local and metropolitan area networks—
Specific requirements; Part 11: Wireless LAN Medium Access Control (MAC) and Physical
Layer 224 (PHY) Specifications
• IEEE 802.11ac: 802.11ac-2013 - IEEE Standard for Information technology--
Telecommunications and information exchange between systems—Local and metropolitan
area networks-- Specific requirements--Part 11: Wireless LAN Medium Access Control
(MAC) and Physical Layer (PHY) Specifications--Amendment 4: Enhancements for Very
High Throughput for Operation in Bands below 6 GHz
• IEEE 802.11-2012 “Part 11: Wireless LAN Medium Access Control (MAC) and Physical
Layer (PHY) Specifications”, March 2012
• Wi-Fi Alliance Peer-to-Peer (P2P) Technical Specification, https://www.wi-
fi.org/members/certification-programs
• RFC 6225, DHCP options for coordinate based location configuration information
• RFC 4776, DHCP option for civic addresses configuration information
Terms and acronyms
Terms and acronyms (1 of 4)
Term Definition
A client device, even with one antenna, measures the relative phases from another infrastructure
Angle of Departure
device transmitting (e.g. in turn) from multiple of its antennas. The array of relative phases can be
location
used to compute the location of the client device.
AP Access point
The ability of an AP/client device to control how its location, tagged in an identifiable way, is used.
For instance,
- If the AP/client device explicitly transmits its location, then the AP/client device might also
transmit a policy limiting the usage of its location tagged in an identifiable way (e.g. IETF
Geopriv), and for the policy to be respected by the recipient(s) to the extent that the policy
does not impinge upon the aligned purposes of communications, network operation and
management, security, emergency services and lawful interception
AP/client device - If the AP/client device implicitly provides information about its location (for instance sending by
location control a frame that includes the AP/client device’s MAC address and that can be heard by nearby
devices), then the AP/client device might also transmit a policy limiting the usage of its location
tagged in an identifiable way, and for the policy to be respected by the recipient(s) to the
extent that the policy does not impinge upon the aligned purposes of communications, network
operation and management, security, emergency services and lawful interception
- The AP/client device might obscure its identity, explicit location, and/or implicit information
about its location in order to protect the AP/client device’s identity or to degrade a third party’s
estimated location of the AP/client device to the level allowed by the AP/client device
API Application programming interface
Application (related A software process with a user interface, that a user may employ to accomplish a task. Example
term: app) tasks include web browsing, instant messaging, sending a file and streaming media.
Term Definition
Reference data used to help a device perform location. For instance, in the GNSS context this
Assistance data might be satellite-related information; and in the Wi-Fi client device context this might be a list of
AP MAC address and location records.
The ability of a network or a client device to determine the integrity of the location of the client
device, where the client device or the network might be untrusted (at least initially).
Authenticated location
For example a network determines the location of a rogue AP, or a client device may determine its
location with respect to a geofence.
BSS, BSSID Basic service set, basic service set identification
D-SLP Discovered SUPL Location Platform
ESS Extended service set

Estimated location
The estimated position of a device, which is distinct from the measurements used to compute the
(related terms:
location.
estimated geolocation,
localization)
FQDN Fully qualified domain name
GAS Generic Advertisement Service
GNSS Global Navigation Satellite System (e.g. GPS, GLONASS)
GPS Global Positioning System
Term Definition
Geofence A virtual perimeter for a real-world geographic area
HELD HTTP-Enabled Location Delivery
IEEE Institute of Electrical and Electronics
IETF Internet Engineering Task Force
LBS app Location-based services application

A function, such as proximity, triangulation, trilateration, multilateration (hyperbolic navigation) or
fingerprinting that converts measurements and assistance data into an estimated location.
Location Algorithm
In the case that multiple sources of measurements are available, the location algorithm might fuse
the different sources together in order to provide an overall better location estimate.
LCI Location configuration information
MRD Marketing Requirements Document
OMA Open Mobile Alliance
OS Operating System
A location algorithm: “If you hear it, you’re near it”. If a device can receive transmissions by a
transmitter, then estimate the location of the device as the location associated with the transmitter.
Proximity For instance, an infra-red emitter in a small room is associated with the room and transmits a
unique code. An infra-red receiver within a device detects the unique code and determines its
location as within the associated room.
Term Definition
QoS Quality of Service
A method to determine the distance from one device to another device, such as the distance
between an AP and a client device.
Ranging
Estimating the location of a device using ranging requires ranging to three or more devices, the
location of the devices to be known, and a location algorithm.
Location technology that matches measured RSSIs at an unknown location with measured (or
RSSI fingerprinting
partially measured) RSSIs at known locations to estimate the unknown location.
Sensors (related
Sensors in the same device as the Wi-Fi subsystem, such as accelerometer, gyroscope,
terms: dead reckoning,
magnetometer (compass) and barometer (altimeter).
MEMS)
SIFS Short interframe space
STA Station, client device
SUPL Secure User Plane Location
ToA Time of arrival
URI Uniform resource identifier

The administrator with authority to deploy APs at a venue and to determine what location services
Venue admin
are enabled and under what conditions.
WLAN Wireless Local Area Network
Appendix
How FTM compares to Timing Measurement
TM FTM
IEEE Established with IEEE 802.11- Established with IEEE 802.11-2016
Standard 2012 and 802.1AS-2011
Frame Class 3 frame Class 1 frame

(post association) (both pre- and post- association)
Timestamp In units of 10 nanoseconds In units of picoseconds
resolution
When frame No indication of when TM frame 1st FTM frame should to be sent within
sent will be sent – initiation is 10 milliseconds of reception of initial
controlled by Master device FTM request
Burst No concept of burst Scheduling and operational parameters
of an FTM session can be negotiated
(like FTMs per burst, number of bursts,
burst period)
Frame No control of either the spacing Min Delta FTM
spacing between consecutive TM frames
or the number of TM frames to
be received
Limitations of other existing technologies
• GPS
– Limited availability indoors
• xGPS
– Somewhat limited availability indoors does not address many indoor use cases
– In development
• Pseudolites
– Not widely implemented and deployed
– Suitable spectrum is unclear
– Proprietary implementations dominate
• 3G/4G
– Small-cell and/or time-based
– Limited accuracy with macro-cells
• Angle of arrival/departure using Bluetooth Low Energy
– Legacy implementations may exist
– Large venue must support extra antennas
– Requires line-of-sight, denser infrastructure
– More expensive to maintain
Limitations of existing Wi-Fi technologies
• Proximity based technologies
– Short range accuracy
– Additional infrastructure needed
• Crowdsourced RSSI fingerprinting using Wi-Fi
– Poor accuracy, limits benefits to venue admin if delivered via cloud
• Venue-administrator-approved client-device-calculated RSSI fingerprinting using Wi-Fi

– Requires a manual site survey
– Location data may only be available through a venue loyalty application
• Infrastructure-calculated RSSI fingerprinting using Wi-Fi

– Marginal accuracy
– Protocol for infrastructure to share calculated location with client device is not
interoperable/certified
Limitations of existing Wi-Fi technologies
• Infrastructure-calculated time difference of arrival using Wi-Fi, etc.

– Use of legacy frame formats means limited bandwidth, entails limited accuracy due to
lower channel resolution
– APs must change to client device’s channel which substantially limits the solution scale
and is non std. operation (802.11 APs are always on channel)
– Protocol for infrastructure to share calculated location with client device is not certified
• Client device-calculated round-trip time using Wi-Fi

– Requires precise characterization of AP short interframe space (SIFS); if the
characterization is statistical then more packets need to be exchanged
– Limited multipath immunity, sensitive to non-line-of-sight (NLOS)
– Legacy frame formats means narrow band operation which limits accuracy hence the
much higher sensitivity to NLOS
Location technologies – power consumption at a glance
Power usage of different location technologies is a key determinant of their

market success
Technology Power Reference

Wi-Fi 1000 mW (high power) for 5AP x 500us / 5sec = 0.5 mW Research
200 mA @ 3.3 V for 5AP x 500 us / 5 sec = 0.3 mW Secondary

source
GPS 430 mW active; 170 mW sleep Research
47 mW + 3.3 mA @ 1.5-3.6V (51-59 mW) Secondary

source;
Data-Sheet
Other sensory 9 mW – 21 mW Secondary
source;
technologies
Data-Sheet
Note: The "ON Time" of 500usec is the ideal case scenario. A typical field scenario may have "ON Time"
in the range of 5msec to 15msec.

Wi-Fi CERTIFIED Location Orientation

Uploaded by

Copyright:

Available Formats

Wi-Fi CERTIFIED Location Orientation

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Wi-Fi CERTIFIED Location Orientation

Uploaded by

Copyright:

Available Formats

Wi-Fi CERTIFIED Location™ Orientation

Wi-Fi Location leverages existing and emerging industry standards and

• WPA2™ with Protected Management Frames (PMF)

* URI: uniform resource identifier

Protected Management Frames

Access Point Mobile Device

Probe Request (Scan/Discovery)

Probe Response (FTM Capabilities)

Protected ANQP (URI/FQDN, LCI/Z, civic address)

Protected Radio Measurement, Neighbor Report

* Location-based services application

Prerequisite certification requirements

FTM protocol requirements

* STA: station, client device

Capability/mechanism AP Mobile Device

Capability/mechanism AP Mobile Device

Mobile device location in associated state ✓

* STA: station, client device

ToF = [(t4-t1) – (t3-t2)]/2

Image from the IEEE 802.11-2016 specification

• FTM Request frame is an action frame

LCI Location Civic Fine Timing

Octets: 1 1 1 variable variable variable

Image recreated from the IEEE 802.11-2016 specification

Images from the IEEE 802.11-2016 specification

Images recreated from the IEEE 802.11-2016 specification

• FTM protocol permits a mobile device to request either

Image from IEEE 802.11-2016

Image from IEEE 802.11-2016 * STA: station, client device

• Location is most valuable for a stranger at a new venue

• LCI information exchange can also be used by devices to realize:

• The FTM Range report provides a means for an AP to request the

Range Entry Error Entry Optional Sub-

AP1 AP2 AP3

Beacon / Probe Request / Probe Response

FTM range request (Neighbor report: AP1, AP2,

FTM range report

• The LCI request / report exchange meets these needs

Image recreated from the IEEE 802.11-2016 specification

• Location algorithm running on a device may

• In the case that multiple sources of

• Mobile device may use FTM procedures

ANQP information Action

* SLP: SUPL Location Platform

Sub-element MaxBSSID BSSID #1 BSSID #n

Image recreated from the IEEE 802.11REVmc specification

• IEEE P802.11-2016: IEEE Standard for Information technology—Telecommunications and

D-SLP Discovered SUPL Location Platform

ESS Extended service set

GAS Generic Advertisement Service

GNSS Global Navigation Satellite System (e.g. GPS, GLONASS)

GPS Global Positioning System

HELD HTTP-Enabled Location Delivery

IEEE Institute of Electrical and Electronics

IETF Internet Engineering Task Force

LBS app Location-based services application

MRD Marketing Requirements Document

OMA Open Mobile Alliance

STA Station, client device

SUPL Secure User Plane Location