ArticlePDF Available

A Survey on Wireless Transmitter Localization Using Signal Strength Measurements

  • HERE Technologies

Abstract and Figures

Knowledge of deployed transmitters’ (Tx) locations in a wireless network improves many aspects of network management. Operators and building administrators are interested in locating unknown Txs for optimizing new Tx placement, detecting and removing unauthorized Txs, selecting the nearest Tx to offload traffic onto it, and constructing radio maps for indoor and outdoor navigation. This survey provides a comprehensive review of existing algorithms that estimate the location of a wireless Tx given a set of observations with the received signal strength indication. Algorithms that require the observations to be location-tagged are suitable for outdoor mapping or small-scale indoor mapping, while algorithms that allow most observations to be unlocated trade off some accuracy to enable large-scale crowdsourcing. This article presents empirical evaluation of the algorithms using numerical simulations and real-world Bluetooth Low Energy data.
This content is subject to copyright. Terms and conditions apply.
Review Article
A Survey on Wireless Transmitter Localization Using Signal
Strength Measurements
Henri Nurminen,1Marzieh Dashti,2and Robert Piché1
1Tampere University of Technology, Tampere, Finland
Correspondence should be addressed to Henri Nurminen; henri.nurminen@tut.
Received  October ; Accepted  January ; Published  February 
Academic Editor: Sunwoo Kim
Copyright ©  Henri Nurminen et al. is is an open access article distributed under the Creative Commons Attribution
License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly
Knowledge of deployed transmitters’ (Tx) locations in a wireless network improves many aspects of network management.
Operators and building administrators are interested in locating unknown Txs for optimizing new Tx placement, detecting and
removing unauthorized Txs, selecting the nearest Tx to ooad trac onto it, and constructing radio maps for indoor and outdoor
navigation. is survey provides a comprehensive review of existing algorithms that estimate the location of a wireless Tx given a
set of observations with the received signal strength indication. Algorithms that require the observations to be location-tagged are
suitable for outdoor mapping or small-scale indoor mapping, while algorithms that allow most observations to be unlocated trade
o some accuracy to enable large-scale crowdsourcing. is article presents empirical evaluation of the algorithms using numerical
simulations and real-world Bluetooth Low Energy data.
1. Introduction
Locating the wireless transmitters (Tx) in the network pro-
vides mobile network operators with important and relevant
information for a wide range of purposes, including nd-
ing rogue and nonfunctional access points (AP), planning
and operating the communication networks, and estimating
the radio frequency propagation properties of an area. Tx
location determination is also used when constructing radio
maps for localization services.
Every operator aims at providing good coverage so
that subscribers in most locations can access the network.
Competition between operators in providing the subscribers
with continuous and uninterrupted data usage prompt them
to nd unknown Txs that mainly belong to their competitors.
Based on the knowledge of the deployed Tx locations, oper-
ators decide optimal places for installing new infrastructure
within the area or steering the beam directions. An unknown
Tx can be a WLAN (wireless local area network) AP with
unlicensed spectrum or a femtocell AP whose spectrum is
licensed to the operator. ese Txs may be managed by
individuals or groups or the operator itself.
e operators ooad users from their G or G cells
to adjacent small cells or indoor femtocells when the trac
becomes heavy []. Knowing Txs’ locations and coverage
areas helps the operators to identify which cells are nearby.
Locating unknown Txs helps the administrators secure
the network when security loopholes are detected or when
there are intruders that breach the area managed by the
administrators []. Also when administrators update their
existing Tx locations helps to determine optimal locations for
new Txs.
Moreover, knowledge of Tx locations assists navigation
in environments where GNSS (Global Navigation Satellite
System) navigation is not feasible such as indoors. Indoor
navigation requires detailed knowledge of the network topol-
ogy of the building, and unmanaged Txs can also be used
provided that their locations are estimated. In many indoor
localization studies [–], it is assumed that Tx locations are
known a priori. is assumption is usually only valid for Txs
that belong to the owner of the infrastructure.
is survey provides the reader with a comprehensive
review on methods for locating wireless Txs using a set of
Wireless Communications and Mobile Computing
Volume 2017, Article ID 2569645, 12 pages
Wireless Communications and Mobile Computing
Measurement © OpenStreetMap contributors
500 m
10 m
F : An outdoor cellular base station (a) and an indoor BLE Tx
(b) with RSS measurement sets. Red color indicates a strong RSS.
measurements of the received signal strength (RSS). Most of
the presented methods can be applied to dierent types of
wireless networks, such as WLAN, Bluetooth Low Energy
(BLE), and cellular networks. Figure  shows examples of
an outdoor cellular base station and an indoor BLE Tx and
RSS measurement sets collected in the respective areas. RSS
information is available in reception reports of most wireless
networks’ receivers (Rx) without any special hardware or
soware modications [].
is article categorizes the methods based on two criteria:
measurement type and reference location requirement. e
measurement type can be the actual RSS from a Tx or just
the connectivity, that is, whether the Tx can be sensed or not.
that is, they assume that every observation includes accurate
information about the location of the measurement. Some
methods assume that most of the observations are unlocated,
lacking the location information. e former are more accu-
rate but are costly to implement, while the latter are especially
located measurements through numerical simulations and
real-world BLE data.
e structure of this article is as follows: rstly, the
methods are presented in detail, connectivity-only methods
rst in Section , then RSS based methods that use mea-
surements with known locations in Section , and nally
RSS based methods that do not require all measurements to
be located in Section . Secondly, experimental results are
presented in Section , along with a table that summarizes the
basic practical properties of each method. Finally, Section 
presents the conclusions.
2. Connectivity Based Methods with
Located Observations
Connectivity based Tx localization algorithms assume that
the closer one is to the Tx, the higher is the probability
of observing the Tx when listening with a Rx device. e
observations consist of tuples (p𝑖,ID𝑖),wherep𝑖is the
reference position of the th measurement and ID𝑖is the set of
Tx identiers observed at the th measurement. Connectivity
actually means that the RSS exceeds the receiver’s sensitivity
threshold []. us, connectivity based methods in fact rely
on a very coarsely quantized RSS.
e simplest connectivity based Tx localization algorithm
is the (unweighted) centroid algorithm that was proposed for
the localization of a wireless sensor networks nodes by Bulusu
et al. []. e centroid algorithm has also been proposed and
tested at least in [–]. e estimate of the location of the th
𝑖=1 ID𝑖⋅p𝑖,()
where #is the number of elements in set ,∈means
that is an element of the set ,is the total number of
measurements, and ⋅is the indicator function
0, statement is false
1, statement is true.()
e centroid location is the solution of the optimization
arg min
𝑖=1 ∈ID𝑖p𝑖m2,()
arg min
where 𝑖=∈ID𝑖and is the identity matrix, and
() follows from () by the weighted linear least squares
formula. Typically only the measurements where the th Tx
has been observed are used in the estimation of m𝑗;thatis,
the information of not observing the th Tx in a measurement
is omitted. In this sense, the centroid also has a probabilistic
interpretation as the maximum likelihood solution to the
measurement model
Wireless Communications and Mobile Computing
x (m)
y (m)
True Tx location
Robust centroid
F : Robust centroid (]=4) can outperform the conventional
centroid algorithm when there are outlier measurements.
where the positive-denite matrix isaconstantthatdoes
not aect the solution and Pdenotes probability. Koski et al.
[] also estimate the coverage area parameter matrix for the
purpose of online mobile Rx positioning.
e algorithm of Pich´
e [] can be considered a robus-
tied version of the centroid algorithm. is work considers
the assumption that there are outlier measurements with, for
example, erroneous reference position in the observation set
by relying on the Student’s -distribution that gives a higher
probability for occasionally receiving the signal far from the
∝1+1]p𝑖m𝑗T−1 p𝑖m𝑗−(]+2)/2 ,()
where is a constant that does not aect the solution and ]
R+is a model parameter degrees of freedom, and the closer ]
is to zero, the more robust the algorithm is. Based on the Stu-
dent’s model [], use an EM (expectation–maximization)
algorithm to solve the maximum a posteriori values of the
centroid and the coverage area matrix. Figure  shows a
localization scenario where four out of the  measurements
are outliers. In this scenario the robust centroid’s Tx location
estimates are signicantly closer to the true location than
the conventional centroid algorithm’s. Notice that both [,
] mainly concentrate on online positioning and do not
explicitly assume that the Tx is actually located at m𝑗;the
estimate rather models the center point of Tx’s coverage area.
e connectivity based methods are based on two
assumptions: Tx’s antenna is omnidirectional and measure-
ments are collected uniformly in the whole reception area
[, , ]. As Bulusu et al. [] point out, the performance of
the centroid algorithm is highly dependent on the data. Some
studies report [, ] that the Tx position estimate will be
biased towards areas with the highest measurement densities.
A possible solution to this problem is to model the thorough-
ness of the data collection in each location, which would also
introduce information on where the Tx is not hearable; this
information has been used for mobile Rx localization [].
Another approach is gridding, clustering the observations
in a regular grid so that each grid point represents all the
measurements in its vicinity, which can partly mitigate the
problem of uneven measurement distribution. Algorithms
for detecting insucient data collection and automatically
proposing new measurement locations have been proposed
e centroid method is straightforward to understand
ally light and the robustied version is still computationally
feasible for most purposes even though it is a constant factor
heavier than the basic centroid. Furthermore, the centroid
algorithms have a small number of tunable conguration
parameters, which might be advantageous if there is little
prior information on the Tx locations and signal propagation
models, and there is no risk of overcondent RSS models.
One important property of a method is whether the Tx
position estimate can be updated when new observations
appear without needing to access all the old observations. For
all the presented connectivity based methods, updateability
can be achieved with a very low cost; only the point estimate
and the number of samples used need to be stored in the
3. RSS Based Methods with
Located Observations
using observations that consist of tuples (p𝑖,ID𝑖,r𝑖),wherep𝑖
is the reference location, ID𝑖is the list of Tx identiers, and r𝑖
is the vector of corresponding RSSs.
e RSS is negatively correlated with the distance between
the Tx and Rx. Attenuation of the signal strength (path loss,
PL) is due to both free space propagation loss governed by
tions in the environment [, Ch. ]. Accurate modeling of
these obstructions is in most practical cases infeasible, so
simplifying probabilistic models are commonly used. e
conventional probabilistic model in both outdoor and indoor
environments is the log-normal shadowing model [, Ch. ]
()=(0) 10log10
(0) +𝜎,()
where ()is the RSS in dBm (dB referenced to milliwatt) at
distance from the Tx, (0) is a reference distance, typically
m, (0) ((0))is the RSS at the reference distance,
is the PL exponent parameter, and 𝜎∼(0,2)is a
normally distributed shadowing term with variance 2.e
environment dependent PL parameters and 2are usually
estimated for a certain environment or for a certain Tx based
on data, while the transmission power dependent parameter
(0) canbeassumedtobeknownbasedontheTxproperties
[, Ch. ]. A typical assumption is that the shadowing term
𝜎is a statistically independent random variable for each
measurement, while another possible approach is to assume
spatially correlated shadowing; see, for example, the Gaussian
process based algorithm []. For localization purposes, it is
usually adequate to use distances in -dimensional Cartesian
coordinates; in the localization of cellular base station tower,
for example, Tx’s altitude aects the distance in the proximity
Wireless Communications and Mobile Computing
of the Tx, but as most data typically comes from farther
distances, this eect can be neglected [].
e signal shadowing consists of the so called small-scale
and large-scale shadowing components, and typically the PL
models model average of the both statistically, as accurate
analysis of the multipath propagation patterns that cause
the small-scale fading is not feasible in large systems. See
further discussion in [, Ch. .]. Currently most wireless
communication networks transmit continuous waveforms,
and optimization for impulse signals is out of the scope of
for example, the mapping from the reported RSS indicator
to the actual RSS in dBm is unknown. is problem can be
circumvented, for example, by using RSS ratios [] or RSS
histogram []. e Rx can have one or multiple antennas,
and in the latter case the Rx device can either report all the
measurements separately or combine them into a single RSS
3.1. Closed Form Solutions. A commonly proposed closed
form solution for Tx’s position using RSS measurements is
the weighted centroid algorithm that was proposed for the
localization of the wireless sensor nodes by Blumenthal et
al. []. It has been proposed for WLAN Tx localization, for
example, by [, ]. In the weighted centroid approach, the
estimate of the th Tx’s location is
𝑖=1 𝑖𝑗𝑁
𝑖=1𝑖𝑗 ⋅p𝑖,()
where is a weighting function that depends on the RSS
and 𝑖𝑗 is the RSS of the signal transmitted by the th Tx and
received at the location p𝑖.Usuallytheweightsarechosenso
that the stronger the RSS, the greater the weight. e standard
weighting methods are the distance based weighting []
𝑖𝑗=∈ID𝑖⋅10𝜆𝑟𝑖𝑗 ()
and the RSS based weighting []
𝑖𝑗=∈ID𝑖𝑖𝑗 −min 𝜆.()
In both the weighting methods, ∈R+is a free parameter
and min is the signal detection threshold, that is, the lowest
possible RSS. ese weighting methods are compared for
wireless node localization in [] where it is found that the
two methods have equal average performance. e weighted
centroid location is the solution of the optimization problem
arg min
𝑖=1𝑖𝑗 p𝑖m𝑗2,()
problem () by setting 𝑖=(𝑖𝑗),and()followsfrom
() by the linear least squares formula. A corresponding
probabilistic interpretation is that the weighting function
value in the measurements where the th Tx is observed
x (m)
y (m)
RSS (dBm)
True Tx location
Weighted c.
F : When the Tx is not located in the middle of its coverage
area, RSS based algorithms such as the distance-weighted centroid
can outperform the unweighted centroid.
follows the exponential distribution whose scale parameter
is inversely proportional to the squared Tx–Rx distance. By
the change of variables formula for PDFs (probability density
functions) this gives
𝑖𝑗 |∈ID𝑖,p𝑖,m𝑗
d𝑖𝑗 −(‖p𝑖m𝑗2/𝑠2)𝑤(𝑟𝑖𝑗),()
where ∈R+is a constant that does not aect the
solution. To obtain the objective function of () for the
maximum likelihood solution, the Rx–Tx distance p𝑖m𝑗
is only to appear in the exponent, so it is removed from
the normalization constant by modeling the probability of
the RSS exceeding the signal detection threshold min to be
inversely proportional to the squared Rx–Tx distance
PID𝑖|p𝑖,m𝑗∝p𝑖m𝑗−2 ()
for distances exceeding a limit.
e comments regarding the unweighted centroid are
applicable to the weighted version as well, although modeling
of the RSS somewhat reduces the sensitivity to uneven data
density. Figure  shows a simulated example where Tx’s actual
location is not in the middle of its coverage area. In such a case
the weighted centroid algorithm outperforms the unweighted
centroid due to the RSS measurement information.
Another RSS based closed form solution is proposed
by Koo and Cha []. Earlier similar formulas have been
proposed for wireless sensor networks in []. e same
formulas are used in [] for distance measurement based
Wireless Communications and Mobile Computing
wireless transmitter positioning without the estimation of
the signal propagation parameter. Instead of the log-normal
shadowing model () [], use a dierent PL model
𝑖𝑗 |p𝑖,m𝑗,𝑗,𝑗
𝑗2, ()
where (x;𝜇)is the PDF of the (possibly multivariate)
normal distribution with mean 𝜇and covariance matrix Σ
evaluated at x,and𝑗and 𝑗are the parameters of this non-
logarithmic PL model that are not directly related to the PL
parameters (0) and in (). (e notation is simplied from
[].) us, the distribution of two conditionally independent
RSSs’ dierence is
𝑘𝑗 −𝑖𝑗 |p𝑘,p𝑖,m𝑗,𝑗,𝑗
=𝑘𝑗 −𝑖𝑗 ;𝑗p𝑖m𝑗2p𝑘m𝑗2,22
𝑗𝑘𝑖;𝑗𝑘𝑖 m𝑗
1𝑗,22, ()
where 𝑘𝑖 =p𝑖2p𝑘2,
𝑗𝑘𝑖 =2p𝑖p𝑘T𝑘𝑗 −𝑖𝑗 . ()
Given the at prior for the Tx position m𝑗and the improper
prior (1/𝑗)|1/𝑗|−1,theposteriorof(m𝑗,1/𝑗)is thus
given by the standard linear least squares (LLS) formulas
𝑗𝑗−1 T
In this formula, each RSS measurement is used only once
to avoid correlations between RSS dierences. A strength of
this LLS method is the existence of closed form formulas; the
method thus has rather low and predictable computational
cost, and convergence is not an issue. Addition of prior
information on the Tx location is also straightforward.
However, if the actual RSS follows the log-normal shadowing
model (), the approximation () can be crude.
3.2. Iterative Methods. Maximizing the likelihood of the Tx
position and possibly some model parameters 𝜃using the
model () leads to the nonlinear least squares (LS) problem
m𝑗,𝜃=arg min
𝑖=1 𝑖(m,𝜃)2,()
𝑖(m,𝜃)=𝑖𝑗 −(0) (𝜃)+10(𝜃)log10 p𝑖m()
is the model function of one measurement.
is optimization problem can be solved using various
nonlinear LS methods that are typically iterative algorithms
[]. e general form of the nonlinear LS problem is
arg min
where fis a known nonlinear function and ⋅is the Euclidean
norm. Many solution methods are based on dierentiation,
either on the rst order derivative (gradient, Jacobian) such
as the steepest descent and Gauss–Newton (GN) methods or
on the second-order derivative (Hessian matrix) such as the
Newton method []. To the authors’ knowledge, the second-
order information has not been used in problem () because
of the diculty of analytical dierentiation. Given an initial
point x0, a GN iteration is
x𝑘+1 =x𝑘−T
𝑘𝑘−1 T
𝑘fx𝑘, ()
where 𝑘is the Jacobian matrix of the function fevaluated in
e GN method has been applied to problem () in
[, ], for example. In this case the model function fis the
function hwhose th element is
hm,(0),𝑖=𝑖𝑗 −(0) +10log10 p𝑖m,()
and the th row of its Jacobian matrix is
p𝑖m2−110log10 p𝑖m. ()
Wireless Communications and Mobile Computing
RSS (dBm)
Tru e
Weighted c.
x (m)
y (m)
F : Centroid algorithms can suer from biased sampling
more than PL model based nonlinear methods such as the GN. e
colored dots are measurement locations in a -dimensional map. A
simulated example.
If the parameters (0) and are known for a certain environ-
ment, the corresponding columns can be le out from the
matrix (). e GN algorithm can sometimes diverge. A less
divergence-prone GN version is the Levenberg–Marquardt
(LM) algorithm used for Tx localization in []. Alternatively,
the divergence can be addressed by using an additional
line search algorithm that ensures decrease of the objective
function value as in [].
As pointed out in [], if the posterior covariance matrix
is approximated by the covariance matrix of the linearized
model. the estimate can be updated when new measurements
are obtained. Including a Gaussian prior distribution (𝜇)
for xkeeps the problem as a nonlinear LS problem
arg min
xx𝜇TΣ−1 x𝜇+h(x)T−1h(x),()
for which a GN iteration is []
x𝑘+1 =x𝑘−Σ−1 +T
×Σ−1 x𝑘𝜇+T
𝑘−1hx𝑘, ()
where =2⋅is the measurement noise covariance matrix,
and 2is the shadowing variance in (). is iteration enables
approximative updating of the estimate without storing the
𝑘−1𝑘)−1. Notice that if there is enough knowledge of the
PL parameters the Tx location estimate can be outside the
obser vation area as illustrated by Figure .
e GN converges to a local minimum, so the choice of
the initial point x0is important. Proposed choices of x0in Tx
localization are the location of the strongest observation [],
the centroid of all observations [], or the result of a grid-
type algorithm,which is discussed in Section .. A drawback
of GN and LM is that if there are several separate areas of
strong measurements, the computed Tx location estimate
depends strongly on the initial point so that dierent strong
areas are not compared.
Due to the assumption of normally distributed shadow-
ments, where the RSS diers signicantly from the value
predicted by the PL model. Outlier removal procedures for
3.3. Monte Carlo and Grid Methods. is section discusses
locations PDF at several points of the location space. In
grid methods prespecied evaluation points are used, while
Monte Carlo (MC) algorithms are based on pseudorandom
evaluation points.
Importance sampling is a basic form of MC sampling.
location of one Tx m(𝑘)
𝑗are generated from a prespecied
prior distribution and then given weights (𝑘)
𝑗based on the
training measurements and known PL parameters. Kim et al.
do not explain their weighting method, but the formula based
on the model () is
𝑖=1(𝑟𝑖𝑗 −𝑟(0)+10𝑛log10p𝑖m(𝑘)
e MC estimate of the posterior mean is then the weighted
average of the samples
𝑘=1 (𝑘)
where 𝑝is the number of MC samples. is method can
also be called a particle lter with the static state model
as in [], since the weights can be updated recursively. A
drawback is that importance sampling suers from sample
impoverishment in static state estimation [, Ch. .]: all
weight will over time concentrate to a few samples and
there will be little variability because of lack of dynamics.
is problem can to some extent be overcome by using
resampling techniques such as resample-move algorithm or
Markov Chain Monte Carlo techniques [, Ch. .].
For some models a solution to sample impoverishment
is Rao-Blackwellization [, Ch. .] that is proposed for
simultaneous mobile Rx and static Tx localization by Bruno
and Robertson []. ey do online Tx localization using a
Rao-Blackwellized particle lter (RBPF) so that the training
measurements’ locations are obtained by inertial positioning.
us, the distribution of the Rx locations is obtained by MC
mated by a Gaussian mixture for each MC sample and each
value of the PL parameter (0). e PL exponent is assumed
to be known. is gives a recursive algorithm for joint
estimation of the Rx and Tx locations. is solution is suitable
for cases where the locations of the training measurements
are imprecise but form a time-series that can be ltered.
Han et al. [] propose a grid method, where a plane
(p,:,𝑗)for each grid point. e direction of gradient of is
Wireless Communications and Mobile Computing
then considered as an estimate of Tx’s direction, and the Tx
location estimate is dened as the point that minimizes the
mean square error of the directions of the grid points. Han
et al. use a dense grid method for the minimization, but they
also suggest that more ecient optimization tools could be
Some authors exploit the fact that the PL parameters
appear linearly in the measurement model given the Tx
location. us, the PL parameters can be tted analytically
to each point of a set of candidate Tx locations. Shrestha et
for every measurement assuming that the Tx is located in
the considered measurement location. e Tx estimate is
chosen to be the measurement location that minimizes the
measurement density can be reduced by using a regular grid
as the set of candidate points. is will make the algorithm
more exible but also increase the computational complexity.
Achtzehn et al. [] propose a genetic algorithm, but its
details are le unexplained. If the PL parameters (0),,and2
are assumed known, the Tx locations likelihood can simply
GN or LM algorithm so that each grid point gives an initial
point to the iterative algorithm [].
Grid algorithms can achieve arbitrary modeling accuracy,
but the computational complexity will increase rapidly along
with the state dimension and grid density. Furthermore,
optimal values of critical parameters such as grid density
and grid size may vary in dierent subregions in large-scale
4. Tx Localization with
Unlocated Observations
All methods presented this far rely on a set of measurements
with reference locations assumed known accurately or as
a probability distribution. However, this assumption is not
always realistic especially in indoor environments, where
accurate GNSS services are unavailable and manual entry
of reference locations is too laborious especially for data
collected by crowdsourcing. is section reviews algorithms
where Txs’ locations relative to other Txs is estimated using
unlocated observations and the undirected graph created by
connecting Txs that appear in a common observation. e
basic assumption is that the more frequently two Txs are
each other they are probably located. It is also possible to
use the RSS: if two Txs’ signals are strong in a location,
the Txs are probably close to each other. e locations in
global coordinates, that is, the correct scaling and rotation of
the radiomap, are obtained by adding some measurements
with reference locations: it is assumed that when a Tx is
observed (with a high RSS) in a located measurement, the Tx
is illustrated in Figure .
Koo and Cha [] propose multidimensional scaling
(MDS). e RSSs in a measurement with more than one Tx
determine the dissimilarity between the observed Txs, and
Unlocated meas.
Located meas.
F : Unlocated measurements connect several Txs and thus
give information on how close each Tx is to other Txs. Located
measurements give information on the observed Txs’ locations in
global coordinates. Combining both measurement types gives an
optimal estimate of the Tx location coordinates.
the MDS nds the -dimensional Tx locations whose mutual
distances best agree with the dissimilarity matrix. In [] the
dissimilarity of the mobile Rx and the Tx is dened to be a
certain decreasing function of the RSS, and the dissimilarity
of two Txs is the smallest sum of the Rx–Tx dissimilarities
observed in the same training measurement. e dissimilari-
ties of Txs that are not connected by a common measurement
are determined through the other dissimilarities by using a
graph construction. Since the dissimilarities are not simple
functions of distance and contain noise, the Tx localization
is a nonmetric MDS problem, for which iterative algorithms
exist []. If some reference locations are available, the
relative MDS location estimates are transformed to global
coordinates by an optimal scaling, rotation, and translation
given by Procrustes analysis []. A drawback of this algo-
rithm is that if two Txs are located close to each other but
the closest training measurement location is far from both,
the Koo–Cha dissimilarity will overestimate the distance
between the Txs, because the dissimilarity corresponds to
the distance via the closest training measurement location.
Furthermore, the most natural choice for the mapping from
the RSS to dissimilarity would be the exponential relation
derived from the log-normal shadowing model (), which is
Raitoharju et al. [] propose several algorithms that use
form solution called access point least squares (APLS). e
APLS is based on the model
2⋅, ()
where the Txs and are observed in the same measurement,
the Tx s located measurements’ mean location is p𝑘,and1
and 2are constants whose values do not aect the solution if
no prior distribution is used for the Tx locations. is results
in a linear Gaussian measurement model whose solution is
Wireless Communications and Mobile Computing
[] also propose that the accuracy can be improved with the
cost of increased running time by applying a Gauss–Newton
method (), where the log-normal shadowing model with
is more accurate than the APLS due to modeling of RSS,
but multimodality of the posterior distribution can cause
convergence to nonglobal extrema [].
Chintalapudi et al. [] present a method that relies on
a genetic algorithm for nding initial points for iterative
optimization methods. In the rst phase, all initial points are
generated randomly; genetic algorithms are thus Monte Carlo
algorithms. e initial points are then treated in a manner
that depends on the objective function value (tness) of the
local maxima given by the iterative optimization method for
each initial point. e initial points with high tness are
retained, while the initial points with low tness are replaced
by generating new values, added random noise, or mixed
by random convex combinations. is cycle is iterated until
the solution stops improving. Chintalapudi et al. estimate
the mobile user location p𝑖,theTxlocationm𝑗,andthe
PL parameters (0) and jointly for each th measurement
and th Tx. Chintalapudi et al. use a tness function that
squares approach of () can also be used for more standard
modeling and a wider range of optimization methods. e
genetic algorithm is capable of nding the global maximum
with a much higher probability than a single gradient descent
algorithm. e disadvantage is the increased computational
burden. Chintalapudi et al. discuss criteria to select a subset
of Txs and training data so that computational requirements
are somewhat reduced without losing accuracy signicantly.
5. Tests
5.1. Simulations. We implemented  Rx localization methods
with M. We simulated  Txs with  measure-
ments for each. We generated the measurement points from
bivariate normal distributions whose covariance matrices
were generated separately for each Tx from the Wishart
distribution with three degrees of freedom ((20m)2⋅,3).
Each measurement point was then assigned a RSS value
generated from the distribution
𝑖−70102log10 p𝑖m,62; ()
that is, the used PL parameters are (0) =−70,=2,
and =6, which are approximately in line with the values
(0) =−70.39,=1.32,and=5.85given in []. Each
Tx localization method that uses measurements with known
reference locations is then applied to each measurement set.
was ve, and the number of degrees of freedom ]=4.
In the weighted centroid, we set min = −120dBm. We
optimized the parameter with a Monte Carlo simulation
Median error (m)
10−2 10−1 100101102
F : Optimization of the weighted centroid’s parameter
for distance based (black) and RSS based (grey) weighted centroid
algorithms. e values chosen for the further tests were . for
distance based and  for RSS based algorithm.
using . replications, and the median Tx positioning
error as a function of is shown in Figure . Based on
this, we set the parameter value to . for distance based
and  for RSS based weighted centroid. e GN iteration
two successive iterations was less than  mm or aer 
iterations. e importance sampling used  Monte Carlo
samples. In the RSS gradient method the gradients were tted
for each point of the regular grid with -meter spacing so that
the grid squares that did not have any measurements were
removed. e window size of the gradient tting was chosen
according to the advice given in []: the window size was
increased until at least % of the grid points had at least
PL parameter tting method was based on a regular grid
using .-meter spacing and the square around the strongest
RSS measurement with side length  m.
e Tx localization error distributions are illustrated in
Figure . In these boxplots, the asterisks show the maximum
%, %, %, and % error quantiles. In the le subplot,
the measurement locations are generated from the bivariate
normal distributions. In the right subplot, the measurements
whose east coordinates are greater than those of the Tx are
removed; this test is done to study the robustness of the
methods to training data distributions that are not symmetric
with respect to the Tx location. Some of the algorithms can
be given prior information on the PL parameters. Note that
this kind of prior information is not always available in real-
distributions when the PL parameters are given the prior
(0) −70,102, (a)
2,0.52. (b)
With the importance sampling method, estimation without
prior means using a prior with a large variance.
Wireless Communications and Mobile Computing
RSS gradient
Error (m)
RSS gradient
Error (m)
F : Tx localization error distributions with simulated data. On the le, the measurements come from a point-symmetric bivariate
normal distribution, while on the right, the measurements east of the Tx are removed. e red boxes correspond to methods that use prior
information of the PL parameters.
Figure  shows that when the measurement data distri-
bution is point-symmetric, Gauss–Newton (GN) and grid-
point-wise t (grid-t) are the most accurate methods.
e importance sampling method is very close in accuracy
and it has exibility, for example, for extensions to non-
Gaussian models, but it requires a good prior distribution to
produce an ecient importance distribution. e accuracy of
the measurement point-wise t (meas-t) is limited by the
measurement point density and whether the measured area
covers the true Tx location. e gradient method performs
well with point-symmetric measurement sets, but suers
dramatically from removing the measurements of an area.
e reason for this can be that the method is based solely on
shape of the propagation model. at is, in the west–east
direction there will mainly b e arrows pointing to east, and this
can deteriorate the accuracy in west–east direction. e linear
least square (LLS) method of [] suers from approximating
the logarithmic PL model with a linear one; the method seems
to t the linear PL model overweighting weak RSSs that are
the majority, and therefore the RSS peak location estimation
is biased.
e centroid algorithms that do not use RSSs perform
well in accuracy with point-symmetric data distributions.
e error is typically slightly higher than that of the GN,
but the overall performances can be regarded as competitive
considering the simplicity and computational ease of the
centroid methods. e centroid methods are robust against
deviations from the logarithmic PL model, but especially the
nonweighted centroids are sensitive to asymmetric data sets.
However, the weighted centroid still has accuracy slightly
lower but comparable with that of the GN. Robust centroid is
less accurate than the distance-weighted centroid, but slightly
more accurate than the nonweighted centroid due to non-
Gaussian coverage area.
RSS gradient
Error (m)
F : Bimodal RSS distribution.
In some cases the distribution of RSS is not a function of
the distance only, but there can, for example, be several RSS
peaks, that is, areas governed by strong RSS measurements.
ese can be due to uneven terrain topology, reective build-
ing materials, or unmapped strong RSS areas, for example.
Figure  shows the Tx localization error distributions when
% of the training measurements are generated from a
normal distribution (𝜇,52⋅),where𝜇is a random point
close to the true Tx location. For each measurement point
we then generated the RSS 1fromthemodel()andthe
RSS 2fromthesamemodelusing𝜇as the Tx location. We
then set the actual RSS measurement to 0.71+0.32.
Figure  shows that the methods that perform best in the
unimodal RSS distribution’s case, that is, weighted centroid
and GN, have some large Tx localization errors with bimodal
RSS distribution. Weighted centroid and GN tend to choose
one RSS peak, the weighted centroid based on the strongest
 Wireless Communications and Mobile Computing
T : Tx localization RMSEs with real BLE data.
Algorithm RMSE w/o prior (m) RMSE with prior (m)
Centroid .
Robust centroid .
Weighted centroid (dist.) .
Weighted centroid (RSS) .
Linear least squares .
Gauss–Newton . .
Importance sampling . .
RSS gradient .
Point-wise t (regular grid) . .
Point-wise t (meas. pos.) . .
North (m)
East (m)
50 0
F : Measurement and Tx locations in the test data set.
point-wise tting methods give more weight to the whole
RSS distribution and do not converge into nonglobal local
accuracy close to the other methods, but they may require
some heuristics to cope with cases with multiple RSS peaks.
5.2. Real Bluetooth Low Energy Data. We in sta lled   Blu e-
tooth Low Energy (BLE) Txs in a building in the campus
of Tampere University of Technology. e ground truths of
objects using a measurement tape. Furthermore, we collected
measurements of the received BLE signal strengths using an
Android-run Samsung tablet device. e true location related
to each RSS measurement was obtained manually by clicking
an indoor map gure at each turn and interpolating between
the turns. Floor estimation was assumed perfect, so only
e locations of the Txs and the training measurements are
shown in Figure .
Figure  shows the Tx localization error distributions for
the real data test. e results mostly resemble those of the
simulation results with non-point-symmetric measurement
point distribution in Section .. e root-mean-s quare errors
RSS gradient
Error (m)
F : Tx localization error distributions with real BLE data.
6. Concluding Remarks
is paper reviews and tests mathematical models and meth-
ods for wireless transmitter localization based on received
signal strength information. Empirical comparisons results
using simulated and real-world data are provided. e key
features of each presented method are summarized in Table .
Note that the column accuracy refers to how accurately the
as the path loss model; the real-world localization error can
depend on the details of the scenario. Updateability means
that an algorithm for recursive updating without storing the
entire training database has been proposed.
e methods can be categorized based on what infor-
mation they use: RSS or only connectivity, with or without
known reference position. e methods that require refer-
ence positions are suitable for so called wardriving, that is,
outdoor network surveying where GNSS provides reference
positions, or for small-scale indoor mapping. e unlocated
methods trade o some accuracy to enable large-scale crowd-
sourcing even in GNSS-less environments. Computational
eciency and ease of updating the estimate without storing
large training databases are crucial in large-scale applications.
Wireless Communications and Mobile Computing 
T : Summary of the presented algorithms.
name Measurement Reference
location req.
type Accuracy Computat.
References &
Centroid ID Accurate closed form Low Low Low Yes [, ]
centroid ID Accurate Iterative Low Low Medium Approx. [],robusttoerror
Weig ht ed
centroid ID, RSS Accurate Closed form Low Low Low Yes []
Linear least
squares ID, RSS Accurate Closed form Low Low Low Yes []
GN/LM ID, RSS Accurate Iterative Medium Medium Medium Approx. [–], local
sampling ID, RSS Accurate Monte Carlo High Medium Low Yes [], sample
RSS gradient ID, RSS Accurate Grid, iterative Medium High High No []
ID, RSS Accurate
Grid, closed
form or
High High Medium No [] (meas. pos.)
[] (regular grid)
RBPF ID, RSS Time-series,
distribution Monte Carlo High High High Yes []
MDS ID, RSS No Iterative Medium Medium High No [], various
APLS ID No Closed form Low Low Low Yes []
GN ID, RSS No Iterative Medium Medium Medium Approx. []
algorithm ID, RSS No MC, iterative High High High No []
An example of such a system is ubiquitous indoor position-
ing, which requires ecient initialization, improving, and
updating of large-scale radio maps that contain not only -
dimensional locations but also oor information.
Competing Interests
e authors declare that there is no conict of interests
regarding the publication of this paper.
e authors are grateful to Simo Ali-L¨
oytty, Jukka Talvitie,
Lauri Wirola, and Jari Syrj¨
arinne for enlightening conver-
sations. Henri Nurminen receives funding from Tampere
University of Technology Graduate School, the Foundation
of Nokia Corporation, and Tekniikan edist¨
[] Z. Zhang, X. Zhou, W. Zhang et al., “I am the antenna: accurate
outdoor AP location using smartphones,” in Proceedings of the
17th Annual International Conference on Mobile Computing and
Networking, MobiCom’11 and Co-Located Workshops,pp.
, September .
[] X. Zheng, C. Wang, Y. Chen, and J. Yang, “Accurate rogue access
point localization leveraging ne-grained channel informa-
tion,” in Proceedings of the IEEE Conference on Communications
and Network Security (CNS ’14), pp. –, San Francisco,
Calif, USA, October .
[] P. Bahl and V. Padmanabhan, “RADAR: an in-building RF-
based user location and tracking system-based user location
and tracking system,” in Proceedings of the 19th Annual Joint
Conference of the IEEE Computer and Communications Societies
(INFOCOM ’00),vol.,pp.,March.
[] H. Lim, L.-C. Kung, J. C. Hou, and H. Luo, “Zero-conguration,
robust indoor localization: theory and experimentation,” in Pro-
ceedings of the 25th IEEE International Conference on Computer
Communications (INFOCOM ’06),pp.,Barcelona,Spain,
Apri l .
[] Y. Ji, S. Biaz, S. Pandey, and P. Agrawal, “ARIADNE: a dynamic
indoor signal map construction and localization system,” in
Proceedings of the 4th International Conference on Mobile
Systems, Applications and Services (MobiSys ’06),pp.,
Uppsala, Sweden, June .
[] X. Li, “RSS-based location estimation with unknown pathloss
model,IEEE Transactions on Wireless Communications,vol.,
[] M.F.MansourandD.W.Waters,“Uncensoredindoorposition-
ing,IEEE Signal Processing Letters,vol.,no.,pp.,
[] N. Bulusu, J. Heidemann, and D. Estrin, “GPS-less low-cost
outdoor localization for very small devices,IEEE Personal
[] Y.-C. Cheng, Y. Chawathe, A. Lamarca, and J. Krumm, “Accu-
racy characterization for metropolitan-scale Wi-Fi localiza-
tion,” in Proceedings of the 3rd International Conference on
Mobile Systems, Applications, and Services (MobiSys ’05),pp.
–, Seattle, Wash, USA, June .
[] M. Kim, J. J. Fielding, and D. Kotz, “Risks of using AP locations
discovered through war driving,” in Pervasive Computing,K.P.
 Wireless Communications and Mobile Computing
Fishkin, B. Schiele, P. Nixon, and A. Quigley, Eds., vol.  of
Lecture Notes in Computer Science, pp. –, Springer, Berlin,
Germany, .
[] C. Laurendeau and M. Barbeau, “Centroid localization of
uncooperative nodes in wireless networks using a relative span
weighting method,EURASIP Journal on Wireless Communica-
tions and Networking, vol. , Article ID , .
[] L. Koski, T. Per¨
a, and R. Pich´
e, “Indoor positioning using
WLAN coverage area estimates,” in Proceedings of the Interna-
tional Conference on Indoor Positioning and Indoor Navigation
(IPIN ’10), Zurich, Switzerland, September .
[] J. Wang, P. Urriza, Y. Han, and D. Cabric, “Weighted cen-
troid localization algorithm: theoretical analysis and distributed
implementation,IEEE Transactions on Wireless Communica-
[] R. Pich´
e, “Robust estimation of a reception region from location
ngerprints,” in Proceedings of the International Conference on
Localization and GNSS (ICL-GNSS ’11), pp. –, June .
[] J. Koo and H. Cha, “Localizing WiFi access points using signal
strength,IEEE Communications Letters,vol.,no.,pp.
, .
[] H. Nurminen, J. Talvitie, S. Ali-L¨
oytty et al., “Statistical path
loss parameter estimation and positioning using RSS mea-
surements,” in Proceedings of the International Conference on
Ubiquitous Positioning, Indoor Navigation, and Location Based
Service (UPINLBS ’12),October.
[] Y. Zhuang, Z. Syed, J. Georgy, and N. El-Sheimy, “Autonomous
smartphone-based WiFi positioning system by using access
points localization and crowdsourcing,Pervasive and Mobile
[] M. A. Abd Rahman, M. Dashti, and J. Zhang, “Localization
of unknown indoor wireless transmitter,” in Proceedings of the
International Conference on Localization and GNSS (ICL-GNSS
[] D. Han, D. Andersen, M. Kaminsky, K. Papagiannaki, and S.
Seshan, “Access point localization using local signal strength
gradient,” in Passive and Active Network Measurement,S.B.
Moon,R.Teixeira,andS.Uhlig,Eds.,vol.ofLecture Notes
in Computer Science, pp. –, Springer, .
[] S.Shrestha,J.Talvitie,andE.S.Lohan,“Deconvolution-based
indoor localization with WLAN signals and unknown access
point locations,” in Proceedings of the International Conference
on Localization and GNSS (ICL-GNSS ’13), pp. –, IEEE, Turin,
Italy, June .
[] L. Bruno and P. Robertson, “WiSLAM: improving FootSLAM
with WiFi,” in Proceedings of the International Conference on
Indoor Positioning and Indoor Navigation (IPIN ’11),pp.,
aes, Portugal, September .
[] J. Koo and H. Cha, “Unsupervised locating of WiFi access points
using smartphones,IEEE Transactions on Systems, Man and
Cybernetics Part C: Applications and Reviews,vol.,no.,pp.
–, .
[] M. Raitoharju, T. Fadjuko, S. Ali-L¨
oytty, and R. Pich´
e, “Using
unlocated ngerprints in generation of WLAN maps for indoor
positioning,” in Proceedings of the IEEE/ION Position, Location
and Navigation Symposium (PLANS ’12), pp. –, Myrtle
Beach, SC, USA, April .
[] K. Chintalapudi, A. P. Iyer, and V. N. Padmanabhan, “Indoor
localization without the pain,” in Proceedings of the 16th Annual
Conference on Mobile Computing and Networking (MobiCom
’10),pp. –, September .
[] X. Yang and B. Chen, “A novel method for measurement points
selection in access points localization,Wirele ss Net works,pp.
–,  .
[] T. S. Rappaport, Wireless Communications: Principles and Prac-
tice, Prentice Hall PTR, Upper Saddle River, NJ, USA, nd
edition, .
user equipments and access points using RSSI ngerprints: a
gaussian process approach,” in Proceedings of the IEEE Interna-
tional Conference on Communications (ICC ’16),pp.,Kuala
Lumpur, Malaysia, May .
[] A. F. Molisch,Wireless C ommunications, Wiley-IEEE, Hoboken,
NJ, USA, nd edition, .
[] M. B. Kjærgaard, “Indoor location ngerprinting with hetero-
geneous clients,” Pervasive and Mobile Computing,vol.,no.,
[] C. Laoudias, R. Pich´
calibration in location systems using signal strength his-
–, .
[] J. Blumenthal, R. Grossmann, F. Golatowski, and D. Timmer-
mann, “Weighted centroid localization in Zigbee-based sensor
networks,” in Proceedings of the IEEE International Symposium
on Intelligent Signal Processing (WISP ’07),October.
[] A. Savvides, C. C. Han, and M. B. Strivastava, “Dynamic
ne-grained localization in Ad-Hoc networks of sensors,” in
Proceedings of the 7th Annual International Conference on
Mobile Computing and Networking (MobiCom ’01),pp.,
[] K. M. Harwell, Acomparisonof802.11wirelesstransmitter
localization techniques [M.S. thesis],OklahomaStateUniversity,
[] ˚
A. Bj¨
orck, Numerical Methods for Least Squares Problems,
SIAM, Philadelphia, Pa, USA, .
[] H. Nurminen, Position estimation using RSS measurements
with unknown measurement model parameters [M.S. thesis],
Tampere University of Technology, Tampere, Finland, ,
[] Y. Zhuang, Y. Li, H. Lan, Z. Syed, and N. El-Sheimy, “Wireless
access point localization using nonlinear least squares and
multi-Level quality control,” IEEE Wireless Communications
[] S. S¨
a, Bayesian Filtering and Smoothing, Cambridge Univer-
sity Press, Cambridge, UK, .
[] A. Achtzehn, L. Simi´
c, P. Gronerth, and P. Mahonen, “A
propagation-centric transmitter localization method for deriv-
ing the spatial structure of opportunistic wireless networks,
in Proceedings of the 10th Annual Conference on Wireless On-
Demand Network Systems and Services (WONS ’13), pp. –,
March .
[] A. Hansson and L. Tufvesson, Using sensor equipped smart-
phones to localize WiFi access points [M.S. thesis], Lund Univer-
sity, ,/.pdf.
[] I. Borg and P. J. Groenen, Modern Multidimensional Scaling,
[] E. S. Lohan, J. Talvitie, P. Figueiredo e Silva, H. Nurminen,
S. Ali-L¨
oytty, and R. Pich´
e, “Received signal strength models
for WLAN and BLE-based indoor positioning in multi-oor
buildings,” in Proceedings of the International Conference on
Localization and GNSS (ICL-GNSS ’15), IEEE, Gothenburg,
Sweden, June .
... The most important factor of proper planning was the access point placement optimization devices, where it has a significant impact on the coverage optimization, operation, and management of the networks more than the development of characteristics behavior of wireless networks 6 . It is worth mentioning that the location of the AP device in Wireless Local Area Network (WLAN) has improved a wide range of purposes such as locating the non-functional AP devices and estimating the propagation characteristics of the wireless signal 7 . ...
... These challenges can be summarized in the serious effects of different building materials including the wall thickness on signal penetration inside the building. Moreover, the effects of various sources of interference caused by improper AP and channel configuration 7 . Additionally, the Multipath Propagation (MP) describes the process of receiving several copies of the original signal distributed over varying time delays and attenuation caused by the reflection, diffraction and diffusion of these signals 8 . ...
Full-text available
Optimizing the Access Point (AP) deployment has a great role in wireless applications due to the need for providing an efficient communication with low deployment costs. Quality of Service (QoS), is a major significant parameter and objective to be considered along with AP placement as well the overall deployment cost. This study proposes and investigates a multi-level optimization algorithm called Wireless Optimization Algorithm for Indoor Placement (WOAIP) based on Binary Particle Swarm Optimization (BPSO). WOAIP aims to obtain the optimum AP multi-floor placement with effective coverage that makes it more capable of supporting QoS and cost-effectiveness. Five pairs (coverage, AP deployment) of weights, signal thresholds and received signal strength (RSS) measurements simulated using Wireless InSite (WI) software were considered in the test case study by comparing the results collected from WI with the present wireless simulated physical AP deployment of the targeted building - Computer Science Department at University of Baghdad. The performance evaluation of WOAIP shows an increase in terms of AP placement and optimization distinguished in order to increase the wireless coverage ratio to 92.93% compared to 58.5% of present AP coverage (or 24.5% coverage enhancement on average).
... However, its accuracy is lower and require many numbers of access points (AP's) devices to improve its accuracy [2]. On the other hand, ranged-based method could achieve better accuracy where several methods have been presented to measure the time of arrival (ToA), angle-ofarrival (AoA), time difference of arrival (TDoA) and received signal strength (RSS) to obtain the distance or angles, which in turn would be used to calculate the location coordination's [7][8][9][10]. Several types of these measurements require extra hardware and cost. ...
... It can be deduced that some Rx's were closer to the actual coordination as the Rx in 2nd floor ranging between (1-6) with error ranging between (0.002-0.2) m. However, points of Rx (7)(8)(9)(10)(11) were different in large manner due to the utilization of direction antenna and its allocation. The error ranging in this case were up to 10 m. ...
... Localization-based indoor scenario suffers from bunch of challenges as compared to outdoor localization due to the complexity of indoor environment [6], the observed effect of different materials inside the building on the dissemination of signal and the need for higher accuracy at a lower cost and no extra hardware support [7].In contrast, Indoor localization market had been suffered from rapidly increasing lately and the growth is in a persistent basis [8,9]. The locating of the Radio wave (RW) transmitter in a wireless network (WN) has a significance over an extensive range of purposes [1], such as the locating of the non-functional Access point (AP), operating and managing the WN and estimating the propagation characteristics of the RW [10]. ...
... RSS was one of the most utilized measurements in recent localization systems and wireless coverage estimation methods [10], because its works together with the powered noise to define the value of the Signal to Noise Ratio (SNR) for the signals. Based on Shannon low [24], SNR represents the valuable capacity of the communication system. ...
Conference Paper
Full-text available
Abstract. The prospects of location estimation and localization approaches in Wireless Local Area Network (WLAN) by using Received Signal Strength (RSS) have gained significant esonance recently. Selecting the appropriate highest for Access Point (AP) and Transmitter devices can achieve higher accuracy for different localization approaches and IoT (Internet of Things) based services. In addition, reducing the shadow fading effects and increasing the coverage area. In this paper, the effect of different AP height on the variation of signal strength was investigated with a height ranging between (1-2.5) m. The obtained RSS measurement indicates that AP height at 2.5 m can achieve best RSS measurement with respect to receiver height of (1.10) m, especially for NLoS received points. Furthermore, RSS measurement system has been designed and utilized for this investigation. The measurement system is connected with an open based cloud platform for aggregation, visualization and analysing the measurement data. The proposed system can achieve high-speed RSS measurements, low-cost implementation and provide more facilities in collecting and monitoring a huge amount of data.
... The materials used to construct this scene using WI Package are mainly dependent on the characteristics of the electrical analog parameters. Therefore, the International Telecommunication Union (ITU) proposes that each material has conductivity and permittivity, and this conductivity and permittivity depend on the type of material as well as on the frequency used in the simulation environment [22,23,24,25]. The conductivity (σ) and permittivity (ε) values of the frequencies that have been used in the work environment are listed in Table 2. Table 2. Conductivity and permittivity values of various materials used in building the simulated scene model. ...
Full-text available
With the development of various wireless communication networks, Wi-Fi Router positioning and deployment systems have become widely popular in recent years to improve coverage in various environments. In this paper, we present an appropriate mechanism for defining the deployment of Wi-Fi Routers to improve coverage in the Oxford Languages Institute (OLI) environment. In addition, the institute's environment was simulated using the Wireless InSite (WI) Package. In this work, two types of Wi-Fi Routers are used. The first is the TP-Link, while the second is the Rocket. These two devices operate at 2.4 and 5 GHz frequencies. There are two objectives in this work. The first aim is to determine the best location to cover the simulated scene environment in a better way. The second aim is to compare Wi-Fi Routers to find out which Wi-Fi Router is better and find out how many Wi-Fi Routers we need to cover the institute's environment. The comparison between Wi-Fi Routers was based on basic parameters to measure the performance of wireless networks, the most important of which are Coverage Rate (CR) Percentage, Signal Quality Rate (SQR), and Received Power Rate (RPR). According to the results that were shown on the Graphical User Interface (GUI) using MATLAB Software. We noticed that the CR, SQR, and RPR of the Rocket are 83.9080%, 97.0082%, and-35.2337 dBm respectively, and these results are better than the results provided by the TP-Link, as it gave the CR, SQR, and RPR are 32.1839%, 77.8690%, and-58.1685 dBm, respectively. Finally, we conclude that CR using the Rocket is good and we need one device to cover the institute's environment. While CR using the TP-Link is bad and we need five devices to reach the coverage provided by the Rocket because the Rocket has high transmitted power and gain capacity.
... This method adopts to the positioning area that has more than one AP. And its target positioning precision has a close relationship with the distribution and quality of APs and the distinguishability of fingerprints model [10]. In the early stage, this method adopts RSS value of several AP points as fingerprint, which merely realizes regional positioning of targets, but resulted in the big position error. ...
Full-text available
The positioning technology based on receive signal strength (RSS) fingerprints has become one of the hottest research spots with its advantages of simple deployment, low cost, and single parameter. However, in the limited space, the multipath and shadowing, result in poor separability of the fingerprint data, and low accuracy of target localization. In this paper, a novel RSS fingerprints positioning algorithm that is based on fuzzy kernel clustering SVM is proposed to combat the multipath and shadowing effects. The first step of the proposed positioning algorithm is to use kernel function to map the traditional fingerprints sample data to high-dimensional feature space to generate fuzzy classes. The second step is to generate binary-class SVM of fuzzy class based on the relationship between classes and internal discrete information of each class. After that, we can use the binary fuzzy class SVM to dichotomize the classified fingerprints in the first step, and combine these dichotomous SVMs into a handstand classification binary tree. And thus, the proposed positioning algorithm achieves quick and accurate positioning. Experimental results show that the positioning accuracy and locating stability of proposed positioning algorithm are improved by 38.73% and 59.26%, respectively, compared with the traditional RSS fingerprints algorithm.
... This work used link layer data such as the Received Signal Strength Indicator (RSSI) to estimate the location of users within an environment. It is noteworthy that most of the existing effective techniques are based on RSSI [25]. However, the RSSI information is provided by only a few protocols within the link-layer of the receiver. ...
Full-text available
The expansion of the Internet-of-Things (IoT) market is visible in homes, factories, public places, and smart cities. While the massive deployment of connected devices offers opportunities to improve quality of life and to develop new services, the impact of such devices on the security of the users in a context where the level of malicious threat continues to increase is a major concern. One of the challenges is the heterogeneity and constant evolution of wireless technologies and protocols used. To overcome this problem, we propose RIDS, a Radio Intrusion Detection System that is based on the monitoring and profiling of radio communications at the physical layer level using autoencoder neural networks. RIDS is independent of the wireless protocols and modulation technologies used. Besides, it is designed to provide a threefold diagnosis of the detected anomalies: temporal (start and end date of the detected anomaly), frequential (main frequency of the anomaly), and spatial (location of the origin of the anomaly). To demonstrate the relevance and the efficiency of our approach, we collected a large dataset of radio-communications recorded with three different probes deployed in an experimental room. Multiple real-world attacks involving a wide variety of communication technologies are also injected to assess the detection and diagnosis efficiency. The results demonstrate the efficiency of RIDS in detecting and diagnosing anomalies that occurred in the 400–500 Mhz and 800–900 Mhz frequency bands. It is noteworthy that compromised devices and attacks using these communication bands are generally not easily covered by traditional solutions.
... 1 Network nodes localization can be performed by the sensor network in a phase preceding topology inference [32], [33]. As will be clarified in Section V, only a coarse estimate of nodes position is required. ...
This work proposes a framework to discover the topology of a non-collaborative packet-based wireless network using radio-frequency (RF) sensors. The methodology developed is blind, allowing topology sensing of a network whose key features (i.e., number of nodes, physical layer signals, and medium access control (MAC) and routing protocols) are unknown. Because of the wireless medium, over-the-air signals captured by the sensors are mixed; therefore, blind source separation (BSS) and measurement association are used to separate traffic patterns. Then, to infer the topology, we detect directed data flows among nodes by identifying causal relationships between the separated transmitted patterns. We propose causal inference methods such as Granger causality (GC), transfer entropy (TE), and conditional transfer entropy (CTE) that use the times series of traffic profiles, and a solution based on a neural network (NN) that exploits distilled time-based features. The framework is validated on an ad-hoc wireless network accounting for MAC protocol, packet collisions, nodes mobility, the spatial density of sensors, and channel impairments, such as path-loss, shadowing, and noise. Numerical results reveal that the proposed approach reaches a high probability of link detection and a moderate false alarm rate in mild shadowing regimes and low to moderate network nodes mobility.
In this work, a tool for topology sensing of a non-collaborative wireless network using power profiles captured by radio-frequency (RF) sensors is proposed. Assuming that the features of the network (i.e., the number of nodes, medium access control (MAC) and routing protocols) are unknown and that the sensors observe signal mixtures because of the wireless medium, blind source separation (BSS) is used to separate the traffic profiles. Successively, the topology of the network is inferred by detecting causal relationships between the separated streams. According to the numerical results, the proposed tool senses the topology with promising accuracy when operating in mild shadowing conditions, even with a relatively low number of radio-frequency (RF) sensors.
Conference Paper
Full-text available
This paper investigates the similarities and differences of the signal strength fluctuations and positioning accuracy in indoor scenarios for three types of wireless area networks: two Wireless Local Area Networks (WLANs) at 2.4 GHz and 5 GHz frequency, respectively, and one Wireless Personal Area Network (WPAN), namely the Bluetooth Low Energy (BLE). Two path-loss models based on weighted centroids and non-negative least squares estimation are presented: one including a floor loss factor, and the other one ignoring the floor losses, and the three signal types are compared in terms of the path-loss parameters, channel fluctuations and positioning accuracy, namely the distance errors and floor detection probabilities. The comparison is done based on real-field measurement data collected from a university building in Tampere, Finland. It is shown that all these three signal types have similar shadowing variances and close path-loss parameter values, and that a path-loss model considering floor losses gives the best floor detection probability, but not necessarily the smallest distance error.
Full-text available
Precise localization of access points (APs) has become more and more important with the booming of diverse location based services. AP localization accuracy heavily relies on the locations of measurement points. However, collecting abundant information from the APs usually requires tremendous manual efforts, which greatly compromise the efficiency and accuracy of the localization of the APs. Thus, the selection of appropriate measurement points becomes an important issue to achieve a high localization accuracy with a low-cost method, which has not been fully explored in existing research. To this end, we propose a novel approach to select measurement points for AP localization under the assumption that the number of APs to be located is known in advance. Specifically, an initial point is selected randomly and the locations of APs are estimated according to the measured information. Then, subsequent measurement points are determined by locating the intersection of the coverage areas of APs in real time, so that as many APs as possible can be detected at each measurement point. Both simulation and experimental results show that our approach can reduce the number of measurement points while improving the AP localization accuracy.
Conference Paper
Full-text available
In this paper, the problem of Received Signal Strength (RSS)-based WLAN positioning is newly formulated as a deconvolution problem and three deconvolution methods (namely Least Squares, Weighted Least Squares and Minimum Mean Square Error) are investigated with several RSS path loss models. The deconvolution approaches are compared with the fingerprinting approach in terms of performance and complexity. The main advantage of the deconvolution-based approaches versus the fingerprinting methods is the significant reduction in the size of the training database that need to be stored at the server side (and transferred to the mobile device) for the WLAN-based positioning. We will show that the deconvolution based estimation can decrease of the order of ten times the size of the training database, while still being able to achieve comparable root mean square errors in the distance estimation.
Locations of WiFi access points (APs) are important for WiFi positioning when a propagation model is used. The pre-surveyed propagation parameters, such as the path-loss exponent, are usually not available when localizing the APs in a new environment. This letter introduces a novel method that estimates the AP locations and the parameters of the received signal strength (RSS) propagation model simultaneously using the weighted nonlinear least squares (NLLS) method. This method can run on consumer portable devices autonomously in real time without any a-priori information, and eliminate the need of pre-survey. Another contribution of this letter is to introduce a multi-level quality control mechanism, and utilize the statistical testing method in AP localization and propagation parameters (PPs) determination for the first time. Indoor experiments show that the proposed method provided more promising results than previous methods.
WiFi positioning systems require radio maps in the form of either RF fingerprints or positions of WiFi access points (APs). In particular, knowledge of the AP positions is essential to enable a locating mechanism as well as to understand the nature of underlying WiFi networks, such as density, connectivity, interference characteristics, and so on. In this paper, we propose an approach called Serendipity, which locates WiFi APs in an unsupervised manner using radio scans collected by ordinary smartphone users. From the radio scans, we extract dissimilarities between all pairs of WiFi APs and estimate relative positions of APs by analyzing the dissimilarities based on a multidimensional scaling technique. We then find the absolute positions with additional radio scans whose positions are known. The discovered positions of WiFi APs are used for the positioning of smartphones or the management of the WiFi networks. To validate the proposed approach, we conducted experiments on several indoor locations.
Conference Paper
Rogue access point (AP) has emerged as an important security problem in WLANs. However, it is a challenge task to localize the rogue AP with both high accuracy and minimal infrastructure cost. Either expensive professional infrastructure (e.g., multiple wireless sniffers) or additional hardware (e.g., directional antenna) need to be pre-deployed for rogue AP localization with high cost. Moreover, existing methods using Received Signal Strength (RSS) result in large error as RSS is suffered from the multipath and shadowing effects in complex wireless environment. In this work, we exploit the channel state information (CSI), which is readily available from commercial Wi-Fi devices, to locate the rogue AP with high accuracy. We use only a single off-the-shelf Wi-Fi device for rogue AP localization which involves minimal infrastructure requirement. Our proposed rogue AP localization framework consists of two components: direction determination and position estimation. By characterizing time domain CSI amplitude, we develop direction determination approach to estimate the direction of the rogue AP at the Wi-Fi device. We further propose two schemes to estimate position of the rogue AP: directions determined at multiple locations grounded on triangulation, or walking towards the rogue AP with direction adjustment. Results from extensive experiments in both indoor and outdoor environments show that our framework can achieve more practical and accurate rogue AP localization when comparing with existing RSS-based approach.
We present a new method to accommodate the unobserved access points in indoor positioning systems that use the Received Signal Strength (RSS). We formulate a probabilistic framework, and derive the estimation bounds that quantify the advantage of incorporating unobserved data. Further, we describe a realization for the maximum-likelihood estimator and establish its effectiveness in a typical indoor positioning scenario.