LPP

LTE Positioning Protocol

Protocol
Introduced in Rel-9
LPP is a point-to-point protocol used between a location server (e.g., E-SMLC) and a target device (UE) to determine the device's geographical position. It supports multiple positioning methods like OTDOA, A-GNSS, and E-CID, enabling high-accuracy location services for emergency calls, navigation, and IoT applications.

Description

The LTE Positioning Protocol (LPP) is a key application-layer protocol within the 3GPP control plane architecture, specifically designed for transferring positioning-related information. It operates between a Location Server (LS), such as the Evolved Serving Mobile Location Centre (E-SMLC) in LTE or the Location Management Function (LMF) in 5GC, and a target User Equipment (UE). LPP is carried over the LTE-Uu and SLg interfaces via NAS transport, ensuring secure and reliable delivery of positioning commands and measurements. The protocol is inherently capability-aware; an LPP session typically begins with the server querying the UE for its supported positioning methods (e.g., Observed Time Difference of Arrival - OTDOA, Assisted Global Navigation Satellite System - A-GNSS, Enhanced Cell ID - E-CID) and related capabilities, allowing the server to select the most appropriate technique for the requested accuracy and environment.

LPP messages are structured into several procedure types. The main procedures are: Capability Transfer, where the UE informs the server of its supported positioning methods; Assistance Data Transfer, where the server can provide the UE with data (like GNSS ephemeris or OTDOA reference cell information) to improve positioning speed and accuracy; and Location Information Transfer, which can be either network-initiated (the server requests measurements or a position estimate) or UE-initiated (the UE provides its location). For OTDOA, the server provides assistance data listing neighboring cells and their positioning reference signal (PRS) configurations. The UE then measures the Reference Signal Time Difference (RSTD) between these cells and reports them back via LPP for the server to calculate the position.

In the 5G system, LPP continues to be the primary positioning protocol, now between the UE and the LMF. Its architecture has been extended to support new 5G NR positioning reference signals (PRS for DL-TDOA, SRS for UL-TDOA) and techniques like Multi-RTT (Round Trip Time). LPP messages are transported over the NG control plane (NG-C) interface via 5G NAS. The protocol supports both real-time positioning for services like emergency calls and deferred or periodic positioning for tracking applications. Its design is modular and extensible, allowing new positioning methods and measurement types to be added in subsequent 3GPP releases without overhauling the core protocol, ensuring it remains the future-proof foundation for cellular-based positioning services.

Purpose & Motivation

LPP was created to provide a standardized, efficient, and accurate method for determining the location of LTE devices, addressing regulatory requirements like Enhanced 911 (E911) and enabling commercial location-based services (LBS). Prior to LPP, location services in 2G/3G relied on less accurate methods like Cell-ID or used proprietary protocols, leading to fragmentation and inconsistent performance. The development of LTE provided an opportunity to design a unified, IP-based positioning protocol from the ground up.

The protocol was motivated by the need for high accuracy, low latency, and minimal impact on UE battery life. It solves the problem of how to coordinate complex positioning measurements (which require precise timing and signal information) between the network and potentially millions of devices. By supporting assistance data transfer, LPP allows UEs to acquire GNSS signals faster (A-GNSS) or perform OTDOA measurements more accurately, significantly improving performance compared to standalone methods. Its creation enabled a wide range of applications beyond emergency services, including turn-by-turn navigation, asset tracking, geofencing, and location-aware network optimization, making precise positioning a core capability of modern cellular networks.

Key Features

  • Support for multiple positioning methods (OTDOA, A-GNSS, E-CID, sensor-based, WLAN, BT)
  • Capability negotiation between UE and location server
  • Transfer of positioning assistance data to improve UE performance
  • Support for both UE-based and UE-assisted positioning modes
  • Transport over NAS, providing security and reliability of the control plane
  • Extensible design to accommodate new methods like 5G NR Multi-RTT and AoA

Evolution Across Releases

Rel-9 Initial

Initially introduced as part of the LTE positioning architecture. Defined the core LPP protocol for communication between the E-SMLC and UE, supporting primary methods like OTDOA and A-GNSS. Established procedures for capability transfer, assistance data delivery, and location information transfer.

Enhanced LPP with support for additional frequency bands for OTDOA, improved assistance data for A-GNSS (including GLONASS and QZSS), and introduced support for Real-Time Kinematics (RTK) and other high-accuracy GNSS techniques.

Added significant enhancements for IoT and critical communications, including support for positioning of NB-IoT and Cat-M1 devices. Introduced lower power modes and enhanced E-CID for indoor positioning. Defined support for WLAN and Bluetooth measurement reporting.

Integrated LPP fully into the 5G system for communication with the LMF. Added support for new 5G NR positioning techniques, including DL-TDOA, UL-TDOA, Multi-RTT, and Angle-of-Arrival (AoA)/Angle-of-Departure (AoD). Enhanced accuracy requirements for industrial IoT scenarios.

Further refined 5G NR positioning, introducing sidelink positioning for V2X and device-to-device scenarios. Enhanced support for reduced capability (RedCap) devices and improved integrity for high-accuracy use cases like autonomous driving.

Defining Specifications

SpecificationTitle
TS 21.905 3GPP TS 21.905
TS 23.501 3GPP TS 23.501
TS 23.586 3GPP TS 23.586
TS 23.700 3GPP TS 23.700
TS 23.730 3GPP TS 23.730
TS 24.171 3GPP TS 24.171
TS 24.501 3GPP TS 24.501
TS 24.571 3GPP TS 24.571
TS 24.572 3GPP TS 24.572
TS 24.890 3GPP TS 24.890
TS 29.171 3GPP TS 29.171
TS 33.814 3GPP TR 33.814
TS 36.133 3GPP TR 36.133
TS 36.171 3GPP TR 36.171
TS 36.305 3GPP TR 36.305
TS 36.355 3GPP TR 36.355
TS 36.455 3GPP TR 36.455
TS 36.809 3GPP TR 36.809
TS 36.855 3GPP TR 36.855
TS 37.171 3GPP TR 37.171
TS 37.355 3GPP TR 37.355
TS 37.571 3GPP TR 37.571
TS 37.857 3GPP TR 37.857
TS 38.171 3GPP TR 38.171
TS 38.305 3GPP TR 38.305
TS 38.455 3GPP TR 38.455
TS 38.843 3GPP TR 38.843
TS 38.855 3GPP TR 38.855