LTE Positioning Protocol

Description

The LTE Positioning Protocol (LPP) is a key application-layer protocol within the 3GPP control plane architecture, specifically designed for transferring positioning-related information. It operates between a Location Server (LS), such as the Evolved Serving Mobile Location Centre (E-SMLC) in LTE or the Location Management Function (LMF) in 5GC, and a target User Equipment (UE). LPP is carried over the LTE-Uu and SLg interfaces via NAS transport, ensuring secure and reliable delivery of positioning commands and measurements. The protocol is inherently capability-aware; an LPP session typically begins with the server querying the UE for its supported positioning methods (e.g., Observed Time Difference of Arrival - OTDOA, Assisted Global Navigation Satellite System - A-GNSS, Enhanced Cell ID - E-CID) and related capabilities, allowing the server to select the most appropriate technique for the requested accuracy and environment.

LPP messages are structured into several procedure types. The main procedures are: Capability Transfer, where the UE informs the server of its supported positioning methods; Assistance Data Transfer, where the server can provide the UE with data (like GNSS ephemeris or OTDOA reference cell information) to improve positioning speed and accuracy; and Location Information Transfer, which can be either network-initiated (the server requests measurements or a position estimate) or UE-initiated (the UE provides its location). For OTDOA, the server provides assistance data listing neighboring cells and their positioning reference signal (PRS) configurations. The UE then measures the Reference Signal Time Difference (RSTD) between these cells and reports them back via LPP for the server to calculate the position.

In the 5G system, LPP continues to be the primary positioning protocol, now between the UE and the LMF. Its architecture has been extended to support new 5G NR positioning reference signals (PRS for DL-TDOA, SRS for UL-TDOA) and techniques like Multi-RTT (Round Trip Time). LPP messages are transported over the NG control plane (NG-C) interface via 5G NAS. The protocol supports both real-time positioning for services like emergency calls and deferred or periodic positioning for tracking applications. Its design is modular and extensible, allowing new positioning methods and measurement types to be added in subsequent 3GPP releases without overhauling the core protocol, ensuring it remains the future-proof foundation for cellular-based positioning services.

Purpose & Motivation

LPP was created to provide a standardized, efficient, and accurate method for determining the location of LTE devices, addressing regulatory requirements like Enhanced 911 (E911) and enabling commercial location-based services (LBS). Prior to LPP, location services in 2G/3G relied on less accurate methods like Cell-ID or used proprietary protocols, leading to fragmentation and inconsistent performance. The development of LTE provided an opportunity to design a unified, IP-based positioning protocol from the ground up.

The protocol was motivated by the need for high accuracy, low latency, and minimal impact on UE battery life. It solves the problem of how to coordinate complex positioning measurements (which require precise timing and signal information) between the network and potentially millions of devices. By supporting assistance data transfer, LPP allows UEs to acquire GNSS signals faster (A-GNSS) or perform OTDOA measurements more accurately, significantly improving performance compared to standalone methods. Its creation enabled a wide range of applications beyond emergency services, including turn-by-turn navigation, asset tracking, geofencing, and location-aware network optimization, making precise positioning a core capability of modern cellular networks.