Secure User Plane for Location

Description

Secure User Plane for Location (SUPL) is a protocol suite standardized by 3GPP and Open Mobile Alliance (OMA) that provides location services (LCS) by leveraging the user plane (IP-based data channels) rather than the control plane signaling channels. Introduced in 3GPP Release 7, SUPL enables efficient and scalable determination of a mobile device's position by transporting positioning-related messages between the SUPL Enabled Terminal (SET), which is the mobile device, and the SUPL Location Platform (SLP), which is the network-based location server. The SLP consists of two main components: the SUPL Location Center (SLC), which handles session management and privacy, and the SUPL Positioning Center (SPC), which performs position calculation.

SUPL operates by establishing a secure IP connection (using TLS/DTLS) between the SET and SLP. The protocol supports multiple positioning methods, including Assisted Global Navigation Satellite System (A-GNSS), Observed Time Difference of Arrival (OTDOA), Enhanced Cell ID (E-CID), and others. In a typical SUPL session, the SLP initiates or the SET initiates a location request. They exchange messages (using OMA-defined protocols like ULPS or LPP) to transfer assistance data (e.g., satellite ephemeris for A-GNSS) from SLP to SET and measurement data (e.g., pseudoranges or timing measurements) from SET to SLP. The SPC then computes the position, which can be returned to the SET or to an external LCS client (e.g., a navigation app or emergency service).

Key architectural elements include the SET's SUPL agent (the application requesting location), the SLP's interfaces with core network elements (like GMLC in control plane LCS), and support for roaming scenarios where the home SLP and visited SLP may collaborate. SUPL is designed to reduce signaling load on the control plane, offer faster positioning, and support continuous tracking services. It is widely deployed for commercial location-based services (e.g., maps, friend finders) and mandated for emergency services like E911 in some regions. Specifications span 3GPP (e.g., 23.271 for architecture) and OMA (e.g., OMA-AD-SUPL for protocol details), ensuring interoperability across devices and networks.

Purpose & Motivation

SUPL was developed to address limitations of control plane location solutions in 2G/3G networks, which relied on signaling system no. 7 (SS7) and circuit-switched connections. Control plane LCS was complex, slow, and not scalable for mass-market location-based services due to heavy signaling overhead and dependency on network vendor implementations. As demand for location services grew with the rise of smartphones and apps, a more efficient, IP-based approach was needed.

The primary motivation for SUPL was to leverage the user plane (packet-switched data) for location positioning, enabling faster session setup, reduced network congestion, and easier integration with Internet-based applications. By using standard IP security (TLS), SUPL also provided inherent security and privacy protections, which were less robust in control plane methods. This allowed operators to offer commercial LCS (like navigation and advertising) without impacting core network stability.

Furthermore, SUPL supported a wider range of positioning technologies (e.g., A-GNSS, Wi-Fi positioning) and allowed continuous location tracking for services like fleet management or child monitoring. Its introduction in Release 7 coincided with the growth of 3G data services, providing a future-proof framework that evolved through LTE and 5G. SUPL also facilitated regulatory compliance for emergency services (e.g., E112 in Europe) by offering a standardized, reliable method for location determination, complementing control plane solutions. Thus, SUPL solved the problems of scalability, speed, and flexibility, enabling the location-aware ecosystem we see today.