# Centroid Localization of Uncooperative Nodes in Wireless Networks Using a Relative Span Weighting Method

- Christine Laurendeau
^{1}Email author and - Michel Barbeau
^{1}

**2010**:567040

https://doi.org/10.1155/2010/567040

© C. Laurendeau and M. Barbeau. 2010

**Received: **19 August 2009

**Accepted: **21 September 2009

**Published: **11 November 2009

## Abstract

Increasingly ubiquitous wireless technologies require novel localization techniques to pinpoint the position of an uncooperative node, whether the target is a malicious device engaging in a security exploit or a low-battery handset in the middle of a critical emergency. Such scenarios necessitate that a radio signal source be localized by other network nodes efficiently, using minimal information. We propose two new algorithms for estimating the position of an uncooperative transmitter, based on the received signal strength (RSS) of a single target message at a set of receivers whose coordinates are known. As an extension to the concept of centroid localization, our mechanisms weigh each receiver's coordinates based on the message's relative RSS at that receiver, with respect to the span of RSS values over all receivers. The weights may decrease from the highest RSS receiver either linearly or exponentially. Our simulation results demonstrate that for all but the most sparsely populated wireless networks, our exponentially weighted mechanism localizes a target node within the regulations stipulated for emergency services location accuracy.

## Keywords

## 1. Introduction

Given the pervasiveness of cellphones and other wireless devices, compounded with the associated expectation of permanent connectivity, it is perhaps not surprising that the abrupt dashing of such presumptions makes headline news. A recent spate of cases in Canada has highlighted the tragic consequences of failing to locate the source of an emergency 911 cellphone call. In one incident, a New Year's Eve reveler lost in a snowstorm in the middle of the British Columbia woods called 911 for help, but the police were only able to find the teen over 12 hours later, after he had perished [1]. In September 2008, the body of a badly beaten man in Alberta was located four days after his ill-fated call for help [2]. A more recent case had two children lost in snowy conditions who were lucky to survive when discovered several hours after their initial 911 call [3]. These and similar events have spurred the Canadian Radio-television Telecommunications Commission (CRTC) to regulate the same wireless Enhanced 911 (E911) provisions [4] as the Federal Communications Commission (FCC) in the U.S. [5]. Under Phase II of the FCC and CRTC plans, localization efforts based on a handset device (*handset-based*) must yield a location accuracy of 50 meters in 67% of cases and 150 meters 95% of the time. *Network-based* localization, where other nodes (whether base stations or other handsets within range) estimate the position of a device, must accurately reveal a target location within 100 meters 67% of the time and within 300 meters in 95% of cases.

Self-localization achieved with handset-based techniques can produce granular results. For example with the Global Positioning System (GPS), a precision of ten meters may be achieved [6]. But self-localization is not feasible in all scenarios. An uncooperative node is one that cannot be relied upon to determine its coordinates, for example, a defective sensor, a malicious device engaging in a security exploit, or a low-battery handset in a critical situation. A malicious node broadcasting an attack message cannot be expected to cooperate with efforts to uncover its position. In other situations, a malfunctioning device or one whose battery is nearly drained may be unable to compute and report its coordinates to other nodes. Network-based localization schemes are thus essential in order to fill the gap. A large body of location estimation literature already exists, much of it centered on self-localization. With GPS technology becoming more affordable, highly performing and well adept at filling the handset-based requirements, we focus our efforts on network-based localization and the inherently more complex scenarios it addresses.

In a sufficiently densely populated wireless network, the source location of a given message may be approximated from the coordinates of receiving devices, assuming an omnidirectional propagation pattern. We propose two localization algorithms that estimate a transmitting node's position as the weighted average of receiver coordinates, assuming that a single message is received from the target node. We compute a received signal strength (RSS) span as the difference between the maximum and minimum RSS values for the transmitted message over all receivers. We assign greater weight to the receiver coordinates whose RSS value is closer to the maximum of the RSS span and thus closer to the transmitter. Conversely, lesser weight is ascribed to receivers with lower RSS values, as they are deemed farther from the transmitter. We describe a *relative span weighted localization* (RWL) mechanism, where the concept of weighted moving average is adapted to provide a linear mapping between the weight assigned to a receiver's coordinates and the relative placement of its RSS value within the overall RSS span. We further propose an exponential variation of RWL, dubbed *relative span exponential weighted localization* (REWL). This approach is conceptually related to an exponential moving average and relies on an exponential weight correspondence between a receiver's coordinates and its relative situation within the RSS span. We evaluate the RWL and REWL algorithms using simulated RSS reports featuring a variety of node densities, number of receivers, and amount of signal shadowing representative of environment-based RSS fluctuations. We also test our localization mechanisms with RSS values harvested from an outdoor field experiment. We find that the exponentially weighted variation achieves better results and that, except for cases with a small number of receivers and a large amount of signal shadowing, our mechanism meets the E911 mandated location accuracy requirements.

Section 2 provides an overview of existing work in wireless node localization. Section 3 outlines the centroid localization schemes on which our new algorithms are based. Section 4 describes our linearly and exponentially weighted location estimation mechanisms. Section 5 evaluates the performance of both algorithms using simulated and experimental RSS values. Section 6 concludes the paper.

## 2. Related Work

The problem of wireless node localization may be approached from one of two main directions: device based (also known as handset-based) and network based. Device-based self-localization involves a node seeking to learn its own position, occasionally with the help of other trusted devices within radio range. For example, the use of GPS can be seen as a device-based approach, since a node uses information supplied by a set of satellites in order to determine its coordinates. In techniques based on time of arrival (TOA), a device may situate its position with respect the known locations of other nodes by correlating arrival time of received messages and thus determining its distance to each node. A large proportion of the localization techniques proposed for sensor networks assume a device-based approach. For example, the three/two neighbor algorithm proposed by Barbeau et al. [7] allows for a sensor of unknown position to estimate its location from the coordinates of neighboring nodes, based on their respective TOA-approximated distances. While device-based mechanisms can achieve high localization accuracy, they are unsuitable for positioning attackers or uncooperative nodes. Given that such devices may supply erroneous location information, either willfully or accidentally, they must be located by other network nodes using measurements that cannot easily be forged.

The concept of triangulation was first introduced by Frisius [8] for map surveying and locating far-off geographical points. In more recent years, this approach has also served as a network-based technique to localize a transmitting device using two receivers of known coordinates and the transmission's angle of arrival. A significant drawback of the triangulation method is the necessity that receivers be equipped with directional antennas, so that the angle at which an incoming transmission originates may be measured. Without this specialized hardware, triangulation is not feasible.

We focus our research efforts on network-based location estimation mechanisms that assume the more commonly available omnidirectional antennas. In existing work, such schemes typically yield results in either *open-form*, where a target node is localized to an estimated area in Euclidean space, or in *closed-form*, where the coordinates of a single point are determined.

Open-form solutions may be constructed as the intersection of rings, or annuli, around the receivers of a particular message, as suggested by Barbeau and Robert [9], as well as Liu et al. [10]. In such mechanisms, the minimum and maximum distances between a transmitter and each receiver are approximated from a signal path loss propagation model, such as the log-normal shadowing model [11]. However, the effective isotropic radiated power (EIRP) must be known, which may not be feasible in an attack message scenario. In hyperbolic position bounding, first described by Laurendeau and Barbeau [12], the EIRP is assumed to be unknown, and hyperbolic areas are computed from an estimated distance difference range between a transmitter and each pair of receivers. The intersection of constructed hyperbolic areas suggests a candidate area for the location of a transmitter. While open-form solutions may localize a node within an area with a suitable degree of granularity for certain types of applications, other scenarios may require a more precise localization result.

Closed-form solutions abound in the literature as well. The time difference of arrival (TDOA) approach translates the difference in arrival times of a given message at two receivers into a distance difference and plots a hyperbola with the receiver coordinates as foci. Multiple receiver pairs yield multiple hyperbolas, with a transmitter location determined at the common intersecting point. With this technique, the clocks at receiving devices must be synchronized with nanosecond precision; otherwise a common intersecting point may not exist. Even highly correlated GPS clocks may exhibit up to one microsecond of clock drift between receivers [13]. At the speed of light, a one microsecond drift translates into a distance difference of 300 meters, resulting in a margin of location error greater than the FCC regulations for E911 location accuracy. The RSS values of a given message may be used to estimate a set of transmitter-receiver (T-R) distances using a least squares approach, as suggested by Zhong et al. [14] and Liu et al. [15, 16]. Disadvantages of these schemes include their reliance upon a nearly-ideal radio propagation environment, with little signal noise, as well as the availability of multiple transmitted messages so that the signal fluctuations can be averaged out. Even in a moderately shadowed environment, such approaches may fail to yield any solution.

In the realm of sensor networks, centroid localization (CL) has been suggested as an efficient closed-form method that never fails to produce a solution. The original incarnation of CL is described by Bulusu et al. [17] and localizes the transmitting source of a message to the coordinates obtained from averaging the coordinates of all receiving devices within range. Weighted centroid localization (WCL), as proposed by Blumenthal et al. [18], assigns a weight to each of the receiver coordinates, as inversely proportional to either the known T-R distance or the link quality indicator available in ZigBee/IEEE 802.15.4 sensor networks [19]. Behnke and Timmermann [20] extend the WCL mechanism for use with normalized values of the link quality indicator. Schuhmann et al. [21] conduct an indoor experiment to determine a set of fixed parameters for an exponential inverse relation between T-R distances and the corresponding weights used with WCL. Orooji and Abolhassani [22] suggest a T-R distance-weighted averaged coordinates scheme, where each receiver's coordinates is inversely weighted according to its distance from the transmitter. But this approach assumes that the receivers are closely colocated and that the T-R distance to at least one of the receivers is known a priori.

## 3. Centroid Localization

We outline the centroid localization approaches on which our novel algorithms are based and introduce the notation used throughout the description of our mechanisms.

Notation

The estimated coordinates of the transmitter we are striving to locate are denoted as . Each receiver is situated at a point of known coordinates . For the sake of simplicity in our algorithm descriptions, we depict operations on receiver points . In fact, two separate calculations occur. The approximated coordinate is computed from all the receiver coordinates, and is calculated from the coordinates.

*centroid*of the known points as follows:

where represents the number of points.

*weighted centroid*is thus computed as

where is the known distance between the target node and point , and the exponent influences the degree to which remote points participate in estimating the target location . Values of are determined manually, with Blumenthal et al. [18] and Schuhmann et al. [21] promoting different optimal values, depending on the experimental setting.

## 4. Relative Span Weighted Localization

Assuming an uncooperative node, we cannot presume to know *a priori* the set of T-R distances
or the optimal value of
in a given outdoor environment. Further, we cannot estimate values of
from the log-normal shadowing model, as the transmitter EIRP may not be known. We therefore introduce the concept of relative span weighted localization in order to estimate the location of a transmitter with minimal information available at a set of receivers. Our approach adapts the concept of moving average from a weighting method over time and applies it to WCL in the space domain. But rather than ascribing weights according to known or approximated T-R distances, we weigh each receiver coordinates according to the relative placement of its RSS value within the span of all RSS reports for a given transmitted message. The receiver coordinates may be weighted linearly or exponentially.

Definition 4.1 (minimal/maximal RSS).

Definition 4.2 (RSS span).

We describe two relative span weighted localization algorithms, both computing a weighted centroid as defined in (2), but with novel approaches for computing the weights assigned to each receiver coordinates.

### 4.1. Linearly Weighted Localization

The RWL algorithm computes a centroid of receiver coordinates, each weighted linearly according to the relative position of the receiver's RSS value within the RSS span.

Algorithm 4.3 (RWL algorithm).

*relative span weighted localization*(RWL) algorithm estimates a transmitter's coordinates as the weighted centroid of all receiver coordinates , as defined for WCL in (2), but with a linearly increasing weight assigned to each receiver according to its presumed proximity to the transmitter. Given the RSS values in , as found in Definition 4.1, and the RSS span determined according to Definition 4.2, the weight of each receiver is computed from the relative placement of its RSS value in the RSS span, as follows:

### 4.2. Exponentially Weighted Localization

Exponentially weighted moving averages (EMAs) have been used for a variety of forecasting applications, for example, in Muir [23], to predict future values based on past observations, with more weight exponentially ascribed to more recent data. A *weighting factor*
is used as a parameter to control the proportion of weight assigned to recent observations with respect to past ones.

where is the weighting factor, is an observation at time and is the average of historical observation values.

where is the number of observations.

We adapt the EMA concept from rating observations over time for the purpose of weighting receiver coordinates over the space domain. While EMA favors more recent observations in time with a weighting factor of , we bolster receivers that are likely to be closer to a transmitter and thus feature higher RSS values. In addition, rather than increasing the weighting factor exponent by one for each observation in time, we correlate the exponent with the relative position of each receiver's RSS value within the RSS span.

Algorithm 4.4 (REWL algorithm).

### 4.3. Example

## 5. Performance Evaluation

We evaluate the performance of the RWL and REWL algorithms using simulated RSS values and experimental ones harvested from an outdoor field experiment.

### 5.1. Simulation Results

We ran the RWL and REWL mechanisms on simulations featuring a variety of node densities and number of receivers. For each of 10 000 executions, we generate a random transmitter position within a simulation grid. We define our node densities as the number of nodes per . For every node density , we position nodes per in uniformly distributed positions on our simulation grid. For each node, we compute a RSS value based on the log-normal shadowing model [11], with a random amount of signal shadowing generated along a Gaussian probability distribution. We assume two different radio propagation environments with path loss constants obtained from outdoor experiments. For the 2.4 GHz WiFi/802.11g frequency, we use propagation values measured by Liechty [26] and Liechty et al. [27], where a signal shadowing standard deviation is measured at nearly dBm. For the 5.8 GHz frequency, licensed for vehicular networks [28], we make use of the constants determined by Durgin et al. [29], with a signal shadowing standard deviation close to dBm. Similar experiments by Schwengler and Gilbert corroborate the amount of signal shadowing commonly experienced at this frequency [30]. Our setup allows us to gauge the performance of relative span weighted localization based on propagation environments featuring different amounts of signal fluctuations. Once our simulated nodes are positioned, we determine which ones can be used as receivers. We set all receiver sensitivity to 90 dBm, and the nodes that feature a RSS value above the sensitivity are deemed within range of the transmitter and thus become receivers. The nonreceiver nodes are subsequently ignored as out of range.

For each execution, we use the known coordinates of all receivers to compute a possible position for the transmitter, according to four algorithms: the maximum RSS receiver method, where a transmitter is assumed to be at exactly the receiver position with the highest RSS value; the CL approach, as set out by Bulusu et al. in (1); the RWL algorithm using (8); the REWL algorithm as set forth in (12), given three different values for the weighting factor . We assess the performance of each mechanism according to its location accuracy, computed as the Euclidian distance between the estimated position and the actual transmitter location, averaged over all executions. Our results are deemed accurate within 3 meters in a 95% confidence interval.

Orooji et al. [22] simulate a cluster of seven cells, each featuring a base station with a one kilometer radius, in order to compute the location of a mobile station. A very small amount of signal shadowing dBm is taken into account. Even though their proposed T-R distance-weighted method assumes a known distance to one of the base stations, the mean location error is 48 meters, with 95% of executions resulting in a location error less than 103 meters. Our RWL and REWL ( ) algorithms for 2.4 GHz with eight receivers yield an average 37 and 34 meter location error, respectively. RWL locates a transmitter within 100 meters 98% of the time, while REWL does so in 99% of cases. Thus over a similarly sized simulation grid, our RWL and REWL mechanisms consistently yield more accurate results.

### 5.2. Experimental Results

## 6. Conclusion

We propose a wireless network-based localization mechanism for estimating the position of an uncooperative transmitting device, whether it is a malfunctioning sensor, an attacker engaging in a security exploit, or a low-battery cellphone in a critical emergency. We extend the concept of weighted centroid localization and describe two additional receiver coordinate weighting mechanisms, one linear and the other exponential, that assume no knowledge of the T-R distances nor of the transmitter EIRP. We adapt the concept of moving averages based on observations over time to the space domain. We ascribe linear and exponential weights to each receiver coordinates, based on the relative positioning of the receiver's RSS value relative to the RSS span over all receivers.

We tested our relative span weighted localization algorithms with simulated and experimental RSS values, using two frequencies featuring different amounts of signal shadowing. We found that our algorithms yield lower location errors than the existing centroid localization method. As expected, the location accuracy increases as more nodes participate in the localization effort. For example with REWL ( ) at 2.4 GHz, one node per localizes a transmitter within 44 meters, while ten nodes per do so in less than ten meters. Yet the location accuracy decreases as the amount of signal shadowing between different receivers increases, with an average decrease of approximately 50% for every 2 dBm of additional signal shadowing standard deviation. We conclude that the exponential variation of our relative span weighted localization algorithm achieves a location accuracy that meets the FCC regulations for Enhanced 911, for all densities with moderate amounts of signal shadowing and for all but the smallest node densities with extensive shadowing.

Future directions for this paper include exploring possible improvements to location accuracy by taking signal shadowing into account at each receiver location. Also, more extensive experiments can be conducted to assess our algorithms with greater volumes of packets under different conditions, including mobility.

## Declarations

### Acknowledgments

The authors gratefully acknowledge the financial support received for this research from the Natural Sciences and Engineering Research Council of Canada (NSERC), and the Automobile of the 21st Century (AUTO21) and Mathematics of Information Technology and Complex Systems (MITACS) Networks of Centers of Excellence (NCEs).

## Authors’ Affiliations

## References

- Colebourn J: Search crew finds body of lost B.C. teen.
*The Vancouver Province*January 2009.Google Scholar - Massinon S: Cell providers told to boost 911 service.
*The Calgary Herald*February 2009.Google Scholar - Santin A: Winnipeger dies after rescue from lake ice.
*Winnipeg Free Press*February 2009.Google Scholar - Canadian Radio-Television Telecommunications Commission :
*Implementation of wireless phase II E9-1-1 service.*Tech. Rep. CRTC 2009-40, Telecom Regulatory Policy; February 2009.Google Scholar - Federal Communications Commission: 911 Service FCC Code of Federal Regulations, Title 47, Part 20, Section 20.18, October 2007Google Scholar
- Nielson J, Keefer J, McCullough B: SAASM: rockwell collins' next generation GPS receiver design.
*Proceedings of the IEEE Position Location and Navigation Symposium (PLANS '00), March 2000, San Diego, Calif, USA*98-105.Google Scholar - Barbeau M, Kranakis E, Krizanc D, Morin P: Improving distance based geographic location techniques in sensor networks. In
*Proceedings of the 3rd International Conference on Ad-Hoc, Mobile, and Wireless Networks (ADHOC-NOW '04), July 2004, Vancouver, Canada, Lecture Notes in Computer Science*.*Volume 3158*. Springer; 197-210.View ArticleGoogle Scholar - Frisius G: Libellus de locorum describendorum ratione. In
*Cosmographia*. Edited by: Apian P. , Antwerp, Belgium; 1533.Google Scholar - Barbeau M, Robert J-M: Rogue-base station detection in WiMax/802.16 wireless access networks.
*Annals of Telecommunications*2006, 61(11-12):1300-1313.View ArticleGoogle Scholar - Liu C, Wu K, He T: Sensor localization with ring overlapping based on comparison of received signal strength indicator.
*Proceedings of the IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS '04), October 2004*516-518.Google Scholar - Rappaport TS:
*Wireless Communications: Principles and Practice*. 2nd edition. Prentice-Hall, Englewood Cliffs, NJ, USA; 2002.Google Scholar - Laurendeau C, Barbeau M: Insider attack attribution using signal strength based hyperbolic location estimation.
*Security and Communication Networks*2008, 1(4):337-349. 10.1002/sec.35View ArticleGoogle Scholar - Sterzbach B: GPS-based clock synchronization in a mobile, distributed real-time system.
*Real-Time Systems*1997, 12(1):63-75. 10.1023/A:1007910115824View ArticleGoogle Scholar - Zhong S, Li L, Liu YG, Yang R:
*Privacy-preserving locationbased services for mobile users in wireless networks.*Tech. Rep. TR1297, Department of Computer Science, Yale University; July 2004.Google Scholar - Liu B-C, Lin K-H, Wu J-C: Analysis of hyperbolic and circular positioning algorithms using stationary signal-strength-difference measurements in wireless communications.
*IEEE Transactions on Vehicular Technology*2006, 55(2):499-509. 10.1109/TVT.2005.863405View ArticleGoogle Scholar - Liu B-C, Lin K-H: Distance difference error correction by least square for stationary signal-strength-difference-based hyperbolic location in cellular communications.
*IEEE Transactions on Vehicular Technology*2008, 57(1):227-238.View ArticleGoogle Scholar - Bulusu N, Heidemann J, Estrin D: GPS-less low-cost outdoor localization for very small devices.
*IEEE Personal Communications*2000, 7(5):28-34. 10.1109/98.878533View ArticleGoogle Scholar - Blumenthal J, Grossmann R, Golatowski F, Timmermann D: Weighted centroid localization in Zigbee-based sensor networks.
*Proceedings of the IEEE International Symposium on Intelligent Signal Processing (WISP '07), October 2007*1-6.Google Scholar - LAN/MAN Standards Committee of the IEEE Computer Society : IEEE standard for information technology—telecommunications and information exchange between systems—local and metropolitan area networks—specific requirements—part 15.4: wireless medium access control (MAC) and physical layer (PHY) specifications for low-rate wireless personal area networks (WPANS)—Amendment 1: Add Alternate PHYs. IEEE Std 802.15.4a-2007, August 2007Google Scholar
- Behnke R, Timmermann D: AWCL: adaptive weighted centroid localization as an efficient improvement of coarse grained localization.
*Proceedings of the 5th Workshop on Positioning, Navigation and Communication (WPNC '08), March 2008*243-250.Google Scholar - Schuhmann S, Herrmann K, Rothermel K, Blumenthal J, Timmermann D: Improved weighted centroid localization in smart ubiquitous environments. In
*Proceedings of the 5th International Conference on Ubiquitous Intelligence and Computing (UIC '08), June 2008, Oslo, Norway, Lecture Notes in Computer Science*.*Volume 5061*. Springer; 20-34.View ArticleGoogle Scholar - Orooji M, Abolhassani B: New method for estimation of mobile location based on signal attenuation and hata model signal prediction.
*Proceedings of the 27th IEEE Annual International Conference of the Engineering in Medicine and Biology Society (EMBS '05), September 2005*7: 6025-6028.Google Scholar - Muir A: Automatic sales forecasting.
*The Computer Journal*1958, 1(3):113-116. 10.1093/comjnl/1.3.113View ArticleMATHGoogle Scholar - National Institute of Standards and Technology :
*NIST/SEMATECH e-Handbook of Statistical Methods*. 2009.Google Scholar - Roberts SW: Control chart tests based on geometric moving averages.
*Technometrics*1959, 1(3):239-250. 10.2307/1266443View ArticleGoogle Scholar - Liechty LC:
*Path loss measurements and model analysis of a 2.4 GHz wireless network in an outdoor environment, M.S. thesis*. Georgia Institute of Technology, Atlanta, Ga, USA; 2007.Google Scholar - Liechty LC, Reifsnider E, Durgin G: Developing the best 2.4 GHz propagation model from active network measurements.
*Proceedings of the 66th IEEE Vehicular Technology Conference (VTC '07), September-October 2007*894-896.Google Scholar - ASTM International : Standard specification for telecommunications and information exchange between roadside and vehicle systems—5 GHz band dedicated short range communications (DSRC) medium access control (MAC) and physical layer (PHY) specifications. ASTM E2213-03, September 2003Google Scholar
- Durgin G, Rappaport TS, Hao X: Measurements and models for radio path loss and penetration loss in and around homes and trees at 5.85 GHz.
*IEEE Transactions on Communications*1998, 46(11):1484-1496. 10.1109/26.729393View ArticleGoogle Scholar - Schwengler T, Gilbert M: Propagation models at 5.8 GHz—path loss & building penetration.
*Proceedings of the IEEE Radio and Wireless Conference (RANCOM '00), September 2000*119-124.Google Scholar

## Copyright

This article is published under license to BioMed Central Ltd. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.