Indoor positioning based on statistical multipath channel modeling

In order to estimate the location of an indoor mobile station (MS), estimated time-of-arrival (TOA) can be obtained at each of several access points (APs). These TOA estimates can then be used to solve for the location of the MS. Alternatively, it is possible to estimate the location of the MS directly by incorporating the received signals at all APs in a direct estimator of position. This article presents a deeper analysis of a previously proposed maximum likelihood (ML)-TOA estimator, including a uniqueness property and the behavior in nonline-of-sight (NLOS) situations. Then, a ML direct location estimation technique utilizing all received signals at the various APs is proposed based on the ML-TOA estimator. The Cramer-Rao lower bound (CRLB) is used as a performance reference for the ML direct location estimator.


Introduction
With the emergence of location-based applications and the need for next-generation location-aware wireless networks, location finding is becoming an important problem.Indoor localization has recently started to attract more attention due to increasing demands from security, commercial and medical services.For example, next generation corporate wireless local area networks (WLAN) will utilize location-based techniques to improve security and privacy [1].The requirement for high accuracy positioning in complex multipath channels and nonline-of-sight (NLOS) situations has made the task of indoor localization very challenging as compared to outdoor environments.
Conventionally, the positioning problem is solved via an indirect (two-step) parameter estimation scheme.First, the time-of-arrival (TOA) estimation at each access point (AP) is performed.The TOA estimator estimates the first arriving path delay, which corresponds to the line-of-sight (LOS) distance between the transmitter and the receiver assuming the LOS path exists.Then, these TOA estimates from each AP are transmitted to a central terminal at which the location estimation is carried out by various algorithms, such as trilateration or least squares fitting, etc. [2,3].Recently, the direct location estimation method has been proposed as another aspect to the positioning problem [4].Unlike the indirect methods which split the location estimation efforts between the APs and the central terminal, the direct positioning methods rely only on the central terminal to perform the location estimation task.The APs just relay the received signals to the central terminal for it to estimate the location of the mobile station (MS).It has been shown that the direct method can outperform the indirect method [4].
For the indirect positioning methods, the first step is to obtain an accurate TOA estimation.To separate closely spaced channel paths, super-resolution techniques [5], such as multiple signal classification (MUSIC), etc. [6][7][8], are reported to be able to significantly improve the TOA estimations as compared to the conventional autocorrelation approach [9].
Maximum likelihood (ML) is a natural approach for TOA estimation but in order to resolve the multiparameter issue that seems natural to the multipath environments, a novel ML-TOA estimator that only requires a one-dimensional search is proposed in [10].The ML-TOA technique estimates only the first arriving path delay based on the observation that this parameter is the only quantity needed for positioning.It was found that in dense multipath environments, the ML-TOA estimation outperforms the super-resolution methods discussed in [11,12].The effect of considering only the first arriving path delay in positioning was studied in [13].Based on the analyses of the Cramer-Rao lower bound (CRLB), the authors showed that if the paths are correlated then including other paths could improve the TOA estimation accuracy, however, they also pointed out that doing so "would not help enhance the accuracy significantly but merely increase the computational complexity." In this article, several important properties pertaining to the ML-TOA estimator that were previously left unanswered are established.First is the uniqueness of the ML-TOA estimator.For TOA estimation in multipath environments, not only the additive noise but also the multipath channels are random.Therefore, it is not obvious that the estimates converge to the exact parameter when signal-to-noise ratio (SNR) increases.Here, we demonstrate that the ML-TOA estimation provides the unique, correct TOA in the absence of noise provided the channel statistics are known.The effects of the NLOS situations are also discussed.The NLOS situation is another major challenge for indoor positioning for it can cause large TOA estimation bias that in turn result in large location estimation errors [14].There are optimization methods which can be used to mitigate the error due to NLOS.In [15,16], the optimization is carried out with respect to the unknown mobile location or the NLOS bias.In [13,17,18], statistical estimation methods are proposed in the case that the statistical knowledge such as the propagation scattering models or the NLOS delays statistics are known.In this article, the proposed ML-TOA is shown to be able to incorporate the statistics of NLOS channels automatically and thus reduce the estimation bias due to NLOS path delays.
The direct positioning method has just started to emerge as an interesting research topic and has been shown to provide improvement in the location estimation accuracy.Thus, in this article, in addition to the indirect (two-step) method, we also propose a direct ML positioning algorithm based on the ML-TOA estimator.In [19], the authors proposed a direct positioning method for orthogonal-frequency-division-multiplexing (OFDM) signals.There, the APs are assumed to be equipped with antenna arrays, the source is located in the far field and the channel power delay profile has a significant path while the rest paths are ignored.Here, we assume that each AP has a single antenna and the channel has multipath.It is shown that our proposed ML direct location estimator also posesses the uniqueness property thus its estimates are reliable.Furthermore, the CRLB of the direct location estimator is used as a performance reference.The simulation results show that the proposed direct positioning method has better performance than the indirect method and is close to the CRLB for some channels.While we focus on an OFDM signal structure, which is mathematically convenient and has not been studied extensively in the indoor localization problem, the approach can be generalized to any signal type.
The remainder of the article is organized as follows.Section 2 presents the mathematical formulation of the TOA estimation problem and the ML-TOA estimator.Section 3 presents analyses of the proposed ML-TOA estimator including the uniqueness property, the behavior of the cost function and the effects of the NLOS situations.In Section 4, a ML direct positioning algorithm is proposed based on the ML-TOA estimation algorithm.The uniqueness property associated with the ML direct location estimator is also shown.In Section 5, the performance of ML-TOA estimator and the proposed direct algorithm are demonstrated through computer simulations.Finally, conclusions are presented in Section 6.

ML-TOA estimation
One OFDM symbol duration is T + T G , where T G is the guard interval, and T is the receiver integration time over which the sub-carriers are orthogonal.A single symbol of the transmitted OFDM signal is assumed to have N subcarriers with transmitted sequence vector Assume that the signal is received after passing through a multipath channel with impulse response and a i is the complex channel gain of the ith path.After the standard receiver sampling, guard interval removal and fast-Fourier-transformation (FFT) processing, the kth element of the FFT output vector is (see [10] for details) where n k is complex Gaussian noise with variance s 2 = N 0 .
Conventional ML estimation is formulated in such a way that the unknown parameter is a multivariate vector, i.e., θ = [a 0 ... a L-1 τ 0 ... τ L-1 ] T .When the number of paths L is large, the computational complexity becomes prohibitive.However, only the first path delay, τ 0 , is required for location estimation purpose.Therefore, we focus the ML estimation on the TOA only, assuming a statistical model of the channel.
In this section, we assume a direct LOS path exists.The case of NLOS will be discussed in Section 3. Denote τ 0 as the TOA, the path delay that corresponds to the first arriving path.Then, referenced to τ 0 , the other path delays can be written as τ i = τ 0 + (τ i − τ 0 ) = τ 0 + τi .Equation (1) then becomes where H k is given by H k = L−1 i=0 a i e −j 2π T k τi and is the zero delay frequency response at the kth subcarrier.
Define the subcarrier frequency response vector as h = [H 0 H 1 ... H N-1 ] T .We assume at first that h is a zero mean, circular complex Gaussian vector with known covariance matrix K h = E hh H , where the H denotes Hermitian transpose [20].This Gaussian assumption is for mathematical development and the proposed TOA estimator, as was demonstrated in [10] for Ray-Trace data, performs well in practical situations.Equation ( 2) can then be used to express the complete FFT output vector as where T (N−1)τ 0 and D = diag {d 0 , d 1 , d 2 ,..., d N-1 } consists of the transmitted symbols.We shall assume that time delay estimation is performed on an OFDM training symbol so that D is known.As shown in [10], the ML solution for TOA τ 0 is where the cost function of the estimator is defined as where

Performance characteristics of the ML-TOA estimator
When estimating TOA in a dense multipath environment, the accuracy is impacted not only by the noise, but also by the presence of the many echoes of the signal due to the multipath.In this section, we first demonstrate that when noise is absent and we are in the presence of multipath only, then the proposed estimator yields the correct TOA uniquely, provided the covariance matrix K h is exactly known.For the rest of the article, we assume that D = I without loss of generality.

Uniqueness of the ML-TOA estimation
Assume for the present that noise is absent, i.e., s 2 = 0. Since K h can be factored using the Singular Value Decomposition K h = (UΛ 1/2 U H ) (UΛ 1/2 U H ) = RR H , the channel can be expressed as where z C L is a zero mean Gaussian random vector with covariance matrix {zz H } = I and L is the rank of K h .In this case, the received FFT output vector will be y = G(τ 0 )h = G(τ 0 )Rz.
Using this expression and the fact that when noise is absent the F matrix reduces to R H is the orthogonal projector onto the range space of R, i.e., Range (R), and this follows from the fact that P 2 R = P R .Since P R is an orthogonal projector, it can be seen that given a realization of z, Q(τ) is maximized if and only if G H (τ -τ 0 ) Rz Range (R).Obviously, this is the case when τ = τ 0 and the G matrix reduces to an identity matrix.We would like to investigate whether there are other possible maximizing values of τ.
To simplify the notation, let θ = 2π T (τ − τ 0 ) and define G(θ) ≜ G H (τ -τ 0 ).We are looking for conditions on θ such that G(θ)Rz Range(R), θ = 0 being an obvious solution.We note first that we can convert this problem into the deterministic one of finding conditions on θ such that Range (G (θ) R) ⊆ Range(R).Certainly this latter condition is sufficient to guarantee that G(θ) Rz Range(R).It is also true that if Range (G(θ)R) ⊈ Range(R), then G(θ)Rz ∉ Range(R) with probability one.To see this, note that Range (G Rz is Gaussian with non-zero variance and will be non-zero with probability one.Therefore, with probability one, and continuing this operation yields G n R = RA n , for all positive integers n.It follows easily that for any polynomial where f (A) = n c n A n is a matrix polynomial.From the structure of G, we see that Equation (7) says that any matrix of the form (8) can multiply R on the left, and the resulting matrix Let us now assume that Range(R) includes the flat channel vector h f = 1 where 1 is a vector with all unit elements.This essentially assumes that a flat fading channel is one of the possible realizations so that there is a vector z such that 1 = Rz.Multiplying (7) by z yields f(G)1 = Rf(A)z which means that, from (6), is a realizable channel vector for any polynomial f(l).Now, let L be the rank of R and assume that L < N.Then, the N values {1, e jθ , e j2θ ,..., e j(N-1)θ } cannot all be distinct for, if they were, the channel vector ( 9) could be chosen arbitrarily by suitable choice of interpolating polynomial f(l), contrary to the fact that the realizable channels are restricted to the L dimensional space Range (R).This is due to the well-known fact that a polynomial can always be found, which takes arbitrary values on any given set of arguments.In fact, we can see that at most L of the values {1, e jθ , e j2θ ,..., e j(N-1)θ } can be distinct for a similar reason.Now suppose there are actually q distinct values.It follows that the first q values must be distinct because, for example, if e jrθ = e jpθ where r < p ≤ q then e j (p-r)θ = 1 and there will be only pr -1 < q distinct values.
We have now shown that there must be an integer q ≤ L such that e jqθ = 1.Then, the sequence {1, e jθ , e j2θ ,..., e j(N-1)θ } cycles as follows {1, e jθ , e j2θ ,..., e j(q-1)θ , 1, e jθ , e j2θ ,...}.Suppose for example that q = 2.Then, the sequence is {1, e jθ , 1, e jθ ,...,1, e jθ ,...}.Choose an interpolating polynomial such that f(1) = 1 and f(e jθ ) = -1.Then, from (9) the vector of alternating plus and minus ones, i.e., f(G)1 = [1 -1 1 -1 1...] T would be a realizable channel vector.But this highly oscillatory channel frequency response would imply a very large channel delay spread.Therefore, if the delay spread of the channel is not too large, the value q = 2 would not be realistic.Similar examples of unrealistic channel frequency response can be constructed for any q greater than 1.Therefore, we are left with q = 1 in which case the only solution is e jqθ = 1 so that θ = 0 and the solution is unique.The simulation results in Section 5.1 also demonstrate this uniqueness property of the ML-TOA estimator.

ML-TOA estimation in NLOS situations
In this section, the effect of NLOS on the ML-TOA estimator is discussed and we show that the NLOS case is very naturally incorporated into the proposed ML-TOA estimator.Recall (1), ( 2) and (3) which illustrate how the TOA τ 0 is factored out and incorporated into the G matrix.These equations were developed with the understanding that τ 0 was the path delay of the direct LOS path.From now on, however, we simply define TOA τ 0 as the time it would take for an electromagnetic wave to travel the straight line that links the MS and AP, whether or not such a direct LOS path actually exists.In the case when a LOS path does not exist, (1) would be modified to read where the i = 0 term has been removed since the LOS path is absent.Nevertheless, with τ 0 defined as above, we may still express the actual path delays in terms of τ 0 as τ i = τ 0 + (τ i − τ 0 ) = τ 0 + τi , and we obtain a modified (2) as where H k is now given by H k = L−1 i=1 a i e −j 2π T k τi , and is the zero delay frequency response at the kth subcarrier when no LOS path is present.We maintain the earlier definition of the subcarrier frequency response vector as h = [H 0 H 1 ... H N-1 ] T and ( 11) can be used to express the complete FFT output vector as y = G(τ 0 )Dh + n. (12) Note that ( 12) is exactly the same as (3).The only difference in this NLOS case is the modification of the elements of the h vector due to the absence of the direct path.The derivation of the ML estimator now follows exactly as the case in which a direct path is present, and the channel statistics as measured by the procedure outlined below will reflect the actual environment, whether or not there is always a direct path present.
In practice, no matter what the multipath structure, the channel covariance matrix K h can be estimated offline by averaging measurements at each AP while the MS transmits at some known locations chosen in a random fashion.The detailed procedure is as follows: Step 1 : For a given, known, AP location, measure the received FFT output vector y (i) at the AP for the ith MS location.
Step 2 : Since, in this measurement phase, both MS and AP locations are known, TOA of the ith MS transmission (at ith location), i.e., τ (i) 0 , can be computed by dividing the distance between them by the speed of light, and the G (i) matrix can be determined by Then, for this ith transmission, the FFT output vector y in Equation ( 12) is measured and an estimated snapshot of h (i) can be found by Step 3: After collecting measurements at P different MS locations, the estimated channel covariance matrix is obtained by .
For future reference we now define the NLOS delay.For the NLOS case in which a LOS path does not exist, τ 1 in (10) will be the first arriving path delay.Then, we define "NLOS delay" = τ 1 -τ 0 , where τ 0 is the line of sight distance divided by the speed of light, as described above.The NLOS delay is sometimes called the excess delay and is the time difference between the first arriving actual NLOS path and the direct LOS time delay, τ 0 .
At this point, we emphasize that the NLOS case is very naturally incorporated into the proposed ML-TOA estimator.Recall that in the entire development, including the estimation procedure for Kh above, TOA is defined as the time it takes for the electromagnetic waves to travel the straight line that links the MS and AP, whether or not such a LOS path actually exists.Therefore, in Step 2 above the TOA can still be computed given the location of MS and AP even in the absence of a LOS path, since TOA is known whether or not a direct LOS exists.This is based on the idea that motivates the ML-TOA estimation.That is to separate the desired parameter from the statistics of the multipath channel.For the purpose of positioning, the desired parameter is the "generalized" TOA that we defined in the beginning of this section.In this way, the statistical properties of the measured channels will naturally incorporate the NLOS properties of the channel and no extra step or a prior information about the NLOS statistics is required to mitigate the NLOS effects.In Section 5.1, we present simulation results which show the TOA estimation performance for both LOS and NLOS cases.Finally, we point out that, since ( 12) is identical to (3), the uniqueness proof in Section 3.1 applies to the NLOS case as well.

Properties of the cost function Q(τ)
The TOA estimation is a nonlinear problem and is known to exhibit ambiguities which could result in large errors [21,22].In the large error regime, the CRLB cannot be attained.In this section, the behavior of the cost function Q(τ) is studied for two multipath channel models.It is also shown that for single path channels, the ML-TOA estimator is unbiased and the estimation error variance is inversely proportional to the bandwidth.
Consider first the extreme case in which there is only a direct path at τ 0 = 0 and no additive noise.We have h = a1 where a is the random path gain.Then, it is easily seen that K h = σ 2 a 11 T where σ 2 a is the variance of a, then R = s a 1, F = c11 T and y = h = a1, and the cost function (5) becomes where a, b are some constants.The width of the main lobe is inversely proportional to the number of subcarriers N or equivalently the bandwidth.In Figure 1, one realization of the noise free cost function Q(τ) in a single path channel is shown for the 802.11a configuration where N = 64 (see Section 5).It can be seen that it closely matches the theoretical curve where the training sequence is assumed to be all 1's.
In the case of multipath, we first investigate the cost function Q(τ) when noise is absent.In Figure 2, one realization of the noise free cost function for Exponential channel model and WLAN channel model A (see Section 5 for detailed description of the channel models used in this article) are plotted.Note the noise free cost function for the Exponential channel is fairly flat.As demonstrated in Section 3.1 if K h is perfectly known the actual peak of the cost function is at zero offset, but at high SNR, where the flattening effect is observed, an error in K h can result in biased TOA estimation (see Figure 3).The noise free cost function for WLAN channel model A shows that a clear peak is present thus is more robust to the error from the estimated channel covariance matrix at high SNR region (see Figure 4).For all other WLAN channel models, i.e., B to D, we have observed that the cost functions have similar characteristics to those for channel model A.

ML direct positioning method
In this section, we develop a ML direct estimation of the MS position, (x, y), based on the received FFT vectors from several APs.The proposed ML direct location estimation is shown to provide the correct, unambiguous location in the absence of noise given the channel statistics.
Conventionally, the positioning problem is solved via an indirect (two-step) parameter estmation scheme.First, TOA estimation at each AP is performed.Then, these TOA estimates are transmitted to a central terminal at which the location estimation is carried out.It is sometimes assumed that the TOA estimates in the first step are zero mean Gaussian random variables and then, based on this assumption, the second step applies a least square procedure, which in this case is also a ML estimator, to estimate the position of MS [23][24][25].However, it is known that in multipath environments, the TOA estimation can be biased and the estimation error is not Gaussian in practice [25][26][27].For these reasons, we propose a ML direct positioning method, based on the ML-TOA estimator described in Section 2, to estimate the position of MS directly.
For simplicity, in this article, the MS location is assumed to be on a two-dimensional surface, but the derivation can be extended to three dimensions as well.Consider M APs located at height z above the MS with x, y locations (x i , y i ) (i = 1, 2,..., M) and an MS at an unknown location (x, y).The distance from the MS to the ith AP is then d i = (x − x i ) 2 + (y − y i ) 2 + z 2 .Therefore, the TOA from the MS to the ith AP is , where C is the speed of light.Notice that in this expression, the TOA (x, y).We can estimate the position of the MS directly, based on the FFT output vectors at all M APs as follows.
From (3), assuming D = I, the complete FFT output vector at the ith AP is where The noise vectors n (i) are independent, zero mean Gaussian with covariance matrix σ 2 i I and h (i) is assumed to be a zero mean, circular complex Gaussian vector with known covariance matrix channels from the MS to each AP are assumed to be independent.Then, the joint p.d.f. of the received FFT vectors from all APs is p(y (1) , y (2) , . . ., y (M) |(x, y)) = 1 where Det(•) denotes the matrix determinant and show the term M i=1 Det K (i) y is independent of (x, y).
Using the matrix identity, Det (I + AB) = Det(I + BA), each determinant factor inside the product can be expressed as h /σ 2 i ) which does not depend on (x, y).
Next, factor K (i) H and using the well-known fact that (I + AB) -1 = I -A(I + BA) -1 B, we can write K H . (16) Use this in (15) and define Then, the ML direct estimation for the MS location (x, y) is where the unknown parameter (x, y) is embedded in G (i) .Note that F (i) can be computed off-line given σ 2 i and K (i) h .Next, we show that the ML direct positioning estimate based on ( 18) is unambiguously correct in the absence of noise.Denote (x 0 , y 0 ) and τ (i) 0 the true location of the MS and the true TOA for the ith AP, respectively.From the uniqueness property shown in Section 3.1, it follows that, given i, .
Assume that the ML direct location estimate is not unique.Then, from (18), there exists (x, y) ≠ (x 0 , y 0 ) such that However, from the uniqueness property, it follows that 19) is true if and only if there exists (x, y) ≠(x 0 , y 0 ) that satisfies τ (i) = τ (i) 0 .In other words, there exist some (x, y) ≠ (x 0 , y 0 ) such that the following system of equations are satisfied: However, by the trilateration principle that is commonly used in positioning, this cannot be true when M ≥ 3 and thus a contradiction.Therefore, the proposed ML direct position estimate is unique.

Simulation results
The wireless system simulated here is based on the IEEE 802.11a standard [28].The long training sequence is used for localization.The simulation parameters of the transmitted OFDM signal are: BW = 20 MHz, N = 64 subcarriers are used, T = 3.2 and T G = 1.6 μs.Two periods of the long sequence are transmitted to improved channel estimation accuracy, yielding the total duration of the long training sequence, T G + 2T = 8 μs.Two channel models are used in the simulations.One is the Exponential channel model similar to the ones used in [13,29] and the other is the WLAN channel model [30].The power delay profiles for the five WLAN channels are shown in Table 1.The root-mean-square (RMS) delays for channels A through E are 50, 100, 150, 140 and 250 ns, respectively.The Exponential channel is generated assuming the path delays represent a Poisson process with average time between points equal to t int and an Exponential power delay profile with the RMS amplitudes decaying by the fraction r over a t max delay spread.In the simulations, the parameters for Exponential channels are chosen to be t int = 10 ns, t max = 200 ns and decay r = 0.003.With these parameters, there are on average 20 paths in total and the power decay is -2.5 dB for each path.The channel covariance matrix Kh is estimated using the procedures described in Section 3.2 with 100 samples and 40 dB received signal SNR.The received SNR is defined as, assuming the transmit signal power is unity, SNR

Performance of the ML-TOA estimator
The performance of the ML-TOA estimator described in Section 2 has been thoroughly presented in [10] in the case when there is a significant LOS path present.In this section, we first discuss its performance in NLOS channels and then consider the effects of matched vs. mismatched statistics.As discussed in Section 3.2, the ML-TOA estimation procedure takes the statistics of NLOS channels into account automatically.Recall that the term "NLOS delay" refers to the time difference between the first arriving path delay and the TOA as defined in Section 3.2.If a direct LOS path exists, the NLOS delay is zero.Gaussian and Exponential distributions are assumed for the NLOS delay in the simulations [31,32].In Figure 5, the NLOS delay is assumed to be Gaussian with mean 15 ns and variance 10 or Exponential with mean b = 3 ns.The bottom curve (LOS/LOS K h ) is the performance when the LOS path exists.The curves (NLOS/NLOS K h ) are the situations when the channel contains no LOS path.The curves (NLOS/LOS K h ) serve as references and they represent a NLOS case but when estimating Kh , τ (i) 0 is chosen to equal the first arriving path delay instead of the TOA.The figure shows that the NLOS performance is comparable to that of the LOS case when channel measurements are made in the same NLOS scenario.If the LOS covariance matrix is used in the NLOS case (NLOS/LOS K h ), however, an increased bias is seen.
Next, we compare the performance of the ML-TOA estimator when the Exponential channel model is used vs. when the WLAN channel models are used, and also discuss the dependence of its performance on the number of samples used in estimating the covariance matrix.The error-bar plot is used in Figures 3 and 4. The center of the error bar is the mean of the estimation error and the length of the bar equals twice the standard deviation.In order to make it easier to distinguish different curves in the error-bar plot, they are off-set in the horizontal axis deliberately.These statistics are computed after 10, 000 trials. Figure 3 shows the performance of the ML-TOA estimator for the Exponential channel in the case where a LOS path exists.In order to show the robustness of the ML-TOA estimator, we compare the cases of mismatched and matched statistics.In the mismatched case, which corresponds to the practical application, the estimated covariance matrix Kh is measured as in Section 3.2 using 100 averaged samples.For the matched covariance matrix case, the channel is generated by h = Rz to ensure that its covariance matrix is strictly equal to K h .From Figure 3, we can see that in the SNR range 0-40 dB, the estimation error ΔK h does not cause much performance degradation for the Exponential channel.At high SNR region, as discussed in Section 3.3, due to the flattening of the cost function, ΔK h results in biased estimates.From the performance of the matched case, it is seen indirectly that the cost function has a unique maximizer, for at high SNR, the estimation is unbiased and the variance is zero.
For the WLAN channel models, Figure 4 shows the performance for different channel types.By comparing Figure 4 with Figure 3, it seems that the performance for the WLAN channel models is slightly better than for the Exponential channels.This is related to the fact that, for these channels, the cost function has clear peak (see Figure 2).Channel type A yields worst performance among the WLAN channels, which may be due to the fact that its power delay profile is most similar to an Exponential channel which has a flat noise free cost function.
Figure 6 shows the performance of the WLAN channel A as the number of samples used for estimating K h is varied.Since Kh is a random quantity for any given number of samples, we use the following process in generating this figure.When the number of samples is P, Kh is estimated using P averaged random channels (MS locations) with SNR at 40 dB.Next, using this specific Kh , 100 random ML-TOA estimation trials are performed for each SNR value and the errors are recorded.Next, a new Kh is generated using another P averaged samples, and another 100 random ML-TOA estimation trials are performed for each SNR value.This is repeated for 10 different estimated Kh matrices, for a total of 1, 000 TOA estimation error values, and the statistics are then plotted to yield the curves in Figure 6.Figures 7 and 8 show the corresponding results for the WLAN channel D and Exponential channel.As one would expect, there is some fluctuation in the curves, which decreases with increasing P, but for P ≥ 100 the curves track each other fairly closely.For the remainder of the article, P = 100 is used in the simulations presented.Table 2 presents some error statistics for K h itself.For each value of P (number of averaged samples) the table shows the maximum (over all elements of Kh ) of the normalized RMS error in the elements of Kh over 1, 000 random estimates.The error is the difference between Kh and the "true" covariance matrix as estimated using 10, 000 samples.Then, the normalization is obtained by dividing the RMS error in each element by the magnitude of the "true" covariance matrix.In practice, for a given indoor environment, an initial estimation of K h would be carried out off-line prior to the employment of the ML-TOA procedure for localization.Subsequent additional measurements for this purpose could then be added later to improve the estimation accuracy if necessary.

Performance of ML direct positioning
We compare the performance of two localization schemes.One is the proposed ML direct location technique discussed in Section 4. The other is an indirect (two-step) method which first uses the ML-TOA estimation approach described in Section 2 for TOA estimates then least square localization solvers described in [3], namely the TOA-least square (TOA-LS) and TOAweighted constraint LS (TOA-WCLS) techniques, are adopted to solve for the location of the MS.The least square localization solvers can be used with any TOA estimation technique for the individual AP's, but here we use the ML-TOA estimation approach described in Section 2 so that both techniques have the benefit of the measured channel statistics.A five AP geometry is considered in a 100 m × 100 m square with AP coordinates; (5,10), (50, 50), (80, 20), (10,75) and (90, 90), respectively.We show results for three MS locations, namely at (x, y) = (20,20), (20,90) and (70, 70).The channel impulse responses for each of the five APs are generated randomly using the aforementioned channel models.
In the simulations, the average SNR is defined as , where SNR i is the signal-to-noise power ratio at the ith AP.The path loss exponent is assumed to be 3 for indoor environments.The weighting matrix W used in TOA-WCLS is then chosen such that the  (20,20).Figures 9 and 10 show the performance comparisons between the direct method and the indirect (TOA-LS and TOA-WCLS) methods for the Exponential channel models.Figure 9 shows the 90% percentage error values versus average SNR.The 90% percentage error value is the value such that 90% of all errors are less than that value.As expected, the direct method outperforms the TOA-LS and TOA-WCLS methods, and the TOA-WCLS performs better than the TOA-LS, which imposes no weighting constraint.For the Exponential channel model, it is seen that due to the bias of the TOA estimations, the direct and indirect methods  do not converge at high SNR, with the direct method maintaining its superiority.This is one rationale behind using the direct method.Figure 10 shows the mean square error (MSE) of the direct and indirect methods.Again, it is seen that the direct method has the best performance.Figures 11 and 12 show the performance with WLAN channel models A and D. Since the ML-TOA estimates of WLAN channels are unbiased when SNR is high (see Figure 4), we do not show the performance at very high SNR for the performance converges.Figure 12 illustrates the CRLB as a performance reference for the WLAN channels.The CRLB is a lower bound on the variance of any unbiased estimator.Thus, we show it as a performance reference for the WLAN channels.The expressions for the CRLB can be found in Appendix A (due to limited space the detailed derivation is omitted).When computing the CRLB, each estimated channel covariance matrix K (i) h is obtained by time-averaging 10, 000 random generated channels.The direct method again shows the best performance.Furthermore, the ML direct method is shown to have performance close to the CRLB.One can see that the performance for the

Conclusions
Several important results regarding the ML-TOA estimator for dense multipath indoor channels have been established.First, the unambiguous accuracy of the ML-TOA solution is proved in the noise free case, when multipath is the only detrimental effect of the channel.Then, the behavior in the NLOS case was discussed.Because of its statistical basis, the ML-TOA technique automatically incorporates the NLOS case in which there does not actually exist a direct path from the AP to the MS.The performance of the ML-TOA estimator was also detailed.It was shown that for single path channels, the ML-TOA estimator is unbiased and the estimation error variance is inversely proportional to the bandwidth.For multipath channels, the error is dependent upon the specific characteristics of the channels.Finally, we have shown how to extend the statistical channel model (ML-TOA) approach to a direct ML localization technique which enables us to obtain a ML estimator that directly estimates the location of the MS.Results were compared to an indirect approach in which TOA estimates are obtained by the ML-TOA estimator and a least squares technique is then used to localize the MS.The direct ML location estimation is shown to  From (14) and the well-known identity tr(AB) = tr (BA), the elements of the Fisher's information matrix are given by

0Figure 1 Figure 2
Figure 1 Noise free cost function Q(τ) for single path channel.

Figure 3 Figure 4
Figure 3  Performance comparisons between estimations using exact and mismatched covariance matrix K h for the Exponential channel model.

Figure 5
Figure 5 LOS and NLOS TOA performance comparisons.

Figure 6
Figure 6 WLAN channel A: (a) TOA estimation error with respect to number of averaged samples for K h ; (b) expanded scale.

Figure 7
Figure 7 WLAN channel D: (a) TOA estimation error with respect to number of averaged samples for K h ; (b) expanded scale.

Figure 8
Figure 8 Exponential channel: (a) TOA estimation error with respect to number of averaged samples for K h ; (b) expanded scale.

Figure 9 Figure 10
Figure 9 90% percentage error for direct and indirect (two-stage) methods using Exponential channel model.

Figure 11
Figure 11 90% percentage error for direct and indirect (two-stage) methods: (a) WLAN channel model A; (b) WLAN channel model D.

Figure 12 Figure 13
Figure 12 Mean square error (MSE) in dB scale for direct and indirect (two-stage) methods: (a) WLAN channel model A; (b) WLAN channel model D.

Table 1
Power delay profiles for the WLAN channels

Table 2 K
h estimation error statistics