It shall be possible for a Target UE Subscriber to subscribe to various types of privacy classes. The default treatment in the absence of the information to the contrary in the Target UE Subscription Profile shall be to assume that access is restricted to all LCS Clients (unless using privacy overriding, or otherwise overridden by local regulatory requirements). Privacy Attributes consist of:

It shall be possible for a Requestor and an LCS client to request location information by indicating a Codeword associated with the Target UE user. The codeword shall be either checked by the Target UE/user or by the LCS server in the home network. In the former case, the codeword supplied by the requestor and forwarded by the LCS client with the request shall be forwarded to the Target UE/user for verification and acceptance. In the latter case, the codeword shall be registered with the LCS server by the Target UE user (or subscriber) in advance. Optionally, the UE and/or network may have the capability to generate and/or distribute codewords. The generation of codewords and the distribution of those codewords are out of scope of this specification. A comparison of the codeword sent by the Requestor and the registered codeword shall be performed. A location request shall only be accepted if this comparison is successful. In the case where the Target UE/user does not check the codeword, the codeword need not be sent to the Target UE/user. In the case where the codeword is checked by the Target UE/user, the Target UE subscriber need not register the codeword in advance. The other privacy settings should also be checked even when the codeword has been checked. The Target UE Subscriber may register multiple codewords for multiple requestors. Once the codeword has been set and properly distributed, the Target UE user would be protected against location requests from third parties, which do not know the appropriate codeword. It should be possible for a Target UE subscriber to enable and disable codeword checking for each of the LCS Clients. The codeword is applicable to the value-added services only.

To support privacy, the LCS Server shall enable each Target UE Subscriber to subscribe to a "privacy exception list" containing the LCS Client identifiers, the service identifiers, classes of LCS Clients, the target subscriber notification setting (with/without notification) and the default treatment, which is applicable in the absence of a response from the Target UE for each LCS Client and service identifiers. The privacy exception list shall support a minimum of 20 clients. For each client the privacy exception list shall support a minimum of 10 services. The maximum number of clients and services shall be determined by implementation constraints. If the target subscriber notification is set as "notification with verification", each positioning request from the LCS Client or the service shall be notified to the target UE before positioning. If the target subscriber notification is set as "notification with verification based on current location", positioning requests from the LCS Client or the service shall be notified to the target UE after positioning is performed if the current location of the target UE is within the areas specified to require notification. The treatment for location request from the LCS Client or service, which is not registered in the privacy exception list, shall also be specified in the privacy exception list. An empty privacy exception list shall signify an intent to withhold location from all LCS Clients. The classes that can be included are as follows.

• Universal Class: location services may be provided to all LCS Clients;
• Call/session-related Class: location services may be provided to any value added LCS clients or a particular value added LCS client or a particular service or particular group of value added LCS Clients - where each LCS Client, service or group of LCS Clients is identified by a unique international identification, e.g. E.164 - that currently has a temporary association with the Target UE in the form of an established voice, data call or PS session originated by the Target UE. For each identified LCS Client, service or group of LCS Clients, one of the following geographical restrictions shall apply:
  1. Location request allowed from an LCS Client or service served by identified PLMN only;
  2. Location request allowed from an LCS Client or service served in the home country only;
  3. Location request allowed from any LCS Client or service;
• Call/session-unrelated Class: location services may be provided to a particular value added LCS Client or a particular service or particular group of value added LCS Clients - where each LCS Client, service or group of LCS Clients is identified by a unique international identification, e.g. E.164. For each identified LCS Client, service or group of LCS Clients, one of the following geographical restrictions shall apply:
  1. Location request allowed from an LCS Client or service served by identified PLMN only;
  2. Location request allowed from an LCS Client or service served in the home country only;
  3. Location request allowed from any LCS Client or service;
• PLMN Operator Class: location services may be provided by particular types of LCS clients supported within the HPLMN or VPLMN. The following types of clients are distinguished (see note):
  1. Clients broadcasting location related information to the UEs in a particular geographic area - e.g. on weather, traffic, hotels, restaurants;
  2. O&M client (e.g. an Operations System) in the HPLMN
  3. O&M client (e.g. an Operations System) in the VPLMN
  4. Clients recording anonymous location information (i.e. without any UE identifiers) - e.g. for traffic engineering and statistical purposes
  5. Clients enhancing or supporting any supplementary service, IN service, bearer service or teleservice subscribed to by the target UE subscriber.

The privacy override indicator is applicable to lawful intercept and emergency services as allowed by local regulatory requirements. It is not applicable to value added and PLMN operator services. The Privacy Override Indicator shall be used to determine whether Subscriber Privacy of the Target UE subscriber should be overridden or not. This indicator will be set for certain special LCS Clients when it is justified. Each LCS Client shall be associated with a particular value of a position privacy override indicator during the LCS Client provisioning. The privacy override indicator is normally only valid when the LCS Server for the LCS client is located in the same country of the Target UE. If agreed by bi-lateral agreements between operators, the privacy override indicator shall also be valid when the LCS client is not located in the same country as the Target UE.

The UE subscriber may subscribe to the following types of Mobile Originating Location (as defined in clause 4):

1. Basic Self Location
2. Semi-autonomous Self Location
3. Transfer to Third Party

Provisioning is an action to make the LCS feature available to a subscriber. Provisioning may be:

• General: where the service may be made available to all subscribers without prior arrangements being made with the service provider (i.e. emergency calls).
• Pre arranged: where the service is made available to an individual LCS Client only after the necessary arrangements have been made with the service provider.

Withdrawal is an action taken by the service provider to remove an available LCS feature from a LCS Client's subscription profile. Withdrawal may be:

• General: where the LCS feature is removed from all LCS Clients.
• Specific: where the LCS feature is removed on an individual basis per LCS Client.

Invocation is an action to invoke the LCS feature, taken by the LCS Client (e.g. issuing a location request) or automatically by the LCS server as a result of a particular condition (e.g. periodic location request, mobile originating emergency call, etc.).

Provisioning is an an action to make the privacy exception list with its privacy classes available to a Target UE. The provision may be:

• General: where the list is made available to all Target UE's without prior arrangements being made with the service provider. The list shall contain the default privacy class.
• Pre arranged: where any extra privacy permission class (--granting permission to locate an UE Client) shall be capable of being independently provisioned for a target UE as agreed with the service provider for a certain contractual period.

Withdrawal is an action taken by the service provider to remove an available privacy class from a target UE's PEL. Withdrawal may be:

• General: where a privacy class is removed from all target UEs provided with this privacy class.
• Specific: where each of the privacy classes in the privacy exception list shall be independently withdrawn at the subscriber's request or for administrative reasons.

The user shall be able to change the following settings in the privacy exception list:

• the LCS Client and/or group of LCS Clients list
• the codeword
• the requestor
• the service types
• the target subscriber notification setting (with/without notification)
• the default treatment, which is applicable in the absence of a response from the Target UE for each LCS Client identifiers.

A possible future enhancement in LCS is that location information of a specific target UE may be obtained at the activation of a Call or PDP Context. A corresponding mechanism to obtain the location information of a specific target UE at the release of a Call or PDP Context may also be feasible.

It shall be possible to specify a geographical area as ellipse to a resolution that will be limited by the accuracy capability of the part of the serving network where the user is registered. It may be possible to identify and report when the user's terminal enters or leaves a specified geographic area. In order to enable ME to determine itself if it enters or leaves a defined geographical area information about the defined geographical area shall be made available to client. The method is FFS, one alternative is that cells covering parts of the geographical area broadcasts information about the geographical area.

The client may continuously check its current location with or without requesting signalling support from the network using the Self Location feature. In this way the client may become aware of entering or leaving a predefined geographical area, as defined above, and/ or it can supply the user or an application with real-time tracking information.

In future releases usage of IP addresses for UE identification shall be supported by the standard.

LCS shall support VHE TS 22.121.