Protection Level (PL) is a statistical bound that quantifies the maximum likely error in a GNSS position solution, computed in real-time and updated continuously to reflect current positioning quality. The protection level defines a region around the reported position within which the true position is guaranteed to lie with high probability (typically 99.9% or higher, depending on the Target Integrity Risk specification), providing users with confidence bounds essential for safety-critical applications.
The protection level concept originates from aviation safety requirements, where navigation systems must provide not just positions but also reliable bounds on position error to ensure safe operations. For aircraft approaches, knowing that the position error is less than a specified Alert Limit with very high probability enables safe descent profiles. This integrity framework has been adapted for automotive applications where lane-level positioning must bound errors to prevent vehicles from departing their intended lanes.
Protection levels are computed for different position components: Horizontal Protection Level (HPL) bounds two-dimensional horizontal error; Vertical Protection Level (VPL) bounds height error; and combined three-dimensional protection levels may also be computed. The calculation considers satellite geometry, signal quality, correction accuracy, and potential fault modes including satellite failures and atmospheric anomalies. The resulting protection level dynamically reflects current positioning conditions, expanding during degraded conditions and contracting when conditions are favorable.
The operational use of protection levels involves comparison against application-specific Alert Limits. When the computed protection level exceeds the alert limit, the system must flag the position as unavailable for safety-critical use, preventing hazardous reliance on potentially unreliable information. This mechanism ensures that users are warned before position errors could create dangerous situations. For autonomous vehicles, an integrity alert might trigger handoff to backup systems or safe stopping procedures. Proper protection level computation and monitoring is essential for any safety-critical GNSS application.
