Satellite integrity monitoring for satellite-based augmentation system: an improved covariance-based method

Satellite integrity monitoring is vital to satellite-based augmentation systems, and can provide the confidence of the differential corrections for each monitored satellite satisfying the stringent safety-of-life requirements. Satellite integrity information includes the user differential range error and the clock-ephemeris covariance which are used to deduce integrity probability. However, the existing direct statistic methods suffer from a low integrity bounding percentage. To address this problem, we develop an improved covariance-based method to determine satellite integrity information and evaluate its performance in the range domain and position domain. Compared with the direct statistic method, the integrity bounding percentage is improved by 24.91% and the availability by 5.63%. Compared with the covariance-based method, the convergence rate for the user differential range error is improved by 8.04%. The proposed method is useful for the satellite integrity monitoring of a satellite-based augmentation system.


Introduction
Satellite-Based Augmentation System (SBAS) provides the differential corrections and integrity information to Global Navigation Satellite System (GNSS) users or SBAS users, enhancing the accuracy and integrity of GNSS services. With the signals of SBAS satellites used for ranging, SBAS also enhances the continuity and availability of GNSS (Meng & Hsu, 2021;SC-159, 2016), as shown in Fig. 1.
To guarantee flight safety, the integrity information of GNSS navigation signals shall be determined for aviation users. The integrity information includes the User Differential Range Error (UDRE) and the clock-ephemeris covariance matrix. Their stringent safety-of-life requirements are described in the document (SC-159, 2016). Specifically, the integrity information denotes the uncertainty of satellite corrections. It sets the tolerances of the SBAS correction errors, further the user's Horizontal Protection Level (HPL) and Vertical Protection Level (VPL) (Lu et al., 2021).
How to determine the satellite integrity information satisfying the requirement of flight safety is always a topic of SBAS. The existing satellite integrity algorithms are mainly divided into the Covariance-Based (CB) methods and the Direct Statistic (DS) methods.
The covariance-based methods have attracted a great attention for many years. Tsai (1999) adopted the weighted least squares to estimate the UDRE with the covariance matrix for the combined ephemeris and clock errors. But Shao (2012) demonstrated that sometimes the UDRE deduced with the Tsai's method cannot bound the residual errors. Walter, et al. (2001) first put forward a new message named Message Type 28 (MT28) which contains a relative clock and ephemeris covariance matrix for individual satellites. The covariance matrix is a location-specific modifier used to adjust the broadcast UDRE values as a function of the user's position (SC-159, 2016). From this matrix users can reconstruct their location-specific error bound rather than applying the largest bound in the service volume, improving the availability within the service volume and the integrity outside the service volume (Walter et al., 2001). Wu and Peck (2002) proposed two methods with the consideration of false alert rate and missed detection probability to construct shape covariance and used them to find the best covariance with the prototype software of the Wide Area Augmentation System (WAAS). The computational time of the proposed method is longer than that provided by the method at the time. Blanch et al. (2012) proposed a complex algorithm to compute the error bounds of the clock and ephemeris for dual frequency SBAS with service volume analysis tool MAAST (MATLAB Algorithm Availability Simulation Tool). Shao et al. (2011a) analyzed the projection of the clock-ephemeris covariance in the direction of pseudorange, and developed an analytical method to solve for UDRE by simulation data, but did not provide the service performance (Shao, 2012). Chen et al. (2018) put forward a pseudorange residuals-based method to compute the clock-ephemeris covariance for dual-frequency multi-constellation SBAS, neglecting the effects of fat tails.
The direct statistic methods are discussed several times. Chen (2001) gave the formula to compute UDRE and showed the initial results. Also, Li (2018) gathered the statistics of range errors from clock-ephemeris to determine UDRE which can only bound the range errors from clock-ephemeris at the probability of 75%, not satisfying the integrity requirement .
Obviously, the direct statistic method is not a proper method to create an integrity bound as it will never accumulate enough independent samples in any feasible time frame. The residual errors shall be overbounded using the threat models that consider other information about the possible magnitude of the error.
Moreover, BeiDou-3 navigation satellite System (BDS-3) was completed a few years ago, and Global Positioning System (GPS) has been fully operational since 1995. BeiDou Satellite-Based Augmentation System (BDSBAS) was just constructed, while WAAS passed test certification and started providing services to civil users in 2003. Thus, BDSBAS urgently needs a satellite integrity monitoring method under the conditions that its monitor stations are deployed in the domestic region and their layout is limited. BDSBAS faces many difficulties in integrity monitoring, especially in the south of the inverted triangle and the edge area of the monitoring network.
Although several algorithms have been developed for satellite integrity monitoring, there are some problems to be solved. Since SBAS has a top-level safety requirement, any integrity risk issues shall be considered. The direct statistic methods cannot provide UDRE and MT28 accurately, and the integrity bounding rate in the range domain is too low to bound the range error from the clock-ephemeris. The latest CB method noted as the WAAS CB method shows a good performance with the dependence on three expensive receivers set at a monitor station and overseas monitoring network layout, which is not applicable to Chinese BDSBAS. The problems are how to estimate integrity information accurately and improve the integrity bounding rate in the range domain and develop a method suitable for Chinese monitoring network layout or terrain, which motivates the authors to put forward a method for satellite integrity monitoring.
An improved covariance-based method is developed to determine satellite integrity information. Firstly, the covariance matrix of satellite clock-ephemeris correction errors output from the correction processor is adjusted by a scale model and a groove model. Subsequently, the adjusted matrix is decomposed into the user differential range errors and clock-ephemeris covariance matrix. Finally, the performance of the proposed method is analyzed in the range domain and position domain. Compared with the direct statistic method, the integrity bounding rate and the availability are both improved obviously. Compared with the covariance-based method, the convergence rate for the user differential range error is faster by 8.04%. The contributions are listed as follows: 1. An improved covariance-based method is proposed to perform satellite integrity monitoring. The user equivalent range error is used to adjust the shape of  (Li et al., 2020) the covariance of clock-ephemeris reducing the computational complexity, and the geometry between satellites and monitor stations is taken as new information source to compensate for the insufficient monitoring capability of monitor stations when a monitored satellite is moving over the boundary of the monitoring network. The geometry of the satellite and monitor stations is used to mitigate the random error or integrity threats improving the accuracy of the estimated satellite integrity information. 2. A groove model is developed to adjust the clockephemeris covariance and find a suitable shape covariance matrix. This model is used to construct a near-optimal solution rather than the theoretically best broadcast covariance matrix, which needs complicated computation. When a satellite is under a bad monitoring geometry, both the pseudorange residuals and the geometry information are used to determine the modifier for the clock-ephemeris covariance. The model provides an idea to perform satellite integrity monitoring by considering the motion process of a satellite above its monitoring network.
This article is arranged as the following. Section II describes the preliminaries of satellite integrity and the problem under discussion. Section III presents the model and the process to deduce satellite integrity information. In Section IV, the performance of the proposed method is compared with the state-of-the-art methods. Section V concludes the advantages and characteristics of the proposed method.

Preliminaries and problem formulation
In this section, the concept of UDRE and its modifier (or MT28) is introduced in the subsection preliminaries, which is the basis of satellite integrity monitoring. Then, the problem under consideration and the research objective are given in the subsection problem formulation.

Preliminaries
Satellite corrections include long-term corrections and fast corrections which are used to revise the slowly changing errors and rapidly changing errors of Satellite Clock-Ephemeris (SCE), respectively. The accuracy of the combined long-term and fast corrections is indicated by UDRE along with MT28.
The definition of UDRE was put forward in the early version of RTCA DO-229 (SC-159, 2016). The UDRE is used as the confidence limit of pseudorange residual errors corresponding to the satellite corrections at any point of the service volume of a monitored satellite in space and time. The UDRE is broadcast to support HPL and VPL by bounding the Horizontal Position Error (HPE) and Vertical Position Error (VPE) with a required probability, respectively. The UDRE is quantified by UDRE Index (UDREI) and the UDRE value represented by each indexed value is listed in the lookup table (SC-159, 2016). The table gives both a 3.29 sigma value (UDRE) and a 1 sigma value σ UDRE relative to clockephemeris errors (Wu & Peck, 2002).
Afterwards, the MT28 was proposed to improve the integrity and availability of SBAS. The MT28 provides the 10 entries of an upper triangular matrix which is used to construct a relative clock-ephemeris covariance matrix and further a location-specific error bound for each monitored satellite (Walter et al., 2001). Then, the satellite correction errors are bounded by UDRE along with the associated MT28. The UDRE along with MT28 represents the clock-ephemeris error bound and a user-level error limit in the line of sight between each satellite-user pair.

Problem formulation
In this subsection, the authors will present a detailed description of the problem under consideration.
In the direct statistic method, the integrity parameter σ 2 UDRE,DS i is given by (Li, 2018) where the designators i, j and k represent the satellite, monitor station, and epoch, respectively. dρ i j,k denotes the pseudorange residual between satellite i and station j. The variable dρ i denotes the mean of the set dρ i j,k during a UDRE update period. Then, UDRE is obtained according to the lookup table (SC-159, 2016).
This method demonstrates that the computed UDRE only bounds the pseudorange residual dρ i j,k with the probability of 75% approximately (Li, 2018;Li et al., 2018Li et al., , 2019. Obviously, there are some shortcomings of the direct statistic method. Basically, the integrity bounding rate shall be calculated by UDRE along with MT28, not only UDRE. Conclusively, the UDRE cannot bound the clock-ephemeris range residuals for individual satellites with a prescribed probability, and the integrity bounding rate is too low to meet the confidence level of satellite corrections. Essentially, since the samples of the set dρ i j,k are never adequate, UDRE cannot be precisely obtained (Decleene, 2000). The direct statistic method is not a proper method to create an integrity bound as it will never accumulate enough independent samples in any feasible time frame. The residual errors shall be overbounded using the threat models that consider other information about the possible magnitude of the error. As for the WAAS CB method, its characteristics can be listed as follows: 1. The WAAS CB method strongly depends on the performance of three sets of monitor station receivers which are costly. With three sets of receivers, WAAS shows a good performance, but the construction cost of monitor stations is quite high. The cost of each WAAS monitor station is millions of dollars, dozens of times that of each Chinese monitor station. 2. The WAAS CB method is closely related to the layout of monitor stations, and the performance of WAAS in the continental United States is ensured only by the broad layout of WAAS monitor stations some of which are deployed in Central Pacific, Canada, and Mexico. The WAAS CB method do not discuss how to perform satellite integrity monitoring under a limited monitoring network layout (or terrain) or in the edge area of the monitoring network. 3. WAAS is developed for civil applications, and the latest satellite integrity algorithm for WAAS aims at the improvement of integrity for safety-of-life users. WAAS algorithm emphasizes the integrity in range domain and position domain (Chen et al., 2018). To ensure the integrity of WAAS, the accuracy of Signal-In-Space (SIS) of WAAS is conservative and is not enough for precise positioning application (Chen et al., 2017b;Zheng et al., 2019Zheng et al., , 2022.
In a word, satellite integrity monitoring for satellitebased augmentation system in China faces many difficulties. DS method shows a low integrity bounding rate, and the current domestic satellite integrity monitoring cannot satisfy the requirements of SBAS. The latest covariance-based method noted as the WAAS CB method relies on high quality monitor stations and their broad layout, which is different from Chinese situations. However, the WAAS CB method sacrifices SIS accuracy for satellite integrity.
The problem under consideration is how to determine the confidence limit for satellite corrections. Specifically, the problem under discussion is how to perform satellite integrity monitoring under the monitor stations with limited quality and their limited layout. Three assumptions are given below: 1) The pseudorange between a satellitemonitor station pair contains satellite clock-ephemeris errors, and can be used to monitor the status of each satellite; 2) User equivalent range errors between satellites and monitor stations reflect the monitoring capability of a monitoring network composed of widely distributed monitor stations, and can be used to determine a suitable shape covariance matrix for satellite clock-ephemeris; 3) The geometry between satellites and monitor stations is relative to the monitoring capability of the monitoring network, and can be used to find the suitable shape covariance matrix of satellite clock-ephemeris. The objective is to develop a method to determine UDRE and MT28 for each monitored satellite.

Determination of integrity information for SBAS
In this section, a scale model and a groove model are developed for SBAS to perform satellite integrity monitoring.

Scale model based on multiple error sources
The pseudorange correction error dρ , namely User Equivalent Range Error (UERE), for a specific satellite is computed by where the variables �ρ, �R, �B represent the synchronized pseudorange residual from monitor stations, the total long-term corrections computed by long-term satellite error corrections, and the total fast corrections computed by fast corrections and range-rate corrections, respectively. The 4 × 1 vector I consists of a unit vector and one element − 1. The first three terms of this vector are the components of the unit vector along the line of sight in Earth-Centered Earth-Fixed (ECEF) coordinates (Wu & Peck, 2002).
Specifically, the pseudorange residual in (2) due to the ephemeris and clock for a satellite-user pair with the line of sight I is theoretically given by (Blanch et al., 2012) where x and x BD represent the true clock-ephemeris, and the clock-ephemeris computed by broadcast ephemeris and SBAS corrections, respectively. UDRE along with MT28 is the upper bound on this pseudorange residual for each satellite-user pair. According to SC-159 (2016), the error bound is expressed in the following form (Blanch et al., 2014) where the matrix C ov MT28 is a 4 by 4 matrix. The parameter K 7 denotes the quantile of 99.99999%. The parameter σ flt denotes the clock-ephemeris standard deviation determined by UDRE and MT28.
To deduce the error bound for clock-ephemeris, there are four cases to be considered (Blanch et al., 2012): (1) nominal errors from the monitoring network receivers; ( (2) nominal biases or antenna biases; (3) satellite correction errors; (4) possibly undetected errors in the monitoring network receivers where one station is assumed to return erroneous measurements. As for case (1), the relationship between the bound on the estimation error and the probability P HMI of Hazardously Misleading Information (HMI) is described by where K HMI represents the quantile related to the probability P HMI and P SCE denotes the covariance for the state x of clock-ephemeris. The probability P HMI is determined by an integrity allocation strategy (Lu et al., 2021;SC-167, 1992;Schempp et al., 2001;Wu & Peck, 2002).
According to (5), the error bound on the estimation error under the nominal conditions is given by The bound L 1 is one upper bound on clock-ephemeris errors before the clock-ephemeris covariance matrix is broadcast. The nominal biases b such as antenna biases and Code Noise and Multi-Path (CNMP) termed as the case (2) is described as a Gaussian vector with expectation b and covariance W −1 . As for the line of sight, the contribution of these biases can be given by I T Hb . An upper bound of this variable is deduced by (Blanch et al., 2012) The parameter K bias associated with antenna biases is calculated in real time as a function of its covariance and the maximum biases (Shallberg & Sheng, 2008). Therefore, when case (2) is considered, the error bound on the estimation error is adjusted by where L 2 denotes the bound for clock-ephemeris errors under cases (1) and (2).
When the error from the broadcast clock-ephemeris or the quantization error of satellite corrections termed as the case (3) is considered, the upper bound for this error can be deduced by the following inequality The designator i represents the epoch of each update interval. When case (3) is taken into consideration, the error bound on the estimation error is updated by Obviously, the new error bound satisfies which is in accordance with the constraint (5).
As for case (4), the reliability of each monitor station can be guaranteed by checking the observations of multiset receivers which refers to a problem of data quality monitoring or system reliability (Hamada, 2008;Yin & Chai, 2020). As for WAAS monitor stations, three sets of receivers are equipped to collect observations (Parkinson et al., 1996). The observations from three receivers are used to conduct the cross check among three threads to remove erroneous observations (Parkinson et al., 1996;Shallberg & Sheng, 2008). Moreover, dual frequency pseudoranges can be smoothed by dual frequency carriers, and the related algorithm like IFree filter is chosen to improve the quality of the observations simultaneously with ionospheric delay removed (Hwang et al., 1999;Konno et al., 2006).
Before message type 28 is broadcast, the covariance matrix of clock-ephemeris needs to be adjusted to meet the integrity requirement. According to (4) and (11), the adjusted covariance matrix can be obtained by The matrix denotes the clock-ephemeris covariance considering four cases.
After the message type 28 is available, the quantization error related to this message type needs to be protected either by the term ε C or by increasing the broadcast UDRE (Walter et al., 2001). Computing the theoretically optimal matrix P brdc refers to a complicated mathematical problem, and a near-optimal method is adopted in practice. The authors choose a scaling method where the matrix P brdc is obtained by finding a suitable shape covariance matrix and then scaling it so that the integrity safety condition is met (Walter et al., 2001;Wu & Peck, 2002). The integrity condition to be satisfied is 14) σ UDRE δ UDRE ≥ I T P 1 I Then, the covariance matrix can be adjusted again by where the parameter P max is deduced by The set I SV represents all the 4 by 1 vectors located in the Service Volume (SV) of a monitored satellite. The Worst User Location (WUL) is determined by an analytic method (Shao et al., 2011a;Zhao et al., 2014).
In (16), the true value of σ UDRE is not known and therefore an overbound must be determined. Under the assumption that the range error dρ from the clockephemeris satisfies the condition dρ ∼ N µ, σ 2 , the following formula can be obtained Considering the inequality the following inequality can be obtained Hence, the Gaussian distribution N µ, |µ| K HMI + σ 2 is used to find the bound of dρ and its standard deviation is computed by Several situations are taken to tackle the integrity threats. Firstly, to meet the strict Gaussian overbounding properties required by the WAAS integrity monitoring, the CNMP algorithm including mean filter and mean error function is adopted to reduce the effects of multipath (Decleene, 2000;Shallberg et al., 2001). Secondly, the right tail Cumulative Distribution Function (CDF) is used to bound the probability of HMI, and the thresholds for the error in the corrections and the noise in the measurements can be derived (Schempp et al., 2001). More importantly, the authors also develop a model to improve the monitoring capability of monitor stations, which will be introduced below.

Groove model based on satellite-station geometry
In this subsection, a model is constructed to improve the performance of the bound of clock-ephemeris range errors. The algorithm for s is adjusted under different situations. A groove model is proposed to provide a solution.
To improve the insufficient monitoring capability of monitor stations when a satellite is moving over the boundary of the monitoring network, the geometry between the satellite and monitor stations is introduced as a kind of prior information to overcome the shortcomings of the method to determine the parameters.
The geometry of these monitor stations tracking a specific satellite is evaluated by Monitoring Geometric Dilution Of Precision (MGDOP), or further ln(x MGDOP ) which is computed by the corresponding geometry matrix (Chen et al., 2017a). The relationship between MGDOP and UDREI is analyzed in (Chen et al., 2017a;Shao et al., 2009Shao et al., , 2011a. Based on this, the geometric information is used to adjust the shape of the clockephemeris covariance to ensure the satellite integrity. Taking satellite PRN 6 as an example, the number of the monitor stations tracking PRN6 and the WAAS-reported σ UDRE of PRN6 for one day are shown in Fig. 2. The lateral axis denotes time (t) in unit of day (d).
As shown in Fig. 2, the number of the monitor stations varies from 0 to over 30 and changes fast. Accordingly, ln(x MGDOP ) varies conversely and synchronously. The trend of σ UDRE is the same as that of ln(x MGDOP ) , and ln(x MGDOP ) can be taken as supplementary information to deduce s. Apparently, the trend of σ UDRE or ln(x MGDOP ) for all satellites likes a groove. Therefore, the geometry of a specific satellite and the monitor stations, namely, MGDOP, can be taken as the boundary condition and further used to compensate the algorithm for deducing s, denoted as s DOP . Based on these, a groove model is developed to describe the trend of s as illustrated in Fig. 3. According to this model, the algorithms to compute s are given by where the parameters s and s DOP are computed by user equivalent range errors and geometry information, respectively, and NaN denotes not a number. For simplicity, let U α EL(2) ,α EL(1) denote the set of UEREs with their ELevation angle (EL) α EL under the condition α EL(1) ≤ α EL ≤ α EL(2) and N U α EL(2) ,α EL(1) represent the sample size of set U α EL(2) ,α EL(1) . As described in (22) and Fig. 3, the algorithm for s 1 is divided into three parts by the sample size N 0 of set U α EL(2) ,α EL(1) . After the analysis of the requirement, the value of N 0 is set as 8.
There are three intermediate variables to obtain the final parameter s. The parameter s limit is used to limit or bound the noise of pseudorange residuals relative to many error sources and can be computed by the standard deviation of the pseudorange residuals (or UEREs) (Blanch et al., 2012;Chen et al., 2017bChen et al., , 2018. The variable s is used to evaluate pseudoranges (or UEREs) in real time, and further monitor the state of a specific satellite. UEREs are processed by CNMP algorithm and right tail CDF, and then used to deduce the variable s. The variable s DOP takes the geometry between the satellite and monitor stations as another information source to compensate for the insufficient monitoring capability of monitor stations when the satellite is moving over the boundary of the monitoring network. The geometry information can be translated into s DOP according to the relationship between them (Chen et al., 2017b;Shao et al., 2009Shao et al., , 2011b.
NaN, otherwise Finally, the covariance matrix for clock-ephemeris after the above processes is updated by The matrix is used as the final covariance for clockephemeris errors which will be formatted into UDRE and MT28.
To broadcast the clock-ephemeris covariance, one needs to compress the matrix P 3 into UDRE and MT28. Firstly, P 3 is projected along the vector from the monitor station to a satellite, and the maximum of the projection is obtained by searching the service volume (Shao et al., 2011a;Zhao et al., 2014). Secondly, UDRE can be obtained by searching the lookup table of UDREI to bound the projection (SC-159, 2016). Thirdly, the matrix C to be broadcast can be determined by finding the optimal solution with the minimum of quantization error for the clock-ephemeris covariance (Chen et al., 2018;Kailath et al., 2000). Finally, UDRE and MT28 are determined and updated within their update interval.

Analysis and results
In this section, the performance of the proposed method (noted as ICB method) is compared with the direct statistic method (Li, 2018) and the latest WAAS covariancebased method noted as CB method which is not openly available, but updated from the old version (Walter et al., 2001;Wu & Peck, 2002). The direct statistic method stands for the latest method adopted in Chinese engineering practice. The covariance-based method refers to the method adopted by WAAS which shows the best performance and is considered as the latest covariancebased method. Therefore, the two methods are used as comparison. The analysis is presented to demonstrate the rationality and effectiveness of ICB method. As for data source, the broadcast ephemeris and observation data are from the websites of international GNSS service and national geodetic survey. The data is processed in monitor stations and master stations with the three methods to generate the corresponding satellite integrity information. The monitor stations located in North America shown in Fig. 4 are used to analyze the performance of ICB method. There are two parts in this section: the performance in the range domain and performance in the position domain . In the first subsection, the integrity bounding percentages between UDRE (along with MT28) and UERE are computed. In the second subsection, the availability is analyzed.

Performance in the range domain
The integrity bounding percentages between UDRE (along with MT28) and UERE by ICB method are compared with these by the state-of-the-art methods (DS method and CB method). The UDREs (along with MT28) of all GPS satellites are used to calculate the integrity bounding proportions with respect to 36 users (William, 2022). The mean of the integrity bounding proportions with the three methods for each satellite is depicted in Fig. 5. The mean of the integrity bounding proportions of DS method, ICB method, and CB method is 79.96%, 99.88%, and 99.90%, respectively. The integrity bounding rate of ICB method is 24.91% higher than that with DS method, close to the one with CB method. The integrity bounding proportion of ICB method is higher than that with DS method obviously.
Finally, the UDRE convergence rate for each satellite is calculated and shown in Fig. 6. As can be seen in Fig. 6, the convergence rate for the UDRE with ICB method is in between these with CB method and DS method. In detail, this indicator with ICB method is 8.04% higher than that with CB method and 19.90% lower than that with DS method. In other words, ICB method reveals a better performance in the aspect of safety. Short convergence time is significant for SBAS integrity monitoring, especially for BDSBAS, the GPS Aided GEO Augmented Navigation system (GAGAN), and the Mtsat Satellitebased Augmentation System (MSAS) whose monitor stations have smaller spacing compared with WAAS.

Performance in the position domain
The performance in the position domain is compared among the three methods in this subsection. The availability of LPV200 service is compared among three methods.
The availability of 36 users is analyzed as shown in Fig. 7 Fig. 7 Availability of LPV200 service at each selected user higher than that by DS method and 0.77% lower than that by CB method. Considering that the users 9 and 22 are located in the boundary area of North America and their observations are very poor, the results are accidental and abnormal. The conclusion is the availability with ICB method is higher than that with DS method obviously and similar to that with CB method.
In a word, ICB method improved the integrity bounding rate and the availability dramatically compared with DS method. The performance of ICB method is close to that of CB method.
The signal-in-space errors of the proposed method and broadcast ephemeris method are smaller than that of WAAS method. The accuracy of signal-in-space of the proposed method is over 18.22% higher than that with broadcast ephemeris method in the three orbital dimensions while the accuracy of signal-in-space of WAAS method is lower than that of the broadcast ephemeris method in these three dimensions. The accuracy of signal-in-space of the proposed method is over 32.03% higher than that of WAAS method in orbit. As for satellite clock, the accuracy of signal-inspace of both the proposed method and WAAS method is lower than that of broadcast ephemeris method. The accuracy of signal-in-space of the proposed method is over 25.74% higher than that of WAAS method in clock. In total, compared with WAAS method, the proposed method can improve the accuracy of signalin-space by over 25.74%. We can conclude that WAAS is designed to ensure the integrity at the expense of accuracy of signal-in-space and the proposed method can be used for some precise positioning application (Zheng et al., 2019(Zheng et al., , 2022.
The influence of different parameter values involved in the Groove Model has been analyzed. A detailed analysis of integrity needs too many observations because it is relative to many monitor stations and its layout. For simplicity, the experiences tell that the more conservative the parameter N 0 , the higher the integrity in the edge area of the monitoring network will be and the lower service availability.
Also, the proposed method is applied for satellite integrity monitoring in China. The results reveal that compared with the direct statistic method, the integrity bounding rate in the pseudorange domain and the availability in the position domain are improved by 45.39% and 2.32%, respectively. The proposed method can provide APV-I services for the most parts of China and even LPV200 services for some parts of China (Zheng et al., 2022). The proposed method was tested with just a set of Chinese receivers at a monitor station, and the performance is satisfactory with limited quality monitor stations and their limited layout, which can be used for satellite integrity monitoring in south China of the inverted triangle and the edge area of the monitoring network.

Discussions and conclusions
An improved covariance-based method is developed to perform satellite integrity monitoring. Compared with the direct statistic method, the integrity bounding percentage is improved by 24.91% and the availability by 5.63%. Compared with the covariance-based method, the convergence rate for user differential range errors is improved by 8.04%. The advantages of the proposed method are summarized as follows: 1. The proposed method concerns both the integrity and the availability. The clock-ephemeris covariance matrix is adjusted by considering threat models and Gaussian overbounding theory to guarantee that the parameter UDRE along with MT28 bounds the range error from clock-ephemeris with a high probability. 2. The scale model and groove model are beneficial for understanding the concept of SBAS integrity. These models are used to address the problem of the inaccurate estimation of clock-ephemeris covariance considering the geometry between satellites and monitor stations. The scale model is used to adjust the covariance matrix of clock-ephemeris with the consideration of abnormal cases. The groove model considers the geometry between satellites and monitor stations, which is used as prior information to compensate for the insufficient monitoring capacity of monitor stations when a specific satellite is moving over the boundary of the monitoring network. The groove model mitigates random errors or integrity threats, improves the accuracy of satellite integrity information, and provides an idea to perform satellite integrity monitoring by considering the motion process of a monitored satellite above its monitoring network, which is beneficial for improving the tracking capability of the monitoring network with respect to the satellites just over its boundary.
In a word, the proposed method can provide LPV200 service for most North America. To improve the performance further, it is still necessary to investigate some other issues in the future. One important issue is that the data preprocessing of monitor stations needs to be optimized due to its impact of data quality and even satellite integrity monitoring, which is the key to improve the integrity bounding rate. Another issue is related to the reliability of the proposed method. The availability at some selected users is not adequate and the method needs to be refined to guarantee its robustness. Future work will include the optimization of the preprocessing of monitor stations and the improvement of the reliability of the proposed method.