1. Introduction
Train control systems are safety-critical components that ensure railway operational safety and improve transport efficiency [
1]. In China, CTCS-2 and CTCS-3 have been widely deployed and play a key role in supporting large-scale railway operations. However, these systems still largely rely on trackside equipment, such as track circuits and balises, for train localization [
2]. This infrastructure-dependent architecture leads to high installation and maintenance costs, particularly on long-distance, low-density railway lines or in complex operating environments where deploying and maintaining conventional trackside equipment is more challenging [
3]. Therefore, reducing reliance on trackside infrastructure and developing onboard-centric train positioning technologies have become important directions for next-generation train control systems.
Global Navigation Satellite Systems (GNSS) provide all-weather, real-time, and high-precision positioning capabilities. By enabling accurate position estimation without extensive trackside equipment, GNSS-based solutions can significantly reduce operational costs. Consequently, this technology is gradually being integrated into train control systems worldwide, including Europe’s Next Generation Train Control (NGTC) [
4], the United States’ Positive Train Control (PTC) [
5], and China’s Train Control System (CTCS) [
6]. GNSS is regarded as a key enabling technology for future train positioning systems.
In recent years, many researchers have conducted extensive studies on GNSS-based train positioning from various perspectives. For instance, C. Stallo analyzed the influence of railway-specific environmental factors—such as multipath propagation, foliage attenuation, and signal shadowing—on train positioning performance [
7]. Mikhaylov introduced Real-Time Kinematic (RTK) techniques to improve train positioning accuracy, demonstrating that positioning performance degrades significantly due to multipath effects and signal obstruction [
8].
Standalone GNSS can achieve high positioning accuracy under favourable observation conditions with sufficient satellite visibility. However, satellite visibility is often severely reduced in challenging environments such as tunnels, mountainous regions, and dense urban areas. Under these conditions, GNSS-only positioning fails to meet the requirements for continuity, reliability, and integrity. To overcome the limitations of a single sensor, multi-sensor fusion techniques have been widely investigated. By incorporating auxiliary information from other sensors—such as LiDAR [
9], visual cameras [
10], inertial measurement units (IMUs) [
11], and odometers [
12]—the positioning accuracy and robustness can be effectively improved under GNSS-limited conditions. Wang presented a visual landmark-assisted positioning framework based on LiDAR and inertial navigation, leveraging a kilometer-position plane for trajectory correction [
13]. Wang et al. proposed an infrastructure-free train positioning framework using vision and millimeter-wave radar. The radar is employed for train speed estimation, while a loop closure mechanism is introduced to identify the key location for correcting the train position [
14]. Both LiDAR and cameras belong to exteroceptive sensing technologies. In exteroceptive sensor fusion approaches, reliable positioning typically depends on the construction of a feature-rich landmark database containing georeferenced railway infrastructure elements, such as panels, signals, and signal gantries [
15]. However, the performance of such methods tends to degrade in environments with sparse or featureless surroundings. Given the special operating characteristics of railway systems, dead-reckoning-based sensors are often compatible with railway positioning requirements, such as odometers or inertial navigation systems (INS). INS, as a self-contained navigation system, provides independent position solutions and immunity to jamming and interference, making it a prominent choice [
16].
At present, mainstream approaches for information fusion are predominantly based on filtering theory, such as the extended Kalman filter (EKF) and the unscented Kalman filter (UKF). These methods exhibit excellent performance when the measurement noise follows a Gaussian distribution. However, in practical train operations, measurement data are inevitably affected by sensor malfunctions, signal blockages, or external interference, which can significantly degrade data quality and introduce large errors into the observation process [
17]. When faulty measurements are directly incorporated into the state estimation framework, the performance may deteriorate or render the positioning results unusable. Therefore, enhancing the fault tolerance of integrated train positioning systems is a key requirement for the deep integration of satellite navigation technology with train control systems.
Fault detection has been recognized as an effective means to improve railway system reliability [
18,
19,
20]. Within the navigation domain, fault detection is an essential component of the integrity monitoring framework, where statistical hypothesis testing is used to assess the consistency of redundant observations and to identify and exclude faulty measurements. Depending on whether the consistency check incorporates only the current epoch’s observations, receiver autonomous integrity monitoring (RAIM) algorithms are classified into snapshot-based and filtering-based approaches. Snapshot RAIM methods rely solely on measurements from the current epoch, including range comparisons [
21], least-squares residuals [
22], and maximum solution separation [
23]. Among these, the least-squares residual method estimates pseudorange residuals via a least-squares solution and uses the posterior unit-weight variance of the squared residual sum as the test statistic. In the presence of faulty measurements, the test statistic increases significantly, enabling fault detection.
To enhance the ability to detect small faults, the concept of M-estimation has been introduced to construct a weighted residual test statistic [
24]. Unlike snapshot RAIM algorithms, filter-based RAIM exploits temporal correlation across multiple epochs via filtering. Kalman filter-based RAIM typically consists of two stages: a global test to determine the presence of faults, followed by a local test to identify and exclude faulty measurements [
25]. To further leverage historical data, the autonomous integrity monitoring extension (AIME) algorithm computes test statistics over a sliding window of innovation sequences across multiple epochs, thereby improving the detection capability for slowly growing errors [
26]. Moreover, to account for impact of filter tracking errors, the least-squares support vector machine (LS-SVM) has been incorporated into the AIME framework, where predicted innovations rather than instantaneousinnovations are used to construct the test statistic [
27]. Additional studies have also explored the influence of detection threshold selection [
28] and dynamic model uncertainty [
29]. It should be noted that all these fault detection and exclusion (FDE) methods can identify and reject large outliers, but remain incapable of detecting subtle faults below the decision threshold. Moreover, in scenarios with insufficient satellite visibility, excluding satellites may further degrade positioning accuracy [
30].
In contrast, robust estimation provides an alternative approach to improving fault tolerance. Rather than precisely identifying the fault source, robust estimation mitigates the influence of outliers on state estimation by adapting the estimation process to the actual distribution of the measurement data. Robust filtering is generally achieved by adopting appropriate loss functions, such as the Huber, Cauchy, or Geman–McClure functions [
31]. In integrated navigation systems, Huber-based robust estimation has been widely applied to improve system robustness [
32]. However, these methods still assign partial weights to outliers, which may reduce estimation accuracy in the presence of faulty measurements. In recent years, a new filter has been proposed, replacing the minimum mean-square error criterion with the maximum correntropy criterion (MCC) [
33]. By exploiting higher-order statistical moments, MCC-based methods maximize the similarity between model output and desired response, thereby effectively suppressing the impact of outliers. Moreover, extensions of MCC-based methods to various nonlinear filters have also been reported [
34,
35]. Nevertheless, most existing MCC-based algorithms rely on a fixed kernel bandwidth parameter. In practical train positioning scenarios, measurement quality can vary in different epochs, making it difficult to select a single constant bandwidth that remains optimal for outliers of different magnitudes.
To address the above problems, this paper provides a new robust train positioning method. The main innovations of this study can be summarized as follows:
A robust extended Kalman filter based on the maximum correntropy criterion is derived, which improves state estimation robustness.
A lion swarm optimization strategy is introduced to dynamically adjust the kernel bandwidth for each observed satellite, thereby overcoming the limitations of fixed-bandwidth correntropy-based filtering.
Comprehensive comparative experiments are conducted under step and ramp fault scenarios to validate the positioning performance of the proposed adaptive maximum correntropy robust filter.
The remainder of this paper is organized as follows.
Section 3 introduces the maximum correntropy extended Kalman filter.
Section 4 describes the adaptive kernel bandwidth selection method.
Section 5 presents the experimental results and corresponding analysis. Finally,
Section 6 concludes this paper.
2. Architecture of the Train Control System
The satellite navigation-based train control system mainly consists of two subsystems: the onboard subsystem and the ground subsystem.
Figure 1 illustrates the architecture. The ground subsystem comprises a Radio Block Center (RBC), Temporary Speed Restriction Server (TSRS), Train Control Center (TCC), track circuits, balises, Lineside Electronic Units (LEUs), and a Train Control Maintenance Center (TCMC). The RBC is responsible for transmitting movement authorities and track description information to onboard equipment within its control area through the communication network. The TSRS manages temporary speed restriction commands. Track circuits are used to detect train occupancy on railway sections. The TCC performs track circuit coding and transmits block section status information to the interlocking system. Balises transmit fixed or variable telegrams to the onboard controller, providing temporary track data and correcting train odometry errors. The LEU generates balise telegrams according to information received from ground equipment. The TCMC provides remote maintenance, operational supervision, fault warning, and integrated monitoring functions for the ground components of the train control system.
The onboard subsystem mainly consists of a control unit, Track Circuit Information Reader (TCR), Balise Transmission Module (BTM), Wireless Communication Module (WCM), Driver–Machine Interface (DMI), Location Determination Unit (LDU), Juridical Recording Unit (JRU), and Train Interface Unit (TIU) [
36]. The onboard subsystem is responsible for continuously monitoring the train’s speed and position, generating speed supervision profiles based on information received from the ground subsystem, and automatically initiating braking actions when overspeed conditions or other safety-critical situations are detected [
37].
Conventional train positioning methods primarily rely on trackside infrastructure, including balises, and track circuits, to determine train position. In such systems, wheel speed sensors estimate the traveled distance by measuring wheel rotational speed, while balises provide absolute reference position information to correct accumulated odometry errors. In a satellite navigation-based train operation control system, the train positioning function is usually implemented by the Location Determination Unit (LDU). In general, the LDU can be composed of various types of positioning sensors, including GNSS receivers, inertial navigation systems, wheel speed sensors, and other auxiliary sensors. Through multi-sensor information fusion, the limitations of a single sensor in complex railway operating environments can be effectively compensated. Considering the advantages of inertial navigation systems, such as high autonomy, high short-term positioning accuracy, and independence from external signals, this paper mainly focuses on a train positioning architecture based on the integration of satellite navigation and inertial navigation systems.
4. Adaptive Kernel Bandwidth Selection
The kernel bandwidth is a free parameter in the maximum correntropy robust filter and plays a crucial role in determining the robustness of the filter estimation. The choice of kernel bandwidth governs the contribution of prior information and measurement information in the posterior state estimation. An inappropriate selection may prevent the Gaussian kernel function from fully exploiting its capability to suppress the influence of abnormal measurements.
To address this issue, noting that the purpose of kernel bandwidth selection is to minimize the estimation error under fault conditions, the bandwidth selection problem is reformulated as a multivariate single-objective optimization problem. Then, the kernel bandwidths of different satellites are treated as variables, and the optimal set of bandwidths is then determined by solving the constrained optimization problem to minimize the estimation error. The lion swarm optimization (LSO) algorithm, a representative swarm-intelligence optimization method, is incorporated into the robust filtering framework to obtain the optimal kernel bandwidth combination.
4.1. Population Initialization
The primary purpose of population initialization is to define the total number of lions within the population, the quantity of lions in each category, and their initial positions. Due to the distinct roles within the lion swarm, the proportion of adult lions directly influences the algorithm’s optimization performance, while the number of lion cubs enhances population diversity and extends the search range.
Assume that the total number of lions is denoted by
N, and
denotes the number of adult lions. Their relationship is expressed as
where
is the proportion factor of adult lions, whose value affects the search efficiency. Typically,
is set to 0.5 to ensure rapid convergence. Correspondingly, the number of lion cubs is
. Among adult lions, there is only one lion king, and the remaining adult lions are lionesses.
The position of each lion represents a feasible solution in the optimization space, corresponding to the kernel bandwidth parameters associated for each observed satellite at epoch
k. The dimension
D is determined by the number of observed satellites. The position of the
i-th lion can be represented as
After initialization, the positions of all lions within the population can be collectively represented as
4.2. Fitness Assessment
Before applying the LSO algorithm to determine the kernel bandwidths associated with different observations, it is essential to first define the optimization objective, namely the fitness function. In this study, the fitness function is defined as the horizontal uncertainty level (HUL) of the state estimation. The HUL evaluates the real-time positioning performance of a train based on observational data without a ground-truth position reference [
38]. It is expressed as
where
is the standard deviation of the measurement error for the
i-th satellite,
denotes the characteristic slope of the
i-th satellite,
denotes the target state selected from the full state vector, and
refers to the selected satellite that is to be evaluated, all elements are zero except for those corresponding to the
i-th satellite.
represents the filtering innovation,
denotes the innovation covariance matrix,
denotes the horizontal standard deviation of the state estimation.
and
are the position variances in the east and north directions.
denotes the inflation factor associated with the predefined missed-detection probability, which is obtained in the corresponding chi-square distribution.
is typically set to 0.01 [
25].
The fitness value
at each iteration is computed based on the current position
of each lion. After a finite number of iterations, the historical optimal position of the lion swarm is obtained, yielding the final feasible solution:
4.3. Lion Swarm Location Update
During the hunting process of the lion swarm, the search direction and scope of each individual are governed by their respective roles within the group. Through collaborative interactions among the lion king, lionesses, and cub lions, the positions of all lions are iteratively updated to approach the optimal solution.
4.3.1. Lion King Position Update
The lion king represents the individual with the best fitness in the population. It guides the migration of the entire group and occupies the optimal position within the swarm. To preserve its leadership status, the lion king only moves within a limited area around the current optimal position, seeking potentially superior solutions in its vicinity. The position of the lion king at iteration
is then updated according to
where the historical best position of the
i-th lion is denoted as
,
represents the global optimal position, namely the lion king’s position, at the
L-th iteration, and
denotes the scaling factor governing the movement range of the lion king. It is typically generated as a random number following a normal distribution.
4.3.2. Lioness Position Update
Lionesses carry the primary responsibility for hunting within the lion swarm. During hunting, lionesses exchange local information and collaboratively search for and surround prey. The position updating of each lioness is influenced by the positions of other lionesses within the swarm. The updated position of the lioness at iteration
can be expressed as
where
represents the historical best position of another randomly selected lioness, and
is the scaling factor governing the movement range of the lioness, determining both the step size and the search speed. The scaling factor progressively decreases with each iteration, causing the lioness’s step size to diminish gradually until it eventually approaches zero. The relationship between the scaling factor, step size, and iteration number is expressed as follows:
where
denotes the total number of iterations, and
represents the lioness’s movement step size, calculated using the mean of the maximum and minimum values in each dimension of the search space, denoted as
and
.
4.3.3. Cub Lions Position Updating
Cub lions are the weakest individuals in the population, and their behaviours are mainly influenced by interactions with the lion king and lionesses. To simulate this behaviour, cub lions are divided into three categories using a random variable , which follows a uniform distribution. Each category corresponds to a distinct behavioural pattern.
When , the cub lion is considered to be in a hungry state. This behaviour manifests as local exploitation around the current global best position.
When , the cub lion follows a lioness to learn hunting techniques and participate in cooperative hunting. In the solution space, this behaviour corresponds to local exploration around the position of a lioness.
When , the cub lion exhibits elite reverse learning behaviour and is expelled to a distant region away from the lion king’s domain. The cub lion must survive independently and search for better food sources. In the search space, this behaviour reflects exploration of potential superior solutions far from the current global optimum.
This behavioural strategy enhances the randomness of the search process and increases directional diversity in population movement, effectively reducing the risk of premature convergence to local optima. Based on the above behaviour classifications, the position of a cub lion at iteration
can be updated as follows:
where
represents the historical best position of the cub lion following the lioness at iteration
L, and
denotes the expelled position of the
i-th cub lion, defined as
where
is a scaling factor that restricts the movement capability of cub lions by scaling down their movement step size according to the iteration number. Initially, cub lions have limited knowledge of the search space and therefore employ relatively large step sizes to facilitate broad exploratory searches. As the optimization process proceeds and the cub lions acquire information about promising regions, the step size is gradually decreased, enabling more focused and localized searches around candidate solutions.
4.4. Boundary Constraint
Boundary constraints are imposed to restrict the feasible solution space of each optimization variable, thereby preventing variables from exceeding their permissible ranges during the optimization process. These ranges are defined by specifying corresponding lower and upper bounds. After the positions of all lions are updated, boundary checks are performed to verify the updated positions. If the value of any variable in a given dimension exceeds the predetermined upper bound, it is set to the upper-bound value:
where
denotes the
i-th dimensional variable of the
d-th lion’s position, while
and
represent the upper and lower boundary values, respectively. The specific boundary values are determined according to the characteristics of the variables. Specifically, an excessively large kernel bandwidth could weaken the robustness of the algorithm, causing the estimation performance to approach that of the conventional EKF. Therefore, an upper boundary value of 10 is chosen in this study. Conversely, an excessively small kernel bandwidth may result in a singular or nearly singular matrix, leading to inaccurate estimation results. To avoid this issue, the lower boundary value is set to 2 [
39].
Figure 2 shows the flowchart of the proposed adaptive maximum correntropy robust filter for the GNSS/INS-based train positioning system.
5. Experimental Results
5.1. Experiment Description
To validate the proposed algorithm, simulation experiments were conducted using measurement data collected from the Qinghai–Tibet Railway in western China, which represents a critical application scenario for satellite navigation-based train control systems. The data employed in this study were collected along the Geermu–Yinmaxia section of the Qinghai–Tibet Railway. This section is mainly characterized by open-sky and open-terrain conditions.
The experimental data were collected using a NovAtel SPAN-FSAS integrated navigation system, consisting of a satellite navigation receiver and an inertial measurement unit. According to the manufacturer’s specifications, the system can achieve centimeter-level positioning accuracy under high-precision GNSS correction modes. This accuracy level is sufficient for the present fault-injection experiment because the positioning error caused by the faulty pseudorange is at the meter level. The raw satellite observation data were sampled at 1 Hz, and the navigation outputs from the SPAN-FSAS system were used as the ground truth for computing positioning errors.
Figure 3 and
Figure 4 illustrate the data collection route and the experimental equipment configuration, respectively. During the experiments, the train operated at speeds ranging from 34 km/h to 73 km/h. Satellite visibility remained good throughout the journey, with an average of approximately 10 visible satellites, as shown in
Figure 5.
In the LSO-based adaptive kernel bandwidth selection, the maximum number of iterations was set to 50. The iteration number was selected by considering both optimization performance and computational efficiency. A larger iteration number increases the computational burden at each filtering epoch. In the present experiment, the search range is bounded within (2, 10). The selected iteration number provides a sufficient search capability to obtain a stable bandwidth combination while maintaining an acceptable computational cost.
To evaluate the robustness of the proposed AMCRF, step faults and ramp faults with varying magnitudes were injected into the raw pseudorange measurements for positioning performance analysis. Three filtering methods were selected for comparison: the EKF, the MCRF with fixed kernel bandwidths, and the proposed AMCRF. In the MCRF, fixed kernel bandwidths of 3, 5, and 10 were selected to examine the influence of kernel bandwidth on filtering robustness and to compare with the adaptive strategy adopted in AMCRF. To quantitatively evaluate the positioning performance of different algorithms, the root mean square error (RMSE) and the maximum horizontal position error (MHPE) were adopted as performance metrics.
5.2. Step Faults
In the step fault scenario, step errors of 15 m, 25 m, and 35 m were injected into the pseudorange measurements of satellite PRN7 at 150 s, 300 s, and 450 s, respectively. Each fault persisted for 50 s.
Figure 6 illustrates the evolution of horizontal position errors for different algorithms. Distinct differences in positioning performance can be observed across the three fault regions. The EKF exhibited the highest sensitivity to measurement faults, showing pronounced degradation in positioning accuracy in all fault regions. As the fault magnitude increased, the maximum horizontal positioning error increased accordingly, reaching 2.28 m, 3.13 m, and 3.23 m in Zones 1, 2, and 3, respectively.
Compared with the EKF, the MCRF algorithm exhibited varying levels of fault suppression across different fault regions, depending on the selected kernel bandwidth. Under the same fault magnitude, the robustness of MCRF decreased as the kernel bandwidth increased, resulting in larger positioning errors that became comparable to those of the EKF. When the fault magnitude was 15 m, MCRF showed similar maximum positioning errors under different bandwidth settings, indicating limited fault suppression capability in the presence of small-magnitude faults. However, for a fixed kernel bandwidth, the robustness of MCRF improved as the fault magnitude increased. For instance, when the kernel bandwidth was set to 5, the positioning performance in Zone 1 was comparable to that of the EKF, while the maximum error in Zone 2 was 2.7 m. As the fault magnitude increased to 35 m, the maximum horizontal positioning error estimated by MCRF significantly decreased to 1.98 m.
In contrast, the proposed AMCRF consistently exhibited superior positioning performance in Zones 2 and 3, effectively mitigating the influence of faulty measurements. The positioning accuracy remained close to that under fault-free conditions, which can be attributed to the adaptive kernel bandwidth mechanism that dynamically adjusts the bandwidth for each observed satellite and enables an appropriate parameter configuration. Although the estimation error of AMCRF slightly increased when the fault magnitude was reduced to 15 m, it still outperformed both EKF and MCRF across all scenarios. As shown in
Figure 7, the kernel bandwidths associated with different visible satellites varied dynamically within the range of
, providing greater flexibility than the fixed-bandwidth strategy.
To further quantify the positioning performance, detailed statistical results are summarized in
Table 1. Taking Zone 2 as an example, the RMSE of AMCRF was 1.45 m, which is nearly identical to the positioning error under fault-free conditions. Compared with the EKF and the MCRF with fixed kernel bandwidths of 10, 5, and 3, the RMSE was reduced by 42.9%, 40.8%, 33.8%, and 12.1%, respectively. Based on the above analysis, it can be concluded that the proposed lion-swarm-optimization-based adaptive maximum correntropy filter exhibits strong robustness in the presence of measurement faults.
5.3. Ramp Faults
To evaluate the robustness of the proposed algorithm under ramp fault conditions, a ramp fault with a rate of 0.5 m/s was injected into the pseudorange measurements of satellite PRN11 during the time interval from 201 s to 300 s, lasting for 100 s.
Figure 8 presents the variation in horizontal positioning errors computed by different methods. Within the fault period, each method exhibited significantly different sensitivity to the ramp fault.
The EKF showed the highest sensitivity, with positioning accuracy degrading continuously as the ramp fault increased, leading to a maximum horizontal positioning error of 10.5 m. In comparison, the three fixed-bandwidth MCRF variants demonstrated varying degrees of improvement. When the kernel bandwidth was set to 10, the maximum positioning error reached 9.12 m, which remained relatively close to that of the EKF. As the kernel bandwidth decreased, the positioning error also decreased. With kernel bandwidths of 5 and 3, the maximum errors were reduced to 5.59 m and 3.22 m, respectively. These results indicate that the fault suppression capability of MCRF depends on the choice of kernel bandwidth, and selecting an appropriate bandwidth is critical to ensuring robust filtering performance.
Compared with MCRF, the AMCRF method achieved the best estimation performance, with a maximum positioning error of only 2.11 m. The error variation during the fault period remained relatively stable, demonstrating the strong fault tolerance of the proposed algorithm.
Figure 9 further illustrates the dynamic adaptation of kernel bandwidths for each satellite within AMCRF. By allowing kernel bandwidths to vary based on measurement quality, the proposed method significantly enhances the overall robustness of the filtering process.
To quantitatively assess the positioning performance of the proposed algorithm,
Figure 10 summarizes the maximum positioning error and RMSE obtained using different methods under the ramp fault scenario. Among all evaluated methods, AMCRF achieved the lowest RMSE, with a value of only 1.85 m. Compared with the EKF and the MCRF employing fixed kernel bandwidths of 10, 5, and 3, the RMSE of AMCRF were reduced by 67.7%, 64.9%, 53.3%, and 24.2%, respectively. Overall, the analysis demonstrates that the proposed AMCRF can effectively reduce the influence of step and ramp faults on state estimation, significantly improving the positioning accuracy.
5.4. Discussion
Compared with the studies reviewed in the Introduction, the proposed AMCRF primarily advances the state of the art in the following aspects. First, unlike conventional fault detection and exclusion methods, AMCRF does not require the explicit identification and removal of faulty measurements. Instead, it suppresses the influence of abnormal pseudorange observations during the filtering process by reconstructing the measurement noise covariance using the maximum correntropy criterion. This feature is beneficial for railway positioning scenarios with limited satellite visibility, where excluding measurements may weaken the satellite geometry and degrade positioning accuracy. Second, compared with conventional robust filtering methods based on loss functions, AMCRF exploits the maximum correntropy criterion to enhance robustness against non-Gaussian measurement faults. Third, in contrast to existing MCC-based filters, which generally employ a fixed kernel bandwidth, AMCRF introduces a lion-swarm-optimisation-based adaptive bandwidth selection strategy. The kernel bandwidths are dynamically adjusted according to the measurement quality of each observed satellite, enabling the filter to adapt to time-varying measurement quality and varying fault magnitudes.
Nevertheless, the proposed AMCRF still has several limitations. First, the experimental validation was conducted using data from the Qinghai–Tibet Railway under relatively good satellite visibility conditions. Further field tests are required in more challenging railway environments, such as mountainous valleys, dense urban areas, and severe multipath scenarios. Second, the present study mainly considers single-satellite step and ramp faults injected into pseudorange measurements. More complex fault scenarios, including simultaneous multi-satellite faults and INS sensor anomalies, should be further investigated.