The Key Bridge PAL Protection Area (PPA) Generation Procedure
This document describes the deterministic, rule-based procedure employed by Key Bridge to create and maintain PAL Protection Areas (PPAs) for Priority Access License (PAL) holders. The procedure is designed for prospective PAL-owning customers who require transparent assurance that their licensed spectrum is protected in full compliance with FCC Part 96 and the Wireless Innovation Forum (WINNF) Functional Requirements for Citizens Broadband Radio Service (CBRS) Spectrum Access Systems.
The procedure implements the protection requirements set forth in 47 C.F.R. § 96.41 and the associated WINNF SAS Functional Requirements for PPA creation. Every PPA is generated to ensure that registered CBSDs operating under a PAL receive interference protection within the geographic area defined by the license while respecting county boundaries, license-area identifiers, and multi-county PAL assignments.
A Priority Access License (PAL) is a ten-year, county-specific authorization issued by the FCC that grants exclusive use of a 10 MHz channel within the 3.55–3.7 GHz band in a designated U.S. county. Because the underlying license data model is strictly county-based, each PAL is represented by a single PalInfoRecord containing one county GeoID, one license-area identifier, and one primary frequency assignment.
Most PALs are authorized for a single county. However, some PAL holders obtain multiple contiguous county authorizations that together form a larger service area. To manage these multi-county licensees without duplicating device discovery or protection calculations, Key Bridge maintains a PalVirtualRecord.
A PalVirtualRecord represents the consolidation of geographically adjacent licenses having, at minimum, the same owner userId and channel. This “virtual” PAL simplifies establishment of a PAL Protection Area (PPA) around an extended network laydown that extends across multiple counties. The PalVirtualRecord is an internal grouping construct that references the complete set of PalInfoRecords belonging to the same multi-county license holder. It provides the system with an authoritative list of every county that participates in that licensee’s PAL area.
A PAL Protection Area (PPA) is the geographic region inside which a PAL holder’s CBSDs receive interference protection from other users. When a PalVirtualRecord exists, the PPA generation process produces one or more county-specific sub-shapes, each clipped exactly at its county boundary and permanently associated with the corresponding PalInfoRecord. This approach preserves single-county authorization semantics while correctly accommodating multi-county licensees through the PalVirtualRecord grouping.
Key Bridge processes each PAL independently through a repeatable sequence. The sequence begins with the specific PAL record supplied by the customer or the FCC. It limits device discovery to CBSDs associated with that PAL’s county, generates protected contours only from eligible devices, and clusters those contours. When a multi-county PAL assignment is present, the process produces county-specific sub-shapes that are clipped precisely at county lines. Each resulting sub-shape is permanently associated with the PAL identifier that corresponds to its county. The entire workflow is executed without manual intervention and produces identical results for the same input data.
The procedure begins by retrieving the authoritative PalInfoRecord for the PAL identifier under consideration. The county (GeoID) associated with the PAL is identified, establishing the primary geographic boundary within which all subsequent device discovery occurs. This ensures that protection calculations remain strictly scoped to the PAL being processed.
Key Bridge queries for the existence of a PalVirtualRecord linked to the PAL identifier. When present, this record indicates that the PAL holder possesses a multi-county license area. The record supplies the complete set of county-specific PalInfoRecords that together constitute the full license area. In the absence of a PalVirtualRecord, the procedure treats the PAL as single-county and generates a single PPA shape.
All CBSDs belonging to the PAL holder (identified by FRN) are discovered within an effective buffer distance of the primary county boundary. Only devices located inside the primary county are retained as eligible. This per-PAL, county-limited discovery guarantees that every device is evaluated exactly once—when the PAL that owns it is processed—while preventing cross-PAL contamination.
For each eligible CBSD, a protection contour is calculated according to the WINNF-specified methodology. Contours that intersect are deterministically merged into clusters using a spatial index. The resulting clusters represent the minimal set of protected regions that must be converted into PPA shapes.
When a PalVirtualRecord exists, each cluster geometry is tested for intersection against every county referenced by the PalVirtualRecord. Because the PalVirtualRecord itself encodes the license area geometry, any intersecting county is necessarily adjacent. For each intersecting county, the cluster geometry is clipped exactly at the county boundary. The resulting sub-shape is associated exclusively with the PalInfoRecord whose PAL identifier corresponds to that county. This produces one or more county-specific PPA sub-shapes, each carrying its own PAL identifier, license-area identifier, and county metadata.
Each clipped geometry is validated to ensure it is non-empty. The geometry is then enriched with the complete set of CBSD reference identifiers that fall within the buffered PPA, the effective dates of the PAL, the primary frequency assignment, and the appropriate region type. The finalized ZoneData record (representing the PPA) is stored with a deterministic, reproducible identifier derived from the PAL identifier and geometry. A render job is created for any PPA that contains transmitting CBSDs so that protection visualizations remain current.
Upon completion, the procedure records the number of member devices, clusters processed, and time required. When a multi-county assignment is involved, the log references the full set of PAL identifiers to provide customers with clear traceability.
This procedure guarantees that every PPA is generated consistently, that devices are discovered exactly once per PAL, and that multi-county license areas receive correctly clipped, county-specific protection zones. By enforcing county-line clipping and binding each sub-shape to its county-specific PAL identifier, Key Bridge ensures full regulatory compliance while giving PAL holders precise visibility into how their protection areas are constructed and maintained.
Questions? Contact us