Cross-layer authentication method based on radio frequency fingerprint

• US 10,251,058 B2
• Filed: 08/24/2015
• Issued: 04/02/2019
• Est. Priority Date: 08/19/2015
• Status: Active Grant

• Current Assignee: University of Electronic Science and Technology of China
• Original Assignee: University of Electronic Science and Technology of China
• Inventors: Wen, Hong, Zhang, Jinling, Liao, Runfa, Tang, Jie, Pan, Fei
• Primary Examiner(s): Rahman, Shawnchoy
• Application Number:
  US15/310,780
• Publication Number:
  US 20170251364A1
• Time in Patent Office: 1,317 Days
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/79 Radio fingerprint
• CPC Class Codes: H04W 72/0446 Resources in time domain, e.g. slots or frames

Abstract

A cross layer authentication method based on radio frequency fingerprint, it includes the following steps: S1. In the first time slot, the legitimate transmitter A sends the first packet to the legitimate receiver B, and then B identifies the first data packet by the upper layer authentication; S2. The legitimate recipient B extracts the RF fingerprint eigenvector of the legitimate sender A, and stores it in the memory of the legitimate receiver B; S3. In the next time slot, the sender X sends the second packet to the legitimate receiver B, and the legitimate recipient B extracts the RF fingerprint eigenvector of the sender X; S4. Set sample of the RF fingerprint eigenvector; S5. legitimate receiver B estimates the similarity between the RF fingerprint eigenvector of the sender X and sample of the RF fingerprint eigenvector. This invention is in advantage of low computational complexity, small delay and high precision.

Claims

1. A cross layer authentication method based on radio frequency (RF) fingerprint, wherein the method includes the following steps:

step 1, in a first time slot, a legitimate sender A sends a first packet to a legitimate receiver B, and then B identifies the first data packet by an upper layer authentication;

if the upper layer authentication is successful, the legitimate sender A and the legitimate receiver B will establish a trust connection between them, and go to step 2;

if the upper layer authentication is failed, repeat step 1;

step 2, the legitimate receiver B extracts a RF fingerprint eigenvector of the legitimate sender A, and stores it in a memory of the legitimate receiver B;

step 3, in the next time slot, a sender X sends a second packet to the legitimate receiver B, and the legitimate receiver B extracts the RF fingerprint eigenvector of the sender X;

step 4, set a sample of the RF fingerprint eigenvector;

step 5, the legitimate receiver B carries out a RF fingerprint authentication to the RF fingerprint eigenvector of the sender X in step 3 according to the RF fingerprint eigenvector, and estimates the similarity between the RF fingerprint eigenvector of the sender X and the sample of the RF fingerprint eigenvector;

if the similarity is greater than or equal to a set threshold, then the RF fingerprint authentication will be successful;

the sender X is the legitimate sender A, and the RF fingerprint eigenvector of the sender X will be stored in the memory of the legitimate receiver B, then go to step 3;

if the similarity is less than the threshold, then the RF fingerprint authentication will be failed;

the sender X is an attacker E, and the legitimate receiver B drops the second packet, then go back to step 1;

wherein a test algorithm of the RF fingerprint authentication in the step 5 is a likelihood ratio test method or a sequential probability ratio test method.

2. The cross layer authentication method based on RF fingerprint according to the claim 1, wherein the upper layer authentication adopts a digital signature authentication based on public key infrastructure or the authentication based on Transparent Extensible Session Layer Architecture (TESLA).

3. The cross layer authentication method based on RF fingerprint according to the claim 2, wherein when the digital signature authentication based on the public key infrastructure is used for the upper layer authentication, the step 1 comprises the following sub-steps:

sub-step 11, in the first time slot, an anonymous public key/private key pair <

pubK_A, priK_A>

with a certain life cycle is distributed to the legitimate sender A;

a certificate of the public key/private key pair <

pubK_A, priK_A>

is Cert_A, and a virtual ID of public key/private key pair <

pubK_A, priK_A>

is PVID_A;

an anonymous public key/private key <

pubK_B, priK_B>

with a certain life cycle is distributed to the legitimate sender B;

the certificate of the public key/private key pair <

pubK_A, priK_A>

is Cert_B, and the virtual ID of public key/private key pair <

pubK_A, priK_A>

is PVID_B;

sub-step 12, the legitimate sender A uses its private key priK_A to sign a hash message of the first packet, and the first packet is denoted by X₁^AB, then the first packet X₁^AB is sent to the legitimate receiver B, that is;

A→

B;

<

PVID_A,X₁^AB,SIG_priKA[H(X₁^AB)|T₁],Cert_A>

;

sub-step 13, the legitimate receiver B uses the public key pubK_A to verify the signature of the first packet X₁^AB after the legitimate receiver B received the first packet X₁^AB;

V_pubKA{SIG_priKA[H(X₁^AB)|T₁],Cert_A}

here, | is the concatenation operator, and T₁ is the current time stamp;

sub-step 14, if the signature verification is successful, the legitimate receiver B establishes that the sender of the first packet X₁^AB is the legitimate sender A, then establish the trust connection between the legitimate sender A and the legitimate receiver B;

sub-step 15, if the signature verification is failed, the legitimate receiver B will discard the first packet X₁^AB, and go back to the sub-step 12.

4. The cross layer authentication method based on RF fingerprint according to the claim 1, wherein the legitimate receiver B extracts the RF fingerprint eigenvector of the legitimate sender A and the sender X comprising sub-steps of:

sub-step 01, the legitimate receiver B receives an RF signal;

sub-step 02, the legitimate receiver B uses the Hilbert transform to parse the received RF signal, then calculates an instantaneous phase of the RF signal, and detects a transient signal by a method of phase detection;

sub-step 03, the legitimate receiver B uses a method of wavelet analysis to obtain an instantaneous envelope curve;

sub-step 04, a fitting curve is used to deal with the instantaneous envelope curve to get a fitting coefficient, which is to extract a characteristic vector of the fingerprint.

5. The cross layer authentication method based on RF fingerprint according to the claim 1, wherein an identifier used in the RF fingerprint authentication in the step 5 is support vector machine (SVM) identifier or back propagation (BP) neural network identifier.

6. The cross layer authentication method based on RF fingerprint according to the claim 1, wherein a threshold value should be set before the step 5.

7. The cross layer authentication method based on RF fingerprint according to the claim 1, wherein the sample of the RF fingerprint eigenvector includes one or more RF fingerprint eigenvector stored in the memory of the legitimate receiver B in the step 4.