METHODS AND APPARATUS FOR DETECTING SPOOFING OF GLOBAL NAVIGATION SATELLITE SYSTEM SIGNALS USING CARRIER PHASE MEASUREMENTS AND KNOWN ANTENNA MOTIONS

• US 20150234053A1
• Filed: 09/20/2013
• Published: 08/20/2015
• Est. Priority Date: 09/20/2012
• Status: Active Grant

• Current Assignee: Cornell University
• Original Assignee: Brady O'Hanlon, Cornell University
• Inventors: Psiaki, Mark L., Powell, Steven P., O'Hanlon, Brady W.
• Granted Patent: US 9,958,549 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G01S 19/13 Receivers
• CPC Class Codes: G01S 19/21 Interference related issues ; Issues related to cross-correlation, spoofing or other methods of denial of service
• CPC Class Codes: G01S 19/215 issues related to spoofing
• CPC Class Codes: G01S 19/43 using carrier phase measurements, e.g. kinematic positioning; using long or short baseline interferometry
• CPC Class Codes: H04K 2203/32 including a particular configuration of antennas
• CPC Class Codes: H04K 3/22 including jamming detection and monitoring
• CPC Class Codes: H04K 3/65 using deceptive jamming or spoofing, e.g. transmission of false signals for premature triggering of RCIED, for forced connection or disconnection to/from a network or for generation of dummy target signal
• CPC Class Codes: H04K 3/90 related to allowing or preventing navigation or positioning, e.g. GPS

Abstract

Methods and systems that can detect GNSS spoofing attacks and that do not require explicit or implicit knowledge of exact position or attitude and that provide hypothesis test statistics, threshold values, and probabilities of false alarm and missed detection.

Claims

1. A method for determining whether a GNSS (Global Navigation Satellite System) receiver has been spoofed, the method comprising:

moving a receiving location in a predetermined articulation pattern while receiving GNSS signals;

high pass filtering carrier phase measurements of received GNSS signals and the predetermined articulation pattern;

the high pass filtering resulting in estimation of coefficients in an expression for carrier phase measurement residuals;

determining a likelihood cost function minimum for a non-spoofed configuration;

a likelihood cost function being obtained from a ratio of probability density functions;

results of the high pass filtering being used in determining said likelihood cost function;

determining a minimum for another likelihood cost function for a spoofed configuration;

a spoofing detection hypothesis test statistic being a difference of said another likelihood cost function minimum and said likelihood cost function minimum;

results of the high pass filtering being used in determining said another likelihood cost function; and

comparing the spoofing detection hypothesis test statistic to a predetermined threshold;

the GNSS signals deemed to be spoofed if the spoofing detection hypothesis test statistic is less than the predetermined threshold.

2. The method of claim 1 wherein frequencies of the predetermined articulation pattern are substantially higher than frequencies of motion of user equipment receiving the GNSS signals.

3. The method of claim 1 wherein said another likelihood cost function includes a dot product of a unit direction vector from a spoofer signal source to user equipment and a unit vector for the predetermined-articulation pattern, vectors being expressed in a reference coordinate system;

and wherein said likelihood cost function includes dot products of a unit direction vector from each GNSS signal source and the unit vector for the predetermined articulation pattern, vectors being expressed in a reference coordinate system.

4. The method of claim 1 wherein the predetermined threshold is obtained from a predetermined false alarm probability.

5. The method of claim 1 wherein the predetermined articulation pattern is uniaxial.

6. The method of claim 1 wherein attitude of user equipment receiving the GNSS signals is not known a priori.

7. The method of claim 1 wherein amplitude of the predetermined articulation pattern is not known a priori.

8. The method of claim 1 wherein time phasing of the predetermined articulation pattern is not known a priori.

9. The method of claim 1 wherein the predetermined articulation pattern is multidimensional.

10. The method of claim 9 further comprising determining whether a subset of the GNSS signals is being spoofed.

11. The method of claim 9 wherein said likelihood cost function is a function of a direction cosines matrix for a transformation from a reference coordinate system to a user equipment coordinate system;

wherein said another likelihood function is a function of a unit direction vector from a spoofer signal source to user equipment.

12. The method of claim 11 wherein an optimized direction cosines matrix is expressed in terms of an optimized quaternion.

13. The method of claim 11:

wherein spoofing detection calculations involve minimization of said likelihood cost function and said another likelihood cost function, said likelihood cost function to determine an optimal direction cosines matrix and said another likelihood cost function to determine an optimal direction vector from the spoofer; and

wherein the spoofing detection calculations involve calculating a difference between a minimum of said another likelihood cost function and a minimum of said likelihood cost function and comparison of a result to a detection threshold to declare a spoofing attack if the difference is below the detection threshold.

14. A system for determining whether a GNSS (Global Navigation Satellite System) receiver has been spoofed, the system comprising:

a receiving location displacement component configured to move a receiving location with respect to a position at which the user equipment processes GNSS signals;

an articulation subsystem configured to provide driving signals to the receiving location displacement component and to determine receiving location articulation;

the articulation subsystem moving a receiving location in a predetermined articulation pattern while receiving GNSS signals;

a number of midpoint sampler subsystems, each midpoint sampler subsystem receiving input from a components of one channel of a conventional GNSS receiver and providing a beat carrier phase measurement for that one channel; and

a spoofing detection hypothesis test component receiving;

receiving location articulation,

said beat carrier phase measurement for each one channel and a PLL phase error discriminator value for said each one channel, said beat carrier phase measurement and said PLL phase error discriminator value for said each one channel being used to obtain a wideband estimate of beat carrier phase for said each one channel,

a number of accumulation mid point times, each accumulation mid point time being an accumulation mid point time for one channel, and a number of unit direction vectors, each unit direction vector pointing from a GNSS signal source for one channel;

said spoofing detection hypothesis test component configured to;

high pass filter the wideband estimate of beat carrier phase and the receiving location articulation for said each one channel;

the high pass filtering resulting in estimation of coefficients in an expression for a wideband estimate of beat carrier phase residuals;

determine a likelihood cost function minimum for a non-spoofed configuration;

a likelihood cost function being obtained from a ratio of probability density functions;

results of the high pass filtering being used in determining said likelihood cost function;

determine a minimum for another likelihood cost function for a spoofed configuration;

a spoofing detection hypothesis test statistic being a difference of said another likelihood cost function minimum and said likelihood cost function minimum;

results of the high pass filtering being used in determining said another likelihood cost function minimum;

compare the spoofing detection hypothesis test statistic to a predetermined threshold;

the GNSS signals deemed to be spoofed if the spoofing detection hypothesis test statistic is less than the predetermined threshold.

15. The system of claim 14 wherein said receiving location displacement component is a receiver antenna mounting component configured to enable moving a phase center of a receiver antenna with respect to a mounting position at which the receiver antenna mounting component is attached to user equipment receiving the GNSS signals;

and wherein said receiving location articulation is antenna articulation.

16. The system of claim 15 wherein the receiver antenna mounting component comprises a number of linking components, each linking components, except a last linking component, attached to a subsequent linking component with a joint component, a first linking component attached to user equipment by another joint component, a last linking component attached between one joint component and the receiver antenna, and a driving mechanism configured to drive each linking component.

17. The system of claim 15 wherein the receiver antenna mounting component comprises a drivable slidable component;

said drivable slidable component enabling motion in one axis;

said drivable slidable component disposed between user equipment and the receiver antenna.

18. The system of claim 17 wherein said drivable slidable component is a solenoid driver.

19. The system of claim 14 wherein the receiver antenna mounting component comprises a cantilever beam disposed between user equipment and the receiver antenna;

a driving component producing vibratory motion along an axis substantially perpendicular to an axis of the cantilever beam.

20. The system of claim 14 wherein frequencies of the predetermined articulation pattern are substantially higher than frequencies of motion of user equipment receiving the GNSS signals.

21. The system of claim 14 wherein said likelihood cost function includes dot products of a unit direction vector from each GNSS signal source and the unit vector for the predetermined articulation pattern, vectors being expressed in a reference coordinate system;

and wherein said another likelihood cost function includes, a dot product of a unit direction vector from a spoofer signal source to user equipment and a unit vector for the predetermined articulation pattern, vectors being expressed in a reference coordinate system.

22. The system of claim 14 wherein the predetermined threshold is obtained from a predetermined false alarm probability.

23. The system of claim 14 wherein the predetermined articulation pattern is uniaxial.

24. The system of claim 14 wherein attitude of user equipment receiving the GNSS signals is not known a priori.

25. The system of claim 14 wherein amplitude of the predetermined articulation pattern is not known a priori.

26. The system of claim 14 wherein time phasing of the predetermined articulation pattern is not known a priori.

27. The system of claim 14 wherein the predetermined articulation pattern is multidimensional.

28. The system of claim 27 wherein said spoofing detection hypothesis test component is also configured to determine whether a subset of the GNSS signals is being spoofed.

29. The system of claim 27 wherein said likelihood function is a function of a direction cosines matrix for a transformation from a reference coordinate system to a user equipment coordinate system;

wherein said another likelihood function is a function of a unit direction vector from the spoofer signal source to user equipment.

30. The system of claim 29 wherein the spoofing detection calculations compute an optimized value of said direction cosines matrix that minimizes said likelihood cost function;

and wherein the spoofing detection calculations compute an optimized value of said unit direction vector that minimizes said another likelihood function.

31. The system of claim 29 wherein the optimized value of said direction cosines matrix is expressed in terms of an optimized quaternion.