Reconfigurable Antenna Based Solutions For Device Authentication And Intrusion Detection In Wireless Networks

• US 20170180420A1
• Filed: 12/23/2016
• Published: 06/22/2017
• Est. Priority Date: 09/08/2011
• Status: Active Grant

• Current Assignee: Drexel University
• Original Assignee: Drexel University
• Inventors: Walsh, John MacLaren, Greenstadt, Rachel, Dandekar, Kapil R., Mookiah, Prathaban
• Granted Patent: US 10,178,124 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/79 Radio fingerprint

Abstract

Channel based authentication schemes for intrusion detection that operates at the physical layer are described that apply the capabilities of a pattern reconfigurable antenna for improved performance. Performance gains are achieved by the schemes as a function of the number of antenna modes. The first scheme relies on a channel based fingerprint for differentiating between transmitters whereas another scheme poses the intruder detection problem as a generalized likelihood ratio (GLR) test problem that operates on the channel realizations corresponding to different modes present in a reconfigurable antenna. The benefits of these two schemes over single element antennas are demonstrated. General guidelines are provided on how to choose the different elements of the decision metric in order to realize better performance for physical layer based authentication schemes based on any diversity scheme.

Claims

1. A method of detecting intrusion into a wireless transmission between a transmitter and a receiver in a communication system using at least one multi-mode reconfigurable antenna, comprising:

collecting wireless channel information between said transmitter and receiver for different antenna modes of said at least one multi-mode reconfigurable antenna at a physical layer of the antenna;

monitoring the wireless channel information using a generalized likelihood ratio test; and

generating an alarm when an abrupt change in the wireless channel information is detected, said abrupt change being representative of an intrusion.

2. The method of claim 1, wherein the wireless channel information is provided for multiple decorrelated modes of the reconfigurable antenna and said alarm is generated when a cumulative abrupt change over multiple modes is observed in the cumulative monitored wireless channel information.

3. The method of claim 1, wherein said alarm is generated when the change in the wireless channel information exceeds a variable threshold.

4. The method of claim 3, wherein a value of the variable threshold is set based on (1) a maximum value generated by applying the generalized likelihood ratio test to a sequence of channel estimate values generated during an initial training period of said transmitter and (2) an acceptable false alarm rate.

5. The method of claim 1, wherein collecting wireless channel information comprises the receiver estimating a probability distribution σ

₀ through a training sequence where a number of packets used for training is denoted by N_T and computing a likelihood ratio L(h) for packets h=[h_j, . . . ,h_k] for j=i−

N+1 where N=k−

j+1 is a block size and k=i based on channel estimates at each instant i (N≦

i≦

N_T) for each packet transmission.

6. The method of claim 5, further comprising the receiver selecting based on L(h) computed during a training phase a threshold γ

such that an alarm is raised whenever L(h)>

γ

.

7. The method of claim 6, wherein in the event of an alarm, a re-authentication procedure is evoked to reverify an identity of the transmitter.

8. The method of claim 5, wherein for a single antenna mode:

9. The method of claim 5, wherein for multiple antenna modes:

10. The method of claim 1, wherein the antenna modes are selected such that pattern correlation coefficients between different antenna modes are kept as low as possible.