Electronic device for performing ranging by using ultra wide band in wireless communication system and method for operating same

By using UWB for ranging in wireless communication systems and conducting integrity checks after receiving the ranging frame, malicious attacks and insufficient ranging accuracy are solved, and higher ranging security and accuracy are achieved.

CN119906999APending Publication Date: 2025-04-29SAMSUNG ELECTRONICS CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411859645.0
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Priority Date
2019-08-05
Filing Date
2020-07-09
Publication Date
2025-04-29

AI Technical Summary

Technical Problem

When using ultra-wideband (UWB) for ranging, it is difficult to prevent attacks from malicious users, and the accuracy of ranging is insufficient.

Method used

Malicious attacks are prevented while improving the accuracy of ranging by sending and receiving frames for ranging to at least one other electronic device and performing integrity checks based on the ranging values ​​obtained by these frames.

Benefits of technology

It effectively prevents attacks from malicious users, improves the security and accuracy of ranging, and ensures the safety and reliability of ranging process in wireless communication systems.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119906999A_ABST
    Figure CN119906999A_ABST
Patent Text Reader

Abstract

An electronic device that performs ranging by using ultra wide band in a wireless communication system and a method of operating the electronic device are provided. A method of operating an electronic device for performing ranging by using UWB in a wireless communication system includes: transmitting at least one frame for ranging to at least one other electronic device and receiving at least one frame for ranging from the at least one other electronic device; obtaining a first ranging value and a second ranging value based on the at least one frame; and performing an integrity check based on a result of comparing the first ranging value with the second ranging value.
Need to check novelty before this filing date? Find Prior Art

Description

[0001] This application is a divisional application of a patent application with an application date of July 9, 2020, application number 2020800508879, and invention name “Electronic device for performing ranging by using ultra-wideband in a wireless communication system and method for operating the electronic device”. Technical Field

[0002] The present disclosure relates to an electronic device for securely and accurately performing ranging by using an ultra wideband (UWB) in a wireless communication system and a method of operating the electronic device. Background Art

[0003] The Internet has evolved from a human-based connected network in which humans create and consume information to the Internet of Things (IoT) in which distributed elements such as objects exchange information with each other to process the information. Internet of Everything (IoE) technology has emerged, in which IoT technology is combined with technology for processing big data, for example, through connection with a cloud server. In order to realize IoT, various technical elements such as sensing technology, wired / wireless communication and network infrastructure, service interface technology, and security technology are utilized. In recent years, technologies related to sensor networks for connecting objects, machine-to-machine (M2M) communication, and machine type communication (MTC) have been studied.

[0004] In the IoT environment, intelligent Internet technology (IT) services can be provided to collect and analyze data obtained from connected objects to create new value in human life. As existing information technology (IT) and various industries merge and combine with each other, IoT can be applied to various fields such as smart homes, smart buildings, smart cities, smart cars or connected cars, smart grids, health care, smart homes, and advanced medical services.

[0005] Since various services can be provided due to the development of wireless communication systems, methods for efficiently providing these services are required. For example, in medium access control (MAC), a ranging technology for measuring the distance between electronic devices by using ultra-wideband (UWB) can be used. UWB refers to a wireless communication technology that uses a very wide frequency band of several GHz or more in a baseband without using a radio carrier. Summary of the invention

[0006]

Technical issues

[0007]

Technical solution

[0008] The above and other aspects, features and advantages of certain embodiments of the present disclosure will become more apparent from the following description in conjunction with the accompanying drawings.

[0009] Figure 1 is a diagram for describing a general device-to-device (D2D) communication process.

[0010] Figure 2 is a diagram illustrating a communication process between a plurality of electronic devices.

[0011] Figure 3 is a diagram showing an ultra-wideband (UWB) physical layer (PHY) frame structure.

[0012] Figure 4 is a diagram showing the structure of a physical layer protocol data unit (PPDU) of a high rate pulse repetition frequency enhanced ranging device (HRP-ERDEV).

[0013] Figure 5 is a diagram for describing a method of determining reception timing of a frame by using a scrambled time stamp sequence (STS).

[0014] Figure 6 is a diagram for briefly describing a single-side two-way ranging (SS-TWR) operation of an electronic device.

[0015] Figure 7 is a diagram for briefly describing a dual-side two-way ranging (DS-TWR) operation of an electronic device.

[0016] Figure 8 A scenario is shown in which an attacker gains access to an electronic device based on a relay attack.

[0017] Figure 9a is a flowchart of a method for an electronic device to perform ranging through UWB according to an embodiment.

[0018] Figure 9b is a flowchart of a method in which an electronic device performs ranging by using UWB according to an embodiment.

[0019] Fig.10ais a flowchart of a method in which an electronic device performs ranging and integrity check by using an STS and a preamble according to an embodiment.

[0020] Fig.10b is a flowchart of a method in which an electronic device performs ranging calibration by using an STS and a preamble according to an embodiment.

[0021] Fig.11 is a diagram for describing a method in which an electronic device performs ranging and an integrity check by using DS-TWR according to an embodiment.

[0022] Fig.12 is a flowchart of a method in which an electronic device performs ranging and integrity check by using DS-TWR according to an embodiment.

[0023] Fig.13a is a diagram for describing a scenario in which an electronic device that performs ranging by using DS-TWR is attacked by an attacker according to an embodiment.

[0024] Fig.13b is a diagram for describing a scenario in which an electronic device that performs ranging by using DS-TWR is attacked by an attacker according to an embodiment.

[0025] Fig.13c is a diagram for describing a method in which an electronic device performs ranging by using DS-TWR applied to enhance security from attacks according to an embodiment.

[0026] Fig.14 is a flowchart of a method in which an electronic device performs ranging calibration by using DS-TWR according to an embodiment.

[0027] Fig.15 is a diagram for describing an STS segment defined in the PHY layer of High Rate Pulse (HRP) UWB.

[0028] Fig.16a is a flowchart of a method in which an electronic device performs ranging and integrity check by using a plurality of STS fragments according to an embodiment.

[0029] Fig.16b is a flowchart of a method in which an electronic device performs ranging calibration by using a plurality of STS segments according to an embodiment.

[0030] Fig.16c is a graph describing clustering for range calibration.

[0031] Fig.17 is a diagram illustrating a process in which a plurality of electronic devices change ranging parameters.

[0032] Fig.18ais a block diagram of an electronic device according to various embodiments.

[0033] Fig.18b is a block diagram of an electronic device according to various embodiments. DETAILED DESCRIPTION

[0034] According to one aspect of the present disclosure, a method for operating an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system includes: sending at least one frame for ranging to at least one other electronic device and receiving at least one frame for ranging from at least one other electronic device; obtaining a first ranging value and a second ranging value based on the at least one frame; and performing an integrity check based on a result of comparing the first ranging value with the second ranging value.

[0035] According to another aspect of the present disclosure, an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system includes: a communicator, the communicator being configured to send at least one frame for ranging to at least one other electronic device and receive at least one frame for ranging from at least one other electronic device; and at least one processor, the at least one processor being configured to obtain a first ranging value and a second ranging value based on the at least one frame, and to perform an integrity check based on a result of comparing the first ranging value with the second ranging value.

[0036] According to another aspect of the present disclosure, a non-transitory computer-readable recording medium has recorded thereon a program for executing a method of operating an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system, the method comprising: sending at least one frame for ranging to at least one other electronic device and receiving at least one frame for ranging from at least one other electronic device; obtaining a first ranging value and a second ranging value based on the at least one frame; and performing an integrity check based on a result of comparing the first ranging value with the second ranging value.

[0037] According to another aspect of the present disclosure, a method of operating an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system includes: sending at least one frame for ranging to at least one other electronic device and receiving at least one frame for ranging from at least one other electronic device; obtaining a first ranging value and a second ranging value based on the at least one frame; and determining a third ranging value based on the first ranging value and the second ranging value.

[0038] According to another aspect of the present disclosure, an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system includes: a communicator configured to send at least one frame for ranging to at least one other electronic device and receive at least one frame for ranging from at least one other electronic device; and at least one processor configured to obtain a first ranging value and a second ranging value based on the at least one frame, and determine a third ranging value based on the first ranging value and the second ranging value.

[0039] According to another aspect of the present disclosure, a non-transitory computer-readable recording medium has recorded thereon a program for executing a method of operating an electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system, the method including: sending at least one frame for ranging to at least one other electronic device and receiving at least one frame for ranging from at least one other electronic device; obtaining a first ranging value and a second ranging value based on the at least one frame; and determining a third ranging value based on the first ranging value and the second ranging value.

[0040]

Invention Mode

[0041] Although the terms used herein are selected as much as possible from general terms that are currently widely used while taking into account the functions obtained according to the present disclosure, these terms may be replaced with other terms based on the intention of ordinary technicians in the field, customs, the emergence of new technologies, etc. Therefore, it is noted that the terms used herein are interpreted based on their actual meanings and the entire contents of this specification, rather than simply based on the names of the terms.

[0042] Throughout this disclosure, expressions such as “at least one of a, b, or c” (or “at least one of a, b, and c”) mean only a, only b, only c, both a and b, both a and c, both b and c, or all of a, b, and c.

[0043] Examples of the terminal may include a User Equipment (UE), a Mobile Station (MS), a cellular phone, a smart phone, a computer, a multimedia system capable of performing a communication function, and the like.

[0044] In this disclosure, a controller may also be referred to as a processor (or at least one processor).

[0045] In this disclosure, a layer (or a layer device) may also be referred to as an entity.

[0046] Terms such as "first" and "second" may be used to designate various elements, but these elements should not be limited by these terms. These terms are only used to distinguish one element from another element.

[0047] The terms in the following description are only used to describe the specific embodiments of the present disclosure, and are not intended to limit the scope of the present disclosure. Unless the context clearly indicates otherwise, the singular forms "one", "an" and "the" are also intended to include plural forms. Throughout this specification, when an element is referred to as "connected to" another element, the element can be "directly connected to" another element or "electrically connected to" another element via an intermediate element. The terms "comprise", "comprising", "including" and / or "comprising" when used in this article specify the elements of the statement, but do not exclude the existence or addition of one or more other elements.

[0048] The definite article "the" or other indicators may refer to both singular and plural forms. Unless the context clearly indicates otherwise, the operations included in the method according to the embodiment may be performed in an appropriate order. The order in which the operations are described does not limit the scope of the present disclosure.

[0049] The phrases "an embodiment" or "an embodiment of the present disclosure" at various places in the specification do not always specify the same embodiment of the present disclosure.

[0050] Embodiments of the present disclosure may be represented as function blocks and various processing steps. Some or all of the function blocks may be implemented by various numbers of hardware and / or software elements configured to perform certain functions. For example, the function blocks of the present disclosure may be implemented by one or more microprocessors or circuit elements for certain functions. As another example, the function blocks of the present disclosure may be implemented using various programming or scripting languages. The function blocks may be implemented using algorithms run by one or more processors. In addition, the present disclosure may employ known techniques for electronic settings, signal processing, and / or data processing.

[0051] In addition, the connecting lines or connecting members between the elements shown in the drawings only indicate functional connections and / or physical or circuit connections. The connections between the elements can be represented by various alternative or additional functional connections, physical connections or circuit connections in actual devices.

[0052] Generally speaking, wireless sensor network technology is mainly divided into wireless local area network (WLAN) technology and wireless personal area network (WPAN) technology depending on the coverage of the sensing area. In this case, WLAN technology is based on IEEE 802.11 and enables access to the backbone network within a radius of about 100 m. At the same time, WPAN technology is based on IEEE 802.15 and includes Bluetooth, ZigBee, ultra-wideband communication (UWB), etc. A wireless sensor network implemented using wireless sensor network technology may include multiple communicative electronic devices. In this case, multiple communicative electronic devices perform communication during an active period by using a single channel. That is, the communicative electronic device can collect packets and send the collected packets during the active period.

[0053] UWB may refer to a short-range, high-speed wireless communication technology that uses a wide frequency band of several GHz or more, low spectrum density, and a short pulse width (e.g., 1 to 4 nanoseconds) in a baseband. UWB may also refer to a frequency band in which UWB communication is used. Although a communication method of an electronic device is described below based on UWB, UWB is merely an example and various wireless communication technologies may also be used.

[0054] The electronic devices according to the embodiments of the present disclosure may include mobile phones, smart phones, mobile devices, laptop computers, digital broadcast receivers, personal digital assistants (PDAs), portable multimedia players (PMPs), navigation systems, slate PCs, tablet PCs, digital TVs, desktop computers, refrigerators, projectors, vehicles, smart cars, printers, etc.

[0055] Reference will now be made in detail to the embodiments of the present disclosure, examples of which are illustrated in the accompanying drawings.

[0056] Figure 1 is a diagram for describing a general device-to-device (D2D) communication process.

[0057] D2D communication refers to a direct communication scheme between geographically adjacent electronic devices without using infrastructure such as base stations. Figure 1 As shown, electronic devices can communicate 1 to 1, 1 to many, or many to many. D2D communication can use unlicensed bands as in Wi-Fi Direct or Bluetooth communication. Alternatively, D2D communication can improve the frequency utilization efficiency of cellular systems by using licensed bands. Although D2D communication can be restrictively used as a term to represent machine-to-machine (M2M) communication, D2D communication in the present disclosure can include not only communication between simple electronic devices with communication functions, but also communication between various types of electronic devices with communication functions (e.g., smart phones or personal computers).

[0058] Figure 2 is a diagram illustrating a communication process between a plurality of electronic devices 210 and 220 .

[0059] The first electronic device 210 and the second electronic device 220 may communicate with each other through a device search process 230 , a link establishment process 240 , and a data communication process 250 .

[0060] In the device search process 230, each of the first electronic device 210 and the second electronic device 220 can search among peripheral electronic devices to find other electronic devices capable of D2D communication. Therefore, each of the first electronic device 210 and the second electronic device 220 can determine whether to establish a link for D2D communication. For example, the first electronic device 210 can send a search signal so that the second electronic device 220 can find the first electronic device 210. The first electronic device 210 can determine that other electronic devices capable of D2D communication are within the D2D communication range by receiving the search signal sent by the second electronic device 220.

[0061] In the link establishment process 240, each of the first electronic device 210 and the second electronic device 220 may establish a link for data transmission with a desired electronic device found from among the electronic devices in the device search process 230. For example, the first electronic device 210 may establish a link for data transmission with the second electronic device 220 found in the device search process 230.

[0062] In the data communication process 250, each of the first electronic device 210 and the second electronic device 220 may transmit and receive data to and from the devices with which the link is established in the link establishment process 240. For example, the first electronic device 210 may transmit and receive data to and from the second electronic device 220 through the link established in the link establishment process 240. Hereinafter, the first electronic device 210 may be referred to as an initiator, and the second electronic device 220 may be referred to as a responder.

[0063] Figure 3 is a diagram showing an ultra-wideband (UWB) physical layer (PHY) frame structure.

[0064] The UWB PHY frame 300 may include a synchronization header (SHR) preamble 310 , a PHY header (PHR) 320 , and a data field 330 .

[0065] The SHR preamble 310 may be used for at least one of automatic gain control (AGC), signal acquisition, frequency offset estimation, packet synchronization, channel estimation, etc., and more particularly, for ranging. Specifically, for a receiver algorithm related to leading edge signal tracking for AGC setting, antenna diversity selection, timing acquisition, frequency recovery, packet and frame synchronization, channel estimation, and ranging, the SHR preamble 310 may be added before the PHR 320. The SHR preamble 310 may be referred to as a preamble code.

[0066] The PHR 320 may include information about the content of a PHY protocol data unit (PPDU) and a protocol used to transmit the PPDU.

[0067] The data field 330 may include data to be sent or received.

[0068] In UWB communication, an SHR preamble may be sent at the front of a frame to obtain synchronization between a transmitter and a receiver. The SHR preamble may be a signal agreed upon between the transmitter and the receiver. In a wireless communication system, the SHR preamble is determined in such a way that the transmitter can quickly synchronize with the receiver at the start point of the frame. The UWB PHY frame structure according to an embodiment is shown in FIG. Figure 3 However, the UWB PHY frame structure according to various other embodiments is not limited to Figure 3 .

[0069] Various embodiments of the present disclosure relate to a medium access control (MAC) and a distance between electronic devices to be measured for MAC in UWB. In this case, a ranging technology may be used to measure the distance between the electronic devices.

[0070] Compared with ranging technologies based on Wi-Fi, Bluetooth, Bluetooth Low Energy (BLE), and ultrasonic waves, ranging technologies using UWB can use a wide band and therefore provide high accuracy. For example, ranging technologies using UWB can provide an error accuracy of about ±10 cm. On the other hand, distance measurement technologies using Wi-Fi can provide an error accuracy of about ±1 m.

[0071] For example, in a door opening / closing scenario using UWB ranging, when a user approaches a door to enter or exit, the distance between the mobile device and the electronic device included in the door can be measured without user intervention. In this case, when the measured distance between the electronic devices meets a threshold (or based on this), the door lock can be locked or unlocked.

[0072] Meanwhile, IEEE 802.15.4z is a PHY / MAC specification that supports UWB enhanced ranging that is enhanced in security compared to the legacy specification (IEEE 802.15.4). The High Rate Pulse Repetition Frequency (HRP) UWB PHY of IEEE 802.15.4z represents a method that is capable of addressing the vulnerability of the legacy specification to relay attacks or malicious attacks / brute force attacks during preamble-based first path detection. In order to achieve security against vulnerable attacks, the HRP UWB PHY considers using an encryption sequence or scrambled timestamp sequence (STS) known only to two ranging devices to improve the integrity and accuracy of the ranging measurement timestamp. Hereinafter, a UWB ranging device that supports the HRP UWB PHY mode is referred to as an HRP enhanced ranging device (ERDEV).

[0073] Figure 4 This is a diagram showing the structure of the PPDU of HRP-ERDEV.

[0074] Figure 4 The PPDU format of HRP-ERDEV with ranging marker (RMARKER) is shown. RMARKER can refer to information in a frame used to define reference timing. RMARKER is composed of Figure 4 Indicated by the arrow in the figure. HRP-ERDEV is a device capable of sending and receiving packets including STS, and can detect the first path for ranging by using STS. The ranging frame (RFRAME) in which the ranging field bit is set in the PHR can be generally used for the ranging operation of HRP-ERDEV. Figure 4 As shown, the timing for ranging can be measured based on the peak position of the UWB pulse of the first chip / symbol after the RMARKER indicating the start of frame (SoF) delimiter (SFD). To measure the arrival time, the HRP-ERDEV can measure the RMARKER timing by using the STS.

[0075] Figure 5It is a diagram for describing a process in which HRP-ERDEV uses STS to perform first path detection through correlation analysis according to an embodiment. STS is a cryptographic sequence known only to two electronic devices participating in ranging. Each of the two electronic devices can calculate STS by using a deterministic random bit generator (DRBG). When the ERDEV used as a transmitter sends an RFRAME including STS, the ERDEV used as a receiver can verify whether the received STS has the same value as the directly calculated STS. When it is verified that the received STS has the same value as the directly calculated STS, the ERDEV used as a receiver can trust the received information and use it for ranging. The ERDEV used as a receiver can detect the first path by finding the reception timing of STS based on the peak of the cross-correlation of the received STS and the directly calculated STS. Based on the timing measured according to the first path, the distance between the two ERDEVs can be measured by single-sided two-way ranging (SS-TWR) and / or double-sided two-way ranging (DS-TWR).

[0076] Figure 6 FIG. 1 is a diagram for briefly describing the SS-TWR operation of an electronic device. Figure 6 In the present invention, the first electronic device 210 may be referred to as an initiator device, and the second electronic device 220 may be referred to as a responder device.

[0077] refer to Figure 6 When the first electronic device 210 sends the first RFRAME 601 to the second electronic device 220, the second electronic device 220 can measure the reception timing of the first RFRAME 601 through the first path detection based on STS. The second electronic device 220 can send the second RFRAME 602 to the first electronic device 210 and measure the ranging reply time T reply The first electronic device 210 having received the second RFRAME 602 may measure the reception timing of the second RFRAME 602 and measure the ranging round time T by the first path detection based on the STS. round .

[0078] Specifically, the first electronic device 210 may measure the time between the first-1 RMARKER 611 included in the first RFRAME 601 transmitted to the second electronic device 220 and the first-2 RMARKER 612 included in the second RFRAME 602 received from the second electronic device 220 as T roundThe second electronic device 220 may measure the time between the second-1 RMARKER 621 included in the first RFRAME 601 received from the first electronic device 210 and the second-2 RMARKER 622 included in the second RFRAME 602 transmitted to the first electronic device 210 as T reply .

[0079] The second electronic device 220 may use the data frame to reply is sent to the first electronic device 210 so that the first electronic device 210 can calculate the time of flight (ToF) T according to the following [Equation 1] prop The first electronic device 210 can prop Multiply by the speed of light (e.g., 3×10 8 m / s) to estimate the distance between the first electronic device 210 and the second electronic device 220 (ie, perform ranging).

[0080] [Equation 1] .

[0081] Figure 7 is a diagram for briefly describing the DS-TWR operation of an electronic device. Figure 7 In the present invention, the first electronic device 210 may be referred to as an initiator device, and the second electronic device 220 may be referred to as a responder device.

[0082] Similar to the above-mentioned SS-TWR, DS-TWR may be performed by sending RFRAME three times.

[0083] refer to Figure 7 When the first electronic device 210 sends the first RFRAME 701 to the second electronic device 220 (or based thereon), the second electronic device 220 may measure the reception timing of the first RFRAME 701 through the first path detection based on STS. The second electronic device 220 may send the second RFRAME 702 to the first electronic device 210. The second electronic device 220 may measure the ranging reply time T reply1 The first electronic device 210 having received the second RFRAME 702 may measure the reception timing of the second RFRAME 702 through the first path detection based on the STS and measure the ranging round time T round1 .

[0084] When the first electronic device 210 having received the second RFRAME 702 transmits the third RFRAME 703 to the second electronic device 220, the second electronic device 220 may measure the reception timing of the third RFRAME 703 through the first path detection based on the STS. The first electronic device 210 may measure the ranging reply time T reply2 The second electronic device 220 that has received the third RFRAME 703 may measure the reception timing of the third RFRAME 703 and measure the ranging round time T by the first path detection based on the STS. round2 .

[0085] Specifically, the first electronic device 210 may measure the time between the first-1 RMARKER 711 included in the first RFRAME 701 transmitted to the second electronic device 220 and the first-2 RMARKER 712 included in the second RFRAME 702 received from the second electronic device 220 as T round1 The second electronic device 220 may measure the time between the second-1 RMARKER 721 included in the first RFRAME 701 received from the first electronic device 210 and the second-2 RMARKER 722 in the second RFRAME 702 transmitted to the first electronic device 210 as T reply1 .

[0086] The second electronic device 220 may measure a time between the second-2 RMARKER 722 included in the second RFRAME 702 transmitted to the first electronic device 210 and the second-3 RMARKER 723 included in the third RFRAME 703 received from the first electronic device 210 as T round2 The first electronic device 210 may measure the time between the first-2 RMARKER 712 included in the second RFRAME 702 received from the second electronic device 220 and the first-3 RMARKER 713 included in the third RFRAME 703 transmitted to the second electronic device 220 as T reply2 .

[0087] The second electronic device 220 may receive T from the first electronic device 210 by using a data frame. round1 and T reply2 The second electronic device 220 can calculate T according to the following [Equation 2] prop And by adding T prop Multiply by the speed of light (e.g., 3×10 6 m / s) to measure the distance between the first electronic device 210 and the second electronic device 220.

[0088] [Equation 2] .

[0089] Meanwhile, the ranging parameters are determined by the ERDEV called the controller and are notified to the ERDEV called the controllable. Although the controllable can request the controller to change the ranging parameters by using the ranging change request information element (IE) during the ranging measurement period, ultimately, the controller determines whether to accept the controllable's request. The ranging parameters may include parameters related to at least one of a ranging scheme indicating whether SS-TWR or DS-TWR is used, a ranging cycle, the number of frames used for ranging, or the number of STS segments included in a frame. Figure 6 and Figure 7 In the embodiment, one of the first electronic device 210 and the second electronic device 220 may function as a controller, and the other may function as a controlled device.

[0090] As described above, STS can be used to perform secure ranging based on first path detection. However, the risk of security attacks by attackers using the early path insertion strategy still exists.

[0091] According to the early path insertion strategy, the success probability of the attack increases when the signal-to-noise ratio (SNR) of the signal sent by the attacker is higher than the SNR of the signal sent by the device participating in the ranging. For example, when the attacker is closer to the receiving device or sends a signal to the receiving device with higher power, the success probability of the security attack may increase.

[0092] The attacker can know the PPDU format and preamble structure of HRP UWB PHY through the published IEEE 802.15.4z standard. The attacker can know the STS transmission timing by performing synchronization based on the preamble. The attacker can use random noise during the STS transmission period to cause an early peak to occur when the ERDEV used as a receiver performs the first path detection.

[0093] Therefore, due to artificial interference by the attacker, the ERDEV used as a receiver may estimate a distance shorter than the actual distance as a result of ranging. Therefore, in use cases where authentication is guaranteed based on the ranging result value, such as in scenarios for determining whether a user with a digital key is approaching a vehicle or for determining any other physical proximity, a security vulnerability that is susceptible to relay attacks or malicious attacks may be caused.

[0094] Now refer to Figure 8 Describe a relay attack.

[0095] Figure 8An example is shown in which a device TA serving as a transmitter wins an access right based on distance measurement by performing UWB ranging with a device RA serving as a receiver. Figure 8 As shown, the attacker TB can obtain the permission to access RA by using the relay attack device RB to make RA mistakenly believe that TA is within the scope of the granted access rights.

[0096] In with Figure 8 Based on the relay attack shown in the previous section, it is also possible to use the early path insertion strategy to attack HRP-ERDEV. The attacker can gain access rights by using the early path insertion strategy to make HRP-ERDEV mistakenly identify the user with access rights within the scope of the granted access rights.

[0097] At the same time, even when the attacker does not make an intentional attack, the ranging accuracy may be reduced due to repeated or temporary interference. When the SNR of the interference signal is higher than the SNR of the signal sent by the device participating in the ranging, the reduction in ranging accuracy is more likely to occur. For example, when multiple HRP-ERDEVs perform ranging simultaneously through the same channel, signal collisions may occur.

[0098] Generally speaking, when the number of HRP-ERDEVs increases or when the ranging period is shortened, the probability of signal collision may increase, and thus, the ranging accuracy may decrease. Therefore, when the ranging period is extended to improve the ranging accuracy, the probability of signal collision decreases, but more time is spent trying new ranging.

[0099] The electronic device according to one or more embodiments calculates the distance between devices by using STS based on HRP UWB PHY to prevent a relay attack or a malicious attack by an attacker using an early path insertion strategy.

[0100] According to an embodiment, the ranging security level of ERDEV can be improved by preventing early path insertion attacks by performing integrity checks using preambles. According to another embodiment, the ranging security level of ERDEV can be improved by preventing early path insertion attacks by performing integrity checks using DS-TWR. According to another embodiment, the ranging security level of ERDEV can be improved by preventing early path insertion attacks by performing integrity checks using STS segments.

[0101] According to an embodiment, a method capable of improving ranging accuracy and security level is proposed.

[0102] The transmitting electronic device according to the embodiment can be connected to the external electronic device by using the UWB communication technology. The transmitting electronic device according to the embodiment can perform ranging through UWB RFRAME. The transmitting electronic device according to the embodiment can perform integrity check by performing ranging by using the preamble and STS to perform ranging with the external electronic device through UWB RFRAME. The transmitting electronic device according to the embodiment can perform ranging calibration by performing ranging by using the preamble and STS to perform ranging with the external electronic device through UWB RFRAME.

[0103] The transmitting electronic device according to the embodiment can perform integrity check by performing two SS-TWR processes in two round-trip measurement processes included in DS-TWR to perform DS-TWR with an external electronic device. The transmitting electronic device according to the embodiment can perform ranging calibration by performing two SS-TWR processes in two round-trip measurement processes included in DS-TWR to perform DS-TWR with an external electronic device.

[0104] In addition, the transmitting electronic device according to the embodiment can perform an integrity check by performing ranging by using multiple STS segments to perform ranging with an external electronic device through UWB RFRAME. The transmitting electronic device according to the embodiment can perform ranging calibration by performing ranging by using multiple STS segments to perform ranging with an external electronic device through UWB RFRAME.

[0105] Meanwhile, the receiving electronic device according to the embodiment may be connected to an external electronic device by using UWB communication technology. The receiving electronic device according to the embodiment may perform ranging through UWB RFRAME. The receiving electronic device according to the embodiment may perform an integrity check by performing ranging by using a preamble and STS to perform ranging with an external electronic device through UWB RFRAME. The receiving electronic device according to the embodiment may perform ranging calibration by performing ranging by using a preamble and STS to perform ranging with an external electronic device through UWB RFRAME.

[0106] The receiving electronic device according to the embodiment can perform integrity check by performing two SS-TWR processes in two round-trip measurement processes included in DS-TWR to perform DS-TWR with an external electronic device. The receiving electronic device according to the embodiment can perform ranging calibration by performing two SS-TWR processes in two round-trip measurement processes included in DS-TWR to perform DS-TWR with an external electronic device.

[0107] The receiving electronic device according to the embodiment can perform integrity check by performing ranging by using multiple STS segments to perform ranging with an external electronic device through UWB RFRAME. The receiving electronic device according to the embodiment can perform ranging calibration by performing ranging by using multiple STS segments to perform ranging with an external electronic device through UWB RFRAME.

[0108] Meanwhile, the electronic device used as a controller according to the embodiment may determine the number of frames used for DS-TWR or the number of STS segments included in the frame, and notify the controlled device of the result of the determination to perform ranging with the external electronic device through UWB RFRAME. The electronic device used as a controller according to the embodiment may be requested by the controlled device to change the number of frames used for DS-TWR and / or the number of STS segments included in the frame to perform ranging with the external electronic device through UWB RFRAME.

[0109] Meanwhile, the electronic device used as a controlled device according to the embodiment may receive the number of frames for DS-TWR or the number of STS segments included in the frame from the controller to perform ranging with the external electronic device through UWB RFRAME. The electronic device used as a controlled device according to the embodiment may send the desired number of frames for DS-TWR or the desired number of STS segments included in the frame to the controller to perform ranging with the external electronic device through UWB RFRAME.

[0110] Figure 9a is a flowchart of a method in which an electronic device performs ranging by using UWB in a wireless communication system according to an embodiment. Figure 9a The method shown may be performed by an electronic device acting as an initiator or an electronic device acting as a responder. Figure 9a The method shown may be performed by an electronic device acting as a receiver or an electronic device acting as a transmitter.

[0111] refer to Figure 9a In operation S910, the electronic device according to the embodiment may transmit at least one frame for ranging to at least one other electronic device and receive at least one frame for ranging from at least one other electronic device. The electronic device may exchange RFRAME for ranging with other electronic devices.

[0112] In operation S920, the electronic device may obtain a first ranging value and a second ranging value based on at least one frame.

[0113] The electronic device may perform ranging by using the STS. When the electronic device sends a first frame to another electronic device and receives a second frame in response to the first frame from the other electronic device (or based thereon), the electronic device may determine the reception timing of the second frame based on the peak value of the cross-correlation of the pre-calculated STS and the STS included in the received second frame. The electronic device may calculate the ranging value based on the determined timing.

[0114] For example, the electronic device may calculate a first time T from the timing when the first frame is transmitted to the timing when the second frame is received. round The electronic device may receive a second time T from the other electronic device from the timing when the other electronic device receives the first frame to the timing when the other electronic device sends the second frame. reply The electronic device may calculate the first time T based on the calculated round and the received second time T reply To calculate the third time T taken to send a frame to other electronic devices prop The electronic device may be based on the third time T prop The distance measurement value is calculated as the predicted distance between the electronic device and the other electronic devices. Figures 5 to 7 A method of calculating a ranging value according to SS-TWR or DS-TWR is described, and thus a repeated description thereof may not be provided herein.

[0115] The electronic device according to the embodiment may calculate the first ranging value based on timing determined using the STS included in at least one frame, and calculate the second ranging value based on timing information included in a preamble included in the at least one frame.

[0116] As an example, when the electronic device is an initiator device of SS-TWR, in operation S910, the electronic device may transmit a first frame and receive a second frame in response to the first frame. The electronic device may calculate a first ranging value based on timing determined using an STS included in each of the first frame and the second frame, and calculate a second ranging value based on timing information included in a preamble included in the first frame and the second frame.

[0117] As another example, when the electronic device according to the embodiment is a responder device of DS-TWR, in operation S910, the electronic device may receive a first frame, send a second frame in response to the first frame, and receive a third frame in response to the second frame. The electronic device may calculate a first ranging value based on a timing determined using an STS included in each of the first frame, the second frame, and the third frame. The electronic device may calculate a second ranging value based on timing information included in a preamble included in the first frame, the second frame, and the third frame.

[0118] Reference below Fig.10a and Fig.10b Embodiments for performing secure and accurate ranging by using an STS and a preamble are described in detail.

[0119] Meanwhile, the electronic device according to another embodiment may obtain the first ranging value and the second ranging value by performing DS-TWR by performing two SS-TWR processes.

[0120] As an example, when the electronic device according to the embodiment is an initiator device of DS-TWR, in operation S910, the electronic device may transmit a first frame, receive a second frame in response to the first frame, and transmit a third frame in response to the second frame. The electronic device may calculate a first ranging value according to a timing determined based on the first frame and the second frame. The electronic device may receive a second ranging value calculated based on the second frame and the third frame from the responder device.

[0121] As another example, when the electronic device according to the embodiment is a responder device of DS-TWR, in operation S910, the electronic device may receive a first frame, send a second frame in response to the first frame, and receive a third frame in response to the second frame. The electronic device may receive a first ranging value calculated according to a timing determined based on the first frame and the second frame from the initiator device. The electronic device may calculate a second ranging value based on the second frame and the third frame.

[0122] Reference below Fig.11 , Fig.12 , Figures 13a to 13c and Fig.14 Embodiments for performing secure and accurate ranging by using DS-TWR are described in detail.

[0123] Meanwhile, the electronic device according to the embodiment may continuously obtain a plurality of ranging values ​​including a first ranging value and a second ranging value. The plurality of ranging values ​​obtained may be used for the integrity check of operation S930. The time interval between the continuous ranging processes may be set to be equal to or less than the coherence time, thereby preventing channel switching due to the movement of the electronic device.

[0124] In operation S920, an electronic device for performing integrity check based on a plurality of continuous ranging processes according to an embodiment may send a first frame set including a plurality of frames for a first ranging to at least one other electronic device and receive a first frame set including a plurality of frames for the first ranging from at least one other electronic device, and send a second frame set including a plurality of frames for a second ranging to at least one other electronic device and receive a second frame set including a plurality of frames for the second ranging from at least one other electronic device. In this case, the time interval between the time when the first ranging is performed and the time when the second ranging is performed may be equal to or shorter than a preset time interval. For example, the preset time interval may include a coherence time.

[0125] The electronic device according to the embodiment may calculate the first ranging value based on the timing determined using the plurality of frames included in the first frame set, and calculate the second ranging value based on the timing determined using the plurality of frames included in the second frame set.

[0126] Meanwhile, the electronic device according to another embodiment may obtain the first ranging value and the second ranging value by using a plurality of STS segments.

[0127] As an example, the electronic device according to the embodiment may calculate the first ranging value based on the timing determined using the first STS segment included in at least one frame. The electronic device according to the embodiment may calculate the second ranging value based on the timing determined using the second STS segment included in at least one frame. Fig.15 and Figures 16a to 16c Embodiments for performing secure and accurate ranging by using multiple STS segments are described in detail.

[0128] In operation S930, the electronic device according to the embodiment may perform an integrity check based on a result of comparing the first ranging value and the second ranging value.

[0129] When the difference between the first ranging value and the second ranging value is included in the threshold range (or based thereon), the electronic device according to the embodiment can determine that ranging is properly performed by the device to which the access right is granted. When the difference between the first ranging value and the second ranging value is less than the threshold (or based thereon), the electronic device according to the embodiment can continue the authentication process to grant access right to other electronic devices.

[0130] When the difference between the first ranging value and the second ranging value is less than a threshold value, the electronic device according to the embodiment can determine the third ranging value as a calibration ranging value based on the first ranging value and the second ranging value. The electronic device can grant access rights to other electronic devices based on the third ranging value. The third ranging value can be a weighted sum of the first ranging value and the second ranging value.

[0131] Otherwise, when the difference between the first ranging value and the second ranging value is not included in the threshold range, the electronic device according to the embodiment can determine that the attack is made by a device that is not granted access rights. When the difference between the first ranging value and the second ranging value is equal to or greater than the threshold, the electronic device according to the embodiment can stop the authentication process.

[0132] The electronic device according to an embodiment may determine to change the ranging parameter based on a result of the integrity check performed in operation S930.

[0133] The ranging parameters may include at least one of a ranging scheme, a ranging cycle, a number of frames used for ranging, or a number of STS segments included in a frame. For example, when determining to improve the ranging security level and / or ranging accuracy or based on determining to improve the ranging security level and / or ranging accuracy, the electronic device may increase the number of frames used for ranging and / or the number of STS segments included in a frame.

[0134] As an example, an electronic device used as a controller may determine that the reliability of the ranging value is low or a higher security level and / or higher accuracy is required based on the result of the integrity check. When it is determined that the reliability of the ranging value is low or a higher security level and / or higher accuracy is required, the controller device may determine to change the ranging parameter. The controller device may notify the controlled device of the change in the ranging parameter.

[0135] As another example, an electronic device used as a controller may receive a request to change a ranging parameter from an electronic device used as a controlled device. The controller device may determine whether the request of the controlled device is acceptable based on the result of the integrity check. When it is determined that the request of the controlled device is acceptable, the controller device may determine to change the ranging parameter. The controller device may notify the controlled device of the change in the ranging parameter.

[0136] As another example, an electronic device used as a controlled device may determine that a ranging parameter needs to be or will be changed based on the result of the integrity check. The controlled device may send a request to the controller device to change the ranging parameter. The controller device may determine whether the request of the controlled device is acceptable and notify the controlled device of the result of the determination.

[0137] Figure 9b is a flowchart of a method in which an electronic device performs ranging by using UWB in a wireless communication system according to an embodiment. Figure 9b Operations S910 and S920 correspond to Figure 9a Therefore, a repeated description thereof may not be provided herein.

[0138] refer to Figure 9b In operation S910, the electronic device according to the embodiment may transmit at least one frame for ranging to at least one other electronic device and receive at least one frame for ranging from at least one other electronic device. The electronic device may exchange RFRAME for ranging with other electronic devices.

[0139] In operation S920, the electronic device may obtain a first ranging value and a second ranging value based on at least one frame.

[0140] As an example, the electronic device may obtain the first ranging value and the second ranging value by using the STS and the preamble. As another example, the electronic device may obtain the first ranging value and the second ranging value by performing two SS-TWR processes to perform DS-TWR. As another example, the electronic device may obtain the first ranging value and the second ranging value by using multiple STS segments. As another example, the electronic device may obtain the first ranging value and the second ranging value by using multiple continuous ranging processes.

[0141] In operation S970, the electronic device may perform ranging calibration based on the first ranging value and the second ranging value. The electronic device may determine a third ranging value based on the first ranging value and the second ranging value.

[0142] When the difference between the first ranging value and the second ranging value is included in the threshold range (or based thereon), the electronic device according to the embodiment can determine that ranging is properly performed by the device to which the access right is granted. When the difference between the first ranging value and the second ranging value is less than the threshold (or based thereon), the electronic device according to the embodiment can obtain a third ranging value as the final ranging result value by performing ranging calibration. The third ranging value can be expressed as a weighted sum of the first ranging value and the second ranging value. The electronic device can grant access rights to other electronic devices based on the third ranging value.

[0143] Otherwise, when the difference between the first ranging value and the second ranging value is not included in the threshold range, the electronic device according to the embodiment may determine that at least one of the first ranging value and the second ranging value is greatly affected by interference. When the difference between the first ranging value and the second ranging value is equal to or greater than the threshold, the electronic device according to the embodiment may stop the ranging calibration process.

[0144] The electronic device according to an embodiment may determine to change the ranging parameter based on a result of the ranging calibration performed in operation S970.

[0145] The ranging parameters may include at least one of a ranging scheme, a ranging cycle, a number of frames used for ranging, or a number of STS segments included in a frame. For example, when determining to improve the ranging security level and / or ranging accuracy or based on determining to improve the ranging security level and / or ranging accuracy, the electronic device may increase the number of frames used for ranging and / or the number of STS segments included in a frame.

[0146] As an example, an electronic device acting as a controller may determine that the reliability of the ranging value is low or that a higher ranging accuracy is required. When determining that the reliability of the ranging value is low or that a higher accuracy is required, the controller device may determine to change the ranging parameter. The controller device may notify the controlled device of the change in the ranging parameter.

[0147] As another example, an electronic device used as a controller may receive a request to change a ranging parameter from an electronic device used as a controlled device. The controller device may determine whether the request of the controlled device is acceptable based on the result of the ranging calibration. When it is determined that the request of the controlled device is acceptable, the controller device may determine to change the ranging parameter. The controller device may notify the controlled device of the change in the ranging parameter.

[0148] As another example, an electronic device used as a controlled device may determine that a ranging parameter needs to be changed or will be changed based on the result of ranging calibration. The controlled device may send a request to the controller device to change the ranging parameter. The controller device may determine whether the request of the controlled device is acceptable and notify the controlled device of the result of the determination.

[0149] Now refer to Fig.10a , Fig.10b , Fig.11 , Fig.12 , Figures 13a to 13c , Fig.14 , Fig.15 , Figures 16a to 16c and Fig.17 Methods of operating an electronic device for performing ranging according to various embodiments are described.

[0150] Initially, the electronic device according to the embodiment can implement a method of performing ranging by using both the preamble and the STS to prevent attacks using the early path insertion strategy. The electronic device can determine whether an attack has been made by performing an integrity check by comparing the ranging value calculated using the preamble with the ranging value calculated using the STS. According to the embodiment, the security level of the HRP-ERDEV can be improved by the integrity check.

[0151] Fig.10a is a flowchart of a method in which an electronic device performs ranging and integrity check by using an STS and a preamble according to an embodiment.

[0152] refer to Fig.10a , in operation S1010, the electronic device according to the embodiment may establish a communication connection with another HRP-ERDEV through UWB communication, and transmit and receive RFRAME for distance measurement.

[0153] In operation S1020, the electronic device may determine a ranging method, and transmit and receive RFRAME according to the ranging method.

[0154] To perform SS-TWR, in operation S1040, the electronic device may measure a ranging result value based on the preamble. And the ranging result value based on STS , then and In operation S1040, the electronic device according to the embodiment may be an initiator ERDEV that has transmitted the first RFRAME.

[0155] To perform DS-TWR, in operation S1030, the electronic device may measure a ranging result value based on the preamble. And the ranging result value based on STS , then and In operation S1030, the electronic device according to the embodiment may be a responder ERDEV that has received the first RFRAME.

[0156] In operation S1050, the electronic device may determine and is equal to or greater than a threshold (eg, a preset, pre-stored, or predetermined threshold).

[0157] For example, when given a threshold for integrity checking And satisfy When (or based on) the condition, the electronic device may determine that the other ERDEV is an attacker. When determining that the other device is an attacker, in operation S1060, the electronic device may stop the authentication process and not grant access rights to the other device. When (or based thereon), in operation S1070, the electronic device may determine that the other ERDEV is not an attacker but a target ERDEV, and continue the authentication process to grant access rights to the other ERDEV.

[0158] Compared with the method of using only STS for ranging, the method of using both the preamble and STS for ranging according to the embodiment can reduce the success probability of the attack performed by the attacker. For a successful attack when using the preamble and STS for ranging according to the embodiment, the attacker needs to make the same early path insertion attack once in the preamble period and make the same early path insertion attack once in the STS period.

[0159] For example, suppose the success probability of an early path insertion attack on a ranging method using only STS is , the success probability of an early path insertion attack on a ranging method using only the preamble is , and meets the conditions The probability is In this case, although the success probability of the attack in a general environment where the attacker only uses STS for ranging is , but when the preamble and STS are used together for ranging according to the embodiment, the success probability of an attack by an attacker can be reduced to .

[0160] The device for calculating the ToF corresponding to the ranging result value according to the embodiment may vary depending on the ranging scheme used by the electronic device. For example, the initiator device may calculate the ToF when using SS-TWR, or the responder device may calculate the ToF when using DS-TWR. Therefore, the device for performing the integrity check may also vary depending on the ranging scheme used. However, when the two devices involved in the ranging exchange the ranging result value, the integrity check can be performed by any device. The operation of exchanging the ranging result value can be performed in-band or out-of-band.

[0161] For ranging calibration, the electronic device according to an embodiment may improve ranging accuracy of HRP-ERDEV by performing ranging using both the preamble and the STS and performing ranging calibration based on the two ranging values.

[0162] Fig.10b Operations S1010, S1020, S1030, S1040 and S1050 correspond to Fig.10a Operations S1010, S1020, S1030, S1040, and S1050 are described herein, and thus a repeated description thereof may not be provided herein.

[0163] In operation S1050, the electronic device may determine and Is the difference between them equal to or greater than the threshold?

[0164] For example, assuming that the threshold for ranging calibration is predetermined as . Based on the leading ranging result value And the ranging result value based on STS After being measured, when the condition is met When (or based on) the distance measurement result value does not satisfy the condition When (or based on this), the electronic device can be based on and A distance measurement calibration is performed (operation S1090 ).

[0165] The electronic device according to the embodiment uses the distance measurement calibration according to the following [Equation 3] As the final ranging result value. In [Equation 3], a is a parameter closely related to the ranging channel and noise, and is determined as a value optimized based on the expected utility function when implementing the electronic device.

[0166] [Equation 3] .

[0167] at the same time, Fig.11 and Fig.12 A method in which an electronic device performs ranging and integrity check by using DS-TWR according to another embodiment is shown.

[0168] The method of performing integrity check by performing two SS-TWR processes that are important for DS-TWR using three frames according to an embodiment can be used to prevent attacks using an early path insertion strategy. According to an embodiment, it can be determined whether an attack is made by performing integrity check by comparing two ranging values ​​calculated by performing two SS-TWR processes. According to an embodiment, the security level of HRP-ERDEV can be improved by integrity check.

[0169] Fig.11 This is a conceptual diagram of the integrity check method used for DS-TWR.

[0170] like Fig.11 As shown, for DS-TWR using three frames, two round trip measurement processes can be considered. When the initiator device I obtains the value When the initiator device I can use the equation Calculate the distance measurement result value When the responder device R obtains the value through the second round-trip measurement process When the responder device R can be calculated according to the equation Calculate the distance measurement result value .

[0171] When the threshold V for integrity check is given th And meet the conditions When the condition is not met, the electronic device according to the embodiment may determine that the other ERDEV is an attacker. When it is determined that the other device is an attacker, the electronic device may stop the authentication process and not grant access rights to the other device. When the electronic device determines that the other ERDEV is not an attacker but a target ERDEV, it can continue the authentication process to grant access rights to the other ERDEV.

[0172] Fig.12 is a flowchart of a method in which an electronic device performs ranging and integrity check by using DS-TWR according to an embodiment.

[0173] refer to Fig.12, in operation S1210, the electronic device according to the embodiment may establish a communication connection with another HRP-ERDEV through UWB communication, and transmit and receive RFRAME for distance measurement.

[0174] In operation S1220, the electronic device may obtain a distance measurement result value through a first round-trip measurement process. .

[0175] As an example, when the electronic device is an initiator device, the electronic device may calculate the value of and the value received from the responder device To calculate the value .

[0176] As another example, when the electronic device is a responder device, the electronic device may receive a value from an initiator device. .

[0177] In operation S1230, the electronic device may obtain a distance measurement result value through a second round-trip measurement process. .

[0178] As an example, when the electronic device is an initiator device, the electronic device may receive a value from a responder device. .

[0179] As another example, when the electronic device is a responder device, the electronic device may calculate the value of and the value received from the initiator device To calculate the value .

[0180] In operation S1240, the electronic device may determine and Is the difference between equal to or greater than the threshold The SS-TWR result values ​​calculated by the two devices may be exchanged so that either device may perform an integrity check.

[0181] As an example, when the integrity check is performed by the initiator device, the responder device may send the second SS-TWR result value T to the initiator device through in-band or out-of-band signaling. r2 The initiator device may calculate the first SS-TWR result value T based on the first SS-TWR result value T calculated by the initiator device. r1 and a second SS-TWR result value received from the responder device to determine whether an attack has been made.

[0182] As another example, when the integrity check is performed by the responder device, the initiator device may send the first SS-TWR result value to the responder device through in-band or out-of-band signaling. The responder device may receive a first SS-TWR result value from the initiator device based on the first SS-TWR result value received from the initiator device. and the second SS-TWR result value calculated directly by the responder device to determine whether an attack has been made.

[0183] when and The difference between the th When, in operation S1250, the electronic device according to the embodiment may determine that an attack is detected and stop the authentication process. and The difference between them is less than the threshold When the attack is detected, the electronic device may determine that no attack is detected and continue the authentication process to grant access rights to another device in operation S1260.

[0184] Both preamble-based ranging and STS-based ranging can be applied to Fig.11 and Fig.12 The ranging method of the embodiment shown. Regarding the method of performing integrity check by using the preamble, Fig.11 and Fig.12 The illustrated embodiment can be used with Fig.10a That is, according to an embodiment, in order to calculate two ranging values ​​through two SS-TWR processes included in DS-TWR, STS-based ranging may be performed, preamble-based ranging may be performed, or STS-based ranging and preamble-based ranging may be performed together.

[0185] The method for performing ranging integrity check according to the embodiment can reduce the success probability of the attack by using two round-trip measurement processes included in DS-TWR. According to the embodiment, for a successful attack on two SS-TWR processes that are important for DS-TWR, the attacker needs to make the same early path insertion attack once in the first round-trip measurement process and once in the second round-trip measurement process.

[0186] For example, assume that the success probability of an attack due to early path insertion in a general DS-TWR is , the success probability of the attack due to early path insertion during the first round-trip measurement is , the success probability of the attack due to early path insertion during the second round-trip measurement is , and meets the conditions The probability is In this case, although the attacker's success probability in an environment using general DS-TWR is However, when two round-trip measurement processes are used to perform integrity checking according to the embodiment, the success probability of the attack by the attacker can be greatly reduced to .

[0187] However, when the electronic device according to the embodiment performs ranging by using DS-TWR, an attacker may Fig.13a and Fig.13b The scene shown made the attack.

[0188] refer to Fig.13a , when performing normal DS-TWR, the initiator device I and the responder device R may perform ranging by sending and receiving a first frame 1301 , a second frame 1303 , and a third frame 1305 .

[0189] However, when the attacker device A Fig.13a Shown When making an early path insertion attack, the impact of early path insertion may also affect , so it passes the integrity check.

[0190] Specifically, the initiator device 1 may send a first frame 1301 to the responder device R, and receive an attack frame 1302 of the attacker device A before receiving a second frame 1303 from the responder device R. The initiator device 1 may send a fourth frame 1304 to the responder device R in response to the attack frame 1302.

[0191] The initiator device 1 can calculate the transmission timing of the first frame 1301 and the reception timing of the attack frame 1302 based on the transmission timing of the first frame 1301 and the reception timing of the attack frame 1302. 1307, and calculate based on the reception timing of the attack frame 1302 and the transmission timing of the fourth frame 1304 1308. The responder device R may calculate based on the reception timing of the first frame 1301 and the transmission timing of the second frame 1303 1306, and calculate based on the sending timing of the second frame 1303 and the receiving timing of the fourth frame 1304 1309. The responder device R may receive from the initiator device I 1307 and 1308. The responder device R may be based on 1306, 1307, 1308 and 1309 Estimate the distance between the responder device R and the initiator device I.

[0192] Therefore, due to the artificial interference of the attacker A, the distance estimated by the responder device R is shorter than the actual distance. However, regardless of the artificial interference of the attacker A, the distance measurement result value based on the first round trip calculation can be and the distance measurement result value calculated based on the second round trip The estimated value is smaller than the true distance of ToF. Fig.13a The attack of the scenario shown can be performed by Fig.11 and Fig.12 The integrity check shown in .

[0193] and Fig.13a Different from the attack scenarios shown, the integrity check according to the embodiment can be used to mitigate the Fig.13b The success probability of the attack for the scenario shown. Fig.13b , when performing normal DS-TWR, the initiator device I and the responder device R may perform ranging by transmitting and receiving a first frame 1311, a second frame 1313, and a third frame 1317.

[0194] However, attacker device A can Fig.13b As shown Make an early path insertion attack. Due to the attack carried out by the attacker device A, the responder device R can 1314, 1316, 1319 and 1318 Estimate the distance between the responder device R and the initiator device I.

[0195] Therefore, due to the artificial interference of attacker A, the distance estimated by responder device R is shorter than the actual distance. r1 and the distance measurement result value T calculated based on the second round trip r2 Therefore, the responder device R determines that an attack is detected and stops the authentication process. Fig.13a The attacks in the scenarios shown are different, depending on Fig.13b The attack of the scenario shown may not be easily accomplished by Fig.11 and Fig.12 The integrity check shown in .

[0196] The electronic device according to the embodiment may implement a method of performing DS-TWR using four frames to prevent Fig.13a The electronic device according to the embodiment can be Fig.13cAs shown, DS-TWR is performed to enhance integrity check using four frames 1410, 1421, 1422, and 1430. The DS-TWR method using four frames according to the embodiment may be performed in consideration of various cases depending on a device for performing integrity check.

[0197] As an example, when the integrity check is performed by the initiator device, the responder device may send the second SS-TWR result value to the initiator device through in-band or out-of-band signaling. The initiator device may be based on the first SS-TWR result value calculated by the initiator device. and the second SS-TWR result value T received from the responder device r2 to determine whether an attack has been made.

[0198] As another example, when the integrity check is performed by the responder device, the initiator device may send the first SS-TWR result value to the responder device through in-band or out-of-band signaling. The responder device may receive a first SS-TWR result value from the initiator device based on the first SS-TWR result value received from the initiator device. and the second SS-TWR result value T calculated directly by the responder device r2 to determine whether an attack has been made.

[0199] Both preamble-based ranging and STS-based ranging can be applied to Fig.13c The ranging method of the embodiment shown. Regarding the method of performing integrity check by using the preamble, Fig.13c The illustrated embodiment can be used with Fig.10a The embodiments shown are used together.

[0200] The electronic device according to the embodiment may perform a ranging calibration method capable of improving the ranging accuracy of HRP-ERDEV by performing ranging calibration based on two SS-TWR result values ​​and a DS-TWR result value obtainable in DS-TWR. Fig.11 , the electronic device according to the embodiment can use all two SS-TWR result values and And the DS-TWR result value T r3 To perform ranging, and based on three ranging values , and Perform ranging calibration.

[0201] Fig.14 is a flowchart of a method in which an electronic device performs ranging and ranging calibration by using DS-TWR according to an embodiment.

[0202] Fig.14Operations S1210, S1220, S1230 and S1240 correspond to Fig.12 Operations S1210, S1220, S1230, and S1240 are described herein, and thus a repeated description thereof may not be provided herein.

[0203] refer to Fig.14 In operation S1240, the electronic device according to the embodiment may determine T r1 With T r2 Is the difference between them equal to or greater than the threshold?

[0204] For example, assuming that the threshold for ranging calibration is predetermined as The first SS-TWR result value and the second SS-TWR result value After being measured, when the condition is met When (or based on) the distance measurement result value does not satisfy the condition When the electronic device can be based on and Distance measurement calibration is performed (operation S1490 ).

[0205] The electronic device according to the embodiment may use the range finding calibration by performing the range finding calibration according to the following [Equation 4] As the final ranging result value. In [Equation 4], a and b are parameters closely related to the ranging channel and noise, and are determined as values ​​optimized based on the expected utility function when implementing the electronic device.

[0206] [Equation 4] ,for .

[0207] Both preamble-based ranging and STS-based ranging can be applied to Fig.14 The ranging method of the embodiment shown. Regarding the method of performing integrity check by using the preamble, Fig.14 The illustrated embodiment can be used with Fig.10a That is, according to an embodiment, in order to calculate two ranging values ​​through two SS-TWR processes included in DS-TWR, STS-based ranging may be performed, preamble-based ranging may be performed, or STS-based ranging and preamble-based ranging may be performed together.

[0208] Meanwhile, according to the embodiment, Fig.15 , Fig.16a , Fig.16b and Fig.16c A method in which an electronic device performs ranging by using a plurality of STS segments is shown. According to an embodiment using a plurality of STS segments, an attack using an early path insertion strategy can be prevented and ranging accuracy can be improved.

[0209] The concept of STS fragments is defined for HRP UWB PHY of IEEE 802.15.4z. One to four STS pulse sequence blocks may be included in a data unit together with a gap indicating an interval of silence of approximately 1 μs (512 chips). Fig.15 Example 1510 indicates a case where two STS fragments are considered. Fig.15 The table specifies information related to the STS segments supported in the basic pulse repetition frequency (BPRF) and higher pulse repetition frequency (HPRF) modes supported by the HRP UWBPHY of IEEE 802.15.4z. Fig.15 In the second row 1520 of the table, the HPRF mode supported by the HRP UWB PHY of IEEE 802.15.4z can support one to four STS fragments.

[0210] The method of performing the integrity check according to the embodiment measures a ranging result value of each segment by using a plurality of STS segments, and compares the measured values. Fig.16a is a flowchart of a method in which an electronic device performs ranging and integrity check by using a plurality of STS fragments according to an embodiment.

[0211] refer to Fig.16a In operation S1610, the electronic device according to the embodiment may establish a communication connection with another HRP-ERDEV through UWB communication and transmit and receive RFRAME for distance measurement. In addition, the electronic device may check the number N of STS segments included in the frame. STS .

[0212] When the electronic device according to the embodiment determines N in operation S1621 STS =2 (or based thereon), in operation S1623, the electronic device may measure the ranging result value by using the first STS segment. , and by using the second STS segment to measure the ranging result value .

[0213] When the electronic device according to the embodiment determines N in operation S1631 STS =3 (or based thereon), in operation S1633, the electronic device may measure the ranging result value by using the first STS segment. , by using the second STS segment to measure the ranging result value , and by using the third STS segment to measure the ranging result value .

[0214] When the electronic device according to the embodiment determines N in operation S1641 STS =4, in operation S1643, the electronic device can measure by using the first STS segment , measured by using the second STS segment , measured by using the third STS segment , and by using the fourth STS segment to measure .

[0215] In operation S1650, the electronic device may determine whether a difference between the measured distance measurement result values ​​is equal to or greater than a threshold value.

[0216] When there is a case where the difference between the measured distance measurement result values ​​is equal to or greater than the threshold value, in operation S1660, the electronic device according to the embodiment may determine that an attack is detected and stop the authentication process. When there is no case where the difference between the measured distance measurement result values ​​is equal to or greater than the threshold value, in operation S1670, the electronic device may determine that an attack is not detected and continue the authentication process to grant access rights to another device.

[0217] according to Fig.16a The method of performing ranging integrity check in the illustrated embodiment can reduce the probability of successful attacks.

[0218] For example, when i is a value selected from {1, 2, 3, 4}, assuming that the attacker's success probability of early path insertion attack on the STS segment with index i is In this case, although the success probability of an attack by an attacker in a general environment where only one STS segment is used for ranging is However, when the integrity check is performed on the ranging value measured using two STS fragments according to the embodiment, the success probability of the attack by the attacker can be reduced to .assumed is the probability that the range value measured using the first STS segment satisfies the following condition: The ranging value measured using the second STS segment The difference between the two is equal to or less than the threshold .

[0219] When an integrity check is performed on a ranging value measured using three STS segments according to an embodiment, the success probability of an attack by an attacker can be reduced to When the integrity check is performed on the ranging value measured using four STS segments according to the embodiment, the success probability of the attack by the attacker can be reduced to That is, when the number of STS segments used for ranging increases, the ranging security level of the STS also increases.

[0220] According to an embodiment, the reliability of the ranging result value may vary depending on the STS segment in consideration of the processing speed of the device involved in the ranging. Fig.16a The criterion of whether an attack is detected in operation S1650 Apply different values. By executing Fig.16a According to the method shown, the electronic device according to the embodiment can use multiple STS segments to not only improve the ranging accuracy but also enhance the ranging security.

[0221] According to an embodiment, in addition to the method of using multiple STS segments to obtain multiple ranging values, a method of performing multiple continuous ranging processes may also be used. The electronic device according to the embodiment may be based on the multiple ranging values ​​obtained through the multiple continuous ranging processes such as Fig.16a The integrity check is performed as in operation S1670 of . The interval between consecutive ranging processes may be set to be equal to or less than the coherence time, and thus channel switching due to movement of the electronic device may be prevented.

[0222] The electronic device according to the embodiment may perform ranging calibration by using the STS segment. Fig.16b , the electronic device can perform ranging to obtain a ranging result value for each STS segment (i is in {1, ..., K}, N sts =K, and K is in {2, 3, 4}). The electronic device may improve the ranging accuracy of the HRP-ERDEV by performing ranging calibration based on the K ranging values.

[0223] Fig.16b Operations S1610, S1621, S1623, S1631, S1633, S1641, S1643, and S1650 correspond to Fig.16a Operations S1610, S1621, S1623, S1631, S1633, S1641, S1643, and S1650 are described herein, and thus a repeated description thereof may not be provided herein.

[0224] In operation S1650, the electronic device according to an embodiment may determine whether a difference between the measured ranging result values ​​is equal to or greater than a threshold value.

[0225] When the difference between the measured distance measurement result values ​​is equal to or greater than the threshold value (or based thereon), in operation S1680, the electronic device may determine that the distance measurement result value is affected by interference and stop the distance measurement calibration process. When the difference between the measured distance measurement result values ​​is not equal to or greater than the threshold value (or based thereon), in operation S1690, the electronic device may determine that the distance measurement result value is not greatly affected by interference and perform the distance measurement calibration process.

[0226] To perform the ranging calibration process, the electronic device may measure the ranging result value in operation S1690. (K is in {2, 3, 4}), and then determining whether any of the measured ranging result values ​​shows a large difference from other values ​​by k-means clustering, etc. When any of the measured ranging result values ​​shows a large difference from other values, the electronic device may determine that the ranging result value is greatly affected by interference and exclude the ranging result value from the calibration process.

[0227] For example, Fig.16c As shown, when N STS =4 and from the distance measurement result value With other values , and When a large difference is shown, the electronics can determine is a value greatly affected by interference. Therefore, it can be excluded from the ranging calibration process .

[0228] The electronic device may use the range calibration by performing range calibration according to the following [Equation 5] by using M range values ​​that are not excluded from the K range values. As the final ranging result value.

[0229] In [Equation 5], (i in {1, ..., M}) is a parameter closely related to a ranging channel and noise, and is determined as a value optimized based on an expected utility function when implementing an electronic device.

[0230] [Equation 5] .

[0231] Both preamble-based ranging and STS-based ranging can be applied to Fig.16b The ranging method of the embodiment shown. Fig.16b The illustrated embodiment can be used with Fig.10b or Fig.14That is, according to an embodiment, in order to calculate two ranging values ​​through two SS-TWR processes included in DS-TWR, STS-based ranging may be performed, preamble-based ranging may be performed, or STS-based ranging and preamble-based ranging may be performed together.

[0232] According to the embodiment, the electronic device can be flexibly used Figure 9a , Fig.10a , Fig.12 and Fig.16a In addition, according to the embodiment, the electronic device can flexibly use Figure 9b , Fig.10b , Fig.14 and Fig.16b The distance measurement method shown.

[0233] According to an embodiment, the electronic device may variably use the number of frames for DS-TWR and the number of STS segments for ranging using the STS segments.

[0234] When DS-TWR is performed using four frames instead of three or using two or more STS segments according to an embodiment, the ranging security level and ranging accuracy are increased, but time and energy efficiency are reduced because more resources are required for one ranging process.

[0235] Therefore, ranging parameters including the number of frames for DS-TWR, the number of STS segments, and the ranging period may be variably determined as necessary.

[0236] Fig.17 17 is a diagram showing a process in which a plurality of electronic devices determine ranging parameters. The controller device 1701 and the controlled device 1702 may perform ranging by communicating with each other.

[0237] refer to Fig.17 In operation S1710, the controller device 1701 and the controlled device 1702 according to the embodiment may perform ranging. The controller device 1701 and the controlled device 1702 may perform ranging based on predetermined ranging parameters. The ranging parameters may include at least one of a ranging scheme, a ranging cycle, the number of frames used for ranging, or the number of STS segments included in a frame. For example, the controller device 1701 and the controlled device 1702 may perform ranging by using DS-TWR or STS segments.

[0238] In operation S1720 , the controller device 1701 according to an embodiment may determine to change a ranging parameter.

[0239] For example, when determining that the ranging security level or ranging accuracy is to be improved, the controller device 1701 may increase the number of frames used for ranging or the number of STS segments included in the frame.

[0240] As an example, the controller device 1701 according to an embodiment may determine to change the number of frames used for DS-TWR. The controller device 1701 that transmits and receives three frames using DS-TWR may increase the number of frames used for DS-TWR to improve the ranging security level and ranging accuracy.

[0241] Although the ranging result value is obtained based on three frames using two SS-TWR result values, the controller device 1701 according to the embodiment may determine that the reliability of the ranging result value is low or a higher ranging security level and a higher ranging accuracy are required. When a higher ranging security level and a higher ranging accuracy are required, the controller device 1701 may increase the number of frames based on direct determination. Alternatively, the controller device 1701 may increase the number of frames by receiving a request from the controlled device 1702. The controlled device 1702 may request the controller device 1701 to increase the number of frames used for DS-TWR.

[0242] As another example, the controller device 1701 according to the embodiment may determine to change the number of STS segments. Although N STS segments are used to improve the ranging security level and ranging accuracy, the controller device 1701 may determine that the reliability of the ranging result value is low or a higher ranging security level and a higher ranging accuracy are required. When a higher ranging security level and a higher ranging accuracy are required, the controller device 1701 may increase the number of STS segments based on direct determination. Alternatively, the controller device 1701 may increase the number of STS segments by receiving a request from the controlled device 1702. The controlled device 1702 may request the controller device 1701 to increase the number of STS segments.

[0243] In operation S1730 , the controller device 1701 according to an embodiment may notify the controlled device 1702 of a change in the ranging parameter.

[0244] In operation S1740, the controller device 1701 and the controlled device 1702 may perform ranging again by using the changed ranging parameters.

[0245] Fig.18a and Fig.18b is a block diagram of an electronic device according to various embodiments. Fig.18a and Fig.18b Each electronic device shown may be an electronic device used as an initiator or responder in the various embodiments described above. Alternatively, Fig.18a and Fig.18bEach electronic device shown may be an electronic device used as a receiver or a transmitter in the various embodiments described above. Alternatively, Fig.18a and Fig.18b Each electronic device shown may be an electronic device used as a controller or a controlled device in the various embodiments described above.

[0246] refer to Fig.18a According to various embodiments, the electronic device 100 for performing UWB ranging may include a communicator 110 (eg, at least one communicator) and a processor 140 (eg, at least one processor). Fig.18a The electronic device 100 may include a greater number of components than those shown.

[0247] At least some of the operations and functions of the processor 140 described below may be performed by a plurality of processors. Fig.18a The electronic device 100 shown can perform the UWB ranging method according to various embodiments, and Figure 9a , Figure 9b , Fig.10a , Fig.10b , Fig.11 , Fig.12 , Figures 13a to 13c , Fig.14 , Fig.15 , Figures 16a to 16c The description provided may be applied thereto. Therefore, a repeated description thereof may not be provided herein.

[0248] The communicator 110 according to the embodiment may communicate with another device or network in a wired or wireless manner. To this end, the communicator 110 may include a communication module that supports at least one of various wired / wireless communication methods. For example, the communication module may be a chipset or a sticker / barcode including information required for communication (e.g., a sticker including a near field communication (NFC) tag).

[0249] Wireless communication may include, for example, at least one of cellular communication, Wireless Fidelity (Wi-Fi), Wi-Fi Direct, Bluetooth, UWB, or NFC. Wired communication may include, for example, at least one of Universal Serial Bus (USB) or High Definition Multimedia Interface (HDMI).

[0250] In an embodiment, the communicator 110 may include a communication module for short-range communication. For example, in addition to the above-mentioned UWB, Wi-Fi, Wi-Fi Direct, Bluetooth, and NFC, the communicator 110 may also include a communication module for various types of short-range communication such as infrared communication, magnetic secure transmission (MST), and magnetic secure communication.

[0251] The processor 140 controls the overall operation of the electronic device 100 and may include at least one processor such as a central processing unit (CPU) or a graphic processing unit (GPU). The processor 140 may control other elements included in the electronic device 100 to perform UWB ranging.

[0252] The communicator 110 may transmit at least one frame for ranging to at least one other electronic device and receive at least one frame for ranging from at least one other electronic device. The processor 140 may obtain a first ranging value and a second ranging value based on at least one frame, and perform an integrity check or ranging calibration based on a result of comparing the first ranging value and the second ranging value.

[0253] The method for the processor 140 to obtain the distance measurement value has been described above in conjunction with Figure 6 and Figure 7 The method in which the processor 140 performs integrity check or distance measurement calibration based on the result of comparing the distance measurement value has been described above in conjunction with Figure 9a , Figure 9b , Fig.10a , Fig.10b , Fig.11 , Fig.12 , Figures 13a to 13c , Fig.14 , Fig.15 and Figures 16a to 16c The description has been made, so it may not be repeated here.

[0254] For integrity check to perform secure UWB ranging, the processor 140 may calculate a first ranging value based on timing determined using an STS included in at least one frame, and calculate a second ranging value based on timing information included in a preamble included in at least one frame.

[0255] As an example, when the electronic device 100 is an initiator device for performing SS-TWR, the communicator 110 may send a first frame and receive a second frame in response to the first frame. The processor 140 may obtain a first ranging value and a second ranging value. The processor 140 may calculate the first ranging value based on the timing determined using the STS included in the first frame and the second frame. The processor 140 may determine the timing for calculating the first ranging value based on the peak value of the cross-correlation of the pre-calculated STS and the STS included in the second frame. The processor 140 may calculate the second ranging value based on the timing information included in the preamble included in the first frame and the second frame.

[0256] As another example, when the electronic device 100 is a responder device for performing DS-TWR, the communicator 110 may receive a first frame, send a second frame in response to the first frame, and receive a third frame in response to the second frame. The processor 140 may calculate a first ranging value based on timing determined using an STS included in the first frame, the second frame, and the third frame, and calculate a second ranging value based on timing information included in the preamble included in the first frame, the second frame, and the third frame.

[0257] Meanwhile, for integrity check to perform secure UWB ranging, the electronic device 100 according to another embodiment may perform two SS-TWR processes among two round-trip measurement processes included in DS-TWR.

[0258] As an example, when the electronic device 100 is an initiator device for performing DS-TWR, the communicator 110 may transmit a first frame, receive a second frame in response to the first frame, and transmit a third frame in response to the second frame. The processor 140 may calculate a first ranging value according to a timing determined based on the first frame and the second frame, and receive a second ranging value calculated according to a timing determined based on the second frame and the third frame from the responder device. The processor 140 may perform an integrity check on the ranging operation by comparing the first ranging value calculated by the first round-trip measurement process with the second ranging value calculated by the second round-trip measurement process.

[0259] As another example, when the electronic device 100 is a responder device for performing DS-TWR, the communicator 110 may receive a first frame, send a second frame in response to the first frame, and receive a third frame in response to the second frame. The processor 140 may receive a first ranging value calculated according to a timing determined based on the first frame and the second frame from the initiator device, and calculate a second ranging value according to a timing determined based on the second frame and the third frame. The processor 140 may perform an integrity check on the ranging operation by comparing the first ranging value calculated by the first round-trip measurement process with the second ranging value calculated by the second round-trip measurement process.

[0260] Meanwhile, for integrity check to perform secure UWB ranging, the electronic device 100 according to still another embodiment may compare a plurality of ranging values ​​calculated using a plurality of STS segments.

[0261] The processor 140 according to an embodiment may calculate a first ranging value based on timing determined using a first STS segment included in at least one frame, and calculate a second ranging value based on timing information included in a second STS segment included in at least one frame.

[0262] The processor 140 according to an embodiment may perform an integrity check based on a result of comparing the first ranging value and the second ranging value. When the difference between the first ranging value and the second ranging value is included in the threshold range, the processor 140 may determine that the ranging is properly performed by the device to which the access right is granted. When the difference between the first ranging value and the second ranging value is less than the threshold, the processor 140 may continue the authentication process to grant access rights to other electronic devices.

[0263] The processor 140 according to the embodiment may obtain a third ranging value based on the first ranging value and the second ranging value, and grant access rights based on the third ranging value. When the difference between the first ranging value and the second ranging value is less than a threshold, the processor 140 may obtain a third ranging value based on the first ranging value and the second ranging value, and grant access rights based on the third ranging value.

[0264] The third ranging value may be a weighted sum of the first ranging value and the second ranging value. For example, when the difference between the first ranging value and the second ranging value is included in the threshold range, the processor 140 may determine that ranging is properly performed by the device to which the access right is granted.

[0265] In order to improve the ranging accuracy, the processor 140 may perform ranging calibration based on the first ranging value and the second ranging value to obtain a third ranging value. The third ranging value may be calculated according to, for example, [Equation 3] to [Equation 5] above. A repeated description thereof may not be provided herein. The processor 140 may grant access rights to other electronic devices based on the third ranging value.

[0266] Otherwise, when the difference between the first ranging value and the second ranging value is not included in the threshold range, the processor 140 may determine that the attack is made by a device to which access rights are not granted. When the difference between the first ranging value and the second ranging value is equal to or greater than the threshold, the processor 140 may stop the authentication process. When the difference between the first ranging value and the second ranging value is equal to or greater than the threshold, the processor 140 may stop the ranging calibration process.

[0267] The processor 140 according to an embodiment may determine to change the ranging parameters based on the result of the integrity check. The ranging parameters may include at least one of a ranging scheme, a ranging cycle, the number of frames used for ranging, or the number of STS segments included in a frame.

[0268] For example, when determining to improve the ranging security level or ranging accuracy, the processor 140 according to an embodiment may increase the number of frames used for ranging or the number of STS segments included in the frame. The communicator 110 may notify other electronic devices of changes in ranging parameters.

[0269] At the same time, if Fig.18bAs shown, the electronic device 100 according to various embodiments may further include a memory 120 , a security element 130 , and a bus 150 for connecting other elements.

[0270] To perform UWB ranging according to various embodiments, processor 140 may execute a program stored in memory 120, read a file stored in memory 120, or store a new file in memory 120 and secure element 130. Instructions stored in memory 120 may be executed by processor 140 to implement embodiments.

[0271] Programs (e.g., applications) and various types of data (e.g., files) may be installed and stored in the memory 120. The processor 140 may access and use the data stored in the memory 120, or store new data in the memory 120. In an embodiment, programs and data for securely and accurately performing ranging may be installed and stored in the memory 120.

[0272] The security element 130 is an independent secure storage device of the electronic device 100 and is a secure area that can be accessed by only authorized applications. The security element 130 can be configured to be physically isolated from other hardware elements. According to an embodiment, the security element 130 may include, for example, an embedded security element (eSE), a universal integrated circuit card (UICC), a secure digital (SD) card, or an embedded UICC (eUICC), but is not limited thereto.

[0273] The security element 130 may include a memory and a processor, and the processor of the security element 130 may control the overall operation of the security element 130. The processor of the security element 130 may control the elements included in the security element 130 to securely perform UWB ranging. For example, the processor of the security element 130 may run a program stored in the memory of the security element 130, read data stored in the memory of the security element 130, or store new data in the memory of the security element 130. The program stored in the memory of the security element 130 may be run by the processor of the security element 130 to implement the embodiment. According to the embodiment, a program and data for securely controlling access to the device by an integrity check of the ranging operation may also be installed and stored in the security element 130.

[0274] The bus 150 is a shared data path for connecting the communicator 110 , the memory 120 , the secure element 130 , and the processor 140 .

[0275] The electronic device 100 according to various embodiments can improve the ranging security of ERDEV using HRP UWB PHY by performing an integrity check on the ranging value. The electronic device 100 can improve the ranging security level by detecting attacks (e.g., relay attacks or malicious attacks) using early path insertion strategies. Therefore, according to various embodiments, the security level of UWB based on UWB ranging can also be improved.

[0276] In addition, the electronic device 100 according to various embodiments may improve ranging accuracy by performing ranging calibration on ranging values. The aforementioned various embodiments may be used to improve ranging accuracy of ERDEV in consideration of HRP UWB PHY.

[0277] The embodiments may be implemented as a software program comprising instructions stored in a computer-readable storage medium.

[0278] The computer is a device that can fetch instructions stored in a storage medium and operate according to the embodiments of the present disclosure based on the fetched instructions, and may include the electronic device according to the embodiments.

[0279] The computer-readable storage medium may be provided in the form of a non-transitory storage medium. When the storage medium is "non-transitory", it means that the storage medium does not include a signal and is tangible, and does not limit data to being semi-permanently or temporarily stored in the storage medium.

[0280] The electronic device or method according to the embodiment may be included and provided in a computer program product.The computer program product may be traded between a seller and a buyer.

[0281] A computer program product may include a software program and a computer-readable storage medium in which the software program is stored. For example, a computer program product may include a product distributed electronically in the form of a software program (e.g., a downloadable application) via a manufacturer of an electronic device or an electronic marketplace. For electronic distribution, at least a portion of the software program may be stored in a storage medium or temporarily generated. In this case, the storage medium may be a storage medium of a manufacturer's server, a server of an electronic marketplace, or a relay server that temporarily stores the software program.

[0282] In a system including a server and a terminal (e.g., a backend server and a device), the computer program product may include a storage medium of the server or the terminal. Otherwise, when there is a third device (e.g., a smart phone) connected to the server or the terminal, the computer program product may include a storage medium of the third device. Alternatively, the computer program product may include the software program itself that is sent from the server to the terminal or the third device or from the third device to the terminal.

[0283] In this case, one of the server, the terminal, and the third device may run the computer program product to perform the method according to the embodiment. Alternatively, two or more of the server, the terminal, and the third device may run the computer program product to perform the method according to the embodiment in a distributed manner.

[0284] For example, a server (eg, a cloud server or an artificial intelligence (AI) server) may execute a computer program product stored in the server to control a terminal connected to the server to perform a method according to an embodiment.

[0285] As another example, the third device may run a computer program product to control a terminal connected to the third device to execute the method according to the embodiment. Specifically, for example, the third device may remotely control an electronic device to execute the method according to the embodiment.

[0286] When the third device runs the computer program product, the third device may download the computer program product from the server and run the downloaded computer program product. Alternatively, the third device may run the computer program product provided in a preloaded state to perform the method according to the embodiment.

[0287] By performing integrity check on the ranging value according to various embodiments, the security level of ranging can be improved, thereby also improving the security level of UWB services. In addition, by performing calibration on the ranging value according to various embodiments, the accuracy of ranging can be improved.

Claims

1. A method for performing ranging using ultra-wideband (UWB) by an electronic device in a wireless communication system, the method comprising: receiving a first ranging frame RFRAME from another electronic device; receiving a second RFRAME from the other electronic device; Using the first RFRAME to obtain a first ranging result based on a first single-sided two-way ranging SS-TWR, and using the second RFRAME to obtain a second ranging result based on a second SS-TWR; as well as Based on a result of comparing the first ranging result and the second ranging result, an integrity check is performed.

2. The method according to claim 1, wherein: The first ranging result is obtained by measuring the round trip delay of the first RFRAME, and The second ranging result is obtained by measuring the round-trip delay of the second RFRAME.

3. The method according to claim 1, wherein: Performing the integrity check includes: determining that an attack has been performed based on a difference between the first ranging result and the second ranging result being greater than or equal to a threshold; and Based on the difference between the first ranging result and the second ranging result being smaller than the threshold, it is determined that the integrity check is passed.

4. An electronic device for performing ranging by using an ultra-wideband (UWB) in a wireless communication system, the electronic device comprising: a communicator configured to receive a first ranging frame RFRAME and a second RFRAME from another electronic device; as well as at least one processor, the at least one processor being configured to: using the first RFRAME to obtain a first ranging result based on a first single-sided two-way ranging SS-TWR, and using the second RFRAME to obtain a second ranging result based on a second SS-TWR, and Based on a result of comparing the first ranging result and the second ranging result, an integrity check is performed.

5. The electronic device according to claim 4, wherein: The first ranging result is obtained by measuring the round trip delay of the first RFRAME, and The second ranging result is obtained by measuring the round-trip delay of the second RFRAME.

6. The electronic device according to claim 4, wherein: The at least one processor is further configured to: determining that an attack has been performed based on a difference between the first ranging result and the second ranging result being greater than or equal to a threshold, and Based on the difference between the first ranging result and the second ranging result being smaller than the threshold, it is determined that the integrity check is passed.