5G broadcast signal data protection device for Beidou positioning enhancement

Abstract

The invention relates to a 5G broadcast signal data protection device for Beidou positioning enhancement, and belongs to the technical field of satellite navigation and mobile communication fusion. The device comprises a 5G radio frequency front end, a 5G physical layer processor, a 5G broadcast packet filtering firewall, a 5G protocol stack processor, a positioning resolving module, a safety control unit, a Beidou radio frequency front end, a Beidou receiver, a nonvolatile memory and an RAM memory. According to the invention, a special firewall is embedded between a 5G physical layer and a protocol stack for the first time, and full-link data protection from a signal receiving end to a positioning resolving end is realized; the firewall processing time delay is compressed to a millisecond level through a special hardware accelerator, and the real-time requirement of Beidou positioning is met; the 5G baseband, the Beidou receiver and the security module are integrated into one single chip, so that the hardware cost and power consumption are reduced, and the system is suitable for large-scale deployment scenes such as the Internet of Things and the Internet of Vehicles.

Description

Technical Field

[0001] This invention belongs to the field of satellite navigation and mobile communication integration technology, specifically relating to a 5G broadcast signal data protection device for BeiDou positioning enhancement. Background Technology

[0002] 1. Current Status of BeiDou Positioning Augmentation Technology The BeiDou Navigation Satellite System achieves global coverage and high-precision positioning through a combination of geostationary orbit (GEO), inclined geosynchronous orbit (IGSO), and medium Earth orbit (MEO) satellites. To further improve positioning accuracy, differential correction data (such as ionospheric delay and clock bias) needs to be provided by ground-based augmentation systems (e.g., 5G broadcast signals). However, 5G broadcast signals may face the following security risks during transmission: (1) Data tampering: Malicious attackers may forge or tamper with the positioning correction data in 5G broadcasts, resulting in deviations in BeiDou positioning results; (2) Signal interference: By injecting noise or false signals, the normal reception of 5G broadcast signals is interfered with, reducing the availability of positioning; (3) Privacy leaks: Unauthorized access to 5G broadcast data may leak user location information and cause privacy and security issues.

[0003] 2. Deficiencies in existing technology (1) Lack of end-to-end protection: Traditional 5G protocol stacks (such as LTE / NR protocol stacks) have not designed dedicated security mechanisms for BeiDou positioning enhancement scenarios, and rely solely on upper-layer encryption (such as TLS / SSL) which is difficult to resist physical layer attacks; (2) Insufficient real-time performance: Existing firewall solutions are mostly deployed at the network layer or application layer, which cannot filter physical layer signals in real time and cannot meet the millisecond-level latency requirements of BeiDou positioning. (3) Low hardware integration: In the 5G and BeiDou fusion chip, the security module and the baseband processing module are designed independently, which increases hardware cost and power consumption. Most existing 5G+BeiDou terminals adopt a discrete design (5G module and BeiDou receiver are independent), resulting in high data fusion latency, which makes it difficult to meet the real-time positioning requirements. Summary of the Invention (a) Technical problems to be solved The technical problem to be solved by the present invention is how to provide a 5G broadcast signal data protection device for BeiDou positioning enhancement, so as to solve the problems that existing 5G+BeiDou terminals mostly adopt a discrete design, have high data fusion latency, are difficult to meet real-time positioning requirements, and lack end-to-end protection.

[0004] (II) Technical Solution To address the aforementioned technical problems, this invention proposes a 5G broadcast signal data protection device for BeiDou positioning enhancement. The device comprises: a 5G radio frequency front-end, a 5G physical layer processor, a 5G broadcast packet filtering firewall, a 5G protocol stack processor, a positioning calculation module, a security control unit, a BeiDou radio frequency front-end, a BeiDou receiver, a non-volatile memory, and a RAM memory. The 5G RF front end is used to process 5G RF signals, performing amplification, mixing, filtering, and module digital conversion. The 5G physical layer processor consists of a dedicated digital circuit accelerator, or a combination of an accelerator and a general-purpose processor, and is used for demodulation and decoding of 5G digital signals. The 5G protocol stack processor consists of a dedicated digital circuit accelerator, or a combination of an accelerator and a general-purpose processor, and is used for 5G protocol stack processing; it supports the 5G NR standard, receives and demodulates BeiDou augmentation information, and obtains 5G augmentation information and 5G positioning data. The 5G broadcast packet filtering firewall module is located between the 5G physical layer processor and the 5G protocol stack processor, and is used to perform security inspection on BeiDou enhanced information data packets. The BeiDou radio frequency front-end is used for processing BeiDou radio frequency signals, including amplification, mixing, filtering, and analog-to-digital conversion; The BeiDou receiver is used for baseband processing of BeiDou signals, supports BeiDou-3 signals, and outputs raw pseudorange and carrier phase data. The positioning calculation module integrates 5G enhanced information, 5G positioning data and BeiDou raw data to calculate the final positioning result; The security control unit is used for dynamic policy configuration and key management of the entire data protection device; The non-volatile memory is a shared memory in the hardware solution, storing the configuration information of the packet filtering firewall and supporting OTA upgrades; multi-frequency observation data, differential correction parameters; and the firmware code for the positioning solution module. RAM is used for temporary storage of instructions and data when the system is working.

[0005] (III) Beneficial Effects This invention proposes a 5G broadcast signal data protection device for BeiDou positioning enhancement. The invention provides a 5G broadcast signal data protection device for BeiDou positioning enhancement, including the following innovative points: The first innovation lies in end-to-end security protection, which for the first time embeds a dedicated firewall between the 5G physical layer and the protocol stack to achieve full-link data protection from the signal receiving end to the positioning and calculation end.

[0006] The second innovation lies in the low-latency hardware design, which uses a dedicated hardware accelerator to compress the firewall's processing latency to the millisecond level, thus meeting the real-time requirements of BeiDou positioning.

[0007] The third innovation lies in the highly integrated all-in-one chip design, which integrates the 5G baseband, Beidou receiver and security module into a single chip, reducing hardware costs and power consumption, and is suitable for large-scale deployment scenarios such as the Internet of Things and the Internet of Vehicles.

[0008] The beneficial effects of the technical solution of this invention are as follows: (1) Embedded firewalls process data in real time, block data completely, and have better security and real-time performance than external solutions.

[0009] (2) Ensure the security of 5G broadcast enhancement signals and ensure that BeiDou positioning is not interfered with. Attached Figure Description

[0010] Figure 1 This is a block diagram of the 5G broadcast signal data protection device for BeiDou positioning enhancement according to the present invention; Figure 2 This is a schematic diagram of a packet filtering firewall module; Figure 3 Flowchart for enhanced positioning fusion calculation. Detailed Implementation

[0011] To make the objectives, contents, and advantages of the present invention clearer, the specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings and examples.

[0012] This invention belongs to the field of satellite navigation and mobile communication integration technology, specifically involving a BeiDou positioning enhancement integrated chip solution based on 5G broadcast. By embedding a packet filtering firewall between the 5G physical layer and the protocol stack, it provides real-time data security protection for 5G broadcast signals (such as SIBpos signals), improving the reliability and anti-interference capability of BeiDou positioning enhancement. Combined with 5G positioning information and BeiDou raw observation data, it achieves a high-precision and high-security integrated communication and positioning service.

[0013] (1) System Architecture This invention provides a 5G broadcast signal data protection device for BeiDou positioning enhancement. The device comprises: a 5G radio frequency front-end, a 5G physical layer processor, a 5G broadcast packet filtering firewall, a 5G protocol stack processor, a positioning calculation module, a security control unit, a BeiDou radio frequency front-end, a BeiDou receiver, non-volatile memory, and RAM memory. The 5G physical layer processor and the 5G protocol stack processor constitute a 5G baseband chip. The 5G baseband chip, BeiDou receiver, 5G broadcast packet filtering firewall, and security control unit are integrated into a single chip.

[0014] The 5G RF front end is used to process 5G RF signals, performing amplification, mixing, filtering, and module digital conversion.

[0015] The 5G physical layer processor consists of a dedicated digital circuit accelerator, or a combination of an accelerator and a general-purpose processor, and is used for physical layer processing such as demodulation and decoding of 5G digital signals. The 5G protocol stack processor, consisting of a dedicated digital circuit accelerator or a combination of an accelerator and a general-purpose processor, is used for 5G protocol stack processing. It supports the 5G NR standard, receives and demodulates BeiDou augmentation information (such as SIBpos signals), and obtains 5G augmentation information and 5G positioning data.

[0016] The 5G broadcast packet filtering firewall module is located between the 5G physical layer processor and the 5G protocol stack processor, and is used to perform security inspection on data packets such as BeiDou augmentation information (e.g., SIBpos signals).

[0017] The BeiDou radio frequency front-end is used for processing BeiDou radio frequency signals, including amplification, mixing, filtering, and analog-to-digital conversion.

[0018] The BeiDou receiver is used for baseband processing of BeiDou signals, supports BeiDou-3 signals (B1I / B1C / B2a / B2I / B2b / B3I), and outputs raw pseudorange and carrier phase data.

[0019] The positioning calculation module integrates 5G enhanced information, 5G positioning data and BeiDou raw data to calculate the final positioning result.

[0020] The security control unit is used for dynamic policy configuration and key management of the entire data protection device.

[0021] Non-volatile memory is the shared memory in the hardware solution. It mainly stores the configuration information of the packet filtering firewall and supports OTA upgrades; multi-frequency observation data (such as pseudorange and carrier phase of B1I / B1C / B2a / B2I / B2b / B3I), differential correction parameters (such as RTK base station data); firmware code for the positioning calculation module and other important fixed data of the system.

[0022] RAM memory is mainly used for temporary storage of instructions and data when the system is working.

[0023] (2) Design of 5G broadcast packet filtering firewall module This invention provides a 5G broadcast packet filtering firewall module, comprising: a source verification unit, a format compliance check unit, a content compliance check unit, a data integrity verification unit, and a real-time traffic control and malicious attack defense unit, located between the 5G physical layer processor and the 5G protocol stack processor, performing packet-by-packet detection on received 5G broadcast signals (such as SIBpos signals) to filter illegal or tampered data.

[0024] The 5G broadcast packet filtering firewall module provided by this invention can achieve the following core functions: Source verification unit: Verifies the sender's identity of the 5G broadcast signal based on the source address or digital certificate, rejects data sent by unauthorized nodes, and checks whether key fields such as protocol type, port number, and IP address meet expectations. If non-standard protocols (such as forged GTP-U tunnel packets) or abnormal ports (such as unauthorized FTP ports) are detected, the data is discarded directly to prevent malicious data from entering the protocol stack.

[0025] Format compliance check unit: Checks whether the IP packet header length and TCP sequence number are valid. If the format is incorrect, it may be an attack packet (such as a fragmentation attack), which the firewall can block to prevent protocol stack crashes.

[0026] Content compliance check unit: Filters abnormal location correction parameters (such as ionospheric delay values ​​exceeding a reasonable range) based on preset rules (such as data range and timestamp validity). These rules include: comparison with preset parameter range thresholds; saving historical smoothing parameters, comparing each single-point value with historical smoothing parameters over a period of time, and ensuring the difference does not exceed a preset threshold.

[0027] Data integrity verification unit: Calculates the digest value of the received data using a hash algorithm, compares it with the pre-stored valid digest value, and detects data tampering.

[0028] Real-time traffic control and malicious attack defense unit: Limits the amount of 5G broadcast data allowed to pass through per unit time to prevent malicious flooding attacks. The 5G physical layer processor, 5G protocol stack processor, and BeiDou receiver, as interfaces between the terminal and the network, may become targets of DDoS attacks (such as SYN Flood and UDP Flood). The 5G broadcast packet filtering firewall module discards abnormal traffic through rate limiting or connection state tracking. The 5G broadcast packet filtering firewall module can filter data packets based on a rule base (such as blacklisted IPs and malicious domains) to prevent the terminal from being implanted with malware or sensitive data from being leaked.

[0029] The packet filtering firewall module provided by this invention is implemented in the following hardware: Dedicated hardware accelerators (such as ASICs, DSPs, or FPGAs) are used to perform highly complex operations such as hash calculations and certificate verification, ensuring that the firewall processing latency is less than 1ms and meeting the real-time requirements of BeiDou positioning.

[0030] (3) Safety control unit design This invention provides a security control unit consisting of dynamic policy configuration and key management. Dynamic policy configuration supports remote updates of firewall filtering rules (such as adding trusted certificates or adjusting data range thresholds) via preset or over-the-air (OTA) technology, adapting to the security needs of different application scenarios. Key management integrates a hardware security module, storing the root key and certificate, and supports national cryptographic algorithms (such as SM2 / SM3) to ensure key security.

[0031] (4) Work process The main working process of a 5G broadcast signal data protection device for BeiDou positioning enhancement is as follows: S1, 5G signal reception and demodulation The 5G radio frequency front-end receives 5G broadcast signals containing SIBpos, down-converts them, and then inputs them into the 5G physical layer processor to complete demodulation and channel decoding.

[0032] S2 Packet Filtering Firewall Detection The 5G physical layer processor sends SIBpos packets to the 5G broadcast packet filtering firewall, where integrity verification, source verification, and content filtering are performed sequentially. Illegal data is discarded, and legitimate data is forwarded to the 5G protocol stack processor.

[0033] S3 and 5G location information extraction The 5G protocol stack processor decapsulates SIBpos data and extracts parameters such as ionospheric delay and clock bias. At the same time, it measures TOA / RSSI through the 5G base station, calculates preliminary positioning results, and obtains 5G enhancement information and 5G positioning data. S4, BeiDou raw data acquisition The BeiDou radio frequency front-end and BeiDou receiver capture BeiDou satellite signals and output BeiDou raw observation data such as pseudorange and carrier phase.

[0034] S5, Enhanced Positioning Fusion Solution The 5G enhanced information, 5G positioning data and BeiDou raw data are input into the positioning solution module. The weighted least squares (WLS) algorithm is used to minimize the sum of squared errors between the observed and predicted values ​​to optimize the position estimation and calculate the final positioning coordinates and accuracy factor.

[0035] Example 2: (1) A 5G broadcast signal data protection device for BeiDou positioning enhancement, integrating a 5G radio frequency front-end, a 5G baseband (5G physical layer processor, 5G protocol stack processor), a 5G broadcast packet filtering firewall, a positioning calculation module, a BeiDou radio frequency front-end, a BeiDou receiver, a non-volatile memory and a RAM memory, wherein the 5G broadcast packet filtering firewall module is located in the data link between the 5G physical layer and the 5G protocol stack.

[0036] The packet filtering firewall module includes an integrity verification unit, a source verification unit, a content filtering unit, and a real-time traffic control unit.

[0037] The positioning solution module integrates 5G broadcast enhancement information, 5G positioning data and BeiDou raw data using the weighted least squares method to output high-precision positioning results.

[0038] The packet filtering firewall module is implemented using an ASIC hardware accelerator, with a processing latency of ≤0.5ms.

[0039] This invention provides a 5G broadcast signal data protection device for BeiDou positioning enhancement, including the following innovative features: The first innovation lies in end-to-end security protection, which for the first time embeds a dedicated firewall between the 5G physical layer and the protocol stack to achieve full-link data protection from the signal receiving end to the positioning and calculation end.

[0040] The second innovation lies in the low-latency hardware design, which uses a dedicated hardware accelerator to compress the firewall's processing latency to the millisecond level, thus meeting the real-time requirements of BeiDou positioning.

[0041] The third innovation lies in the highly integrated all-in-one chip design, which integrates the 5G baseband, Beidou receiver and security module into a single chip, reducing hardware costs and power consumption, and is suitable for large-scale deployment scenarios such as the Internet of Things and the Internet of Vehicles.

[0042] The beneficial effects of the technical solution of this invention are as follows: (1) Embedded firewalls process data in real time, block data completely, and have better security and real-time performance than external solutions.

[0043] (2) Ensure the security of 5G broadcast enhancement signals and ensure that BeiDou positioning is not interfered with.

[0044] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A 5G broadcast signal data protection device for BeiDou positioning enhancement, characterized in that, The device includes: a 5G radio frequency front-end, a 5G physical layer processor, a 5G broadcast packet filtering firewall, a 5G protocol stack processor, a positioning calculation module, a security control unit, a BeiDou radio frequency front-end, a BeiDou receiver, non-volatile memory, and RAM memory. The 5G RF front end is used to process 5G RF signals, performing amplification, mixing, filtering, and module digital conversion. The 5G physical layer processor consists of a dedicated digital circuit accelerator, or a combination of an accelerator and a general-purpose processor, and is used for demodulation and decoding of 5G digital signals. The 5G protocol stack processor consists of a dedicated digital circuit accelerator, or a combination of an accelerator and a general-purpose processor, and is used for 5G protocol stack processing; it supports the 5G NR standard, receives and demodulates BeiDou augmentation information, and obtains 5G augmentation information and 5G positioning data. The 5G broadcast packet filtering firewall module is located between the 5G physical layer processor and the 5G protocol stack processor, and is used to perform security inspection on BeiDou enhanced information data packets. The BeiDou radio frequency front-end is used for processing BeiDou radio frequency signals, including amplification, mixing, filtering, and analog-to-digital conversion; The BeiDou receiver is used for baseband processing of BeiDou signals, supports BeiDou-3 signals, and outputs raw pseudorange and carrier phase data. The positioning calculation module integrates 5G enhanced information, 5G positioning data and BeiDou raw data to calculate the final positioning result; The security control unit is used for dynamic policy configuration and key management of the entire data protection device; Non-volatile memory is a shared memory in the hardware solution, which stores the configuration information of the packet filtering firewall and supports OTA upgrades; Multi-frequency observation data and differential correction parameters; Firmware code for the localization solution module; RAM is used for temporary storage of instructions and data when the system is working.

2. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 1, characterized in that, The 5G baseband chip, Beidou receiver, 5G broadcast packet filtering firewall and security control unit are integrated into a single chip.

3. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 1, characterized in that, The 5G broadcast packet filtering firewall module includes: a source verification unit, a format compliance check unit, a content compliance check unit, a data integrity verification unit, and a real-time traffic control and malicious attack defense unit. It is located between the 5G physical layer processor and the 5G protocol stack processor, and performs packet-by-packet detection on the received 5G broadcast signals to filter illegal or tampered data.

4. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, The source verification unit verifies the sender's identity of the 5G broadcast signal based on the source address or digital certificate, rejects data sent by unauthorized nodes, and checks whether the protocol type, port number, and IP address fields meet expectations. If a non-standard protocol or abnormal port is detected, it is discarded directly to prevent malicious data from entering the protocol stack.

5. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, The format compliance check unit checks whether the IP packet header length and TCP sequence number are valid. If the format is incorrect, it may be an attack packet, which the firewall can block to prevent the protocol stack from crashing.

6. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, The content compliance inspection unit filters and locates correction parameters for anomalies according to preset rules, including: comparing with preset parameter range thresholds; saving historical smoothing parameters, comparing each single point value with the smoothing parameters of a past period, and the difference between the comparisons cannot exceed the preset threshold.

7. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, The data integrity verification unit calculates the digest value of the received data using a hash algorithm, compares it with the pre-stored valid digest value, and detects data tampering.

8. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, The real-time flow control and malicious attack defense unit limits the amount of 5G broadcast data allowed to pass through per unit time to prevent malicious flooding attacks. The 5G physical layer processor, 5G protocol stack processor, and Beidou receiver, as interfaces between the terminal and the network, may become targets of DDoS attacks. The 5G broadcast packet filtering firewall module discards abnormal traffic through rate limiting or connection status tracking. The 5G broadcast packet filtering firewall module filters data packets based on a rule base to prevent the terminal from being implanted with malicious software or sensitive data from being leaked.

9. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in claim 3, characterized in that, In the security control unit, dynamic policy configuration supports remote updates of firewall filtering rules via preset or over-the-air (OTA) technology to adapt to the security needs of different application scenarios; key management integrates a hardware security module to store root keys and certificates, supports national cryptographic algorithms, and ensures key security.

10. The 5G broadcast signal data protection device for BeiDou positioning enhancement as described in any one of claims 1-9, characterized in that, The working process of this device includes: S1, 5G signal reception and demodulation The 5G radio frequency front-end receives 5G broadcast signals containing SIBpos, and after down-conversion by the radio frequency front-end, it is input into the 5G physical layer processor to complete demodulation and channel decoding. S2 Packet Filtering Firewall Detection The 5G physical layer processor sends SIBpos data packets to the 5G broadcast packet filtering firewall, which performs integrity verification, source verification, and content filtering in sequence; illegal data is discarded, and legitimate data is forwarded to the 5G protocol stack processor. S3 and 5G location information extraction The 5G protocol stack processor decapsulates SIBpos data and extracts ionospheric delay and clock bias parameters; at the same time, it measures TOA / RSSI through the 5G base station, calculates preliminary positioning results, and obtains 5G enhancement information and 5G positioning data. S4, BeiDou raw data acquisition The BeiDou radio frequency front-end and BeiDou receiver capture BeiDou satellite signals and output raw BeiDou observation data, including pseudorange and carrier phase. S5, Enhanced Positioning Fusion Solution The 5G enhanced information, 5G positioning data and BeiDou raw data are input into the positioning solution module. The weighted least squares (WLS) algorithm is used to minimize the sum of squared errors between the observed and predicted values ​​to optimize the position estimation and calculate the final positioning coordinates and accuracy factor.

Images