Interference with the operation of unmanned aerial vehicles

Abstract

A method for inducing a disturbance to operation of an unmanned aerial vehicle (UAV) in communication with a remote controller, the method including determining to induce a disturbance to operation of the UAV and transmitting one or more disturbance commands to the UAV, the one or more disturbance commands, when executed by the UAV, causing a unit of the UAV to malfunction, the malfunction inducing the disturbance to operation of the UAV.

Description

[Background technology]

[0001] Commercial Unmanned Aerial Vehicles (UAVs) are rapidly becoming more popular. By 2020, over 100 million UAVs are expected to be in use. Until a few years ago, UAVs were purely military aircraft. Today, commercial UAVs are widely available, relatively inexpensive, and feature the highest military-grade capabilities.

[0002] While most UAVs are used for legitimate and constructive purposes, many are used irresponsibly or maliciously - to endanger aircraft in airports, smuggle drugs and weapons into prisons, attack or harass influential politicians, and carry out terrorist acts.

[0003] Military counter-UAV technologies, typically based on radar detection, narrow beam RF jamming, or kinetic mitigation (missile, destructive laser beams), have been successfully deployed in offshore military installations and rural environments.

[0004] However, in various scenarios (even military scenarios) these techniques are not appropriate - for example, these techniques may not be suitable for urban environments or airports due to various risks, including but not limited to collateral damage.

[0005] There is an increasing demand to provide an efficient method for disrupting the operation of UAVs. Summary of the Invention [Means for solving the problem]

[0006] As described herein, systems, methods, and computer readable media may be provided.

[0007] A method may be provided for disrupting the operation of a UAV.

[0008] The embodiments of the present disclosure will be more fully understood and appreciated from the following detailed description taken in conjunction with the drawings, in which: [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 illustrates an example of a method. [Diagram 2] FIG. 1 illustrates an example of a method. [Diagram 3] FIG. 1 illustrates an example of a method. [Figure 4] FIG. 1 illustrates an example of a method. [Diagram 5] FIG. 1 illustrates an example of a method. [Figure 6] FIG. 1 illustrates an example of a jamming system, a UAV, and a remote controller. [Figure 7] FIG. 1 illustrates an example of a jamming system, a UAV, and a remote controller. [Figure 8] FIG. 1 illustrates an example of a user of a communication link or network. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] In the following detailed description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. However, it will be understood by those skilled in the art that the present invention may be practiced without these specific details. In other instances, well-known methods, procedures, and components have not been described in detail so as not to obscure the present invention.

[0011] The subject matter which is regarded as the invention is particularly pointed out and distinctly claimed in the concluding portion of this specification. However, the invention, both as to organization and method of operation, together with its objects, features, and advantages, may best be understood by reference to the following detailed description when read in conjunction with the accompanying drawings.

[0012] It will be appreciated that for simplicity and clarity of illustration, elements shown in the figures have not necessarily been drawn to scale. For example, the dimensions of some of the elements may be exaggerated relative to other elements for clarity. Further, where considered appropriate, reference numerals may be repeated among the figures to indicate corresponding or similar elements.

[0013] The illustrated embodiments of the present invention may, for the most part, be implemented using electronic components and circuits known by those skilled in the art and therefore will not be described more extensively than is deemed necessary as set forth above for the understanding and appreciation of the concepts underlying the present invention and so as not to obfuscate or distract from the teachings of the present invention.

[0014] Any reference herein to a method should apply mutatis mutandis to a device or system capable of performing the method and / or to a non-transitory computer readable medium storing instructions for performing the method.

[0015] Any reference herein to a system or device should be applied mutatis mutandis to methods that may be performed by the system and / or to a non-transitory computer readable medium storing instructions executable by the system.

[0016] Any reference in this specification to a non-transitory computer readable medium should apply mutatis mutandis to a device or system capable of executing instructions stored on the non-transitory computer readable medium and / or to a method for executing the instructions.

[0017] Any combination of any module or unit depicted in any of the figures, any part of the specification, and / or any claim may be provided.

[0018] The present specification and / or drawings may refer to a processor. A processor may be processing circuitry. Processing circuitry may be implemented as a central processing unit (CPU) and / or one or more other integrated circuits, such as an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a fully custom integrated circuit, or the like, or a combination of such integrated circuits.

[0019] Any combination of any steps of any method illustrated in this specification and / or in the drawings may be provided.

[0020] Any combination of the subject matter of any of the claims may be provided.

[0021] Any combination of the systems, units, components, processors, and sensors illustrated in this specification and / or in the drawings may be provided.

[0022] A method, system, and computer readable medium may be provided.

[0023] A UAV may be programmed and / or otherwise configured to accomplish a task and / or mission, which may include reaching a destination and / or performing an action upon reaching a destination. A UAV may similarly be considered to reach a destination when the destination is within range of the UAV. A destination is within range of a UAV when the UAV is positioned in a location that enables it to accomplish a task associated with the destination.

[0024] The operations may include searching for targets associated with the destination, delivering a payload (which may or may not be a damaging payload) to the target, implementing electronic countermeasures, obtaining information about the target, targeting precision munitions to the target, etc.

[0025] It should be noted that a UAV may be programmed to perform multiple missions and / or reach multiple destinations and / or perform multiple actions related to one or more targets and / or perform any desired flight pattern and / or fly under the control of a remote controller or other control device and / or fly without a predefined target or goal. For simplicity of explanation, the following text will refer to a UAV being assigned a mission that includes a target located at a destination and performing an action related to the target.

[0026] When referring to a "remote controller," this includes a remote controller device as well as any other control device such as a ground station, VR goggles, a smartphone or tablet, a control stick, a telemetry module, a secondary remote controller (e.g., a gimbal controller), etc.

[0027] Methods may be provided for inducing interference with the operation of a UAV, the interference preventing the UAV from successfully completing a mission.

[0028] Disruption to the operation of a UAV is · Confronting unauthorized entities; Detaching the UAV from the remote controller; Implementing a safety plan (or emergency plan) for the UAV; Returning to the base station or take-off location or any other default location of the UAV; - Redirecting the UAV; Changing the flight pattern of the UAV; Increasing the visibility of UAVs to countermeasures and / or attacks; Deactivating or disrupting any stealth operation or stealth mode of a UAV; Deactivating or disrupting any concealment means of the UAV; - Stopping the progress of the UAV towards its destination; -Hovering in a given location for at least a predefined period of time; -Hover in place until power runs out, - Crash landing of UAVs Landing the UAV at a designated location; Preventing UAVs from flying within designated zones (no fly zones), either temporarily (e.g. passing formations) or permanently (restricted structures); Preventing UAVs from taking off; Preventing the UAV from ascending above a certain altitude or descending below a certain altitude; · being replaced by an unauthorized entity; Executing commands without pairing, Sending information (detection information, status information, debugging information, etc.) - especially in scenarios where detection information should not be sent or where detection information would not have been sent within the near time frame; Activating, operating or disabling any of the modules of the UAV without it being initiated by the pilot - for example releasing the payload of the UAV in a location different from that planned by the pilot or preventing the pilot from releasing the payload or preventing the drone from recording images, etc. [Otherwise interfering with a separate device carried by a UAV] It may include at least one of the following:

[0029] As indicated above, more than one disruption of operation can occur: for example, a UAV can first be made to transmit information and then be made to crash.

[0030] FIG. 1 illustrates a method 100 for inducing a disturbance to the operation of a UAV in communication with a remote controller.

[0031] The method 100 may begin by determining 110 to induce a disturbance to the operation of the UAV.

[0032] Step 110 may be triggered by detection of communication between the UAV and a remote controller.

[0033] Step 110 may be triggered by detection of a UAV. Detection may be by any sensor or unit - radar, RF sensing unit, acoustic sensor, heat sensor, optical sensor, visual sensor, etc. The sensor may be an active sensor and / or a passive sensor.

[0034] Step 110 may be triggered in the absence of at least one of: (a) detection of a UAV; and (b) detection of communication between the UAV and a remote controller.

[0035] For example, step 110 may be triggered according to one or more rules, such as randomly, pseudo-randomly, and / or according to a predefined time schedule, or may be triggered in response to an event, etc. An event may include detecting an attempt to jam a system performing method 100.

[0036] Detection may be by any sensor or unit - radar, RF sensing unit, acoustic sensor, heat sensor, optical sensor, visual sensor, etc. The sensor may be an active sensor and / or a passive sensor.

[0037] Method 100 may include determining one or more interference commands, which may be included in step 110 of method 100, in step 120 of method 100, or in another step of method 100.

[0038] Step 110 may be followed by step 120 of sending one or more jamming commands to the UAV that, when executed by the UAV, cause one or more units of the UAV to malfunction, the malfunction inducing a disruption to the operation of the UAV. Execution by the drone may include execution by at least one unit of the drone. A unit that executes the one or more jamming commands may malfunction and / or cause another unit to malfunction.

[0039] The one or more units of the UAV may be at least one of a communication unit of the UAV, one or more modems of the UAV, a controller of the UAV, a sensor of the UAV, a power unit of the UAV, a telemetry unit of the UAV, a battery module of the UAV, a storage unit of the UAV, an object detection unit of the UAV, a processor of the UAV, or any other unit of the UAV.

[0040] The malfunctions are as follows: -Resetting the unit, - Restarting the unit, Skipping one or more steps of a unit; Skipping one or more authentication steps; Skipping one or more verification steps Skipping one or more configuration steps Skipping one or more initialization steps Skipping the encryption and / or decryption steps; Skipping at least one of the error correction decoding and encoding steps; Skipping at least one of the scrambling and descrambling steps; modifying one or more processing parameters of the unit; Changing encryption and / or decryption parameters, such as passwords, encryption keys, auxiliary keys, handshake keys, challenge keys, encryption protocols, etc.; Modifying error correction decoding parameters and / or error correction encoding parameters; Changing scrambling and / or descrambling parameters; Modifying one or more configuration parameters of the unit; Modifying one or more authentication parameters of the unit; Modifying one or more debugging parameters of the unit; - Changing the execution path of a unit; Changing the operating mode of the unit; Executing one or more undocumented commands of the unit; Executing one or more debugging commands; When the transmitting occurs, executing one or more commands in an operational mode different from the operational mode of the UAV; Turning the unit off, Slowing down the execution speed of programs executed by the unit; Initiating an infinite loop of instructions; Modifying one or more communication parameters; changing at least one frequency channel; Modifying at least one frequency hopping sequence parameter, such as, but not limited to, starting or stopping a hopping frequency; - changing the frequency band used; Modifying the preamble sequence; Modifying the error correction function; Modifying the coding; Changing the bit rate, Changing the baud rate, Changing the power of the transmission, Changing the guard interval, Changing the scrambling sequence, Modifying the header bits, avoiding transmitting a response to receipt of one or more transmissions from a remote controller of the UAV; Changing the network address of the remote controller (as seen by the UAV); Turn off the GPS unit. Causing the GPS unit to determine an incorrect GPS location; Turn off ADS-B, Causing ADS-B units to incorrectly detect or determine the location of aircraft; Shorting the battery or any other unit of the UAV; Turning off the remote control modem, Turn off the telemetry modem, Turning off vital features required for flight, such as gyros, motors, etc. -Causing false detection of obstacles; Causing a sensor to falsely detect a target or otherwise trigger a sensor to falsely detect a target; Allowing a battery meter on a UAV to determine a false battery level, e.g., that the battery is empty, which can trigger activation of an emergency plan; causing the UAV to transmit information acquired by the UAV; · causing the UAV or its storage module to delete any images or video recordings captured by the UAV's camera; causing the UAV or its storage module to delete flight records or flight history; Cause the UAV or its storage module to delete any files or records stored in its storage unit or removable storage; Cause the UAV to transmit or otherwise access any files or records stored in its storage unit or removable storage; It may include at least one of the following:

[0041] The disruptive command(s) may be: - be configured to exploit vulnerabilities in the unit; · may result in denial of service of the unit; may be configured to exploit vulnerabilities in communication protocols used by UAVs; Buffer overflows can cause malfunctions; - the ability to cause holding of units; the ability to cause the occurrence of an exception in the execution of a program executed by the unit; allowing the UAV to reject packets that can be identified as being sent from a remote controller of the UAV; Ability to have the UAV transmit information from the UAV – as opposed to the transmission constraints imposed by the UAV during non-test flights; - causing the UAV to fail to detect an object that is to be detected by the UAV; the detachment command may be different from the detachment command, which may be different from the detachment command but may induce a malfunction that may cause the UAV to detach from the UAV's remote controller; - causing at least one further unit of the UAV to malfunction; be able to adapt to any protocol layer used by the UAV; It can be an application layer command, -Can be a reset of unit command or a restart of unit command; The ability to have the UAV change what it believes to be the network address of the remote controller; causing the UAV to change what appears to it as the network address of a remote controller to a network address controlled by one or more jamming commands; The determination may be based on the outcome of one or more previous jamming command transmissions; the decision may be based on feedback regarding the outcome of one or more previous jamming attempts; the determination can be made based on an evaluation of the result of the transmission of at least one jamming command, - Based on knowledge of the root cause of the unit malfunction can be determined; The root cause of the unit's malfunction can be determined without knowing it; may be determined based on the location of the UAV; may be determined based on the location of the remote controller; may be determined based on one or more spatial relationships between two or more of the UAV, the transmitter, and the base station; may be determined based on expected reception of base station signals by the UAV; may be based on the distance between the remote controller and the UAV; Based on the flight pattern of the UAV, · The communication between the UAV and the remote controller can be distributed over the entire spectrum; be capable of dispersing over a portion of said spectrum, may include frequency hopping; may include scanning a spectrum or a portion of a spectrum; Being able to follow the specific frequencies and transmission times of the specific frequencies used by the UAV and the remote controller; be able to follow the frequency bands used by the UAV and the remote controller and the transmission times of the frequencies within the frequency bands; may be transmitted consecutively during one or more periods; be variable over time - for example, within one or more time windows during which step 120 is performed; can be determined in any manner; may be determined based on a immediately preceding investigation of communications between the UAV and the remote controller; The vulnerability and / or faults of any unit of the UAV or any other aspect of the UAV may be determined based on the vulnerability and / or faults of any unit of the UAV; The communication between the UAV and the remote controller can be determined based on on-the-fly learning; The determination can be based on a combination of predefined jamming commands that can be adapted over time based on the success of the jamming commands; Capable of being encapsulated and / or formatted and / or contained in any type of packet, frame, etc. At least one of the following can be accomplished:

[0042] The method 100 may include a step 140 of monitoring at least one of the UAV and the remote controller.

[0043] Step 140 may be performed before the execution of step 110, in parallel with the execution of step 110, after the execution of step 110, before the execution of step 120, in parallel with the execution of step 120, after the execution of step 120, etc.

[0044] For example, the transmission of any jamming commands may follow detection of the location and / or movement of the UAV.

[0045] Monitoring may include looking for communications between the UAV and a remote controller, and / or detecting the UAV (by a visual sensor or by any other type of sensor), etc.

[0046] Step 140 may include, for example, monitoring a response of the UAV and / or the remote controller to transmitting one or more jamming commands.

[0047] Step 140 may include checking whether operation of the UAV has been disrupted. Step 140 may include looking for any other items, such as responses that may result in a disruption, such as an attempt to reconnect the UAV, a temporary detachment period, etc.

[0048] Step 140 may be followed by a step 150 of responding to the monitoring.

[0049] Step 150 may include jumping to step 120, proposing and / or indicating changes in step 120, terminating method 100, notifying one or more other systems about the monitoring results and / or about the jamming command sent during step 120, etc.

[0050] The modification in step 120 may include determining at least one jamming command, modifying at least one jamming command, removing at least one jamming command, and / or modifying a method of transmitting at least one jamming command.

[0051] It should be noted that the jamming commands sent during step 220 can vary over time - e.g., as events occur, based on a predefined schedule, based on a pseudo-random schedule, based on a random process, etc.

[0052] Step 220 may attempt to attack the UAV in a variety of ways - particularly when the UAV's response to receiving a jamming command is unknown or difficult to predict.

[0053] The method 100 also illustrates communication between the UAV and a remote controller, which transmits a jamming command that causes a unit on the UAV to malfunction.

[0054] It should be noted that the UAV can communicate with an authorizing entity, which can be different from the remote controller. Additionally or alternatively, the jamming command can be targeted at the authorizing entity (and not the UAV), or can be targeted at the authorizing entity and the UAV. The authorizing entity's units can be made to malfunction - in addition to or instead of the UAV's units.

[0055] 2 illustrates a method 200 for inducing interference with the operation of a UAV. The UAV communicates with an authorizing entity.

[0056] An authorizing entity is authorized in the sense that the authorizing entity is allowed to communicate with (at least) the UAV and / or can control aspects of the UAV's operation and / or can affect the operation of the UAV in any other way. Authorization can be part of the mission. Authorization can be granted prior to and / or during execution of the mission. Authorization can be granted in various ways - e.g., by programming the UAV, by following a pairing process, etc.

[0057] The authorizing entity may be the remote controller of the UAV, may be different from the remote controller of the UAV, may be another UAV, and so on.

[0058] Method 200 may begin by determining 210 that a disturbance to the operation of the UAV will be triggered. Any trigger of step 110 may be applied mutatis mutandis to step 210.

[0059] For example, step 210 may be triggered by detection of communication between the UAV and an authorizing entity that is authorized to communicate with the UAV.

[0060] Step 210 may be followed by step 220 of transmitting to a recipient selected from among the UAV and the authorizing entity one or more disruptive commands that, when executed by the recipient, cause the recipient's unit to malfunction. The malfunction induces a disruption to the operation of the UAV.

[0061] Any malfunctions and / or disturbances discussed above (e.g., in relation to method 100) may apply mutatis mutandis to step 220. For example, in step 220, the malfunction may be a malfunction of a unit of the authorizing entity.

[0062] A malfunction of the authorizing entity's unit may disrupt the UAV in any way - for example, by causing the authorizing entity to not communicate with the UAV, by sending erroneous messages to the UAV, etc.

[0063] The recipient may be a UAV. The recipient may be an authorizing entity.

[0064] Both the UAV and the authorizing entity may be intended recipients of one or more jamming commands, and the malfunction may occur in one or more units of the UAV, the authorizing entity, or both the UAV and the authorizing entity.

[0065] Thus, step 220 includes transmitting to another recipient of the UAV and to the authorizing entity one or more disruptive commands that, when executed by the other recipient, cause the other recipient's unit to malfunction, which in turn induces a disruption to the operation of the UAV. Thus, if the UAV is a recipient, the authorizing entity is the other recipient, and vice versa.

[0066] Step 220 may include step 222 of transmitting one or more first jamming commands to the UAV and one or more second jamming commands to an authorizing entity.

[0067] At least one first jamming command can be different from at least one second jamming command. At least one first jamming command can be equal to at least one second jamming command. One, some, or all of the first jamming commands can be equal to or different from one, some, or all of the corresponding second jamming commands.

[0068] The at least one first jamming command may be transmitted at least once simultaneously with a transmission of the at least one second jamming command. The at least one first jamming command may be transmitted at least once non-overlappingly relative to a transmission of any second jamming command.

[0069] The first and second jamming commands may be transmitted in the same manner or in at least partially different manners, which may include the transmission path, any part of the transmission path, any transmission parameters (strength, polarity, frequency, modulation, wave shaping, etc.).

[0070] Method 200 may include monitoring and / or responding to the monitoring of at least one of the UAV and the authorizing entity. Any monitoring steps of step 140 of method 100 may be applied mutatis mutandis to the monitoring of method 200. Any response to the monitoring steps of step 150 of method 100 may be applied mutatis mutandis to the monitoring of method 200.

[0071] FIG. 3 illustrates a method 300 for inducing a disturbance to the operation of a UAV.

[0072] The method 300 may begin by determining 310 that a disturbance to the operation of the UAV will be caused while the UAV is currently operating in an operational mode.

[0073] Any of the triggers for step 110 may be applied mutatis mutandis to step 310.

[0074] Step 310 may be followed by step 320 of transmitting one or more jamming commands to the UAV that, when executed by the UAV, cause units of the UAV to operate in a manner consistent with an operating mode of the UAV that is different from the current operating mode.

[0075] For example, the current operating mode can be a stealth mode, the current operating mode can be a silent mode, the current operating mode can be different from a debugging mode, the current operating mode can be different from a flight mode, the current operating mode can be different from a test mode, etc.

[0076] The goal of step 320 is to put the UAV into a target operational mode, which may be different from a stealth mode, which may be different from a silent mode, which may be a test mode and / or a debug mode. In the target mode, the UAV may transmit information (e.g., status, sensor information, etc.), may be vulnerable to attack, may be less secure than its current operational mode, may fly in a manner that is more detectable to sensors, etc.

[0077] Method 300 may include monitoring and / or responding to the monitoring of at least one of the UAV and the remote controller. Method 300 may include monitoring and / or responding to the monitoring of at least one of the UAV and the authorizing entity. Any monitoring means of step 140 of method 100 may be applied mutatis mutandis to the monitoring of method 300. Any response to the monitoring step of step 150 of method 100 may be applied mutatis mutandis to the monitoring of method 300.

[0078] FIG. 4 illustrates a method 400 for inducing a disturbance to the operation of a UAV.

[0079] The method 400 may begin by determining 410 to induce interference with operation of the UAV.

[0080] Any triggers for step 110 may be applied mutatis mutandis to step 410.

[0081] Step 410 may be followed by step 420 of transmitting to the UAV one or more jamming commands that, when processed by the UAV, cause the UAV to communicate with an unauthorized entity.

[0082] This can cause the UAV to be controlled by an unauthorized entity, to be fed false information and / or commands from an unauthorized entity, and the like.

[0083] The method 400 may include monitoring and / or responding to the monitoring of at least one of the UAV and the remote controller.

[0084] Method 400 may include monitoring and / or responding to the monitoring of at least one of the UAV and the authorizing entity. Any monitoring steps of step 140 of method 100 may be applied mutatis mutandis to the monitoring of method 400. Any response to the monitoring steps of step 150 of method 100 may be applied mutatis mutandis to the monitoring of method 400.

[0085] Methods may be provided that can cause a UAV to stop sending messages or send messages that do not contain vital information through actively sending jamming messages into the UAV's communication network. These jamming messages can cause the UAV to determine that it is not clear or permitted to send packets over the network, or they can occupy the UAV's resources in a way that would not allow the UAV to process outbound communications. Although the methods described herein are applicable in WiFi networks, the methods can work on other types of networks as well where similar commands exist in the protocols of those networks.

[0086] Some networks are based on the division of the network's resources (in particular time division) by nodes sending requests informing other nodes that they wish to use such resources for a particular purpose (e.g., to use a channel for a time window).

[0087] In some networks, other nodes respond to such a request by acknowledging it. In some networks, a node that receives such an acknowledgment without first receiving a request will follow the acknowledgment. This can be manipulated so that one node in the network (or many nodes in the network) can be prevented from sending out any information due to lack of resources.

[0088] Jamming can include sending (e.g., continuously) request to send (RTS) messages that inform the network (or rather users of the network) regarding the intention of the node (network member) to send a request to transmit packets of information through the network. If the node sends such messages continuously, other nodes will respond by acknowledging these requests one after the other and therefore will cease to transmit anything through the same network. Sending such messages continuously can prevent the node from transmitting for a period of time. If the UAV is prevented from transmitting packets for a period of time, or the remote controller is similarly prevented from transmitting packets for a period of time, it will cause a decoupling between the UAV and the remote controller.

[0089] Sending a Clear To Send (CTS) message (e.g., continuously sending) is an acknowledgment of a received RTS, so that the node that sent the RTS determines that it can indeed use the time resources it requested to send that message. If a node in the network receives such a CTS message, even if the node does not receive the original RTS message, it can determine that such an RTS message was indeed sent, and will accept and comply with the CTS acknowledgment, ceasing to transmit for the acknowledged period. Thus, continuously sending a CTS message can prevent a node from transmitting for a period of time. If a UAV is prevented from transmitting packets for a period of time, or a remote controller is similarly prevented from transmitting packets for a period of time, it will cause a decoupling between the UAV and the remote controller.

[0090] FIG. 5 illustrates a method 500 for disrupting communications over one or more communication links shared by and used by a UAV and one or more other users, using means such as those that the one or more other users have access to and / or are authorized to utilize.

[0091] The method 500 may include disrupting communication over the communication link at 510. Any of the triggers for step 110 may be applied mutatis mutandis to step 510.

[0092] Step 510 may be triggered by detecting communication over the communication link between the UAV and another user of the communication link.

[0093] Step 510 may be followed by step 520 of transmitting a plurality of extra messages over the communications link related to access control of the communications link, thereby disrupting communications over the communications link.

[0094] The method 500 may include monitoring and / or responding to the monitoring of at least one of the UAV and the remote controller.

[0095] Method 500 may include monitoring and / or responding to the monitoring of at least one of the UAV and the authorizing entity. Any monitoring steps of step 140 of method 100 may be applied mutatis mutandis to the monitoring of method 500. Any response to the monitoring steps of step 150 of method 100 may be applied mutatis mutandis to the monitoring of method 500.

[0096] In relation to any of methods 100, 200, 300, 400 and 500, any reference to sending a disruptive command which, when executed, causes a unit to malfunction may apply mutatis mutandis to any other content (e.g., information) which, when processed, causes the unit to malfunction.

[0097] 6-8 show different examples of jamming systems 131 capable of implementing one, some or all of the methods 100, 200, 300, 400, and 500. FIG.

[0098] FIG. 6 is an illustration of a jamming system 131, a UAV 121, and a remote controller 111.

[0099] The UAV 121 and the remote controller 111 may communicate through a bidirectional link or any other link, such as two unidirectional links.

[0100] The UAV may include a first plurality (Nd) of units 121(1) to 121(Nd). The remote controller 111 may include a second plurality (Nr) of units 121(1) to 121(Nr).

[0101] One or more of the units of the UAV may be attacked, may be malfunctioned, may assist in attacking another unit, etc. Examples of units of a UAV are discussed in various parts of this application. One or more of the units of the remote controller may be attacked, may be malfunctioned, may assist in attacking another unit, etc.

[0102] FIG. 6 also shows a jamming command 140 being sent to the UAV.

[0103] The jamming system 131 is shown as including an antenna 132 , a transmitter 133 , a signal generator 134 , a receiver 135 , a signal analyzer 136 , and a controller / processor unit 137 .

[0104] The antenna 132 may be used to receive signals transmitted from the UAV 121 and / or from the remote controller 111. These signals are transmitted to the receiver 135, which provides the detected signal to a signal analyzer 136, which may analyze the signal. The analysis may be spectrum analysis, timing analysis, demodulation, descrambling, error correction, decoding, etc. The signal generator 134 may generate a jamming signal that is transmitted by the transmitter 133 via the antenna 132.

[0105] It should be noted that the jamming system may have one or more transmit antennas separate from one or more receive antennas.

[0106] The jamming system 131 may include only some of the units shown in the figure and / or may include other units.

[0107] The controller / processor can be a controller and / or a processor, where the controller can control the operation of the jamming system and the processor can receive the analysis results of the received signal from the signal analyzer 136 and determine which jamming commands to send and when to send them.

[0108] The controller / processor may perform the functions of the signal analyzer and / or the signal generator 134 .

[0109] FIG. 7 is an illustration of a jamming system 131, a UAV 121, and a remote controller 111.

[0110] FIG. 7 shows the jamming system 131 as transmitting a first jamming signal to the UAV and a second jamming signal 142 to the remote controller.

[0111] FIG. 8 is an example of a network or communication link 199 shared by users such as a jamming system 131, a UAV 121, another UAV 122, and a remote controller 111.

[0112] In FIG. 8, a jamming system 131 includes an array of antennas 132, which may include multiple antennas.

[0113] A system for UAV detection and mitigation may be provided, wherein the system can detect UAV communications, generate information by classifying the communications as related to a UAV, and determine associated communication parameters and further parameters, which in some cases may include the model of the UAV, the type of modem the UAV is using (e.g., what wireless communication components are used), the type of flight controller (computer, operating system), etc.

[0114] The information may be provided through other means, such as an external command sent to the system that has at least a portion of the information. The information may include knowledge of the UAV model stored in a database or library. In some cases, the information may have some degree of freedom (e.g., it is not known which communication module will be used, but the system may try to assume each component in a list of components it can handle and try them one by one to see if there is a result that is produced).

[0115] The system can use a variety of mitigation techniques tailored to the UAV, which may involve using UAV-specific information to determine countermeasures based on UAV-specific parameters such as location, altitude, engine load, battery load, flight pattern, etc.

[0116] The system can cause the UAV's WiFi modem to be reset. Such a reset to a WiFi modem, in the general case not related to a UAV, may result in the modem only coming back online after a few seconds, or the modem may have some trouble reconnecting to the network. If a WiFi modem is the UAV's means of communication, such a reset can cause the UAV to become disconnected from its remote controller, which will cause the UAV to initiate a safety plan for the UAV, which would normally send the UAV's safety plan to its home location, without the remote controller being able to reconnect, or without the UAV's pilot having to manually stop this safety plan to prevent it from terminating.

[0117] The system can transmit disruptive content, such as disruptive commands, that can cause any (or any combination) of the following: (a) causing the modem to reset, turn off, disconnect the client (remote controller) from the communications link, or otherwise malfunction (e.g., go into an infinite loop, stop, halt operation until reset, etc.); (b) causing the modem to ignore some of the communications filters (e.g., white lists, black lists) that the modem uses to determine which future packets will be allowed through; (c) causing the modem to skip data processing steps (e.g., disable encryption, disable scrambling); (d) causing the UAV's main computer / flight controller / remote controller to initiate a pairing sequence or otherwise modify pairing parameters, such as the UAV or remote controller identifier; (e) causing a modem or host computer to change some or all of the communications parameters it is using (e.g., frequency channel, hopping sequence, start / stop hopping frequencies, preamble sequences, error correction capabilities, coding, bit rates, baud rates, bandwidth, guard intervals, scrambling sequences, header bits, etc.); (f) causing other components of the UAV to act in a manner that changes the control that the pilot of the UAV has over the UAV, or to cause the UAV or remote controller to transmit information not normally transmitted by it or to prevent it from transmitting information in the manner in which it is normally transmitted; (g) causing the UAV to activate its emergency plan, or alternatively, an emergency plan that differs from the plan established by the pilot of the UAV; It is.

[0118] Option (a) can be obtained by sending a jamming command embedded in an application layer command. This can include sending a jamming command encapsulated within a standard command that causes a reset or disassociation. In some UAV protocols, commands exist that can cause such an effect, and sending the command within an available time slot or at a power that will be received by the UAV as a power stronger than the receiving power of the UAV's remote controller will cause that effect (depending on the relative power of the transmission and the distance of the remote controller and system from the UAV, and the link budget).

[0119] Option (a) can be obtained by exploiting a protocol weakness at any layer that causes the modem to reset (even if the weakness is unplanned but due to a pre-existing bug).

[0120] Option (a) can be achieved by having the modem or main computer block / filter certain communication channels / methods.

[0121] Option (a) can be obtained by exploiting a vulnerability in the implementation of a protocol at any layer that causes the modem to reset (even if the vulnerability is unplanned but due to an existing bug), where reset can mean resetting, turning off, or otherwise malfunctioning (e.g. going into an infinite loop, stopping, halting operation until reset, etc.). For example - assuming WiFi-based communication - the interference can be a set of packets that cause a buffer overflow in one of the standard processes. Some WiFi modems allow to send a message to a process that contains a payload that contains several fields of data. The fields of data include a field length or a starting address that are also sent in the packet. If the packet sent contains a field length that is invalid (e.g. too large), and if the modem is not programmed to properly manage the event of an invalid field length, the result can be that the modem tries to access, read from, or write to a memory address that is outside the memory allocated for that packet. This can cause an exception in the operation of the code, and therefore the modem can crash and possibly reset itself to overcome this. This will cause the communications link between the UAV and the remote controller to be severed, and in many cases will prevent them from communicating back. The UAV can then initiate its emergency plan, which may cause the UAV to fly back to its take-off position, land in place, hover in place, or fly to a pre-designated location, all of which may be considered desired outcomes for protection against attacks by UAVs.

[0122] Exploiting a vulnerability in this way can be made reliable if the same packet is sent multiple times until a result is achieved; we can check whether the result is achieved after such an attack, or we can send a preset number of times or for a preset period of time without checking the result, both of which would increase the reliability of such an attack.

[0123] Exploiting vulnerabilities can be applied to any layer of communication.

[0124] Option (b) may be accomplished by having the modem ignore some of the communication filters (e.g., white lists, black lists) that the modem uses to determine which future packets to pass through. For example, in some cases, the communication may be implemented as a network having a network address, and the network command may include a command to cause the UAV to change the expected network address of the remote controller, so that the UAV can ignore communications having the original network address of the remote controller network ID. Thus, the UAV will not process packets received from that remote controller. Additionally, the UAV may process packets sent from the expected new network address of the remote controller, which may allow the system to send control commands to the UAV, thus taking over the UAV communications.

[0125] For example, there can be an additional ID used, more similar to a communication ID or pairing ID, such as a set of bits used in the data transmitted, for example by being used to scramble the communication, or by simply preceding the actual command field of the communication. There can be a command that can cause the UAV to change this communication ID or pairing ID, which will cause the UAV to ignore future communications from its original remote controller, and can allow the system to send control commands to the UAV and thus take over the UAV communications.

[0126] Referring to option (c), often raw messages or data sent from the UAV or from the remote controller go through several processing stages before being transmitted. Such stages are intended to generate some degree of redundancy so that the original message can be decoded (through error correction coding or other methods) on the other side of the communication to be hidden from eavesdropping (e.g., through encryption), to be more balanced, or for other reasons. There may be some system commands that would not be sent or received during normal communication that can disable some of these stages of processing. They may be present for engineering, debugging, or monitoring reasons. Such packets, if sent to the UAV or remote controller, can be sent to the UAV or remote controller with these stages disabled during normal flight. In the normal case, this can be to allow the communication between the UAV and the remote controller to be disconnected or to contribute to the ability to take over the communication, or to command the UAV to perform other actions (e.g., return, land).

[0127] Referring to option (d), in many cases, and to prevent cases where a remote controller affects the wrong UAV, a remote controller will only be able to control a UAV after they are "paired". Pairing is the process where the remote controller and the UAV exchange information and usually set up some communication parameters that will later affect the communication itself. This can affect the physical layer (e.g., hopping sequence, etc.), the wrapper layer (e.g., error correction, scrambler, etc.), data in the header (e.g., network ID), message payload, etc. The pairing sequence occurs when a user wants to pair a remote controller with a UAV. Usually, the user initiates this by pressing a physical button on the device, but sometimes it is initiated by software or an application, or by moving the device in a particular pattern. In some cases, there are messages that can be packed into packets that will initiate such a sequence, and once the sequence is initiated, a third party can step in and take over the communications channel or prevent the remote controller from responding to the pairing sequence, thus causing the UAV and remote controller to become disconnected from each other.

[0128] Referring to option (e), one of the methods that can be used to detach a UAV from its remote controller or take over communication completely is to have the UAV change some of its communication parameters. These communication parameters are predefined between the remote controller and the UAV by user definition or by a pairing or handshaking process, so the UAV and the remote controller expect each other to transmit according to those parameters. However, in many cases there are communication commands that modify these parameters, and these commands can be transmitted by the system to the UAV. In some cases, there is no protection mechanism against such attacks, and a simple transmission can be used to change the parameters, and other times the transmission must fully comply with some rules, coding, error correction, encryption, or other layers of rules. When a transmission by the system is received by the UAV, it can change its parameters and therefore expect the remote controller to transmit according to the new parameters. The remote controller is not necessarily aware of such changes and will continue to transmit according to the old parameters, and therefore the transmission will not be received or will be filtered out by the UAV. This will cause a disconnection between the remote controller and the UAV. The system may take over the communication of the UAV if it does not send control packets according to the new parameters. Any of the above parameters and further communication parameters may be a source of mismatch between the UAV and the remote controller.

[0129] In some cases, these commands can be sent when the remote controller is not transmitting, in other cases there must be a transmission by the system that is received with greater power than was received by the original remote controller (link budget).

[0130] In some cases, there is a cascade of commands, where a first command can cause some mismatch between the remote controller and the UAV, while a later command can cause the UAV to perform a flight (navigation) command.

[0131] With reference to option (f), option (f) may be obtained in a manner that may be similar to that described in connection with the above option, but the effect is that the UAV stops sending response packets ("ack"), and the remote controller may determine that the UAV is not receiving the transmission (because there is no response) and subsequently decide to disassociate. There are many modifications that can cause this effect, some of which may be available in the UAV.

[0132] While the above written description of the invention will enable one of ordinary skill in the art to make and use what is presently believed to be the best mode of the invention, one of ordinary skill in the art will understand and recognize the existence of variations, permutations, and equivalents of the specific embodiments, methods, and illustrations herein. Accordingly, the present invention should not be limited by the embodiments, methods, and illustrations described above, but by all embodiments and methods within the scope and spirit of the invention as claimed.

[0133] In the foregoing specification, the invention has been described with reference to specific examples of embodiments thereof. It will, however, be apparent that various modifications and changes can be made therein without departing from the broader spirit and scope of the invention as set forth in the appended claims.

[0134] Those skilled in the art will recognize that the boundaries between logic blocks are merely illustrative, and that alternative embodiments may merge logic blocks or circuit elements or impose alternative decompositions of functionality on various logic blocks or circuit elements. As such, it is understood that the architectures shown herein are merely illustrative, and that in fact many other architectures may be implemented which achieve the same functionality.

[0135] Any arrangement of components to achieve the same functionality is effectively "associated" such that the desired functionality is achieved. Thus, any two components combined herein to achieve a particular functionality may be considered to be "associated with" one another such that the desired functionality is achieved without reliance on architecture or intermediate components. Likewise, any two components so associated may similarly be considered to be "operably connected" or "operably coupled" to one another to achieve the desired functionality.

[0136] Moreover, those skilled in the art will recognize that the boundaries between operations described above are merely illustrative. Multiple operations may be combined into a single operation, a single operation may be distributed into additional operations, and multiple operations may be performed with at least partial overlap in time. Additionally, alternative embodiments may include multiple instances of a particular operation, and the order of operations may be changed in various other embodiments.

[0137] Also for example, in one embodiment, the illustrated examples may be implemented as circuit portions located on a single integrated circuit or within the same device. Alternatively, the examples may be implemented as any number of separate integrated circuits or separate devices interconnected with each other in an appropriate manner.

[0138] However, other modifications, variations, and alternatives are possible. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.

[0139] In the claims, any reference signs placed between parentheses shall not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps other than those recited in the claim. Furthermore, as used herein, the terms "a" or "an" are defined as one or more than one. Similarly, the use of introductory phrases such as "at least one" and "one or more" in a claim shall not be construed as suggesting that the introduction of another claim element with the indefinite article "a" or "an" limits any particular claim containing the claim element so introduced to an invention containing only one such element, even when the same claim also contains an introductory phrase such as "one or more" or "at least one" and an indefinite article such as "a" or "an". The same applies to the use of definite articles. Unless otherwise stated, terms like "first" and "second" may be used to arbitrarily distinguish between elements which such terms describe. As such, these terms are not necessarily intended to indicate a temporal or other prioritization of such elements. The mere fact that certain measures are recited in mutually different claims does not indicate that a combination of these measures cannot be used to advantage.

[0140] While certain features of the invention have been illustrated and described herein, many modifications, substitutions, changes, and equivalents will now occur to those skilled in the art. It is therefore understood that the appended claims are intended to cover all such modifications and changes that fall within the true spirit of the invention.

[0141] It will be appreciated that various features of the embodiments of the present disclosure that are, for clarity, described in the context of separate embodiments, may also be provided in combination in a single embodiment. Conversely, various features of the embodiments of the present disclosure that are, for brevity, described in the context of a single embodiment, may also be provided separately or in any suitable subcombination.

[0142] It will be appreciated by persons skilled in the art that the embodiments of the present disclosure are not limited by what has been particularly shown and described above. Rather, the scope of the embodiments of the present disclosure is defined by the appended claims and their equivalents.

Claims

1. 1. A method for inducing a disturbance to the operation of an unmanned aerial vehicle (UAV) in communication with a remote controller, comprising: determining that the UAV is causing interference with the operation of the UAV; and A method comprising: sending one or more jamming commands to the UAV, the one or more jamming commands, when executed by the UAV, causing a unit of the UAV to malfunction, the malfunction inducing the jamming to the operation of the UAV.

2. The method of claim 1 , wherein the unit of the UAV is a communication unit of the UAV.

3. The method of claim 1 , wherein the unit is a modem of the UAV.

4. The method of claim 1 , wherein the unit is a controller for the UAV.

5. The method of claim 1 , wherein the unit is a sensor of the UAV.

6. The method of claim 1 , wherein the unit is a power unit of the UAV.

7. The method of claim 1 , wherein the unit is a telemetry unit of the UAV.

8. The method of claim 1 , wherein the unit is a battery module of the UAV.

9. The method of claim 1 , wherein the unit is a storage unit of the UAV.

10. The method of claim 1 , wherein the unit is an object detection unit of the UAV.

11. The method of claim 1 , wherein the malfunction comprises a reset of the unit.

12. The method of claim 1 , wherein the malfunction comprises a restart of the unit.

13. The method of claim 1 , wherein the malfunction includes skipping one or more steps of the unit.

14. The method of claim 1 , wherein the malfunction includes skipping one or more authentication steps.

15. The method of claim 1 , wherein the malfunction comprises skipping one or more verification steps.

16. The method of claim 1 , wherein the malfunction comprises skipping one or more configuration steps.

17. The method of claim 1 , wherein the malfunction comprises skipping one or more initialization steps.

18. The method of claim 1 , wherein the malfunction comprises skipping at least one of an encryption step and a decryption step.

19. 2. The method of claim 1, wherein the malfunction comprises skipping at least one of an error correction decoding step and an error correction encoding step.

20. The method of claim 1 , wherein the malfunction includes skipping at least one of a scrambling step and a descrambling step.

21. The method of claim 1 , wherein the malfunction comprises altering one or more processing parameters of the unit.

22. The method of claim 1 , wherein the malfunction includes changing at least one of an encryption parameter and a decryption parameter.

23. The method of claim 1 , wherein the malfunction comprises modifying at least one of an error correction decoding parameter and an error correction encoding step.

24. The method of claim 1 , wherein the malfunction includes changing at least one of a scrambling parameter and a descrambling parameter.

25. The method of claim 1 , wherein the malfunction includes altering one or more configuration parameters of the unit.

26. The method of claim 1 , wherein the malfunction includes altering one or more authentication parameters of the unit.

27. The method of claim 1 , wherein the malfunction includes altering one or more debugging parameters of the unit.

28. The method of claim 1 , wherein the malfunction includes executing one or more debugging commands.

29. The method of claim 1 , wherein the malfunction comprises slowing down execution of a program executed by the unit.

30. The method of claim 1 , wherein the malfunction comprises beginning to execute an infinite loop of instructions.

31. 2. The method of claim 1, wherein the malfunction includes changing at least one out of a preamble sequence, an error correction function, a coding, a bit rate, a baud rate, a guard interval, a location of pilots, a scrambling sequence, and a header bit.

32. The method of claim 1 , wherein the malfunction is the occurrence of an exception in the execution of a program executed by the unit.

33. The method of claim 1 , wherein the malfunction includes transmitting information from the UAV contrary to a transmission constraint imposed by the UAV during a non-test flight.

34. A non-transitory computer-readable medium for disrupting operation of an unmanned aerial vehicle (UAV) communicating with a remote controller, the non-transitory computer-readable medium storing instructions for detecting communication between the UAV and the remote controller and instructions for sending one or more disruption commands to the UAV that, when executed by the UAV, cause a unit of the UAV to malfunction, the malfunction inducing the disruption to the operation of the UAV.

Images