Global Navigation Satellite System Interference Attack Detection

Abstract

In one example embodiment, a method for detecting signals intended to interfere with satellite signaling includes receiving, by a receiving node, a signal masquerading as a satellite signal from a signal source, determining an estimated location of the receiving node based on the orbital position of the satellite and characteristics of the signal, comparing the estimated location of the receiving node to a reference location of the receiving node, determining that the signal source is a spoofing source other than a satellite, and determining a location of the spoofing source based in part on the estimated location.

Description

[Background technology]

[0001] A Global Navigation Satellite System (GNSS) refers to a constellation of satellites that supply signals from space to transmit position and timing data to GNSS receivers. Generally, GNSS signals are low-power. Weak interference sources can cause GNSS receivers to malfunction or generate dangerously misleading information. There is growing global concern about intentional or accidental interference with GNSS signals. [Brief explanation of the drawing]

[0002] [Figure 1] This figure shows an example scenario in which a GNSS receiver receives a signal from a satellite according to one or more embodiments of this technology. [Figure 2] This figure shows an example of representing the position of a GNSS device or satellite using spherical coordinates according to one or more embodiments of this technology. [Figure 3] This figure shows an example of detecting jamming signals interfering with satellite signals by a fixed station, according to one or more embodiments of this technology. [Figure 4] This figure shows an example of detecting jamming signals interfering with satellite signals using a mobile device, according to one or more embodiments of this technology. [Figure 5] This figure shows an example of detecting a jamming signal that blocks satellite signals according to one or more embodiments of this technology. [Figure 6] This figure shows an example of determining the position of a GNSS jamming device according to one or more embodiments of this technology. [Figure 7] This figure shows another example of determining the location of a GNSS jamming device according to one or more embodiments of the present technology. [Figure 8] This figure shows a method for detecting signals intended to interfere with satellite signals, according to one or more embodiments of the present technology. [Figure 9]This figure shows a method for determining the location of a spoofing source according to one or more embodiments of the present technology. [Figure 10] This is a schematic representation of a machine in an example of a computer system configuration that can execute a set of instructions that cause the machine to perform one or more of the methods or modules described herein. [Figure 11] This figure shows an example of a satellite message frame 1100 according to one or more embodiments of this technology. [Modes for carrying out the invention]

[0003] A spoofing attack is when a malicious actor impersonates another device or user on a network to launch an attack on a network host, steal data, spread malware, or circumvent access controls. Currently, spoofing attacks against global satellite signals are becoming more common, especially with advancements in 5G technology (for example, with high-density cell deployments) and autonomous driving.

[0004] This patent document discloses a technology that can be implemented in various embodiments to enable a global satellite signal receiver to detect the presence of a suspicious interference signal (also known as a jamming signal or spoofing signal). Furthermore, in a receiver with multiple antennas, the estimated location of the jamming signal can be determined based on multi-input multiple-output (MIMO) technology. The disclosed technology is applicable to both fixed assets that are aware of their own position (e.g., base stations) and mobile assets that can obtain location information from other access technologies such as Long-Term Evolution (LTE) and / or fifth-generation (5G) wireless communication networks (e.g., mobile phones).

[0005] Figure 1 shows an example scenario 100 in which a GNSS receiver receives signals from a satellite according to one or more embodiments of the present technology. In some embodiments, the GNSS receiver 101 is aware of its own position (also called a reference position). For example, the GNSS receiver 101 is a fixed station (e.g., a base station configured by a cellular network) that knows its exact position based on configuration information. Alternatively, or in addition to this, the GNSS receiver 101 can also calculate its own reference position based on past signals received over a period of time. In another example, the GNSS receiver 101 is a mobile device configured as the reference position. For example, the mobile device can be a mobile phone, a mobile tablet, a tracking device or telecommunications transceiver device deployed on a vehicle such as an autonomous vehicle, AR / VR goggles, a wearable computing device (such as a smartwatch or fitness tracker), or an Internet of Things (IoT) device. The mobile device can receive assistance information from a cellular network indicating the mobile device's reference position. The GNSS receiver 101 can calculate the satellite's orbital position and its own estimated position based on the characteristics of the input signal. By comparing the reference position with the estimated position, the GNSS receiver 101 can determine whether the input signal is being interfered with (e.g., spoofing or jamming) by a GNSS jamming device.

[0006] Figure 2 shows an example 200 of representing the position of a GNSS device or satellite using spherical coordinates according to one or more embodiments of the present technology. In this example, the GNSS receiver 201 stores its own reference position as (r1, θ1, φ1) relative to the center of the Earth. The reference position can be configured by the network or calculated by the receiver 201 based on past signals. The GNSS receiver 201 also knows the precise orbital position of the satellite 203. The satellite 203 transmits a signal 211 containing a message to the GNSS receiver 201. This message may include a satellite identifier (ID), a week number, and ephemeris information regarding the satellite's position. Figure 11 shows an example frame of a satellite message frame 1100 according to one or more embodiments of the present technology. The ephemeris information may include the satellite's current position, its predicted position, and / or its status. The ephemeris can be used by the GNSS receiver to estimate the position of the satellite and / or its position on Earth. Ephemeris information can also be used to predict the future state of a satellite at a given location and / or time. The GNSS receiver 201 can derive its own estimated position as (r2, θ2, φ2) based on the orbital position of satellite 203 and the characteristics of signal 211.

[0007] Table 1 shows examples of ephemeris parameters that can be used to determine satellite coordinates in a given observation epoch. These parameters are updated periodically to ensure the validity and accuracy of the satellite position. TIFF0007844431000001.tif91153

[0008] The following is an example of an algorithm for calculating satellite coordinates (aspherical coordinates) from satellite messages.

[0009] Calculation 101: Calculate time tk from ephemeris criterion epoch toe (t and t oe (This is expressed in seconds within a week.) t k =tt oe Equation (1) t k When it is > 302400 seconds, subtract it from 604800 seconds for t k When it is < -302400 seconds, add 604800 seconds. k <-302400 seconds, add 604800 seconds.

[0010] Operation 102: Calculate the mean anomaly of t k TIFF0007844431000002.tif13150 Equation (2)

[0011] Operation 103: Calculate the true anomaly v k TIFF0007844431000003.tif20150 Equation (3)

[0012] Operation 104: Calculate the argument of perigee ω, true anomaly v k , and correction c uc and c us to calculate the argument of latitude u k from TIFF0007844431000004.tif7150 Equation (4)

[0013] Operation 105: Calculate the radial distance r rc considering corrections c rs and c k TIFF0007844431000005.tif7150 Equation (5)

[0014] Operation 106: Calculate the inclination i oe at the reference time t o , and corrections c ic and c is to calculate the inclination i k of the orbital plane TIFF0007844431000006.tif7150 Equation (6)

[0015] Operation 107: Ascending node λ​​​k Calculate the longitude (relative to Greenwich). This calculation uses the right ascension (Ω) at the start of the current week. o ), the start of the week and the reference time t k =t oe Correction from apparent sidereal time variation in Greenwich between and the reference time t oe Use the change in longitude of the ascending node from there. TIFF0007844431000007.tif13150 Equation (7)

[0016] Operation 108:(u k i k and λ k The coordinates in the Earth Reference System (TRS) frame are calculated by applying three rotations (centered on a specific point). TIFF0007844431000008.tif20150 Equation (8)

[0017] R1 and R3 are rotation matrices defined in "Transformation between Terrestrial Frames".

[0018] In some embodiments, the GNSS receiver 201 can derive an estimated position of the receiver relative to satellite 203 based on the reception angle and the magnitude of the signal 211. Although only one satellite 203 is shown in Figure 2, the GNSS receiver can receive and decode signals from multiple satellites (e.g., 4 to 24 satellites). For example, the GNSS receiver 201 can determine the power of the received signal based on the amplitude of the signal arriving at the antenna. If the GNSS receiver 201 is located in a rural or suburban area, it will not receive many reflected signals from nearby buildings, so the received signal can be considered a line-of-sight (LOS) signal. If the GNSS receiver 201 is located in an urban area, it can identify random vibration noise from reflections (e.g., reflections from nearby buildings) in the received signal. The GNSS receiver 201 can derive the power of the line-of-sight (LOS) signal by removing the vibration noise based on the vibration pattern. The GNSS receiver 201 can estimate the satellite's longitude, latitude, and altitude based on the determined LOS signal and by measuring the different speed of light (299, 792 km / s) delays of signals arriving from the satellite. In some embodiments, each satellite signal includes the time the message was transmitted, orbital information (known as ephemeris information), and / or the satellite's approximate orbit (known as almanac information). The GNSS receiver 201 compares the estimated position (e.g., represented as (r2, θ2, φ2) in spherical coordinates) with a reference position (e.g., represented as (r1, θ1, φ1) in spherical coordinates) to determine whether the signal 211 may be an interference signal coming from a GNSS jamming device.

[0019] In some embodiments, the GNSS receiver can be a fixed station, such as a base station in a cellular network, that knows the precise location of its own aircraft. Figure 3 shows an example 300 in which a fixed station detects a jamming signal interfering with a satellite signal, according to one or more embodiments of the present technology. In Figure 3, a GNSS jamming device 305 transmits a jamming signal 311 that interferes with a signal from satellite 303 to the fixed station 301. In this example, the fixed station 301 only needs to check the actual reception angle of the signal 311 to determine whether the signal 311 is from the satellite or from the jamming device. For example, when the fixed station 301 receives the jamming signal 311, it calculates the reception angle β of the jamming signal 311 (expressed, for example, using spherical coordinates). The fixed station 301 also derives an expected reception angle range [θ1, θ2] relative to its own position, based on the orbital position of satellite 303. Since β is outside the expected reception angle range [θ1, θ2], the fixed station 301 can determine that signal 311 is a jamming signal coming from the jamming device 305. The fixed station 301 can make such a determination for multiple satellites that are the source of the signals.

[0020] With advancements in cellular technology, the technology shown in Figure 3 can be extended to mobile stations, enabling them to distinguish jamming signals from actual satellite signals. For example, Advanced GPS (AGPS) is a technology implemented in many mobile devices that allows cellular networks to determine the location of these devices. Mobile devices can receive assistance information from the cellular network to recognize their respective locations. Figure 4 shows an example 400 in which a mobile device detects a jamming signal interfering with satellite signals according to one or more embodiments of the technology. In Figure 4, mobile station 401 can obtain its reference position from the cellular network based on cell identifiers (IDs) and / or techniques such as triangulation. GNSS jamming device 405 transmits a jamming signal 411 that interferes with signals from satellites 403a and 403b to mobile station 401. Upon receiving the jamming signal 411, mobile station 401 calculates the reception angle β of the jamming signal 411 (expressed, for example, using spherical coordinates). Furthermore, mobile station 401 also derives the expected reception angle ranges [θ1, θ2] and [η1, η2] relative to its own position, based on the orbital positions of satellites 403a and 403b. Since β is outside these ranges (for example, [θ1, θ2] and / or [η1, η2]), mobile station 401 can determine that signal 411 is a jamming signal coming from jamming device 405.

[0021] In some embodiments, when the mobile device 401 is in motion, movement of the mobile device 401 and / or its surroundings may affect the received GNSS signal. The GNSS signal may be attenuated, and sometimes one or more satellites may become invisible. The cellular network can provide further information about the satellite constellation so that the mobile device 401 can estimate its position relative to the satellites even while in motion. For example, the mobile device 401 can be initially configured to listen to GPS satellites. Based on the information provided by the cellular network, the mobile device 401 can listen to additional GNSS satellites from different global navigation satellite systems, such as the Global Navigation Satellite System (GLONASS), the Galileo satellite navigation system, and / or the BeiDou Navigation Satellite system (BDS), to compensate for signal loss. The mobile device 401, while in motion, can determine that the jamming signal 411 is coming from the jamming device 405 by deriving and refining the reception angle β of the jamming signal 411 based on its own position (determined, for example, based on assistance information) and further satellite information from the cellular network.

[0022] In some embodiments, a GNSS jammer positions itself to block signals from satellites and mimic actual satellite signals. In these cases, relying solely on the reception angle of the actual input signal is insufficient. A GNSS receiver can derive its estimated position based on other characteristics of the signal and determine whether the signal is a jamming signal or a satellite signal. For example, a GNSS receiver can predict a specific portion of a message from a particular satellite. If the input signal does not match the predicted portion of the message, the input signal can be considered a jamming signal.

[0023] Figure 5 shows an example 500 of detecting a jamming signal that blocks satellite signals according to one or more embodiments of the present technology. In Figure 5, the GNSS jamming device 505 is positioned to block the signal from satellite 503. In some embodiments, mutual interference between the signal 511 from the GNSS jamming device 505 and the signal from satellite 403 causes signal 511 to completely obscure the signal from satellite 503. In these cases, the GNSS receiver 501 can determine that signal 511 is a jamming signal.

[0024] In some embodiments, a signal 511 from a GNSS jamming device 505 is interpreted by the GNSS receiver 501 as a signal from satellite 503. However, if the received signal 511 is corrupted or does not match the expected portion of the message, the GNSS receiver 501 considers it invalid. The GNSS receiver 501 can then determine that the signal 511 is a jamming signal.

[0025] In some embodiments, a signal 511 from a GNSS jamming device 505 is interpreted by a GNSS receiver 501 as a valid signal from satellite 503. The GNSS receiver 501 calculates its own estimated position based on the characteristics of the received signal 511 (e.g., signal strength) and compares the estimated position with the aircraft's reference position. If the GNSS receiver 501 detects a discrepancy between the estimated position and the reference position (e.g., the difference between the two positions exceeds a threshold), it can determine that the signal 511 is a jamming signal.

[0026] After detecting a jamming signal, the precise location of the GNSS jamming device can be determined based on information from one or more GNSS receivers. For example, multiple-input multiple-output (MIMO) is an antenna technology for wireless communication that uses multiple antennas as transmitters and receivers. A GNSS receiver using MIMO technology can provide multiple estimated positions that facilitate triangulation of the location of the GNSS jamming device. Figure 6 shows an example 600 of determining the location of a GNSS jamming device 605 according to one or more embodiments of the present technology. In Figure 6, the GNSS receiver 601 is a fixed station having multiple antennas 621a, 621b, and 621c. Using each antenna 621a, 621b, and 621c, the estimated position of each antenna can be derived when a signal is received from the GNSS jamming device 605. If the fixed station 601 has large dimensions and the antennas 621a, 621b, and 621c are reasonably far apart from each other, these multiple estimated positions can be used to triangulate the precise location of the GNSS jamming device 605.

[0027] Figure 7 shows another example 700 of determining the location of a GNSS jamming device according to one or more embodiments of the present technology. In Figure 7, multiple mobile GNSS receivers 701a, 701b, and 701c detect a jamming signal from a GNSS jamming device 705. Each of the GNSS receivers 701a, 701b, and 701c can determine the estimated location of the GNSS jamming device 705 relative to itself. The GNSS receivers then transmit the estimated location to a communication node 707 (e.g., a base station). Based on the information from the multiple GNSS receivers, the communication node 707 can determine the location of the GNSS jamming device 705 using techniques such as triangulation. In particular, if a group of mobile devices in a cell or several adjacent cells indicate that they have received a jamming signal, the network operator can easily determine where the jamming signal is coming from.

[0028] Figure 8 shows a method 800 for detecting a signal intended to interfere with satellite signaling, according to one or more embodiments of the present technology. Method 800 includes, in operation 810, a receiving node receiving a signal from a signal source. The signal source generates a signal that mimics or disguises a satellite signal. Method 800 includes, in operation 820, the receiving node determining its own estimated position based on the satellite's orbital position and the characteristics of the signal. Method 800 includes, in operation 830, the receiving node comparing its own estimated position to its own reference position. Method 800 includes, in operation 840, the receiving node determining that the signal source is a spoofing source different from a satellite. Method 800 also includes, in operation 850, the receiving node determining the location of the spoofing source based in part on its estimated position.

[0029] Figure 9 shows a method 900 for determining the location of a spoofing source according to one or more embodiments of the present technology. Method 800 includes, in operation 910, a network node in a communication network receiving a first set of information from a first communication node indicating a first estimated location of the spoofing source. Method 900 includes, in operation 920, a network node receiving a second set of information from a second communication node indicating a second estimated location of the spoofing source. Method 900 includes, in operation 930, a network node receiving a third set of information from a third communication node indicating a third estimated location of the spoofing source. Method 900 includes, in operation 940, a network node determining the final location of the spoofing source based on triangulation of the first, second, and third estimated locations of the spoofing source.

[0030] knot This application discloses a technology that can be implemented in various embodiments to detect interference signals from a suspicious source. This technology can be implemented in both fixed base stations and mobile assets such as telephones, tablets, autonomous vehicles, or IoT devices. The broad applicability of the disclosed technology also enables the determination of the location of the suspicious source. Network operators can easily locate the suspicious source based on information provided by base stations or mobile device clusters equipped with multiple antennas.

[0031] Figure 10 is a schematic representation of a machine in an example configuration of a computer system 1000 capable of executing an instruction set that causes the machine to perform one or more of the methods or modules described herein.

[0032] In the example in Figure 10, the computer system 1000 includes a processor, memory, non-volatile memory, and a network communication interface device. The computer system 1000 may also include multiple antennas for receiving signals from various signal sources. For simplicity of explanation, various common components (e.g., cache memory) have been omitted. The computer system 1000 is intended to show a hardware device that can implement any of the components described in the examples in Figures 1 to 8 (and other components described herein). The computer system 1000 can be any applicable known or convenient type. The components of the computer system 1000 can be coupled together via a bus or through any other known or convenient device.

[0033] This disclosure assumes a computer system 1000 in any preferred physical form. For example, but not limited to, the computer system 1000 may be an embedded computer system, a system-on-a-chip (SOC), a single-board computer system (SBC) (such as a computer-on-a-module (COM) or system-on-a-module (SOM)), a desktop computer system, a laptop or notebook computer system, an interactive kiosk, a mainframe, a computer system mesh, a mobile phone, a personal digital assistant (PDA), a server, or a combination of two or more of these. If necessary, the computer system 1000 may comprise one or more computer systems 1000, be standalone or distributed, extend to multiple locations, extend to multiple facilities, or reside in a cloud, which may include one or more cloud components within one or more networks. If necessary, one or more computer systems 1000 may perform one or more steps of one or more methods described or illustrated herein without substantial spatial or temporal limitations. As an example, and not an limitation, one or more computer systems 1000 can perform one or more steps of one or more methods described or illustrated herein in real time or in batch mode. If necessary, one or more computer systems 1000 can perform one or more steps of one or more methods described or illustrated herein at different times or in different locations.

[0034] The processor may be a conventional microprocessor, such as an Intel Pentium microprocessor or a Motorola PowerPC microprocessor. Those skilled in the art will recognize that the terms “machine-readable (storage) medium” or “computer-readable (storage) medium” include all types of devices that the processor can access.

[0035] Memory is coupled to the processor, for example, by a bus. Memory can include, but is not limited to, random access memory (RAM), such as dynamic RAM (DRAM) and static RAM (SRAM). Memory can be local memory, remote memory, or distributed memory.

[0036] The bus also connects the processor to non-volatile memory and drive units. Often, non-volatile memory is read-only memory (ROM) such as magnetic floppy disks or hard disks, magneto-optical disks, optical disks, CD-ROMs, EPROMs, or EEPROMs, magnetic or optical cards, or other forms of storage for large amounts of data. Often, some of this data is written to memory by a direct memory access process during the execution of software within the computer. Non-volatile storage can be local storage, remote storage, or distributed storage. Non-volatile memory is optional, as the system can be constructed with all applicable data available in memory. Typically, a typical computer system includes at least a processor, memory, and a device that connects the memory to the processor (e.g., a bus).

[0037] Typically, software is stored in non-volatile memory and / or drive units. In practice, it may not always be possible to store entire large programs in memory. Nevertheless, software is moved to a computer-readable location suitable for processing for execution when necessary, and this location is referred to as memory for illustrative purposes in this document. Even when software is moved to memory for execution, the processor typically utilizes hardware registers to store values ​​related to the software and, ideally, a local cache to enhance execution speed. When we say that a software program is "implemented in computer-readable medium," the software program as used herein is assumed to be stored in any known or convenient location (from non-volatile storage to hardware registers). If at least one value related to a program is stored in a processor-readable register, the processor is considered "configured to execute that program."

[0038] The bus also connects the processor to a network interface device. The interface may include either a modem or a network interface, or both. The antenna, modem, or network interface may be understood to be part of the computer system 1000. The interface may also include an analog modem, ISDN modem, cable modem, Token Ring interface, satellite transmission interface (e.g., "Direct PC"), or other interfaces that connect the computer system to other computer systems. The interface may also include one or more input and / or output devices. I / O devices may include, but are not limited to, other input and / or output devices, including a keyboard, mouse, or other pointing device, disk drive, printer, scanner, and display device. Display devices may include, but are not limited to, a cathode ray tube (CRT), a liquid crystal display (LCD), or any other applicable known or convenient display device.

[0039] During operation, the computer system 1000 can be controlled by operating system software, including a file management system such as a disk operating system. An example of operating system software including related file management system software is the family of operating systems known as Windows®, manufactured by Microsoft Corporation in Redmond, Washington, and their associated file management systems. Another example of operating system software including related file management system software is the Linux® operating system and its associated file management system. Typically, a file management system is stored in non-volatile memory and / or drive units, and stores data in memory, including storing files in non-volatile memory and / or drive units, while having the processor perform various actions required by the operating system to input and output data.

[0040] Some parts of the detailed explanation can be presented in terms of algorithms and symbolic representations of operations on data bits in computer memory. These algorithmic descriptions and representations are means used by those skilled in the art to most effectively communicate their research to others skilled in the art. Here, an algorithm is generally considered to be a consistent set of actions that produce a desired result. These actions require the physical manipulation of physical quantities. These quantities usually, though not always, take the form of electrical or magnetic signals that can be stored, transferred, combined, compared, and manipulated in other ways. For reasons of common use, it is sometimes found convenient to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, etc.

[0041] However, it should be noted that these and similar terms should all be associated with appropriate physical quantities and are merely convenient notations given to those quantities. As will be clear from the following explanation, unless otherwise stated, any use of terms such as “processing,” “computing,” “calculating,” “determining,” “displaying,” or “generating” throughout the explanation should be understood to mean the operation and processing of a computer system or similar electronic computer device that manipulates data represented as physical (electronic) quantities in the registers and memory of the computer system and transforms it into other data similarly represented as physical quantities in the memory, registers, or other such information storage devices, transmitters, or display devices of the computer system.

[0042] The algorithms and representations described herein are not inherently related to any particular computer or other device. Various general-purpose systems may be used with programs following the teachings herein, or it may be convenient to configure more specialized devices to perform the methods of some embodiments. The structures required for these various systems will become apparent from the following description. Furthermore, this technique is not described with reference to any particular programming language, and therefore various embodiments can be implemented using various programming languages.

[0043] In another embodiment, the machine may operate as a standalone device or be connected to other machines (e.g., via a network connection). In a network deployment, the machine may operate as a server or client machine in a client-server network environment, or as a peer machine in a peer-to-peer (or distributed) network environment.

[0044] This machine may be a server computer, client computer, personal computer (PC), tablet PC, laptop computer, set-top box (STB), personal digital assistant (PDA), mobile phone, iPhone®, Blackberry, processor, telephone, web appliance, network router, switch, bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify the actions the machine should take.

[0045] In exemplary embodiments, a machine-readable medium or machine-readable storage medium is shown as a single medium, but the terms “machine-readable medium” and “machine-readable storage medium” should be understood to include a single medium or multiple mediums that store one or more instruction sets (e.g., a centralized or distributed database and / or associated caches and servers). Furthermore, the terms “machine-readable medium” and “machine-readable storage medium” should be understood to include any medium that can store, encode, or transmit instruction sets for a machine to execute, and that causes a machine to execute one or more of the techniques and innovations or modules disclosed herein.

[0046] Generally, routines performed to implement embodiments of the present disclosure can be implemented as part of an operating system or as part of a sequence of instructions referred to as a “computer program” or a particular application, component, program, object, module. Typically, a computer program includes one or more instructions that are set up at various points in time in various memories and storage devices within the computer and cause the computer to operate to execute elements of the present disclosure in various forms when read and executed by one or more processing units or processors within the computer.

[0047] Furthermore, although embodiments have been described in the context of fully functional computers and computer systems, those skilled in the art will recognize that various embodiments can be distributed as various forms of program products, and that this disclosure applies equally regardless of the specific type of machine or computer-readable medium used for distribution.

[0048] Further examples of machine-readable storage media, machine-readable media, or computer-readable (storage) media include, but are not limited to, volatile and non-volatile storage devices, floppy disks and other removable disks, hard disk drives, optical discs (e.g., compact disc type read-on memory (CD-ROM), digital multipurpose disc (DVD)), and other recordable media, as well as digital and analog communication links.

[0049] In some situations, the operation of a memory device, such as a state change from binary 1 to binary 0, or vice versa, may include transformations such as physical transformations. In certain types of memory devices, such physical transformations may include the physical transformation of an article to a different state or material. For example, but not limited to, in some types of memory devices, a state change may include the accumulation and storage of electric charge or the release of stored charge. Similarly, in other memory devices, a state change may include a physical change or transformation of magnetic orientation, or a physical change or transformation of molecular structure, such as from crystalline to amorphous or vice versa. The above is not intended to be a complete list of states in memory devices, such as a state change from binary 1 to binary 0, or vice versa, that may include transformations such as physical transformations. Rather, the above is intended as an illustrative example.

[0050] Typically, a storage medium is non-transient, or it may include a non-transient device. In this context, a non-transient storage medium may include a tangible device; that is, a device has a concrete physical form, but its physical state can change. Therefore, for example, non-transient means a device that remains tangible despite such changes in state.

[0051] Throughout this specification and the claims, words such as “comprise,” “comprising,” and “comprising” should be interpreted in a comprehensive sense, the opposite of exclusive or exhaustive, i.e., “including, but not limited to,” unless the context clearly requires another meaning. The terms “connected,” “coupled,” and any variations thereof as used herein mean a direct or indirect connection or coupling between two or more elements, which may be physical, logical, or a combination thereof. Furthermore, the words “herein,” “above,” “below,” and similar words, when used in this application, refer to the application as a whole and not to any particular part thereof. In some contexts, words used in the singular or plural form in the above detailed description may also include plural or singular forms, respectively. The word "or" in relation to a list of two or more items covers all interpretations of the word: any of the items in the list, all of the items in the list, and any combination of the items in the list.

[0052] The above detailed description of embodiments of the present invention is not exhaustive, nor does it limit the invention to the exact forms disclosed above. While specific examples of the invention are described above for illustrative purposes, various equivalent modifications are possible within the scope of the invention, as will be apparent to those skilled in the art. For example, while processes or blocks are shown in a given order, other implementations may execute routines with steps in a different order, or use systems with blocks in a different order; some processes or blocks may be removed, moved, added, subdivided, combined, and / or modified to provide alternative examples or sub-combinations. Each of these processes or blocks can be executed in various different ways. Furthermore, while processes or blocks may be shown to be executed sequentially, they can instead be executed or implemented in parallel or at different points in time. Moreover, any specific figures shown herein are merely examples, and different values ​​or ranges may be used in other implementations.

[0053] The teachings of the present invention presented herein may be applied to systems other than those described above. Further implementations of the invention can also be provided by combining elements and actions of the various embodiments described above. Some other implementations of the invention may include not only additional elements to the implementations described above, but also fewer elements.

[0054] All of the above-mentioned patents, applications, and other references, as well as all of the material listed in the attached application documents, are incorporated herein by reference in their entirety, except to the extent to which any portion of the subject matter is abandoned or denied, or to the extent to which the incorporated material conflicts with the express disclosure herein, in which case the language of this disclosure shall prevail. Aspects of the present invention can be provided by modifying to adopt the systems, functions, and concepts of the various references described above to provide further implementations of the present invention.

[0055] The present invention may be modified in light of the above detailed description, and other modifications may be made. While the above description describes several embodiments of the invention and the best-case scenario, the invention can be carried out in many ways, regardless of how detailed these may appear in the text. Details of the system may vary considerably in their specific implementation, but are still included in the invention disclosed herein. As stated above, any specific terms used in describing certain features or aspects of the invention should not be taken as implying that they are redefined herein to be limited to any particular characteristic, feature, or aspect of the invention relating to that term. In general, terms used in the following claims should not be interpreted as limiting the invention to any specific embodiment disclosed herein unless explicitly defined in the above detailed description. Accordingly, the actual scope of the invention includes not only the disclosed embodiments but also all equivalent methods of carrying out or implementing the invention based on the claims.

[0056] In the following, to limit the number of claims, some aspects of the present invention are presented in several claim forms, but the applicant envisions various aspects of the present invention in any number of claim forms. For example, only one aspect of the present invention is described as a means-plus-function claim under § 112(f) of the U.S. Patent Act, but other aspects can be similarly described as means-plus-function claims or in other forms that can be embodied in a computer-readable medium. (All claims intended to be treated under § 112(f) of the U.S. Patent Act begin with the words "means for," but the use of the term "for" in any other context is not intended to exercise treatment under § 112(f) of the U.S. Patent Act.) Accordingly, the applicant has the right to pursue further claims after the filing of this application and to pursue such further claim forms in either this application or a continuation application. [Explanation of symbols]

[0057] 100 Scenario Examples 101 GNSS receiver 103 satellite

Claims

1. A device for detecting spoofing signals intended to interfere with satellite signals, Processor and Memory that stores processor-executable instructions, The processor-executable instruction, when executed by the processor, causes the processor to, Receiving signals from a signal source disguised as a satellite, Based on the orbital position of the satellite that the signal source is disguised as and the characteristics of the signal from the signal source, an estimated position indicating the relative position of the receiving node that received the signal with respect to the signal source is determined. Obtain a reference position indicating the coordinates of the receiving node, The estimated position of the receiving node is compared with the reference position of the receiving node. If the difference between the estimated position and the reference position exceeds a threshold, it is determined that the signal source is a spoofing source different from the satellite that the signal source is impersonating. The location of the spoofing source is determined based in part on the estimated location. Configure it as follows: Device.

2. The apparatus according to claim 1, wherein the processor-executable instructions further include instructions for receiving an estimated position from each of a plurality of adjacent receivers indicating the relative position of each of the plurality of adjacent receivers with respect to the signal source, and for determining the position of the spoofing source based on the received estimated position.

3. The processor further comprises multiple antennas, Based on the orbital position of the satellite that the signal source is equipped with and the characteristics of the signal, a plurality of estimated positions are determined, each representing the relative position of the plurality of antennas with respect to the signal source. The location of the spoofing source is determined based on triangulation using the aforementioned multiple estimated positions. The apparatus according to claim 1, configured as follows.

4. The apparatus according to claim 1, wherein the characteristics of the signal include the reception angle of the signal, and the processor is configured to compare the reception angle of the signal with a range of expected reception angles based on the original position of the satellite on which the signal source is mounted.

5. The apparatus according to claim 1, wherein the processor is configured to receive ephemeris data and configuration information indicating the reference position of the receiving node from a cellular network, the cellular network includes a Long-Term Evolution (LTE) radio network or a fifth-generation (5G) radio network, and the configuration information includes assistance information from the cellular network.

6. The device according to claim 1, wherein the device is incorporated into an autonomous vehicle or a wearable computer device.

7. The apparatus according to claim 1, wherein the processor is configured to determine the reference position of the receiving node based on past signals from a cellular network including a Long-Term Evolution (LTE) radio network or a fifth-generation (5G) radio network.

8. The aforementioned processor-executable instruction, when executed by the processor, causes the processor to... A first set of information is received from a first communication node in the communication network, which indicates a first estimated position that shows the relative position of the first communication node with respect to the spoofing source. The system receives a second set of information from a second communication node in the communication network, which indicates a second estimated position that shows the relative position of the second communication node with respect to the spoofing source. The system receives a third set of information from a third communication node in the communication network, which indicates a third estimated position that represents the relative position of the third communication node with respect to the spoofing source. The final position of the spoofing source is determined by triangulation using the first, second, and third estimated positions. Configure it as follows: The apparatus according to claim 1.

9. The apparatus according to claim 8, wherein the first communication node, the second communication node, and the third communication node are mobile devices within the communication network.

10. The apparatus according to claim 8, wherein the processor is configured to provide the first, second, and third communication nodes with the orbital position of the satellite that the signal source is carrying.

11. A computer implementation method for detecting signals intended to interfere with satellite signals, The receiving node receives from a signal source, and the signal generated by the signal source is disguised as a satellite signal. The receiving node determines an estimated position indicating the relative position of the receiving node to the signal source based on the orbital position of the satellite that the signal source is impersonating and the characteristics of the signal from the signal source, Obtaining a reference position indicating the coordinates of the receiving node, The receiving node compares the estimated position with the reference position, The receiving node determines that the signal source is a spoofing source different from the satellite it is impersonating if the difference between the estimated position and the reference position exceeds a threshold, The receiving node determines the location of the spoofing source based in part on the estimated location, Methods that include...

12. The method according to claim 11, further comprising receiving an estimated position from each of a plurality of adjacent receivers indicating the relative position of each of the plurality of adjacent receivers with respect to the signal source, and determining the position of the spoofing source based on the estimated position.

13. The receiving node is equipped with multiple antennas, and the method is Based on the orbital position of the satellite that the signal source is equipped with and the characteristics of the signal, a plurality of estimated positions are determined, each representing the relative position of the plurality of antennas with respect to the signal source. The position of the spoofing source is determined based on triangulation using the aforementioned multiple estimated positions, The method according to claim 11, further comprising:

14. The method of claim 11, wherein the characteristics of the signal include the reception angle of the signal, and the comparison includes, by the receiving node, comparing the reception angle with a range of expected reception angles based on the original position of the satellite on which the signal source is mounted.

15. The method according to claim 11, comprising the receiving node receiving configuration information indicating the reference position of the receiving node from a cellular network, wherein the cellular network includes a Long-Term Evolution (LTE) radio network or a fifth-generation (5G) radio network.

16. The method according to claim 14, wherein the configuration information includes assistance information from the cellular network.

17. The method according to claim 11, wherein the receiving node determines the reference position of the receiving node based on past signals from a cellular network including a Long-Term Evolution (LTE) radio network or a fifth-generation (5G) radio network.

18. The method according to claim 11, wherein the receiving node includes a fixed base station or a mobile device.

19. A computer implementation method for determining the location of a spoofing source, A network node in the communication network receives a first set of information from a first communication node indicating a first estimated position that shows the relative position of the first communication node with respect to the spoofing source, The network node receives a second set of information from the second communication node indicating a second estimated position that shows the relative position of the second communication node with respect to the spoofing source, The network node receives a third set of information from the third communication node indicating a third estimated position that shows the relative position of the third communication node with respect to the spoofing source, The network node determines the final position of the spoofing source based on triangulation using the first, second, and third estimated positions, The method according to claim 11, including the method described in claim 11.

20. The method according to claim 19, wherein the first communication node, the second communication node, and the third communication node are mobile devices.

Images