Method of countermeasure against man-in-the-middle attacks in the context of the UWB protocol

Abstract

The invention relates to a method of countermeasure against an attack aimed at disrupting a distance measurement obtained by measuring signal transmission times between UWB signal transmitter / receiver devices (TX, RX), the method comprising steps that consist in: taking a first measurement of distance (DTU) by measuring transmission times between first UWB communication interfaces (TX1, RX1) of the transmitter / receiver devices; taking a second measurement of the distance (DTB1) between the transmitter / receiver devices by means of second UWB communication interfaces (TX2, RX2) of a different UWB type of the transmitter / receiver devices; and, only if a difference between the first and second distance measurements is less than a first threshold value, optionally activating an operation, depending on a comparison of the first distance measurement with a second threshold value (TH).

Description

[0001] DESCRIPTION

[0002] TITLE: Countermeasure method against man-in-the-middle attacks in the UWB protocol

[0003] Technical field

[0004] The present invention relates to the UWB ("Ultra Wide Band") protocol implemented to evaluate a transmission distance based on the transmission time of messages exchanged between two transmitter / receiver devices. In particular, the present invention aims to counter intermediary or "man-in-the-middle" attacks aimed at disrupting transmissions between two transmitter / receiver devices, in order to distort the evaluation of the distance between these two devices.

[0005] State of the art

[0006] Many applications implement the UWB protocol to accurately and securely assess a distance based on the message transmission time between transmitter / receiver devices. This is the case, for example, of a "hands-free" vehicle door opening application that allows the vehicle door to be unlocked when the key is detected at a distance below a threshold value, typically one to two meters. Thus, the user does not need to take the key in their hand to press an opening trigger button on the key, and can therefore leave the key in their pocket. Furthermore, some smartphones are equipped with a UWB interface that can be used by an application installed in the smartphone to act as a "hands-free" key.

[0007] To obtain a distance estimation with an accuracy of less than one meter using the UWB protocol, it is necessary to take into account multipath propagation. Indeed, under the effect of multipath propagation, the receiver of a message receives several copies of the transmitted message which can be distorted and attenuated. Each of these copies is shifted in time according to the propagation time in the path taken by the copy. Thus, the spread of the propagation times of the copies can correspond to several meters of difference. To obtain the required accuracy, the receiver must determine the arrival time of the first copy received. This task is particularly difficult when obstacles are present between the transmitter and the receiver.

[0008] An attacker between the sender and the receiver can deceive the receiver by sending a message configured to be perceived as the first copy of a message sent by a genuine sender. For example, an attacker can open the door of a vehicle parked in front of a room where the vehicle's owner is located.

[0009] The IR-UWB ("Impulse Radio" - UWB) protocol based on the transmission of very narrow pulses improves the accuracy of distance measurement by facilitating the detection of the first copy of the transmitted message. However, this protocol does not completely counter intermediate attacks, but simply limits the alteration of the evaluated distance resulting from the attack to the period of reception of all copies produced by the multipath transmission.

[0010] Distance Bounding protocols introduce cryptographic mechanisms. However, these protocols do not apply to the PHY physical layer, which is affected by the type of attack described above.

[0011] It is therefore desirable to propose a method for countering intermediate attacks within the framework of the UWB protocol applied to the measurement of distance between two transmitter / receiver devices.

[0012] Summary

[0013] Embodiments relate to a method of countermeasuring an attack aimed at disrupting a distance measurement obtained by measuring signal transmission times between first and second "Ultra Wide Band" - UWB signal transmitter / receiver devices, the method comprising steps consisting of: carrying out a first distance measurement separating the first and second transmitter / receiver devices, by the first transmitter / receiver device, by measuring transmission times between first UWB type communication interfaces, respectively belonging to the first and second transmitter / receiver devices;performing a second distance measurement separating the first and second transmitter / receiver devices, in the first transmitter / receiver device, by second communication interfaces belonging respectively to the first and second transmitter / receiver devices, the second communication interfaces being of a type distinct from UWB; performing a first comparison of the first and second distance measurements; if a difference between the first and second distance measurements is less than a first threshold value, activating or not a first operation by the first transmitter / receiver device, depending on the result of a second comparison consisting of comparing the first distance measurement with a second threshold value;and if a difference between the first and second distance measurements is greater than the first threshold value, do not activate the first operation. Thus, by using two separate communication channels, it is possible to obtain two distance measurements and to compare the obtained measurements. Since it is less likely that an attacker can disrupt both measurements simultaneously, such an attack can be detected by a simple comparison of the two distance measurements. The implementation of this countermeasure proves particularly simple since devices integrating a UWB type communication interface generally include another communication interface.;

[0014] According to one embodiment, the second distance measurement is carried out by measuring transmission times between the second communication interfaces.

[0015] According to one embodiment, the second communication interfaces are of the Bluetooth Low Energy - BLE type.

[0016] According to one embodiment, the two devices perform the first and second distance measurements and perform the first comparison, the second transmitter / receiver device activating a second operation if the difference between the first and second distance measurements is greater than the first threshold value.

[0017] According to one embodiment, the first distance measurement is calculated using a first measurement of duration between a time of transmission of a query message and a time of reception of a response message, by one of the first communication interfaces of the first and second transmitter / receiver devices, and a second measurement of a duration between a time of reception of the query message and a time of transmission of the response message, by the other of the first communication interfaces of the first and second transmitter / receiver devices.

[0018] According to one embodiment, the first distance measurement is further calculated using a third measurement of duration between the instant of reception of the response message and an instant of transmission of a second interrogation message, by one of the first communication interfaces of the first and second transmitter / receiver devices, and a measurement of a duration between the instant of transmission of the first response message and an instant of reception of the second interrogation message by the other of the first communication interfaces of the first and second transmitter / receiver devices.

[0019] According to one embodiment, the first operation comprises a door unlocking and is activated if the difference between the first and second distance measurements is less than the first threshold value, and if the first distance measurement is less than a second threshold value. According to one embodiment, the first operation comprises a door locking and is activated if the difference between the first and second distance measurements is greater than the first threshold value, or if the first distance measurement is greater than a second threshold value.

[0020] Embodiments may also relate to a system comprising first and second transceiver devices, each of the first and second transceiver devices comprising: a first communication interface of UWB type, and a second communication interface of a type distinct from UWB, the system being configured to implement the previously defined method.

[0021] Brief description of the figures

[0022] The present invention will be better understood with the aid of the following description of exemplary embodiments with reference to the appended figures, in which identical reference signs correspond to structurally and / or functionally identical or similar elements.

[0023] Figure 1 schematically represents two transmitter / receiver devices exchanging distance measurement messages, for example according to the UWB protocol,

[0024] Figures 2A and 2B schematically represent steps of distance measurement methods, according to the UWB protocol,

[0025] Figure 3 shows steps of a distance measurement method including countermeasurement steps, according to one embodiment.

[0026] Detailed description

[0027] Figure 1 shows two transmitter / receiver devices TX, RX exchanging distance measurement messages according to the UWB protocol. The TX device is at a distance DT from the RX device. The TX device is configured to take the initiative to trigger a distance measurement with the RX device. The RX device is configured to trigger an operation, for example a security operation such as unlocking or opening a door if the measured distance between the TX and RX devices is less than a distance threshold value TH.

[0028] In an attack configuration presented in Figure 1, the TX device exchanges position measurement messages with the RX device. Thus, the RX device evaluates the distance DT which separates it from the RX device. An attacker equipped with a transmitter device AX positions itself at a distance DA from the RX device, less than the threshold value TH and emits signals capable of disrupting the messages received by the RX device. The signals emitted by the attacker's AX device are configured to distort the distance evaluated by the RX device, so that this distance corresponds to the distance DA with the AX device. The attacker can thus trigger the action executed by the RX device by positioning itself at a distance DA less than the threshold value TH. For this purpose, the AX device can be configured to exploit the multi-path processing of the received signals, executed by the RX device.

[0029] Note that the action performed by the RX device can also be a door lock when the DL distance with the TX device is greater than a second threshold value. In this case, the attacker can aim to prevent this action by positioning the AX device close enough to the RX device so that the distance measured by the RX device remains below this second threshold value.

[0030] Figures 2A, 2B illustrate SS-TWR (Single Sided - Two Way Ranging) and DS-TWR (Double Sided - Two Way Ranging) distance evaluation methods TFM1, TFM2 that can be used to measure the distance DT between the TX and RX devices. In the evaluation method TFM1 illustrated by Figure 2A, the TX device sends a distance measurement request message M1 to the RX device, and the RX device sends a distance measurement response message M2 to the TX device in response. The distance DT between the TX and RX devices can thus be evaluated by the following equation:

[0031] DT = C.(T1' - T1) / 2, (1) in which T1 is the time elapsed between the time of reception of the message M1 by the RX device and the time of transmission of the message M2 by the RX device, TT is the time elapsed between the time of transmission of the message M1 by the TX device and the time of reception of the message M2 by the TX device, and C is the propagation speed of electromagnetic waves in the air. The time of flight (TT - T1) / 2 (= (TOF1+TOF2) / 2) corresponds to the average of the transmission time TOF1 of the message M1 and the transmission time TOF2 of the message M2 between the TX and RX devices. The duration TT can be transmitted by the TX device to the RX device in an MD message following the message M2.

[0032] In the DS-TWR evaluation method TFM2 of Figure 2B, the TX device sends the distance measurement request message M1 to the RX device, the RX device sends the distance measurement response message M2 to the TX device in response, and the TX device sends a distance measurement response message M3 to the RX device in response. The distance DT between the TX and RX devices can be evaluated by the following equation: DT = C.(TT.T2' - TTT2) / (2.(T1+T2+TT+T2')), (2) in which T1 is the time elapsed between the time of reception of the message M1 by the RX device and the time of transmission of the message M2 by the RX device, TT is the time elapsed between the time of transmission of the message M1 by the TX device and the time of reception of the message M2 by the TX device, T2 is the time elapsed between the time of reception of the message M2 by the TX device and the time of transmission of the message M3 by the TX device, and T2' is the time elapsed between the time of transmission of the message M2 by the RX device and the time of reception of the message M3 by the RX device. The times TT and T2 may be transmitted by the TX device to the RX device in the message M3 or in a subsequent message MD'.

[0033] Once the DT distance is evaluated, the RX device can compare the DT distance to a threshold value TH and trigger an action based on the comparison result.

[0034] It should be observed that in Figures 2A, 2B, the roles of the TX and RX devices can be reversed, and the TX device can finally estimate the distance DT and transmit it to the RX device.

[0035] Furthermore, the distance measurement DT can be obtained from the duration measurements T1, TT, T2, T2' by different equations. For example, the distance measurement can be obtained by calculating the average of distances obtained using equation (1) applied on the one hand to the duration measurements T1 and TT, and on the other hand to the duration measurements T2 and T2'.

[0036] Figure 3 represents steps S1 to S26 of a remote control method as a function of the distance between a device triggering a command, namely the transmitter / receiver device TX and a device executing the command, namely the device RX. The devices TX, RX each comprise a first communication interface TX1, RX1 of UWB type, and a second communication interface TX2, RX2, for example of BLE ("Bluetooth Low Energy") or WiFi™ type. The communication interfaces of BLE or WiFi™ type have the advantage of being able to remain active or on standby without excessive power consumption, which is not the case for communication interfaces of UWB type. It may therefore be advantageous for the first interface RX2 to be inactive outside of periods when it is not necessary to measure the distance DT with the device TX.

[0037] In step S1, the TX device commands the transmission of a wake-up message WK by its second communication interface TX2. In the following step S2, the TX device activates its first communication interface TXT. In step S3, the message WK is transmitted by the second communication interface TX2 of the TX device to the second communication interface RX2 of the RX device. In step S4, the second communication interface RX2 transmits the wake-up message WK to the RX device which activates its first communication interface RX1, in step S5. In step S6, the activation of the first communication interface RX1 triggers the transmission of a message AK for activating a distance evaluation method. The message AK is received by the first communication interface TX1 of the TX device. In step S7, the first communication interface TX1 activates the evaluation method TFM which can be the method TFM1 or TFM2 previously described.At the end of the execution of the TFM evaluation method by the communication interface TX1, in steps S8 and S9, the first communication interface TX1 transmits to the device TX and to the first communication interface RX1, the time of flight measurement TT and possibly the time of flight measurement T2, according to the evaluation method TFM1 or TFM2 executed.

[0038] In step S10, at the end of the execution of the evaluation method TFM by the first communication interface RX1, the latter transmits to the device RX the flight time measurement T1 and possibly the flight time measurement T2', according to the evaluation method TFM1 or TFM2 executed. In step S11, the flight times TT, T2 received by the first communication interface RX1 are transmitted to the device RX. In step S12, the device RX notes the current time and stores it in a timestamp data item ("timestamp") TST. In step S13, the timestamp data item TS1, and possibly the flight time T1 and the flight time T2' are transmitted to the second communication interface RX2. In step S14, the second communication interface RX2 transmits the time stamp data TS1, and possibly the flight time T1, and the flight time T2' to the second communication interface TX2 of the device TX.In step S15, the second communication interface TX2 transmits the received data (TS1, T1, T2') to the TX device. In step S16, the TX device records the current time and stores it in a time stamp data item TS2. In steps S17, S18 and S19, the time stamp data item TS2 is transmitted to the RX device, via the second interfaces TX2 and RX2. Upon receipt of the time stamp data item TS2, in step S20, the RX device records the current time and stores it in a time stamp data item TS3. Then, the RX device calculates a distance DTB1 based on the timestamp data TS2 and TS3, and calculates a distance DTU based on the flight times TT and possibly T2 received and the flight times T1 and possibly T2' measured and provided by the first communication interface RXT.

[0039] In step S21, the RX device compares the distances DTU and DTB1. The RX device executes step S22 if the distances DTB2 and DTU have a non-significant difference, for example less than a first threshold value, otherwise it executes step S23. In step S22, the RX device executes an operation CM1 according to the distance measurement DTU which is then judged to be correct. This operation may consist of comparing the distance measurement DTU with a second distance threshold value and executing a command, for example unlocking a door, if the distance measurement DTU is less than the distance threshold value. Step S23 may comprise the execution of another command CM2 and possibly the emission of an alarm signal.

[0040] In the example where command CM1 is a door unlock, command CM2 can include locking the door.

[0041] Following step S18, the TX device can execute steps S24 to S26 for verifying measured distances. In step S24, the TX device in turn calculates the DTU distance as a function of the flight times T1 and possibly T2' received and the flight times TT and possibly T2 measured and provided by the first communication interface TX1, and calculates a distance DTB2 as a function of the time stamp data TS1 and TS2. In step S25, the TX device compares the distances DTB2 and DTU, and emits an alarm signal in step S26 if the distances DTB2 and DTU have a significant difference, for example greater than the first threshold value.

[0042] The first threshold value and the comparison mode implemented in steps S21 and S25 are determined so as to take into account the differences in precision of the distance measurements obtained by the time-of-flight calculations of the transmissions between the first interfaces TX1, RX1 and between the second interfaces TX2, RX2. Indeed, a distance calculation from the time-of-flight of a BLE transmission for example (of the order of a meter) is much less precise than a distance calculation from the time-of-flight of a UWB transmission (of the order of 10 cm).

[0043] If the second communication interfaces TX2, RX2 have the capability, they can directly read the timestamp data TS1, TS2, TS3. This reduces the latency times between the time of reading each time stamp data and the time to be timestamped for sending or receiving the message, and therefore the accuracy of the timestamp.

[0044] In a simplified version, the timestamp data TS3 is not recorded, and the distance DTB1 is calculated by the RX device in step S20, based on the timestamp data TS1 and TS2.

[0045] Thanks to these provisions, it is possible to detect an attack on the transmissions between the first interfaces TX1 and RX1, aimed at disrupting the distance measurement between the devices TX and RX. Indeed, for such an attack to be carried out successfully, the attacker would also have to disrupt the transmissions between the second interfaces TX2 and RX2 and this disruption would have to lead to a disrupted distance measurement close to the disrupted distance measurement determined using the transmissions between the first interfaces TX1, RX1.

[0046] It will be clear to those skilled in the art that the present invention is susceptible to various variant embodiments and various applications. In particular, the invention is not limited to the measurement of the distance between the TX and RX devices by measuring flight times using the second communication interfaces TX2, RX2. Indeed, this second distance measurement can be carried out by any other means sufficiently precise to allow validation of the first distance measurement obtained by the flight times measured by the first communication interfaces TX1, RX1. For example, one of the TX, RX devices can be fixed and have a precisely known position. The other of the devices can determine its position by any means, for example using a satellite geographic positioning system.

[0047] The invention can be applied to the control of operations such as the opening and locking of a door such as a vehicle door or a room door, the opening of a barrier for example for access to parking lots. The invention can also be applied to validation operations for example of a payment by mobile phone, or even of a concert or public transport ticket. The invention can also be applied to access operations for example to a personal device such as a personal computer or a tablet, or even to activation operations of devices such as household appliances.

Claims

CLAIMS 1. Method of countermeasure against an attack aimed at disrupting a distance measurement obtained by measuring signal transmission times between first and second transmitter / receiver devices (TX, RX) of "Ultra Wide Band" - UWB type signals, the method comprising steps consisting of: carrying out a first distance measurement (DTU) separating the first and second transmitter / receiver devices, by the first transmitter / receiver device (RX), by measuring transmission times between first communication interfaces (TX1, RX1) of UWB type, belonging respectively to the first and second transmitter / receiver devices;performing a second distance measurement (DTB1) separating the first and second transmitter / receiver devices, in the first transmitter / receiver device, by second communication interfaces (TX2, RX2) belonging respectively to the first and second transmitter / receiver devices, the second communication interfaces being of a type distinct from UWB; performing a first comparison of the first and second distance measurements; if a difference between the first and second distance measurements is less than a first threshold value, activating or not a first operation by the first transmitter / receiver device, depending on the result of a second comparison consisting of comparing the first distance measurement with a second threshold value (TH); and if a difference between the first and second distance measurements is greater than the first threshold value, not activating the first operation.; 2. Method according to claim 1, wherein the second distance measurement is carried out by measuring transmission times between the second communication interfaces (TX2, RX2).

3. Method according to claim 2, in which the second communication interfaces (TX2, RX2) are of the Bluetooth Low Energy - BLE type.

4. Method according to one of claims 1 to 3, in which the two devices (TX, RX) carry out the first and second distance measurements (DTU, DTB1, DTB2) and carry out the first comparison, the second transmitter / receiver device activating a second operation (AL) if the difference between the first and second distance measurements is greater than the first threshold value.

5. Method according to one of claims 1 to 4, in which the first distance measurement is calculated using a first measurement of duration (TT) between a time of transmission of an interrogation message (M1) and a time of reception of a response message (M2), by one of the first communication interfaces of the first and second transmitter / receiver devices (TX, RX), and a second measurement of a duration (T1) between a time of reception of the interrogation message and a time of transmission of the response message, by the other of the first communication interfaces of the first and second transmitter / receiver devices.

6. Method according to claim 5, in which the first distance measurement is further calculated using a third duration measurement (T2) between the instant of reception of the response message (M2) and an instant of transmission of a second interrogation message (M3), by one of the first communication interfaces of the first and second transmitter / receiver devices (TX, RX), and a duration measurement (T2') between the instant of transmission of the first response message and an instant of reception of the second interrogation message by the other of the first communication interfaces of the first and second transmitter / receiver devices.

7. Method according to one of claims 1 to 6, wherein the first operation comprises a door unlocking and is activated if the difference between the first and second distance measurements is less than the first threshold value, and if the first distance measurement is less than a second threshold value.

8. Method according to one of claims 1 to 7, wherein the first operation comprises a door locking and is activated if the difference between the first and second distance measurements is greater than the first threshold value, or if the first distance measurement is greater than a second threshold value.

9. System comprising first and second transmitter / receiver devices (TX, RX), each of the first and second transmitter / receiver devices comprising: a first communication interface (RX1, TX1) of UWB type, and a second communication interface (RX1, TX1) of a type distinct from UWB, the system being configured to implement the method according to one of claims 1 to 8.

Images