Cloud-Based GNSS Cyber-Attack Detection Using Ground Sensors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Global Navigation Satellite Systems (GNSS) are vulnerable to radio-frequency (RF) based cyber-attacks such as jamming, satellite injection, and spoofing, which standard receivers cannot detect or mitigate, and existing antenna-based solutions are not feasible for all devices, particularly small user devices like smartphones.
Innovation Solution
A system and method that involves ground-level sensors receiving satellite data, determining its validity, and alerting nearby GNSS devices of potential cyber-attacks, using a processing circuitry and memory to execute this process, and instructing devices to mitigate the attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If antenna arrays are used to detect and mitigate cyber-attacks, then detection capability is improved, but device complexity and cost increase significantly
Solution Approach 1:
The patent introduces a cloud-based intermediary system that receives GNSS data from user devices, analyzes it for signs of cyber-attacks, and communicates with the devices. This mediator handles the complex detection logic remotely, allowing simple receiver devices to benefit from advanced attack detection without incorporating complex antenna arrays or processing capabilities themselves.
Solution Approach 2:
The solution moves the detection function from the physical dimension (antenna arrays at the user device) to the data dimension (cloud-based analysis of received signals). By analyzing signal characteristics, satellite positions, and temporal patterns in the cloud, the system achieves high detection capability without requiring complex hardware at the user end.
2Ease of operation
If standard GNSS receivers are used, then device simplicity is maintained, but detection and mitigation of cyber-attacks is not possible
Solution Approach 1:
A cloud-based intermediary system receives GNSS data from simple user devices, analyzes it for signs of cyber-attacks, and communicates with the devices. This mediator handles the complex detection logic remotely, allowing simple receiver devices to benefit from advanced attack detection without incorporating complex antenna arrays or processing capabilities themselves.
Solution Approach 2:
The system continuously monitors GNSS signal characteristics, satellite positions, and receiver behavior, comparing them against expected patterns. When anomalies indicating cyber-attacks are detected, the system provides feedback to the user device, alerting it to potential threats and enabling mitigation while maintaining the simplicity of the receiver hardware.
3Reliability
If cloud-based detection system is implemented, then detection capability is improved without increasing device complexity, but data transmission requirements and latency increase
Solution Approach 1:
The system performs preliminary filtering and analysis of GNSS data locally at the user device before transmission to the cloud. By pre-processing the data to extract only the most critical information and anomalies, the system reduces the amount of data that needs to be transmitted, thereby minimizing latency and bandwidth requirements while maintaining effective detection capability.
Data Source
AI summary
A system and method for detecting cyber-attacks. The method includes receiving satellite data from at least one satellite orbiting at a location of a ground-level sensor. The satellite data is received from the ground-level sensor. The method also includes determining whether the received satellite data is valid, and upon determining that the received satellite data is invalid, extracting a list of GNSS devices in a region where the ground-level sensor is deployed, and alerting each GNSS device in the list of GNSS devices on a potential cyber-attack.