Spatially Distributed GNSS Receiver Spoofing Test System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for testing GNSS receivers' resilience to spoofing attacks cannot replicate real-world conditions, as outdoor tests risk interfering with non-tested GNSS receivers, potentially causing serious malfunctions in critical systems like aircraft, drones, and cell towers.
Innovation Solution
A system and method that generate multiple RF test signals with overlapping antenna radiation patterns, using sets of GNSS ranging codes that are insufficient for a single receiver to lock onto but sufficient when combined, allowing outdoor testing without interfering with other GNSS receivers, enabling the assessment of GNSS receiver resilience to spoofing attacks in real-world scenarios.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If outdoor testing with simulated GNSS signals is performed, then real-world testing conditions are achieved, but non-tested GNSS receivers may lock onto simulated signals causing serious malfunctions
Solution Approach 1:
The system segments the full set of GNSS ranging codes into multiple disjoint subsets, with each signal generator transmitting only a portion of the codes. This segmentation ensures that no single generator transmits sufficient codes to cause receiver lock, while the combined transmission from multiple generators provides the complete code set needed for legitimate testing.
Solution Approach 2:
The system applies local quality by creating spatially differentiated signal characteristics - the harmful interference risk is localized to specific geographic regions where all signal generators are simultaneously visible. By carefully controlling the distribution and power of individual generators, the system ensures that legitimate test receivers in the overlap zone receive sufficient combined signal strength, while other receivers encounter insufficient signal quality to lock onto simulated signals.
2Reliability
If multiple signal generators transmit test signals with full sets of ranging codes, then sufficient signals are available for receiver lock, but the risk of spoofing non-tested receivers increases
Solution Approach 1:
The complete set of GNSS ranging codes is segmented into multiple disjoint subsets assigned to different signal generators. Each generator transmits signals containing only its assigned subset of codes, ensuring that individually transmitted signals lack sufficient code diversity to cause receiver lock or spoofing. The segmentation is mathematically designed so that the union of all subsets equals the complete code set, enabling legitimate testing when combined.
Solution Approach 2:
Each signal generator transmits only a partial set of ranging codes - deliberately insufficient on its own to enable receiver lock or spoofing. This partial action approach ensures that while each individual generator is harmless, the collective transmission from multiple generators provides the complete code set necessary for legitimate test operations.
3Manufacturing precision
If lab testing with RF cables and anechoic chambers is used, then controlled testing conditions are achieved, but real-world operating conditions cannot be replicated
Solution Approach 1:
The system introduces multiple distributed signal generators as intermediaries between the test receiver and the natural GNSS satellite signals. These generators transmit simulated satellite signals through the actual outdoor propagation environment, including atmospheric effects, multipath, and geometric dilution of precision (GDOP). This intermediary approach enables controlled testing variables while maintaining authentic real-world signal characteristics and propagation conditions.
Solution Approach 2:
The system transitions from two-dimensional controlled lab environments to three-dimensional outdoor spatial testing. By distributing multiple signal generators throughout the outdoor environment and utilizing the full three-dimensional geometry of signal propagation, the system captures real-world effects such as atmospheric refraction, ionospheric delay, and spatial temporal variations that cannot be replicated in controlled laboratory settings.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables field testing of GNSS receivers in real-world conditions without endangering other GNSS receivers, allowing for the evaluation of their resilience to spoofing attacks while ensuring that non-tested receivers remain unaffected, thus ensuring safety and accuracy in navigation systems.
Implementation Method 1
Each test signal is generated using a respective set of GNSS ranging codes... The test signals are transmitted by respective antennas which are deployed in such a way that they have overlapping radiation patterns
Data Source
AI summary
A system for testing a global navigation satellite system (GNSS) receiver includes signal generators, antennas coupled to respective signal generators and having overlapping antenna radiation patterns, and processing circuitry. The signal generators generate respective test signals. Each of the test signals is a combination of multiple GNSS navigational signals which are generated using a set of ranging codes. The processing circuitry selects respective sets of ranging codes for the signal generators, such that the sets of ranging codes are separately insufficient to lock a GNSS receiver and are jointly sufficient to lock a GNSS receiver.