Multi-GNSS Measurement Arrangement for Railway Spoofing Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Satellite-based measurement facilities in the railway sector are vulnerable to spoofing attacks, which can lead to falsified location and speed measurements, posing a significant safety risk due to the high safety standards required in this domain.
Innovation Solution
A measurement arrangement utilizing at least two satellite-based measurement facilities operating on different global satellite positioning systems, connected to an evaluation facility that performs a plausibility check on the generated measured values and accuracy values, generating an error signal if the check fails to ensure tamper-proof operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single satellite-based measurement facility is used, then the device complexity is low, but the reliability is insufficient due to vulnerability to spoofing attacks
Solution Approach 1:
The patent combines multiple satellite-based measurement facilities operating on different global satellite positioning systems into a single measurement arrangement. This merging approach enables cross-validation of measurements through the evaluation facility, which compares results from different systems to detect spoofing attacks, thereby improving reliability while managing complexity through integrated architecture.
Solution Approach 2:
The evaluation facility acts as an intermediary between the multiple satellite-based measurement facilities and the final measurement output. It receives measurements from different GPS systems, performs plausibility checks by comparing them, and generates corrected measurement values or error signals, thus mediating the conflict between individual system vulnerabilities and overall system reliability.
2Reliability
If multiple satellite-based measurement facilities from different systems are used, then the reliability improves through cross-validation, but the device complexity increases
Solution Approach 1:
The measurement arrangement is segmented into distinct functional components: multiple satellite-based measurement facilities (each from different GPS systems) and a separate evaluation facility. This segmentation allows independent operation of each measurement facility while enabling centralized plausibility checking and error detection through the evaluation facility, managing complexity through modular architecture.
Solution Approach 2:
The evaluation facility serves multiple functions: it receives measurements from different satellite systems, performs plausibility checks, detects spoofing attacks, generates error signals, and produces corrected measurement values. This multi-functionality consolidates complex operations into a single component, improving reliability without proportionally increasing overall system complexity.
3Reliability
If spoofing detection capabilities are implemented, then the reliability against attacks improves, but the measurement precision requirements increase
Solution Approach 1:
The evaluation facility implements feedback by continuously comparing measurements from different satellite-based facilities and using the results to detect inconsistencies indicative of spoofing. This feedback mechanism enables real-time detection of attacks while maintaining measurement precision through cross-validation, as the system uses the redundancy of multiple systems to identify and correct potential errors.
Data Source
AI summary
A measurement arrangement has a first satellite-based measurement facility, which works on the basis of signals of a first global satellite positioning system, for generating a first measured value, which indicates a location or a speed of the first measurement facility, and a measured value-based first accuracy value indicating the accuracy of the first measured value. A second satellite-based measurement facility is present, which works on the basis of signals of a second, different global satellite positioning system and serves for generating a second measured value, which indicates the location or the speed of the second measurement facility, and a second measured value-based accuracy value, which indicates the accuracy of the second measured value. The first and second satellite-based measurement facilities are connected to an evaluation facility, which carries out a plausibility check using the measured values and generates an error signal if the plausibility check delivers an implausible result.