Networked GPS Receiver Verification Against Pseudorange Spoofing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Spoofing and cyber-attacks in military and civilian systems using global navigation satellite systems (GNSS) and GPS pose a significant threat by providing false location information, necessitating a method to accurately classify and prevent hostile entities.
Innovation Solution
A network system with assured and unassured users employs a computer program product that time-tags and compares location measurements using GPS and datalink messages, applying assurance thresholds and computation techniques to determine user status, enabling communication only among assured users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If GPS and GNSS systems are used for location determination, then positioning capability is improved, but vulnerability to spoofing and cyber-attacks increases
Solution Approach 1:
The patent introduces an intermediary verification mechanism where assured users validate location measurements from unassured users through comparison of GPS and datalink-derived locations. This intermediary verification process filters out spoofed information before it can be acted upon, resolving the contradiction by adding a protective layer without eliminating the underlying GPS positioning capability.
Solution Approach 2:
The system implements feedback through the verification process where location measurements are compared and validated. The feedback loop involves unassured users providing location data, assured users verifying it against independent measurements, and the system updating trust status accordingly. This feedback mechanism enables continuous improvement of security while maintaining positioning functionality.
2Reliability
If location measurements are verified through comparison with assured users, then security against spoofing is improved, but system complexity increases
Solution Approach 1:
The patent segments users into distinct categories (assured and unassured) and applies different verification protocols to each segment. This segmentation simplifies the overall system by allowing standardized verification procedures for different user types rather than requiring a single complex verification system for all users.
Solution Approach 2:
The system changes the parameter of user trust status from a binary state to a dynamic attribute that can be modified based on verification results. By treating reliability as a changeable parameter rather than a fixed property, the system achieves high security through dynamic verification while maintaining manageable complexity through parameter-based control.
3Reliability
If communication is restricted to assured users only, then system integrity is improved, but connectivity availability decreases
Solution Approach 1:
The patent implements dynamic user classification where users transition between assured and unassured states based on verification outcomes. This dynamic approach allows the system to adapt connectivity availability to individual user trust levels, maintaining system integrity through selective communication while preserving flexibility for users who pass verification.
Solution Approach 2:
The system performs preliminary verification actions before establishing communication channels. By conducting verification procedures in advance and classifying users accordingly, the system ensures integrity is established before communication occurs, while still allowing connectivity for those who pass the preliminary checks.
Data Source
AI summary
A method of signifying an assurance status of an unassured user. The method includes steps of: installing a computer program product for assurance on a computer readable medium of an unassured user that is executable by a processor of the unassured user, and installing the computer program product for assurance on a computer readable medium of an assured user that is executable by a processor of the assured user. When executed, processor of the assured user is caused to: time tag an unassured datalink message received from the unassured user by an assured receiver of the assured user; send an assured location measurement and an assured datalink message to the unassured user from an assured transceiver of the assured user; compare an unassured location measurement received from the unassured user and the assured location measurement based on an assurance threshold; and signify an assurance status of the unassured user.