Reference Location Device Attack Detection in 5G Positioning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current wireless communication systems face challenges in accurately detecting man-in-the-middle attacks, particularly in 5G networks, where attackers can manipulate positioning reference signals (PRS) to deceive devices about their location, leading to potential security breaches.

Innovation Solution

A method involving reference location devices (RLDs) that determine their own location using PRS measurements and compare these with expected values to detect negative location errors, indicating potential attacks, and utilize these RLDs to correct positioning measurements for other devices, thereby enhancing attack detection and positioning accuracy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If positioning measurements are performed using PRS resources in 5G networks, then positioning accuracy is improved, but vulnerability to man-in-the-middle attacks increases

Engineering Contradiction:
Improvepositioning accuracyVSAvoidattack vulnerability
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by having reference location devices (RLDs) determine their locations in advance using positioning reference signals. These pre-determined RLD locations serve as trusted reference points that can detect attacks before they affect victim devices, allowing the system to prepare defense mechanisms proactively rather than reactively

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Reference location devices act as intermediary elements between the positioning infrastructure and victim devices. The RLDs receive positioning measurements, compare them with expected values, and detect negative location errors that indicate attacks. This intermediary layer filters out malicious positioning data before it can compromise victim device location accuracy

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If RLDs are used to detect attacks by comparing location measurements with expected values, then attack detection capability is improved, but system complexity increases

Engineering Contradiction:
Improveattack detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Reference location devices perform self-service by autonomously determining their own locations using positioning reference signals and comparing these measurements with expected values stored in the system. The RLDs independently detect negative location errors and generate attack detection reports without requiring complex centralized processing, thereby improving reliability while managing system complexity through distributed self-monitoring

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements feedback mechanisms where RLDs continuously monitor their positioning measurements, compare them with expected values, and generate reports when negative location errors are detected. This feedback loop enables automatic attack detection and notification to the network entity, improving reliability through continuous monitoring while maintaining manageable complexity through standardized feedback protocols

Inventive Principle:
Principle #23Feedback

3Reliability

If multiple RLDs are deployed to enhance attack detection, then detection reliability is improved, but device quantity and system complexity increase

Engineering Contradiction:
Improvedetection reliabilityVSAvoiddevice quantity
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The attack detection function is segmented and distributed across multiple reference location devices rather than centralized in a single entity. Each RLD independently performs positioning measurements, compares them with expected values, and generates detection reports. This segmentation improves detection reliability through distributed monitoring while managing device quantity by using existing infrastructure elements as RLDs

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20240389061A1Attack detection and reporting based on reference devices for user equipment (UE) positioning
Publication Date: 2024.11.21 QUALCOMM INC
  • US20240389061A1 patent drawing
  • US20240389061A1 patent drawing
  • US20240389061A1 patent drawing

AI summary

Disclosed are techniques for communication. In an aspect, a network entity determines a location of a reference location device (RLD) based on positioning measurements of one or more positioning reference signal (PRS) resources, and determines whether a potential man-in-the-middle attack has occurred based on whether a location error of the RLD is negative and a comparison of an absolute value of the location error and a threshold.