Resilient PNT Validation for Railroad Infrastructure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Railroad infrastructure relying on Global Navigation Satellite Systems (GNSS) for position, navigation, and timing (PNT) services is vulnerable to spoofing and jamming attacks, which can compromise the safety and security of train control networks.
Innovation Solution
Implementing a resilient PNT system that uses a reference position and time to validate GNSS determinations, generating warnings or alerts when discrepancies exceed predetermined thresholds, and employing a network of base stations to calculate accurate asset location and time through Time-Location Agent (TLA) processes, thereby enhancing the security of PNT services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If railroad infrastructure uses GNSS for PNT services, then position and time information can be obtained, but the system becomes vulnerable to spoofing and jamming attacks
Solution Approach 1:
The patent introduces a PNT validation system as an intermediary layer between GNSS signals and railroad infrastructure. This validation system receives GNSS position and time information, verifies its authenticity against reference data and network-based validation, and only accepts validated information for critical operations. The intermediary validation layer filters out spoofed and jammed signals before they can compromise the railroad infrastructure.
Solution Approach 2:
The system implements feedback mechanisms where base stations continuously monitor and validate PNT information from railroad assets. When discrepancies are detected between reported GNSS data and expected values based on network positioning or reference systems, the validation system generates alerts and can reject the compromised data. This closed-loop feedback enables real-time detection and response to spoofing or jamming attempts.
2Reliability
If a reference position and time system is implemented to validate GNSS data, then confidence in PNT determinations increases, but system complexity increases
Solution Approach 1:
The validation system is designed to perform multiple functions using a unified architecture. The same base station infrastructure that handles normal train control communications also provides PNT validation services. The reference position and time system leverages existing network resources, communication protocols, and processing capabilities while adding validation functionality. This multi-functionality approach avoids duplicating entire systems and reduces overall complexity.
Solution Approach 2:
The system performs preliminary validation actions by establishing reference position and time data in advance, and by continuously monitoring for anomalies before they can affect critical operations. The validation system proactively checks PNT information against expected patterns and network-based expectations, detecting issues early when they can be corrected with minimal impact on railroad operations.
3Difficulty of detecting and measuring
If network-based validation is performed continuously, then spoofing detection capability improves, but computational resources and processing time increase
Solution Approach 1:
The validation system applies partial validation actions by focusing computational resources on the most critical validation tasks and using threshold-based detection for less critical checks. Rather than performing exhaustive validation of every possible parameter, the system uses intelligent filtering to identify and validate only the most relevant PNT parameters that could indicate spoofing or jamming. This selective validation approach maintains strong detection capability while reducing processing overhead.
Data Source
AI summary
Methods and apparatus for detecting of spoofing or jamming activities near a train or other railroad assets uses a message sent from each of a plurality of base stations receiving a wireless packet transmitted by a radio of a railroad asset that reports the PNT information determined by the radio using GNSS and a timestamp for the time of arrival of wireless packet at the base station. The position of the asset is then calculated based on the time arrival of the wireless packet at each base station and compared to the reported position. A warning is generated if the difference exceeds a predetermined threshold.