RF Sensing Localization Using TOA/AOA to Detect Repeater Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

RF sensing systems are vulnerable to repeater attacks, which involve jamming by intercepting and replaying sensing signals with delays, making it difficult to defend against and compromising data integrity.

Innovation Solution

A network of sensing entities is employed to receive and process time of arrival (TOA) and angle of arrival (AOA) measurements, applying weights to these measurements to estimate the target object's location and detect errors, thereby identifying jamming scenarios.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single sensing entity is used for RF sensing, then the system complexity is low, but the system is vulnerable to repeater attacks and cannot reliably detect jamming

Engineering Contradiction:
Improveresistance to repeater attacksVSAvoidnetwork of sensing entities
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the sensing system into multiple distributed sensing entities instead of using a single sensing entity. Each entity independently performs TOA and AOA measurements, and the results are combined through a network to achieve reliable target localization while detecting repeater attacks through inconsistency analysis among multiple measurements

Inventive Principle:
Principle #1Segmentation

2Reliability

If RF sensing signals are transmitted without additional processing, then the energy consumption is low, but the system cannot distinguish legitimate signals from replayed jamming signals

Engineering Contradiction:
Improvedata integrityVSAvoidsensing signal processing
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies preliminary processing to sensing signals by embedding unique identifiers and timing information before transmission. This allows receiving entities to verify signal authenticity and detect replayed signals through consistency checks, ensuring data integrity without requiring excessive energy during signal transmission

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If simple TOA measurements are used for target localization, then the measurement process is simple, but the system cannot accurately determine target location in the presence of jamming

Engineering Contradiction:
Improvetarget location accuracyVSAvoidmeasurement processing
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent merges TOA measurements with AOA measurements from multiple sensing entities to determine target location. By combining these different measurement types and analyzing their consistency, the system achieves accurate target localization while detecting jamming attempts, as replayed signals will show inconsistent TOA and AOA relationships

Inventive Principle:
Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The system effectively combats repeater attacks by accurately determining the target object's location and detecting jamming, ensuring data integrity and preventing spoofing.

Implementation Method 1

receive information associated with a sensing signal, wherein the sensing signal is transmitted by a network device, interacts with a target object, and is received by a plurality of network devices, wherein the information includes a plurality of time of arrival (TOA) measurements

Methodology Applied
Scientific EffectTime of Arrival (TOA) measurement: Time of Flight

Implementation Method 2

the information includes a plurality of time of arrival (TOA) measurements and a plurality of angle of arrival (AOA) measurements by the plurality of network devices associated with the sensing signal

Methodology Applied
Scientific EffectAngle of Arrival (AOA) measurement:

Data Source

PatentUS20250380299A1Combatting repeater attacks in radio frequency (RF) sensing using a network of sensing entities
Publication Date: 2025.12.11 QUALCOMM INC
  • US20250380299A1 patent drawing
  • US20250380299A1 patent drawing
  • US20250380299A1 patent drawing

AI summary

Techniques are described for combatting repeater attacks. For example, a network entity can receive information associated with a sensing signal that is transmitted by a network device, interacts with a target object, and received by network devices. The information can include time of arrival (TOA) measurements and angle of arrival (AOA) measurements by the network devices associated with the sensing signal after interaction with the target object. The network entity can determine distance measurements associated with the sensing signal after interaction with the target object based on the TOA measurements. The network entity can apply first weights to the plurality of distance measurements to produce weighted distance measurements and can apply second weights to the plurality of AOA measurements to produce weighted AOA measurements. The network entity can determine an estimated location of the target object and can determine an error in the estimated location of the target object.