Wireless Sensor Network Anomaly Detection via Signal Triangulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless sensor networks face challenges in detecting and identifying unknown or anomalous sensors, including malicious or malfunctioning ones, which can lead to resource wastage and network security breaches, as existing systems struggle to differentiate between legitimate and anomalous sensor behaviors.
Innovation Solution
A gateway computing device receives sensed data and signal strength information from managed sensors to determine anomalies by comparing timestamps and signal properties, identifying anomalies based on discrepancies in transmission times and locations, and triangulating or trilaterating sensor positions to verify sensor authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If automatic network construction and configuration is implemented, then network setup efficiency is improved, but the ability to detect unknown or anomalous sensors deteriorates
Solution Approach 1:
The system performs preliminary actions by having sensors transmit their presence information and capabilities during the network construction phase. The gateway collects and stores this information in advance, creating a baseline inventory of legitimate sensors before anomalies can occur. This preliminary data collection enables later comparison to identify unknown or malicious sensors without disrupting automatic network setup.
Solution Approach 2:
The system implements feedback mechanisms where sensors continuously transmit status information and the gateway compares received information against the registered inventory. When discrepancies are detected (such as unknown sensors or anomalous behavior patterns), the system provides feedback by flagging these sensors for further investigation. This feedback loop maintains automatic operation while enabling anomaly detection through continuous monitoring and comparison.
2Quantity of substance
If sensor inventory is taken based on communications received, then resource management is improved, but detection of eavesdropping sensors deteriorates
Solution Approach 1:
The system uses universal transmission protocols and communication patterns that all legitimate sensors must follow. By establishing these standard communication behaviors as the baseline, the system can detect anomalies including eavesdropping sensors that deviate from expected patterns. The same communication channel used for inventory management becomes the basis for security monitoring.
Solution Approach 2:
The gateway acts as an intermediary that mediates between sensor communications and network management. It receives and analyzes all sensor transmissions, comparing them against registered inventory data. The gateway can identify eavesdropping sensors by detecting transmissions that don't match registered sensor profiles or by identifying sensors that receive but don't properly transmit according to protocol, thus protecting the network while maintaining accurate inventory management.
3Reliability
If anomaly detection mechanisms are added, then network security is improved, but system complexity increases
Solution Approach 1:
Sensors perform self-service by automatically transmitting their presence and capability information during network initialization. This self-reported data is stored in the gateway's inventory without requiring manual configuration or complex verification processes. The sensors essentially register themselves, reducing the complexity of the detection system while maintaining security through automated information collection.
Solution Approach 2:
The system monitors changes in sensor transmission parameters such as transmission intervals, signal strength, and data formats. By establishing baseline parameter ranges for legitimate sensors during normal operation, the system can detect anomalies when parameters fall outside expected ranges. This parameter-based approach provides security through simple threshold comparisons rather than complex analysis algorithms.
Data Source
AI summary
In some examples, a computing device may receive sensed data of a first sensor sent in a first transmission. The computing device may associate a first timestamp with the sensed data. Further, the computing device may receive, from other sensors, first signal strength information including first signal strength data and a first signal property related to the first transmission, and a second timestamp corresponding to detection of the first transmission. The computing device may receive, from other sensors, second signal strength information including second signal strength data and a second signal property related to a second transmission, and a third timestamp corresponding to detection of the second transmission. When the third timestamp is later than the first timestamp and the first signal property matches the second signal property, the computing device may indicate that a sensor that sent the second transmission is associated with an anomaly.