UWB Attack Detection via Ranging Consistency Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
UWB-based communication networks are susceptible to attacks that manipulate distance estimations, such as Cicada and STS attacks, which can tamper with ranging operations and prevent detection of wormhole attacks, making it difficult to secure localization systems.
Innovation Solution
An attack detection method and system that perform ranging operations between UWB nodes and conduct consistency checks on the results, specifically comparing outputs of single-sided and double-sided two-way ranging operations with predefined distances to detect inconsistencies indicative of attacks, using predefined margins of tolerance to validate measurements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If UWB ranging operations are performed to achieve high precision localization, then measurement precision is improved, but the system becomes susceptible to attacks that manipulate distance estimations
Solution Approach 1:
The patent performs consistency checks on ranging results before accepting them as valid. By preliminarily verifying whether multiple ranging measurements are consistent with each other and with expected geometric relationships, the system can detect and reject manipulated distance estimations before they compromise localization accuracy, thus resolving the contradiction between precision and reliability
Solution Approach 2:
The patent implements a feedback mechanism where ranging results are cross-validated against predefined constraints and geometric relationships. The system continuously monitors ranging measurements and compares them with expected values based on known node positions and triangle inequality constraints, providing feedback that enables detection of attacks while maintaining high precision localization when measurements are valid
2Reliability
If consistency checks are performed on ranging results to detect attacks, then security is improved, but device complexity increases
Solution Approach 1:
The patent changes the parameter being checked from raw distance values to geometric relationships and consistency constraints. By verifying whether ranging results satisfy triangle inequality constraints and predefined geometric relationships rather than simply checking individual distance values, the system achieves attack detection through parameter transformation that maintains computational efficiency while improving reliability
Solution Approach 2:
The patent segments the attack detection process into distinct consistency check operations that verify different aspects of ranging results independently. By dividing the verification into separate checks for triangle inequality constraints, geometric relationships, and predefined position constraints, the system achieves comprehensive attack detection through modular operations that reduce overall complexity
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively detects attacks on estimated distances between UWB nodes by identifying inconsistencies in ranging operations, thereby enhancing the security of UWB-based localization systems and preventing unauthorized information retrieval or injection.
Implementation Method 1
performing ranging operations between at least two UWB nodes comprised in a communication network, wherein said ranging operations output ranging results
Data Source
AI summary
In accordance with a first aspect of the present disclosure, an attack detection method is conceived, comprising: performing ranging operations between at least two ultra-wideband (UWB) nodes comprised in a communication network, wherein said ranging operations output ranging results; performing at least one consistency check on the ranging results output by the ranging operations; detecting at least one attack on an estimated distance between one or more of said UWB nodes using an output of the consistency check. In accordance with further aspects of the present disclosure, a corresponding attack detection system is provided, as well as a computer program for carrying out the attack detection method.