UWB Ranging Security via Payload-Embedded Secure Sequences

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current ultra-wideband (UWB) positioning systems face security vulnerabilities, particularly in many-to-many transmission scenarios, where malicious devices can disrupt the accuracy and reliability of UWB ranging by accessing configuration parameters for generating scrambled timestamp sequences (STS).

Innovation Solution

Embedding unique information within the payload section of ranging messages for generating secure sequences, such as STS, ensures that only authorized devices can correctly generate the secure sequences, thereby enhancing the security of UWB ranging operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If configuration parameters for generating scrambled timestamp sequences are transmitted in clear or accessible format, then device synchronization and positioning functionality is enabled, but security vulnerabilities arise allowing malicious devices to generate fake ranging messages

Engineering Contradiction:
Improvesecurity of UWB rangingVSAvoidcomplexity of secure sequence generation
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by embedding the secure sequence generation parameters (such as initialization vectors or seed values) into the payload section of ranging messages before transmission. This allows receiving devices to have the necessary information ready in advance to generate the correct scrambled timestamp sequences, preventing malicious devices from generating fake messages while maintaining system functionality.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If secure sequence generation parameters are embedded in payload sections, then only authorized devices can generate correct secure sequences, but message structure and processing become more complex

Engineering Contradiction:
Improveintegrity of positioning dataVSAvoidcomplexity of message processing
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by using the existing payload section of UWB ranging messages to carry dual functionality: both the original positioning data and the secure sequence generation parameters. This multi-functional approach allows the same message structure to serve both positioning and security purposes without requiring separate dedicated fields, thereby limiting the increase in processing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If many-to-many transmissions are used for positioning, then positioning coverage and functionality are enhanced, but security vulnerabilities increase due to broader parameter exposure

Engineering Contradiction:
Improvepositioning coverageVSAvoidmalicious device interference
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by providing different security parameter sets to different devices participating in the many-to-many positioning transmissions. Each device receives and uses location-specific or device-specific initialization vectors or seed values embedded in the payload sections of messages intended for or from that device. This localized approach maintains the versatility of many-to-many communications while preventing malicious devices from generating fake messages, as each device's secure sequence parameters are unique and not universally accessible.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS20250039665A1Security enhancements for ultra-wideband positioning using many-to-many transmissions
Publication Date: 2025.01.30 QUALCOMM INC
  • US20250039665A1 patent drawing
  • US20250039665A1 patent drawing
  • US20250039665A1 patent drawing

AI summary

Aspects presented herein may enhance the security of UWB ranging, thereby improving the accuracy and reliability of the UWB ranging. In one aspect, a first wireless device embeds first information for generating a secure sequence of a ranging message in a payload section of the ranging message. The first wireless device generates the secure sequence based at least in part on the first information. The first wireless device transmits the ranging message including the secure sequence and the payload section for a second wireless device. In another aspect, a second wireless device receives a ranging message from a first wireless device that includes a first secure sequence and a payload section. The second wireless device generates a second secure sequence based on information embedded in the payload section of the ranging message.