Classifications

• • G—PHYSICS
  • G01—MEASURING; TESTING
  • G01S—RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES
  • G01S19/00—Satellite radio beacon positioning systems; Determining position, velocity or attitude using signals transmitted by such systems
  • G01S19/01—Satellite radio beacon positioning systems transmitting time-stamped messages, e.g. GPS [Global Positioning System], GLONASS [Global Orbiting Navigation Satellite System] or GALILEO
  • G01S19/13—Receivers
  • G01S19/21—Interference related issues ; Issues related to cross-correlation, spoofing or other methods of denial of service
  • G01S19/215—Interference related issues ; Issues related to cross-correlation, spoofing or other methods of denial of service issues related to spoofing
• • G—PHYSICS
  • G01—MEASURING; TESTING
  • G01S—RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES
  • G01S19/00—Satellite radio beacon positioning systems; Determining position, velocity or attitude using signals transmitted by such systems
  • G01S19/01—Satellite radio beacon positioning systems transmitting time-stamped messages, e.g. GPS [Global Positioning System], GLONASS [Global Orbiting Navigation Satellite System] or GALILEO
  • G01S19/13—Receivers
  • G01S19/32—Multimode operation in a single same satellite system, e.g. GPS L1/L2

Definitions

• the present invention concerns a system and a method for authenticating satellite navigation signals (GPS and Galileo), and particularly authentication techniques of the signal and relative checking of falsification.
• GPS and Galileo satellite navigation signals
• the invention uses the encrypted signal "commercial service" of the Galileo system to detect falsification attacks of the signal carried out on free signals.
• GNSS Global Navigation Satellite Systems
• LBAC location based access control
• Theft and terrorism are typical scenarios for spoofing attacks towards applications like the monitoring of hazardous transportation or precious materials and synchronization of the time through GNSS.
• the cost for carrying out a spoofing attack is no longer a deterrent since GNSS simulators can be rented at low cost, and they can be developed with low-cost hardware like "software defined radio” platforms.
• the "receiver-spoofer” concept, a GNSS receiver connected to a GNSS transmitter, has been demonstrated on such platforms.
• FIG. 1 Such a figure represents how a falsification signal attack, or spoofing attack can occur.
• the satellites (101) for satellite global navigation (GNSS) generate the signal (102) that is transmitted from space to the receiver.
• GNSS satellite global navigation
• Such a signal is received by a receiver (103) and is processed in order to obtain the position, speed and time data (107).
• a spoofing attack is carried out by another apparatus, called “spoofer" (106), which, through a single antenna (105), emits a signal which is replica and equivalent to all the signals transmitted by the satellites (104).
• Such a signal if suitably calibrated in terms of power and synchronised with the signals of the satellites, can be used to falsify the position of the receiver as wished.
• the first category of techniques comprises the use of inertial systems or the use of opportunity signals that, compared with the satellite navigation signal, makes it possible to check whether the two positions are coherent.
• the Galileo Commercial Service was devised for services that foresee a payment for access to the signal.
• the design foreseen for the CS foresees the development of counterfeiting-resistant receivers that can store the encryption keys used for accessing the signal.
• Such a design becomes similar to the approach used in military receivers.
• such an approach is very expensive, both in terms of hardware and in terms of cost of the service to distribute and load the encryption keys in the receivers.
• the costs involved in such a process would make it difficult for such technology to enter the markets that require the authentication of the signal but at the same time minimum costs.
• Such markets comprise, for example, motorway payments based on GNSS and payments by electronic commerce.
• the system taught in such a document foresees to provide, on the same frequency, an encrypted service, in which the spread spectrum code is secret, and an unencrypted service synchronised with the previous one, through which portions of the secret spread spectrum code are transmitted together with their generation time; such sequences are then correlated with the encrypted signal.
• the encrypted service is in quadrature phase with respect to the unencrypted signal.
• SAS signal authentication sequences
• the main object of the present invention is to improve the state of the art relative to systems and methods for authenticating an unencrypted satellite navigation signal.
• Another object of the present invention is to provide a system for authenticating an unencrypted satellite navigation signal that has an alternative configuration with respect to the configurations of conventional apparatuses.
• a further object of the present invention is to provide a method for authenticating an unencrypted satellite navigation signal that is an alternative to the conventional methods and easy to be implemented.
• a method for authenticating an unencrypted satellite navigation signal according to the attached claim 1 is provided.
• figure 1 illustrates, in general, how a spoofing attack of an unencrypted satellite navigation signal can occur
• figure 2 shows a schematic representation of a system for authenticating an unencrypted satellite signal according to the present invention
• figure 3 is a schematic representation of the main components of a first apparatus of the system according to the present invention
• figure 4 illustrates the progression of the satellite navigation signals according to a first variant of the authentication method according to the present invention
• figure 5 shows the progression of the satellite navigation signals according to a second variant of the authentication method according to the present invention
• figure 6 is a block diagram of the method for authenticating a satellite navigation signal according to the present invention
• figure 7 illustrates a functional block diagram of a second apparatus of the system according to the present invention.
• the proposed authentication method requires the use of the Galileo Commercial Service (CS) or of other encrypted satellite navigation signals.
• the Galileo CS is a value added service integrated in the Galileo satellite navigation system.
• the signal is transmitted over the frequency E6 (1278.750 MHz), and it is a Binary Phase Shift Keying (BPSK) phase change signal in which data are transmitted through a spread spectrum of the signal at a chip frequency of 5Mhz.
• E6A, E6B and E6C On the frequency E6 the combination of three channels is transmitted with a single signal: E6A, E6B and E6C.
• Channel E6A is reserved for governmental signals, whereas channels E6B and E6C are dedicated to CS.
• Channel E6B can transport data (so-called “satellite navigation messages” or “navigation messages”).
• E1/L1 signals from various systems are transmitted, including GPS, Galileo, Glonass and Beidou, which contain unencrypted channels, like the channel GPS C/A and the channel Galileo E1 B.
• signals transmitted over an unencrypted channel like GPS C/A or Galileo OS
• an encrypted channel like Galileo E6B
• the signal received by the receiver is the juxtaposition of signals transmitted over different channels.
• each of such signals can sometimes be called “component” (for example, component of the signal received relative to the channel E1 B).
• the signal foresees the support for the encryption of the spread spectrum code ("spreading" code), thus making the signal not- obtainable by anyone not in possession of the keys.
• the content of the data transported in the signal of the CS had not been defined yet.
• an innovative detail of the invention in object is that the authentication system is independent from the data that will be transported in the channel. This is possible since in order to authenticate the signal only the spread spectrum codes, also called Pseudo Random Numbers (PRN), are used, which in the case of the signal CS can be encrypted and thus cannot be determined without knowing the encryption keys.
• PRN Pseudo Random Numbers
• figure 2 represents (201) one or more satellite systems (GPS, Galileo, Glonass or Beidou) transmitting unencrypted signals (not encrypted) for civil use and at least 1 or 2 Galileo satellites that transmit the signal CS (channel E6B or E6C, or that signal which will be encrypted).
• the signals that travel in space (202) have a different frequency, since the unencrypted signals like GPS Coarse Acquisition (C/A) and Galileo Open Service (OS) transmit in the frequency E1/L1 ( 575.42 MHz) whereas the signal of the Galileo CS travels in the frequency E6 (1278.750 MHz).
• C/A GPS Coarse Acquisition
• OS Galileo Open Service
• Such signals are received by a first apparatus, called authentication apparatus (208) that uses two different antennae for receiving the two frequencies E6 and E1/L1 (203,204).
• Such an apparatus processes the signals and transforms them into digital, thereby allowing the telematic transmission of processed data (205) to a second apparatus, preferably an authentication server (206).
• the authentication server uses a standard GNSS reference receiver to extract the navigation messages of the signals in E1/L1 useful for determining the transmission time (207) described hereafter.
• the transmission can take place with any digital data transportation means like wifi networks, internet networks or via cellular network.
• the authentication apparatus (208) does not contain the decryption keys of the Galileo CS. It is thus impossible for the apparatus to decrypt the signal, carry out measurements or extract data.
• the authentication apparatus (208) it is possible for the authentication apparatus (208) to decrypt and carry out time and distance measurements from the satellite for the unencrypted signals in the frequency E1/L1 , like for example the GPS C/A or Galileo OS service.
• the signals of the Galileo CS and Galileo OS are taken as reference, they will be transmitted by the same satellite, but the spread spectrum codes will be synchronised at a single time reference, typically called system time.
• the concept of synchronisation of the spread spectrum codes of the Galileo CS with the Galileo OS, or of synchronisation of the codes with times of other systems forms the basis of this invention.
• the signals processed and the measurements made on the unencrypted channels by the authentication apparatus are transmitted to the authentication server that has the keys required for encoding the encrypted signal.
• the invention is based on the concept that 2 spread— spectrum sequences transmitted over different frequencies by the same satellite must have a time correspondence, since they have been generated simultaneously by the same satellite at the same moment.
• spread spectrum sequences generated by other satellites at a particular time for which it is possible to calculate the difference of the Galileo time (for example the difference of the GPS time from the Galileo time) must have time correspondence with the Galileo spread spectrum sequences, once the time difference between the different systems and the time difference given by the different positions of the satellites at the moment of transmission have been determined.
• the concept of time correspondence includes all of the possible measurable delay contributions (like for example the Broadcast Group Delay relative to signals transmitted over different frequencies), not explained hereafter so as to keep the presentation brief.
• the security of the system is based on the concept that while the unencrypted signals can be generated, and thus spoofed (spoofing), the encrypted signals cannot be regenerated since the keys for generating them are not available.
• this invention we refer to the need to authenticate unencrypted signals using the encrypted signal of the Galileo CS, but other existing or future encrypted signals can be used, like for example the Galileo Public Regulated Service (PRS), should they be synchronised in a transmission phase and there is access to the decryption keys.
• PRS Galileo Public Regulated Service
• FIG 3 represents a block diagram of the high-level authentication apparatus (304).
• Such an apparatus has the function of acquiring and synchronising the signals received, and transmitting them to the authentication server.
• the signal of the frequency E1/L1 is received by a dedicated antenna (303) and is converted to a baseband frequency (305).
• Such a signal is then digitized by an analogue digital converter (306) and is used by the digital processing block (307) to extract information necessary for the synchronisation and extraction of information on the reference time. Since it is a signal that contains unencrypted channels, the digital processing block is able to acquire the signal, to determine the start of the spread spectrum code for the unencrypted channels sought (for example E1 B), and to extract the data contained therein.
• the processing block can also extract the system transmission time (TOW) and calculate the transmission time to the receiver (TO: moment of generation and transmission, by the satellite, of the spread spectrum code, referring to the time of the receiver) of such a specific satellite navigation message and use a synchronisation mechanism (308) to align the spread spectrum codes both of the digitized signal E6 (309) and of the digitized signal (for example E1B) in E1/L1 (306).
• the digital data obtained by the processing block of the signal over the unencrypted channels are combined, compressed and made available for the transmission through a communication interface (310) like for example a USB, Ethernet or serial port.
• FIG 4 represents the case of checking a Galileo Open Service signal transmitted in the frequency E1/L1 with a Galileo CS signal transmitted in the frequency E6.
• TO and ⁇ are used to generate the reference code of the Galileo CS (channel B or C) at the precise moment (401).
• the algorithm also needs the encryption keys of the signal.
• the code of the Galileo CS generated (401) at time TO can thus be correlated with the signal E6 received at time Trx carrying out a cross-correlation, and a value above a certain threshold will determine that the code E6 is coherent with the code E1/L1 , checking the authenticity of the signal E1/L1. In the case of an inauthentic signal, in the time position Trx a code corresponding to the signal E6 received will not be generated.
• figure 5 represents the same example of figure 4 but applied to the case of checking a non-Galileo signal (example GPS or Glonass) received in the frequency E1/L1 and of the signal of the Galileo CS received in the frequency E6.
• a non-Galileo signal example GPS or Glonass
• E1/L1 example GPS or Glonass
• Trx time Trx
• ⁇ and ⁇ are used to generate the reference code of the Galileo CS (channel B or C) at the precise moment (501).
• the algorithm also needs of the encryption keys of the signal.
• the code of the generated Galileo CS (501) can thus be correlated with the signal E6 received by carrying out a cross-correlation, and a value above a certain threshold will determine that the code E6 is coherent with the code E1/L1 , checking the authenticity of the signal E1/L1.
• the authentication apparatus In the case of calculation of the transmission time to the receiver TO in the remote authentication server (right branch of the diagram of Figure 6), the authentication apparatus records the signals E6 and E1/L1 in a synchronised manner (612), using an internal clock. With this option the authentication apparatus must be able to obtain an approximate reception time of the signals ⁇ Trx.
• a time ⁇ Trx can be inputted by the user, or derived from at least one external source (for example from an internal support clock, from GSM apparatuses, from Internet connection, etc).
• Such a time and the signals are transmitted to the remote authentication server (613).
• the authentication server continuously receives the bits that travel in space from at least one reference receiver (615), and extracts the bits (or navigation message) at the reference time ⁇ Trx (614).
• Such bits contain the system time (Time of Week, TOW) and are aligned with the bits of the signal E1/L1 , in order to find the transmission time to the receiver TO (616).
• the length of the signal E1/L1 (and therefore the number of bits present in it) must be evaluated accurately in order to reduce the collisions between bits in the case of signals that are too short.
• figure 7 represents a functional block diagram of the authentication server (206).
• the objective of the authentication server is to check the signals to determine the authenticity of the signal E1/L1.
• Such a block receives the signals recorded and data from the authentication apparatus (701 and 714), and carries out the checking operations to search for the presence of a signal of the commercial service.
• the system seeks the TO from the signal samples received by the remote authentication server or uses the TO calculated by the authentication apparatus.
• a baseband reference signal (711) and the local replica of the PRN code of the signal E1/L1 to be searched for (710) are generated.
• the search function of the transmission time of the code (709) carries out the acquisition and tracing operations of a determined PRN code on E1/L1 , extraction of the bits, and aligns the extracted bits with the bits received by the external GNSS reference receiver (715).
• the bits of the external reference receiver also contain the system time (TOW) that is used as time reference.
• the system can determine the transmission time TO of the signal E1/L1 , which is passed to the generation block of the local replica for the signal E6 (705).
• the time ⁇ obtained by calculating the position of the satellites from the ephemeris of the system in question and the clock offset with respect to Galileo is also calculated.
• the transmission time is provided by the authentication apparatus, it is directly supplied to the generation block of the encrypted code E6 (705).
• the authentication motor receives the signals E6, and generates the replica of the baseband carrier of the signal (703).
• the signal Since the signal is encrypted, it is necessary to generate the encrypted code at the correct moment as a local replica (705) to carry out the correlation with the signal received. This will be used to check whether the signal received is authentic.
• the generation of the encrypted code takes place by accessing a security module (708) that contains the encryption keys necessary to regenerate the signal at a given time.
• a checking block of the authentication (707) will carry out the correlation between the signals to check for the presence of peaks, and thus determine whether the signal E1/L1 , potentially falsifiable, was transmitted coherently with the signal E6, which is not falsifiable (707).
• Thresholds that can be set via software both on the value of the peak and on the search window can determine the value for the decision whether the signal is authentic or not.
• the checking block of the signal (707) has a true/false value as output.

Landscapes

• Engineering & Computer Science (AREA)
• Radar, Positioning & Navigation (AREA)
• Remote Sensing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Position Fixing By Use Of Radio Waves (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=49035905

Family Applications (1)

Country Status (2)

Cited By (6)

Citations (5)

• 2013
  • 2013-07-01 IT IT000169A patent/ITVI20130169A1/it unknown
• 2014
  • 2014-07-01 WO PCT/IB2014/062766 patent/WO2015001483A1/en active Application Filing

Patent Citations (5)

Non-Patent Citations (3)

Also Published As

Similar Documents

Legal Events