Server algorithms to improve space based authentication

Patent metadata

Field	Value
Publication number	US-10728032-B2
Application number	US-201715608024-A
Country	US
Kind code	B2
Filing date	May 30, 2017
Priority date	Oct 16, 2012
Publication date	Jul 28, 2020
Grant date	Jul 28, 2020

Abstract

A system and methods for location authentication are presented. An estimated server signal is estimated based on a generated known code signal, and a client received satellite signal is received from a client device. The client received satellite signal is compared to the estimated server signal to provide a comparison result.

First claim

The invention claimed is:

1. A method for location authentication, the method comprising:
receiving a client filtered satellite signal from a client device and information that specifies a sample rate associated with the client filtered satellite signal, the client filtered satellite signal comprising a client received satellite signal filtered through a client signal filter;
determining filter characteristics of the client signal filter by one of:
receiving the filter characteristics from the client device, and
estimating a transfer function of the client signal filter based on the client filtered satellite signal and the sample rate associated with the client filtered satellite signal;

configuring an emulating signal filter to emulate the client signal filter based on the filter characteristics;
receiving a server received satellite signal from a satellite receiver device;
filtering the server received satellite signal with the emulating signal filter to provide an emulated filtered satellite signal; and
comparing the client received satellite signal and the emulated filtered satellite signal to provide a signal comparison result.

2. The method of claim 1 , further comprising authenticating a location of the client device based on the signal comparison result.

3. The method of claim 2 , wherein:
the client device is allowed access to a protected resource if the location of the client device is valid; and
the client device is not allowed access to the protected resource if the location of the client device is invalid.

4. The method of claim 1 , wherein the filter characteristics are determined by receiving the filter characteristics from the client signal filter.

5. The method of claim 1 , wherein the emulating signal filter is selected from a bank of filters based on the filter characteristics.

6. The method of claim 1 , wherein the transfer function of the client signal filter is estimated based on a discrete Fourier transform the client filtered satellite signal.

7. The method of claim 1 , wherein the client received satellite signal and the server received satellite signal are transmitted from at least one of the group consisting of: an LEO satellite, an MEO satellite, a GEO satellite, a Global Navigation Satellite System (GNSS) satellite, and a Global Positioning System (GPS) satellite.

8. A location authentication system comprising:
a server comprising a processor and a memory storing instructions, that
when executed by the processor, causes the server to:
receive a client filtered satellite signal from a client device and information that specifies a sample rate associated with the client filtered satellite signal, the client filtered satellite signal comprising a client received satellite signal filtered through a client signal filter;
determine filter characteristics of the client signal filter by one of receiving the filter characteristics from the client device, and estimating a transfer function of the client signal filter based on the client filtered satellite signal and the sample rate associated with the client filtered satellite signal;
configure an emulating signal filter to emulate the client signal filter based on the filter characteristics;
receive a server received satellite signal from a satellite receiver device;
filter the server received satellite signal with the emulating signal filter to provide an emulated filtered satellite signal; and
compare the client received satellite signal and the emulated filtered satellite signal to provide a signal comparison result.

9. The location authentication system of claim 8 , wherein the server further authenticates a location of the client device based on the signal comparison result.

10. The location authentication system of claim 9 , wherein: the client device is allowed access to a protected resource if the location of the client device is valid; and
the client device is not allowed access to the protected resource if the location of the client device is invalid.

11. The location authentication system of claim 8 , wherein the filter characteristics are determined by receiving the filter characteristics from the client signal filter.he client signal filter.

12. The location authentication system of claim 8 , wherein the emulating signal filter is selected from a bank of filters based on the filter characteristics.

13. The location authentication system of claim 8 , wherein the transfer function of the client signal filter is estimated based on a discrete Fourier transform the client filtered satellite signal.

14. The location authentication system of claim 8 , wherein the client received satellite signal and the server received satellite signal are transmitted from at least one of the group consisting of: an LEO satellite, an MEO satellite, a GEO satellite, a Global Navigation Satellite System (GNSS) satellite, and a Global Positioning System (GPS) satellite.

15. A location authentication system comprising:
a server comprising a processor and a memory storing instructions, that when executed by the processor, causes the server to:
receive a client filtered satellite signal from a client device and information that specifies a sample rate associated with the client filtered satellite signal, the client
filtered satellite signal comprising a client received satellite signal filtered through a client signal filter;
determine filter characteristics of the client signal filter by one of receiving the filter characteristics from the client device, and estimating a transfer function of the client signal filter based on the client filtered satellite signal and the sample rate associated with the client filtered satellite signal;
configure an emulating signal filter to emulate the client signal filter based on the filter characteristics;
receive a server received satellite signal from a satellite receiver device;
filter the server received satellite signal with the emulating signal filter to provide an emulated filtered satellite signal; and
authenticate a location of the client device based on a comparison of the client received satellite signal and the emulated filtered satellite signal.

16. The location authentication system of claim 15 , wherein:
the client device is allowed access to a protected resource if the location of the client device is valid; and
the client device is not allowed access to the protected resource if the location of the client device is invalid.

17. The location authentication system of claim 15 , wherein the filter characteristics are determined by receiving the filter characteristics from the client signal filter.

18. The location authentication system of claim 15 , wherein the emulating signal filter is selected from a bank of filters based on the filter characteristics.

19. The location authentication system of claim 15 , wherein the transfer function of the client signal filter is estimated based on a discrete Fourier transform the client filtered satellite signal.

20. The location authentication system of claim 15 , wherein the client received satellite signal and the server received satellite signal are transmitted from at least one of the group consisting of: an LEO satellite, an MEO satellite, a GEO satellite, a Global Navigation Satellite System (GNSS) satellite, and a Global Positioning System (GPS) satellite.

Assignees

• Boeing Co

Inventors

• Enge Per K
• Lawrence David
• O'Connor Michael L
• Eglington Michael L
• Gutt Gregory M
• Whelan David A

Classifications

• H04W12/06

  Authentication · CPC title

• G01S19/215 Primary

  issues related to spoofing · CPC title

• G01S19/06

  employing an initial estimate of the location of the receiver as aiding data or in generating aiding data · CPC title

• H04L9/32 Primary

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L67/42

  Electricity · mapped topic