GPS spoofing detection techniques

Patent metadata

Field	Value
Publication number	US-11237273-B2
Application number	US-201916532672-A
Country	US
Kind code	B2
Filing date	Aug 6, 2019
Priority date	Feb 13, 2014
Publication date	Feb 1, 2022
Grant date	Feb 1, 2022

Abstract

Disclosed herein are system, method, and computer program product embodiments for detecting spoofing of a navigation device. A plurality of anti-spoofing techniques are provided. The plurality of anti-spoofing techniques detect interference with data provided by one or more navigation devices for a plurality of threat situations. Positioning, timing and frequency characteristics associated with the one or more navigation devices are analyzed in order to identify a threat situation among the plurality of threat situations. Based on the identified threat situation one or more of the anti-spoofing techniques are executed. The one or more anti-spoofing techniques can be executed in parallel in order to provide various anti-spoofing detection techniques at the same time.

First claim

What is claimed is:

1. A method, comprising:
maintaining, by a computing device, an anti-spoofing technique configured to detect interference with data provided by a navigation device for a threat situation, wherein the computing device is configured to receive position information comprising a reported position from each of two or more antennas, including at least a first antenna and a second antenna;
receiving, by the computing device, a signal, from the navigation device, including at least a first reported position of the first antenna and a second reported position of the second antenna;
calculating a reported distance between the first reported position of the first antenna and the second reported position of the second antenna;
determining, based on the calculating, that the first reported position of the first antenna is equal to the second reported position of the second antenna;
determining a known distance between the two or more antennas, wherein each of the two or more antennas is in a fixed known position;
calculating a difference between the reported distance and the known distance;
comparing, by the computing device, the difference to a distance threshold, wherein the difference exceeds the distance threshold;
identifying, by the computing device, a threat situation based on the difference exceeding the threshold; and
executing, by the computing device, the anti-spoofing technique based on the identifying of the threat situation.

2. The method of claim 1 , wherein received timing characteristics include a time delay of received signals associated with the navigation device, and wherein surveyed-in timing characteristics include a time delay of surveyed-in signals associated with the navigation device.

3. The method of claim 1 , further comprising:
comparing, by the computing device, received power characteristics associated with the navigation device with surveyed-in power characteristics associated with the navigation device,
wherein the identifying of the threat situation is further based on the comparing of the received power characteristics.

4. The method of claim 1 , further comprising:
determining, by the computing device, that a symmetric difference measurement of the navigation device is at or above a predetermined distortion threshold,
wherein the threat situation is identified when the symmetric difference measurement of the navigation device is at or above the predetermined distortion threshold.

5. The method of claim 1 , wherein a validated time source is an atomic clock.

6. The method of claim 1 , further comprising:
receiving timing characteristics comprising a frequency during a predetermined amount of time; and
receiving surveyed-in timing characteristics comprising a surveyed frequency during the predetermined amount of time.

7. The method of claim 6 , wherein the identifying of the threat situation further comprises:
determining a threat detection value based on the comparing of received timing characteristics, and
determining that the threat detection value meets or exceeds a predetermined threat detection frequency value.

8. The method of claim 6 , the comparing of the received timing characteristics comprises:
transforming the received timing characteristics associated with the navigation device and to a received spatial coordinate associated with the navigation device;
transforming the surveyed-in timing characteristics associated with the navigation device to a surveyed-in spatial coordinate associated with the navigation device; and
comparing the received spatial coordinate to the surveyed-in spatial coordinate.

9. The method of claim 8 , the comparing the received spatial coordinate to the surveyed-in spatial coordinate comprising:
identifying a mismatch between the received spatial coordinate and the surveyed-in spatial coordinate, respectively; and
determining that the mismatch exceeds an acceptable spatial threshold.

10. The method of claim 1 , further comprising:
comparing, by the computing device, received positioning characteristics associated with the navigation device with surveyed-in positioning characteristics associated with the navigation device,
wherein the identifying is further based on the comparing of the received positioning characteristics.

11. The method of claim 10 , wherein the comparing of the timing characteristics and the comparing of the positioning characteristics is performed in parallel.

12. The method of claim 1 , further comprising:
comparing, by the computing device, received frequency characteristics associated with the navigation device with surveyed-in frequency characteristics associated with the navigation device,
wherein the identifying is further based on the comparing of the received frequency characteristics.

13. The method of claim 1 , further comprising:
generating, by the computing device, a threat alert based on the identifying of the threat situation.

14. The method of claim 1 , further comprising:
comparing, by the computing device, received timing characteristics associated with the first time source of a second navigation device corresponding to a first one of the antennas with surveyed-in timing characteristics associated with the second time source of the second navigation device corresponding to a second one of the antennas.

15. A system, comprising:
a memory; and
at least one processor coupled to the memory and configured to:
maintain an anti-spoofing technique configured to detect interference with data provided by a navigation device for a threat situation, wherein the computing device is configured to receive position information comprising a reported position from each of two or more antennas, including at least a first antenna and a second antenna;
receive a signal, from the navigation device, including at least a first reported position of the first antenna and a second reported position of the second antenna indicating a reported position of the navigation device;
calculate a reported distance between the first reported position of the first antenna and the second reported position of the second antenna;
determining, based on the calculation, that the first reported position of the first antenna is equal to the second reported position of the second antenna;
determine a known distance between the two or more antennas, wherein each of the two or more antennas is in a fixed known position;
calculate a difference between the reported distance and the known distance;
compare the difference to a distance threshold, wherein the difference exceeds the distance threshold;
identify a threat situation based on the difference exceeding the threshold; and

execute the anti-spoofing technique based on the identifying of the threat situation.

16. The system of claim 15 , wherein to compare the received timing characteristics, the at least one processor is configured to:
transform received timing characteristics associated with the navigation device to a received spatial coordinate associated with the navigation device; and
transform surveyed-in timing characteristics associated with the navigation device to a surveyed-in spatial coordinate associated with the navigation device;
compare the received spatial coordinate to the surveyed-in spatial coordinate.

17. The system of claim 16 , wherein, the at least one processor is configured to:
identify a mismatch between the received spatial coordinate and the surveyed-in spatial coordinate, respectively; and
determine that the mismatch exceeds an acceptable spatial threshold.

Assignees

• Mitre Corp

Inventors

• Leibner Darrow Paine
• Lundberg Erik T

Classifications

• H04K3/255

  based on redundancy of transmitted data, transmission path or transmitting source · CPC title

• G01S19/215 Primary

  issues related to spoofing · CPC title

• H04K3/65

  using deceptive jamming or spoofing, e.g. transmission of false signals for premature triggering of RCIED, for forced connection or disconnection to/from a network or for generation of dummy target signal · CPC title

• H04K3/224

  with countermeasures at transmission and/or reception of the jammed signal, e.g. stopping operation of transmitter or receiver, nulling or enhancing transmitted power in direction of or at frequency of jammer · CPC title

• H04K3/90

  related to allowing or preventing navigation or positioning, e.g. GPS · CPC title