Detection of Satellite System Anomalies

Patent metadata

Field	Value
Publication number	US-2016154113-A1
Application number	US-201514816488-A
Country	US
Kind code	A1
Filing date	Aug 3, 2015
Priority date	Oct 3, 2014
Publication date	Jun 2, 2016
Grant date	—

Abstract

Disclosed herein are system, apparatus, article of manufacture, method and/or computer program product embodiments for detection of satellite system anomalies. An embodiment operates by receiving satellite signals from a plurality of sources via at least one satellite system receiver and determining the presence of anomalous satellite system activity by comparing an amount of signal strength drop of each of the satellite signals during a time period to a threat detection threshold and by comparing an amount of consistency of the satellite signals during the time period to the threat detection threshold.

First claim

What is claimed is:

1 . A system, comprising:
at least one satellite system receiver; a memory; and at least one processor coupled to the memory and the satellite system receiver and configured to:
receive satellite signals from a plurality of sources via the at least one satellite system receiver; and
determine the presence of anomalous satellite system activity by comparing an amount of signal strength drop of each of the satellite signals during a time period to a threat detection threshold and by comparing an amount of consistency of the satellite signals during the time period to the threat detection threshold.

2 . The system of claim 1 , wherein to determine the presence of anomalous satellite system activity the at least one processor is configured to:
determining the presence of anomalous satellite system activity based on a number of consecutive times a consistent signal strength drop occurs during the time period.

3 . The system of claim 1 , wherein the amount of consistency comprises
a signal strength range in which the satellite signals fall during the time period, and a minimum percent of source signal strengths that are considered consistent during the time period.

4 . The system of claim 1 , wherein the amount of signal strength drop occurs during a specified number of consecutive times during the time period.

5 . The system of claim 4 , wherein the specified number of consecutive times is specified by the threat detection threshold.

6 . The system of claim 1 , the at least one processor further configured to:
generate an alert of the anomalous satellite system activity.

7 . The system of claim 1 , the at least one processor further configured to:
determine a location of the source of the anomalous satellite system activity.

8 . The system of claim 1 , wherein the satellite system comprises a Global Navigation Satellite System.

9 . A computer implemented method for satellite system threat detection, comprising:
receiving, by at least one processor, satellite signals from a plurality of sources via at least one satellite system receiver; and determining, by the at least one processor, the presence of anomalous satellite system activity by comparing an amount of signal strength drop of each of the satellite signals during a time period to a threat detection threshold and by comparing an amount of consistency of the satellite signals during the time period to the threat detection threshold.

10 . The method of claim 9 , the determining further comprising:
determining the presence of anomalous satellite system activity based on a number of consecutive times a consistent signal strength drop occurs during the time period.

11 . The method of claim 9 , wherein the amount of consistency comprises
a signal strength range in which the satellite signals fall during the time period, and a minimum percent of source signal strengths that are considered consistent during the time period.

12 . The method of claim 9 , wherein the amount of signal strength drop occurs during a specified number of consecutive times during the time period.

13 . The method of claim 12 , wherein the specified number of consecutive times is specified by the threat detection threshold.

14 . The method of claim 9 , further comprising:
generating an alert of the anomalous satellite system activity.

15 . The method of claim 9 , further comprising:
determining a location of the source of the anomalous satellite system activity.

16 . A tangible computer-readable device having instructions stored thereon that, when executed by at least one computing device, causes the at least one computing device to perform operations comprising:
receiving satellite signals from a plurality of sources via at least one satellite system receiver; and determining the presence of anomalous satellite system activity by comparing an amount of signal strength drop of each of the satellite signals during a time period to a threat detection threshold and by comparing an amount of consistency of the satellite signals during the time period to the threat detection threshold.

17 . The computer-readable device of claim 16 , the determining comprising:
determining the presence of anomalous satellite system activity based on a number of consecutive times a consistent signal strength drop occurs during the time period.

18 . The computer-readable device of claim 16 , wherein the amount of consistency comprises
a signal strength range in which the satellite signals fall during the time period, and a minimum percent of source signal strengths that are considered consistent during the time period.

19 . The computer-readable device of claim 16 , wherein the amount of signal strength drop occurs during a specified number of consecutive times during the time period.

20 . The computer-readable device of claim 19 , wherein the specified number of consecutive times is specified by the threat detection threshold.

Assignees

• Mitre Corp

Inventors

• Leibner Darrow Paine
• Reynolds Robert James
• Robble Jeffrey Joseph
• Dunn Charles Borromeo

Classifications

• G01S19/215 Primary

  issues related to spoofing · CPC title

• H04K3/90

  related to allowing or preventing navigation or positioning, e.g. GPS · CPC title

• H04K2203/22

  for communication related to vehicles · CPC title

• H04K3/22

  including jamming detection and monitoring · CPC title

• G01S19/21

  Interference related issues {; Issues related to cross-correlation, spoofing or other methods of denial of service} · CPC title