GNSS Signal Authentication Via Power and Distortion Monitoring

Abstract

Abstract-We propose a simple low-cost technique that enables civil Global Positioning System (GPS) receivers and other civil global navigation satellite system (GNSS) receivers to reliably detect carry-off spoofing and jamming. The technique, which we call the Power-Distortion detector, classifies received signals as interference-free, multipath-afflicted, spoofed, or jammed according to observations of received power and correlation function distortion. It does not depend on external hardware or a network connection and can be readily implemented on many receivers via a firmware update. Crucially, the detector can with high probability distinguish low-power spoofing from ordinary multipath. In testing against over 25 high-quality empirical data sets yielding over 900,000 separate detection tests, the detector correctly alarms on all malicious spoofing or jamming attacks while maintaining a <0.6% single-channel false alarm rate.

Spoofing Detection Using GNSS/INS/Odometer Coupling for Vehicular Navigation

“…Spoofing signals are designed to mislead GNSS receivers by generating fabricated synchronized navigation signals leading to fake navigation solutions [1,2,3]. Hence, detection and mitigation of spoofing attacks is critical for emerging applications such as autonomous vehicle navigation, environmental monitoring and forensic applications [4,5].…”

“…Consistency checks can be performed in different ways including intra-system, inter-system, multi-frequency and multi-sensor approaches. In the intra-system consistency check, the presence of spoofing signals can be detected by monitoring the consistency of the code and carrier Doppler or by monitoring the carrier-to-noise ratio [1,13]. The emergence of different civilian GNSS constellations has led to the availability of multi-constellation receivers.…”

Real-Time Rejection and Mitigation of Time Synchronization Attacks on the Global Positioning System

“…A plethora of countermeasures have been designed to make the receivers robust against more sophisticated attacks [9], [15], [17]- [19], [21]- [25], [27], [28], [33]- [35]. Vector tracking exploits the signals from all satellites jointly and feedbacks the predicted position, velocity, and time (PVT) to the internal lock loops [23], [24], [33].…”

“…The attack on the pseudoranges suddenly appears at t = 30 s and perturbs the pseudoranges by 8000 m. The equivalent attack on pseudorange rates is a Dirac delta function. • Type II: The spoofer gradually manipulates the authentic signals and changes the clock bias through time [11], [17], [19], [28], [29], [41]. This attack can be modeled by where sρ andṡρ are respectively called distance equivalent velocity and distance equivalent acceleration of the attack.…”

“…• Jamming (blocking): The spoofer sends high power signals to jam the normal operation of the receiver by disrupting the normal operation of the victim receiver, often referred to as loosing lock. Then, the victim receiver may lock onto the spoofer signal after jamming [9], [15]- [17]. • Data level spoofing: The spoofer manipulates the navigation data such as orbital parameters (ephemerides) that are used to compute satellite locations [13], [15], [18].…”