IP Library › Granted Patent US 10,495,759
Granted Patent B2
US 10,495,759 · App. 14/179,607 · Granted Dec 3, 2019

GPS spoofing detection techniques

Inventors: Darrow Paine Leibner (Arlington, VA); Erik T. Lundberg (McLean, VA)
Assignee: The Mitre Corporation
G01S19/215H04K3/224H04K3/255H04K3/65H04K3/90
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,495,759
App. No.
14/179,607
Granted
Dec 3, 2019
Kind
B2
Abstract

Disclosed herein are system, method, and computer program product embodiments for detecting spoofing of a navigation device. A plurality of anti-spoofing techniques are provided. The plurality of anti-spoofing techniques detect interference with data provided by one or more navigation devices for a plurality of threat situations. Positioning, timing and frequency characteristics associated with the one or more navigation devices are analyzed in order to identify a threat situation among the plurality of threat situations. Based on the identified threat situation one or more of the anti-spoofing techniques are executed. The one or more anti-spoofing techniques can be executed in parallel in order to provide various anti-spoofing detection techniques at the same time.

Claims (94)

1. A method, comprising:

providing, by a hardware processor of an error detection unit, a plurality of anti-spoofing techniques, wherein the plurality of anti-spoofing techniques detect interference with data provided by a first navigation device and a second navigation device for a plurality of threat situations, wherein each of the first navigation device and the second navigation device receives global positioning data from a plurality of global positioning data sources;

comparing, by the hardware processor of the error detection unit, received positioning characteristics associated with the first navigation device and the second navigation device with surveyed-in positioning characteristics associated with the first navigation device and the second navigation device,

wherein the received positioning characteristics include a distance measurement representing a difference between a spatial position of the first navigation device as determined by the plurality of global positioning data sources and a spatial position of the second navigation device as determined by the plurality of global positioning data sources, the distance measurement being determined by the hardware processor of the error detection unit, and

wherein the surveyed-in positioning characteristics include a known distance between the first navigation device and the second navigation device;

comparing, by the hardware processor of the error detection unit, received timing characteristics associated with the first navigation device and the second navigation device with surveyed-in timing characteristics associated with the first navigation device and the second navigation device,

wherein the received timing characteristics associated with the first navigation device and the second navigation device are received from a first clock source, and

wherein the surveyed-in timing characteristics associated with the first navigation device and the second navigation device are received from a second clock source different from the first dock source,

identifying, by the hardware processor of the error detection unit, a threat situation based on the comparing of the received positioning characteristics and the surveyed-in positioning characteristics and the comparing of the received positioning characteristics and the serve red-in timing characteristics,

wherein the threat situation is identified when a difference between the distance measurement and the known distance between the first navigation device and the second navigation device falls below a predetermined threshold; and

executing, by the hardware processor of the error detection unit, one or more of the anti-spoofing techniques based on the identified threat situation, wherein multiple anti-spoofing techniques can be executed substantially in parallel.

2. The method of claim 1 , wherein the comparing the received position characteristics with the surveyed-in positioning characteristics comprises:

receiving first navigation device data from the first navigation device;

processing the first navigation device data to determine a reported position of the first navigation device;

comparing the reported position of the first navigation device to the surveyed-in position of the first navigation device to identify a mismatch between the reported position of the first navigation device and the surveyed-in position of the first navigation device; and

determining whether the mismatch exceeds the predetermined threshold.

3. The method of claim 2 , further comprising:

generating a threat alert when the mismatch exceeds the predetermined threshold, wherein the threat alert indicates a transmission signal of the first navigation device is compromised.

4. The method of claim 1 , wherein the comparing received timing characteristics with the surveyed-in timing characteristics is performed on a pulse per second periodic.

5. The method of claim 1 , wherein the first navigation device is a first Global Navigation Satellite System (GNSS) receiver and the second navigation device is a second GNSS receiver.

6. The method of claim 1 , wherein the comparing received timing characteristics with the surveyed-in timing characteristics comprises:

receiving a first set of data from the first navigation device;

receiving a second set of data from the second navigation device;

processing the first set of data and the second set of data to determine a first reported position for the first navigation device and a second reported position for the second navigation device;

comparing the first reported position with the second reported position; and

determining if a difference between the first reported position and the second reported position is below a position threshold.

7. The method of claim 6 , further comprising:

generating a threat alert when it is determined that the difference between the first reported position and the second reported position is below the position threshold.

8. The method of claim 6 , wherein the position threshold is based on the known distance between the first navigation device and the second navigation device.

9. The method of claim 1 , wherein the comparing received timing characteristics with the surveyed-in timing characteristics is performed using a test statistic and a calculated average of timing characteristics.

10. The method of claim 1 , wherein the executing comprises:

receiving data associated with the first navigation device;

processing the data in order to determine a power measurement and a distortion measurement for the first navigation device;

comparing the power measurement to a predetermined power threshold and the distortion measurement to a predetermined distortion threshold; and

determining whether the distortion measurement and power measurement indicate that the navigation device is compromised based on the comparison.

11. The method of claim 10 , wherein the determining comprises:

determining whether the distortion measurement is related to the threat situation; and

generating a threat alert when the distortion measurement is related to the threat situation.

12. The method of claim 10 , wherein the processing further comprises:

determining the power measurement based on an automatic gain control of the navigation device.

13. A system, comprising:

a memory; and

at least one processor coupled to the memory and configured to:

provide a plurality of anti-spoofing techniques, wherein the plurality of anti-spoofing techniques detect interference with data provided by a first navigation device and a second navigation device for a plurality of threat situations, wherein each of the first navigation device and the second navigation device receives global positioning data from a plurality of global positioning data sources;

compare received positioning characteristics associated with the first navigation device and the second navigation device with surveyed-in positioning characteristics associated with the first navigation device and the second navigation device,

wherein the received positioning characteristics include a distance measurement representing a difference between a spatial position of the first navigation device as determined by the plurality of global positioning data sources and a spatial position of the second navigation device as determined by the plurality of global positioning data sources, and

wherein the surveyed-in positioning characteristics include a known distance between the first navigation device and the second navigation device;

compare received timing characteristics associated with the first navigation device and the second navigation device with surveyed-in timing characteristics associated with the first navigation device and the second navigation device,

wherein the received timing characteristics associated with the first navigation device and the second navigation device are received from a first clock source, and

wherein the surveyed-in timing characteristics associated with the first navigation device and the second navigation device are received from a second clock source different from the first clock source,

identify a threat situation based on the comparing of the received positioning characteristics and the surveyed-in positioning characteristics and the comparing of the received positioning characteristics and the surveyed-in timing characteristics,

wherein the threat situation is identified when a difference between the distance measurement and the known distance between the first navigation device and the second navigation device falls below a predetermined threshold; and

execute one or more of the anti-spoofing techniques based on the identified threat situation, wherein multiple anti-spoofing techniques can be executed substantially in parallel.

14. The system of claim 13 , wherein the at least one processor is further configured to:

receive first navigation device data from the first navigation device;

process the first navigation device data to determine a reported position of the first navigation device;

compare the reported position of the first navigation device to the surveyed-in position of the first navigation device to identify a mismatch between the reported position of the first navigation device and the surveyed-in position of the first navigation device; and

determine whether the mismatch exceeds the predetermined threshold.

15. The system of claim 14 , wherein the at least one processor is further configured to:

generate a threat alert when the mismatch exceeds the predetermined threshold, wherein the threat alert indicates a transmission signal of the first navigation device is compromised.

16. The system of claim 13 , wherein the at least one processor is configured to:

compare the received timing characteristics to the surveyed-in timing characteristics at a pulse per second periodic.

17. The system of claim 13 , wherein the first navigation device is a first Global Navigation Satellite System (GNSS) receiver and the second navigation device is a second GNSS receiver.

18. The system of claim 13 , wherein the at least one processor is further configured to:

receive a first set of data from the first navigation device;

receive a second set of data from the second navigation device;

process the first set of data and the second set of data to determine a first reported position for the first navigation device and a second reported position for the second navigation device;

compare the first reported position with the second reported position; and

determine if a difference between the first reported position and the second reported position is below a position threshold.

19. The system of claim 18 , wherein the at least one processor is further configured to:

generate a threat alert when it is determined that the difference between the first reported position and the second reported position is below the position threshold.

20. The system of claim 18 , wherein the position threshold is based on the known distance between the first navigation device and the second navigation device.

21. The system of claim 13 , wherein the at least one processor is further configured to:

receive data associated with the first navigation device;

process the data in order to determine a power measurement and a distortion measurement for the first navigation device;

compare the power measurement to a predetermined power threshold and the distortion measurement to a predetermined distortion threshold; and

determine whether the distortion measurement and the power measurement indicate that the navigation device is compromised based on the comparison.

22. The system of claim 21 , wherein at least one processor is further configured to:

determine whether the distortion measurement is related to a spoofing attack; and

generate a threat alert when the distortion measurement is related to a spoofing attack.

23. A tangible computer-readable device having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:

providing a plurality of anti-spoofing techniques, wherein the plurality of anti-spoofing techniques detect interference with data provided by a first navigation device and a second navigation device for a plurality of threat situations, wherein each of the first navigation device and the second navigation device receives global positioning data from a plurality of global positioning data sources;

comparing received positioning characteristics associated with the first navigation device and the second navigation device with surveyed-in positioning characteristics associated with the first navigation device and the second navigation device,

wherein the received positioning characteristics include a distance measurement representing a difference between a spatial position of the first navigation device as determined by the plurality of global positioning data sources, and a spatial position of the second navigation device as determined by the plurality of global positioning data sources, and

wherein the surveyed-in positioning characteristics include a known distance between the first navigation device and the second navigation device,

comparing received timing characteristics associated with the first navigation device and the second navigation device with surveyed-in timing characteristics associated with the first navigation device and the second navigation device,

wherein the received timing characteristics associated with the first navigation device and the second navigation device are received from a first clock source, and

wherein the surveyed-in timing characteristics associated with the first navigation device and the second navigation device are received from a second clock source different from the first clock source,

identifying a threat situation based on the comparing of the received positioning characteristics and the surveyed-in positioning characteristics and the comparing of the received positioning characteristics and the surveyed-in timing characteristics,

wherein the threat situation is identified when a difference between the distance measurement and the known distance between the first navigation device and the second navigation device falls below a predetermined threshold; and

executing one or more of the anti-spoofing techniques based on the identified threat situation, wherein multiple anti-spoofing techniques are executed substantially in parallel.

24. The method of claim 1 , further comprising:

comparing, by the hardware processor of the error detection unit, received frequency characteristics associated with the first navigation device and the second navigation device with surveyed-in frequency characteristics associated with the first navigation device and the second navigation device,

wherein the identifying of the threat situation is further based on the comparing of the received frequency characteristics and the surveyed-in frequency characteristics.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 13, 2014
From: LEIBNER, DARROW PAINE; LUNDBERG, ERIK T.
To: THE MITRE CORPORATION
Reel/Frame 032210/0594 →
Continuity (1)
Related Publication 20150226858A1 · Aug 13, 2015
Cited By (2)
US 12,360,249 US 12,607,754