Device and method of detecting for HRP UWB ranging against distance reduction attacks
View Patent ↗Disclosed are a device and method for detecting distance reduction attack in an ultra-wide band (UWB) high rate pulse (HRP) mode. The method for detecting distance reduction attack is a method performed by a receiver or transmitter operating in the UWB HRP mode, the method comprising receiving a message frame targeted for distance reduction attack; splitting a scrambled timestamp sequence (STS) field included in the message frame into a plurality of sub-fields; computing a correlation between each of the sub-fields and a corresponding sub-template among a plurality of sub-templates split from a local template; extracting a plurality of maximum peaks, each corresponding to each of the correlations; and detecting the distance reduction attack based on extracted maximum peaks.
1 . A method for detecting distance reduction attack which is performed by a receiver or transmitter operating in an ultra-wide band (UWB) high rate pulse (HRP) mode, the method comprising:
receiving a message frame targeted for distance reduction attack;
splitting a scrambled timestamp sequence (STS) field included in the message frame into a plurality of sub-fields;
computing a correlation between each of the sub-fields and a corresponding sub-template among a plurality of sub-templates split from a local template;
extracting a plurality of maximum peaks, each corresponding to each of the correlations; and
detecting the distance reduction attack based on extracted maximum peaks.
2 . The method of claim 1 , wherein the message frame includes any one of a response frame of single-sided two-way ranging (SS-TWR), a response frame of a double-sided two-way ranging (DS-TWR), and a final frame of the DS-TWR.
3 . The method of claim 1 , wherein a number of the plurality of sub-fields and a number of the plurality of sub-templates are the same.
4 . The method of claim 1 , wherein the detecting the distance reduction attack includes determining that the distance reduction attack has occurred when at least one of the maximum peaks is out of a predetermined location interval.
5 . The method of claim 1 , wherein the detecting the distance reduction attach includes:
computing a location offset from a predetermined location for each of the maximum peaks;
accumulating the computed location offset; and
determining that the distance reduction attack has occurred when the accumulated location offset exceeds a predetermined threshold.
6 . The method of claim 1 , wherein the detecting includes operating a verifier that determines the message frame is abnormal when at least one maximum-peak location lies outside a predetermined permissible interval and also determines the message frame is abnormal when a total of location offsets of the maximum-peak locations across the plurality of sub-fields exceeds a threshold, and wherein the verifier declares a distance-reduction attack only when the at least one maximum-peak location lies outside the predetermined permissible interval and when the total of location offsets of the maximum-peak locations across the plurality of sub-fields exceeds the threshold.