Methods and systems for detecting and defending against invalid time signals
Some embodiments of the time resilient system and methods disclosed herein can be configured to detect and defend against invalid time signals. According to various embodiments of the disclosed technology, the time resilient system include a receiver for collecting time signals sourced from an external clock. By way of example only, the external clock may be a high precision clock housed within a Global Positioning System. Other embodiments may include an internal clock calibrated to a time reflected on the external clock so that the internal clock and the external clock are synchronized. Additionally, a controller may monitor changes in time signals of the external over a period of time against the internal clock, where the system is alerted of a timing attack when the time signals collected from the receiver deviate a pre-determined time range with the time of the internal clock.
1. A time resilient system comprising:
a receiver that collects time signals sourced from an external clock;
an internal clock calibrated to a time reflected on the external clock so that the internal clock and the external clock are synchronized; and
a controller that monitors a change in time signals of the external clock over a period of time against the internal clock;
wherein the controller provides an alert indicating the presence of a timing attack on the time signals when the time signals collected from the receiver deviate from a pre-determined time range with the time of the internal clock,
wherein the pre-determined time range is based on a trusted time that is calibrated to perform as a high precision clock, and further calibrated to an offset time to produce an adjusted trusted time and a constant time deviation between the initial trusted time and a received time of a time signal;
further comprising time consuming devices synchronized to the internal clock, wherein the controller outputs a timecode comprising time data of the internal clock calibrated to the external clock, such that the time consuming devices are synchronized to the timecode independent from the time signals collected from the receiver, wherein the timecode comprises a trusted IRIG signal which initially mimics the received time signal when first initializing or calibrating the time resilient system.
2. The time resilient system of claim 1 , wherein the external clock is a high precision time source vulnerable to timing attacks that distort the accuracy of the time signals output from the external clock.
3. The time resilient system of claim 2 , wherein the external clock is housed within a Global Positioning System.
4. The time resilient system of claim 3 , wherein the receiver is a Global Positioning System receiver.
5. The time resilient system of claim 1 , wherein the controller houses the internal clock.
6. A method of detecting and defending against invalid time signals comprising:
obtaining a local time source from an internal clock housed within a controller;
receiving a time signal from an external clock transmitted to the controller;
calibrating the local time source to a time indicated on the external clock, such that a calibrated local time source is now a reference or trusted time;
monitoring the time signal of the external clock against the reference time; and
stopping updates to the reference time when a timing attack is identified, where the timing attack is when the time signals collected from the receiver deviate from a pre-determined time range with the reference time,
wherein the pre-determined time range is based on a trusted time that is calibrated to perform as a high precision clock, and further calibrated to an offset time to produce an adjusted trusted time and a constant time deviation between the initial trusted time and a received time of a time signal;
wherein the controller outputs a timecode comprising time data of the internal clock calibrated to the external clock, such that one or more time consuming devices are synchronized to the timecode independent from the time signals collected from the receiver, wherein the timecode comprises a trusted RIG signal which initially mimics the received time signal when first initializing or calibrating the time resilient system.
7. The method of claim 6 , further comprising synchronizing time consuming devices to the reference time.
8. The method of claim 6 , wherein the time signal is sourced from a Global Positioning System.
9. The method of claim 7 , further comprising periodically updating the reference time to the external clock to prevent clock drifting.
10. The method of claim 6 , wherein the reference time stops calibrating against the external clock in the instance of an identified timing attack.
11. The method of claim 10 , further comprising continuing to synchronize the time consuming devices against the reference time in the instance of the identified timing attack for a select period of time.
12. The method of claim 11 , further comprising continuing to identify the presence of the timing attack until the received time reverts back to an acceptable deviation time range between the reference time and the time signal.
13. A method of detecting and defending against invalid time signals comprising:
obtaining a local time source from an internal clock housed within a controller;
receiving a time signal from an external clock transmitted to the controller;
calibrating the local time source to a time indicated on the external clock, such that a calibrated local time source is now a reference or trusted time;
monitoring the time signal of the external clock against the reference time; and
alerting the presence of a timing attack when the time signal collected from the receiver exceed a pre-determined time range with the reference time,
wherein the pre-determined time range is based on a trusted time that is calibrated to perform as a high precision clock, and further calibrated to an offset time to produce an adjusted trusted time and a constant time deviation between the initial trusted time and a received time of a time signal;
wherein the controller outputs a timecode comprising time data of the internal clock calibrated to the external clock, such that one or more time consuming devices are synchronized to the timecode independent from the time signals collected from the receiver, wherein the timecode comprises a trusted RIG signal which initially mimics the received time signal when first initializing or calibrating the time resilient system.
14. The method of claim 13 , further comprising continuing to identify the presence of the timing attack until the time signal reverts back to an acceptable deviation time range between the reference time and the time signal.
15. The method of claim 14 , further comprising synchronizing time consuming devices against the reference time, such that the time consuming devices are synched to precise timing information sourced from the reference time without a potential threat of being impacted by the timing attack.