Frame synch detection with intrusion detection
Techniques are described to improve the security of frame synchronization detection between wireless devices in high accuracy positioning (HAP) applications using personal area networks (PANs). A receiver may detect whether a frame synchronization pattern has been manipulated by comparing the sampled data of the received frame synchronization pattern with a reference waveform predicted as the frame synchronization pattern. The receiver may reuse the data in the correlation buffer at the moment a correlator finds a peak and declares that the synchronization pattern is found. The correlator may also provide fractional timing information associated with the correlation peak for the receiver to create a delayed reference phase differential pattern. The receiver may subtract the data in the correlation buffer by the delayed reference differential data and look for absolute deviations in the output of such subtraction that exceed a predetermined threshold. Specific patterns or signatures of error may also be analyzed.
1. A method of operations by a wireless device, comprising:
receiving, by the wireless device, a data packet from a second wireless device;
detecting, by the wireless device, a synchronization pattern in the data packet and associated timing information by correlating samples of the received data packet with expected data of the synchronization pattern to generate a correlation peak over a plurality of symbols of the synchronization pattern and determining that the correlation peak exceeds a threshold, the timing information being associated with a position of the correlation peak and representing a time of arrival of the synchronization pattern with a time resolution finer than a resolution of a sampling rate of the synchronization pattern in round trip timing (RTT)-based ranging, the sampling rate being higher than a symbol rate of the plurality of symbols;
determining, by the wireless device, or transmitting the timing information to a companion device to enable the companion device to determine, a reference synchronization pattern based on the timing information;
analyzing, by the wireless device, or transmitting the samples of the received data packet used to detect the synchronization pattern to the companion device to enable the companion device to analyze, a level of fitting between the samples of the received data packet and the reference synchronization pattern at boundaries of symbol transitions or symbol repetitions of the synchronization pattern to detect whether the symbols of the synchronization pattern have been manipulated; and
locking access to a secured resource in response to detecting the symbols of the synchronization pattern as having been manipulated.
2. The method of claim 1 , wherein the plurality of symbols are associated with the symbol rate, and wherein the samples of the received data packet are obtained by sampling the received data packet at the sampling rate higher than the symbol rate.
3. The method of claim 2 , wherein
the reference synchronization pattern has a time resolution finer than the resolution of the sampling rate.
4. The method of claim 2 , wherein the samples of the data packet comprise a number of samples of the synchronization pattern equaling to a product of the symbol rate and the sampling rate.
5. The method of claim 3 , wherein determining the reference synchronization pattern comprises:
generating an expected waveform of the synchronization pattern at the sampling rate; and
adjusting the expected waveform by the position of the correlation peak to generate the reference synchronization pattern.
6. The method of claim 1 , wherein the samples of the received data packet comprises a plurality of phases of the received data packet sampled at the sampling rate, and wherein the reference synchronization pattern comprises a plurality of phases of an expected waveform of the synchronization pattern sampled at the sampling rate and delayed by the timing information.
7. The method of claim 1 , wherein the samples of the received data packet comprises a plurality of differences in magnitudes and differences in phases of sampled data of the received data packet separated by one symbol of the synchronization pattern, and wherein the reference synchronization pattern comprises a plurality of differences in magnitudes and differences in phases of sampled data of an expected waveform of the synchronization pattern separated by one symbol of the synchronization pattern, and delayed by the timing information.
8. The method of claim 1 , wherein analyzing a level of fitting between the samples of the received data packet and the reference synchronization pattern comprises:
subtracting the reference synchronization pattern from the samples of the received data packet to generate an error waveform;
comparing the error waveform with an error threshold;
determining the second wireless device as a spoofing device in response to the error waveform satisfying the error threshold; and
determining the second wireless device as a secure device in response to the error waveform failing to satisfy the error threshold.
9. The method of claim 8 , wherein the error waveform is represented in magnitude and phase, and wherein the error threshold comprises a peak magnitude deviation threshold and a peak phase deviation threshold.
10. The method of claim 1 , wherein analyzing a level of fitting between the samples of the received data packet and the reference synchronization pattern comprises:
subtracting the reference synchronization pattern from the samples of the received data packet to generate an error waveform; and
analyzing a pattern of the error waveform corresponding to symbol boundaries of the synchronization pattern to detect whether the second wireless device is a spoofing device or a secure device.
11. The method of claim 1 , further comprising:
permitting the second wireless device to access a secured resource in response to detecting the symbols of the synchronization pattern as not having been manipulated.
12. An apparatus comprising:
a wireless device configured to:
receive a data packet from a second wireless device;
detect a synchronization pattern in the data packet and associated timing information by correlating samples of the received data packet with expected data of the synchronization pattern to generate a correlation peak over a plurality of symbols of the synchronization pattern and determine that the correlation peak exceeds a threshold, the timing information being associated with a position of the correlation peak and representing a time of arrival of the synchronization pattern with a time resolution finer than a resolution of a sampling rate of the synchronization pattern in round trip timing (RTT)-based ranging, the sampling rate being higher than a symbol rate of the plurality of symbols;
determine a reference synchronization pattern based on the timing information;
analyze a level of fitting between the samples of the received data packet and the reference synchronization pattern at boundaries of symbol transitions or symbol repetitions of the synchronization pattern to detect whether the symbols of the synchronization pattern have been manipulated; and
lock access to a secured resource in response to detecting that the symbols of the synchronization pattern have been manipulated.
13. The apparatus of claim 12 , wherein the plurality of symbols are associated with the symbol rate, and wherein the samples of the received data packet are obtained by sampling the received data packet at the sampling rate higher than the symbol rate.
14. The apparatus of claim 13 , wherein
the reference synchronization pattern has a time resolution finer than the resolution of the sampling rate.
15. The apparatus of claim 14 , wherein to determine the reference synchronization pattern, the wireless device is configured to:
generate an expected waveform of the synchronization pattern at the sampling rate; and
adjust the expected waveform by the position of the correlation peak to generate the reference synchronization pattern.
16. The apparatus of claim 12 , wherein the samples of the received data packet comprises a plurality of phases of the received data packet sampled at the sampling rate, and wherein the reference synchronization pattern comprises a plurality of phases of an expected waveform of the synchronization pattern sampled at the sampling rate and delayed by the timing information.
17. The apparatus of claim 12 , wherein the samples of the received data packet comprises a plurality of differences in magnitudes and differences in phases of sampled data of the received data packet separated by one symbol of the synchronization pattern, and wherein the reference synchronization pattern comprises a plurality of differences in magnitudes and differences in phases of sampled data of an expected waveform of the synchronization pattern separated by one symbol of the synchronization pattern, and delayed by the timing information.
18. The apparatus of claim 12 , wherein to analyze a level of fitting between the samples of the received data packet and the reference synchronization pattern, the wireless device is configured to:
subtract the reference synchronization pattern from the samples of the received data packet to generate an error waveform;
compare the error waveform with an error threshold;
determine the second wireless device as a spoofing device in response to the error waveform satisfying the error threshold; and
determine the second wireless device as a secure device in response to the error waveform failing to satisfy the error threshold.
19. The apparatus of claim 18 , wherein the error waveform is represented in magnitude and phase, and wherein the error threshold comprises a peak magnitude deviation threshold and a peak phase deviation threshold.
20. A system comprising:
an antenna;
a receiver configured to receive a data packet from a wireless device via the antenna;
a host processor;
a communication processor coupled to the receiver; and
a memory configured to store instructions, which when executed by the communication processor, cause the communication processor to:
detect a synchronization pattern in the data packet and associated timing information by correlating samples of the received data packet with expected data of the synchronization pattern to generate a correlation peak over a plurality of symbols of the synchronization pattern and determine that the correlation peak exceeds a threshold, wherein the timing information is associated with a position of the correlation peak and represents a time of arrival of the synchronization pattern with a time resolution finer than a resolution of a sampling rate of the synchronization pattern in round trip timing (RTT)-based ranging to estimate a range to the wireless device, the sampling rate being higher than a symbol rate of the plurality of symbols,
wherein the host processor is configured to:
determine a reference synchronization pattern based on the timing information;
analyze a level of fitting between the samples of the received data packet and the reference synchronization pattern at boundaries of symbol transitions or symbol repetitions of the synchronization pattern to detect whether the symbols of the synchronization pattern have been manipulated; and
lock access to a secured resource in response to detecting that the symbols of the synchronization pattern have been manipulated.