Spoofed Networks: Exploitation of GNSS Security Vulnerability in 4G and 5G Mobile Networks

Includes supplementary materialFifth Generation New Radio (5G NR) represents a shift in mobile telephony whereby the network architecture runs containerized software on commodity hardware. In preparation for this transition, numerous 4G Long Term Evolution software stacks have been developed to test the containerization of core network functions and the interfaces with radio access network protocols. In this thesis, one such stack, developed by the OpenAirInterface Software Alliance, was used to create a low-cost, simplified mobile network compatible with the Naval Operational Architecture. Commercial off-the-shelf user equipment was then connected to the network to demonstrate how a buffer overflow vulnerability found in Qualcomm Global Navigation Satellite System chipsets and identified as CVE-2019-2254 can be leveraged to enable a spoofed network attack. The research also yielded an extension of the attack method to 5G NR networks.http://archive.org/details/aplaceholderreco1094567451Lieutenant, United States NavyApproved for public release. Distribution is unlimited

New Approach of Indoor and Outdoor Localization Systems

Accurate determination of the mobile position constitutes the basis of many new applications. This book provides a detailed account of wireless systems for positioning, signal processing, radio localization techniques (Time Difference Of Arrival), performances evaluation, and localization applications. The first section is dedicated to Satellite systems for positioning like GPS, GNSS. The second section addresses the localization applications using the wireless sensor networks. Some techniques are introduced for localization systems, especially for indoor positioning, such as Ultra Wide Band (UWB), WIFI. The last section is dedicated to Coupled GPS and other sensors. Some results of simulations, implementation and tests are given to help readers grasp the presented techniques. This is an ideal book for students, PhD students, academics and engineers in the field of Communication, localization & Signal Processing, especially in indoor and outdoor localization domains

東北大学電気通信研究所研究活動報告 第29号(2022年度)

紀要類（bulletin）departmental bulletin pape

New methods and architectures for high sensitivity hybrid GNSS receivers in challenging environments

GNSS satellite navigation systems are constantly evolving and have been already used in many applications. With the advent of the new systems Galileo and BeiDou as well as the modernization of GPS and GLONASS systems, new satellites and numerous new frequencies and signals will appear in the coming years and will open door to countless new applications that are currently impossible. The rapid evolution of mobile telephony and personal navigation devices (PND) requires better use of navigation systems in non-ideal environments, especially the need for positioning in deep urban area. On the one hand, users are waiting for a high positioning accuracy, because of the proximity to various points of interest. On the other hand, urban environment brings specific difficulties in receiving GNSS signals. GNSS navigation signals cannot be properly captured in urban and "indoor" environments. Signal levels are very low and it is almost impossible to acquire and track signals autonomously because of the strong attenuation of signals due to obstacles. In addition, indoor and urban positioning are also subject to multipath problems, masking, interference and jamming. Under these conditions, we must be able to process highly degraded or very short signals that do not allow the receiver to go through the tracking process. Thus, this leads us to the need to rethink the architecture of GNSS receiver for modern applications. This thesis project consists of developing new GNSS methods and architectures of high sensitivity and robustness to signal degradations and designing new algorithms integrated into a hybrid GNSS receiver capable of operating in deep urban environments. The methodology involves the use of the new concept of “Collective Detection (CD)”, also called “collaborative acquisition”. The collaborative approach that treats multi-satellite signals all together opens an interesting solution. Many techniques exist in the literature to solve the problems of positioning in urban environments, but we propose the new Collective Detection approach because of its performance as both a Direct Positioning (DP) method, providing a coarse position/clock-bias solution directly from acquisition, and High-Sensitivity (HS) acquisition method, by application of vector detection of all satellites in view. Indeed, the correct combination of the correlation values of several satellites can reduce the required Carrier-to-Noise Ratio (C/No) level of the satellite signals which cannot be acquired individually by standard signal processing (acquisition and tracking) but make it possible to use them constructively to a positioning solution. The combination of different GNSS signals can considerably increase the acquisition sensitivity of the receiver. Despite the advantages of this approach, it also has drawbacks such as the high computational burden because of the large number of candidate points in the position/clock-bias domain. Thus, the work proposed in this thesis consists of reducing the complexity of the CD by optimizing the search for candidate points in position/clock-bias domain. Finally, the goal is to apply the CD approach to Cooperative GNSS Positioning for modern navigation in harsh environments. For that, algorithms for optimally exploiting receiver resources by selecting the best satellites or the reference station will be developed according to certain criteria such as the C/No level, the elevation angle, and the geometric configuration of the visible satellites. The ultimate goal is to propose a design of a new smart receiver “High Sensitivity Cognitive GNSS Receiver (HSCGR)” to optimally receive and process GNSS signals

Contributions to land, sea, and sea ice remote sensing using GNSS-reflectometry

This PhD thesis researches the use of passive remote sensing techniques using signals transmitted from the navigation satellites (GNSS) in order to retrieve different geophysical parameters. The thesis consists of two different parts without taking into account the introduction, the state of the art and the conclusions. The first part analyzes the Interference Pattern Technique (IPT), which was previously used in another PhD thesis, and proposes some key improvements. First, the addition of horizontal polarization to the existing vertical polarization is proposed. Then, the retrieval of soil moisture is studied using the horizontal polarization only and combining both polarizations to correct for the surface roughness effects. It is also demonstrated that the phase difference between the two interference patterns is directly related to soil moisture content. A field campaign was conducted in Australia to test empirically all the theoretical developments and algorithms. Secondly, the possibility of measuring Significant Wave Height (SWH) and Mean Sea Surface Level (MSSL) using the IPT is studied. A three month field campaign over coastal sea is devoted to that study. The SWH retrieval is a new estimation algorithm based on measuring the point where the interference pattern loses coherence. The MSSL retrieval is based on the estimation of the IPT oscillation frequency, testing different spectral estimators to improve the accuracy. Since the IPT is limited in coverage due to its static requirements, the research conducted in this thesis migrated to scatterometric GNSS-R techniques. The main goal that migration was to increase coverage of the different GNSS-R instruments. Therefore, the second part of this thesis analyzes the applicability of a scatterometric technique from different platforms: ground-based (mobile and fixed), airborne, and spaceborne. The ground-based still platforms have allowed to develop a soil moisture retrieval algorithm. The ground-based moving platforms have extended the validity of that algorithm. Airborne platforms have been used to study the reflected electric field statistics when the surface reflecting surface is varying (smooth or rough land, and sea). They have also been used to develop different algorithms to measure the coherent and incoherent scattered components depending on the data structure (real-data or complex data). Coherent reflectivity measured from airborne platforms has been compared to other techniques such microwave radiometry, which is highly used in the soil moisture retrieval from spaceborne sensors, and other sensors using optical, multispectral and thermal frequency bands. These relationships between microwave radiometry and GNSS-R measurements suggests the potential synergy of both techniques. A sea ice detection algorithm is also developed using scatterometric GNSS-R data from the UK TDS-1 mission. This algorithm is based on measuring the degree of coherence of the reflected waveform. Finally, a field campaign was conducted to study the effect of vegetation on the GNSS signals that pass through it in order to take into account and correct the effect of vegetation in the GNSS-R data and in the soil moisture retrieval algorithms.Aquesta tesi doctoral aprofundeix en el coneixement de les tècniques de teledetecció passives utilitzant senyals emesos pels satèl·lits de navegació (GNSS) amb l'objectiu de recuperar diferents paràmetres geofísics del terreny. La tesi conté dues parts ben diferenciades a banda de la introducció, estat de l'art i conclusions. La primera part analitza la tècnica coneguda com a patró d'interferències, utilitzada prèviament en una altra tesi doctoral, i proposa certes millores per la seva aplicabilitat. En primer lloc es decideix afegir polarització horitzontal a la ja existent polarització vertical, i s'estudia la recuperació d'humitat del sòl utilitzant només polarització horitzontal i combinant les dues polaritzacions per corregir els efectes de la rugositat del terreny. A continuació es demostra que la mesura de desfasament entre els dos patrons d'interferència està directament relacionada amb la humitat del terreny. Es va realitzar una campanya de mesures a Austràlia per provar empíricament tots els desenvolupaments teòrics i algorismes proposats. En segon lloc s'analitza l'aplicabilitat del patró d'interferències en la mesura de l'altura de les onades (SWH) i del nivell del mar (MSSL), tots dos de forma precisa. L'estimació de l'alçada de les onades és un procés totalment nou basat en mesurar el punt on el patró d'interferències perd la coherència. L'estimació del nivell del mar es basa en l'anàlisi espectral del patró d'interferències provant diferents estimadors espectrals. Atès que la tècnica del patró d'interferència està limitada en cobertura per les seves característiques estàtiques, la investigació duta a terme en aquesta tesi doctoral va migrar cap a tècniques GNSS-R escateromètriques. El principal objectiu a assolir va ser el d'augmentar la cobertura dels diferents instruments GNSS-R de mesura. En conseqüència, la segona part d'aquesta tesi analitza l'aplicabilitat d'aquestes tècniques des de diferents plataformes terrestres (mòbils i fixes), aerotransportades i satèl·lit. Les plataformes terrestres fixes han permès derivar algoritmes de recuperació d'humitat i les mòbils estendre la validació d'aquests. Les plataformes aerotransportades s'han utilitzat per mirar l'estadística del camp elèctric reflectit quan la superfície on es reflecteixen els senyals GNSS va variant (terra plana o terra rugosa, i mar). També han servit per desenvolupar diferents algorismes amb l'objectiu de determinar les components coherent i incoherent del senyal reflectit. De la mateixa manera, dades de reflectivitat coherent mesurades des d'aquestes plataformes han estat comparades amb altres tècniques de teledetecció passiva com la radiometria de microones, altament utilitzada en la mesura d'humitat de terreny, i altres sensors òptics, multi-espectrals, i tèrmics. Aquests resultats han permès suggerir la possible sinergia de dades d'ambdues tecnologies. Un algorisme per detectar la presència de gel sobre el mar també ha estat desenvolupat mitjançant l'ús de dades GNSS-R escateromètriques satel·litals de la missió UK TDS-1. Aquest algorisme es basa en mesurar el grau de coherència de la forma d'ona reflectida. Finalment, s'ha realitzat un estudi de l'efecte de la vegetació en els senyals GNSS que la travessen, per tal de poder corregir aquest efecte en els algoritmes de recuperació d'humitat del terreny