Abstract:Low-power wide-area network technologies such as long-range wide-area network (LoRaWAN) are promising for collecting low-rate monitoring data from geographically distributed sensors, in which timestamping the sensor data is a critical system function. This article considers a synchronization-free approach to timestamping LoRaWAN uplink data based on signal arrival time at the gateway, which well matches LoRaWAN’s one-hop star topology and releases bandwidth from transmitting timestamps and synchronizing end devices’ clocks at all times. However, we show that this approach is susceptible to a frame delay attack consisting of malicious frame collision and delayed replay. Real experiments show that the attack can affect the end devices in large areas up to about 50,000, m 2 . In a broader sense, the attack threatens any system functions requiring timely deliveries of LoRaWAN frames. To address this threat, we propose a LoRaTS gateway design that integrates a commodity LoRaWAN gateway and a low-power software-defined radio receiver to track the inherent frequency biases of the end devices. Based on an analytic model of LoRa’s chirp spread spectrum modulation, we develop signal processing algorithms to estimate the frequency biases with high accuracy beyond that achieved by LoRa’s default demodulation. The accurate frequency bias tracking capability enables the detection of the attack that introduces additional frequency biases. We also investigate and implement a more crafty attack that uses advanced radio apparatuses to eliminate the frequency biases. To address this crafty attack, we propose a pseudorandom interval hopping scheme to enhance our frequency bias tracking approach. Extensive experiments show the effectiveness of our approach in deployments with real affecting factors such as temperature variations.

Timestamp Estimation in P802.15.4z Amendment

Secure Ranging with IEEE 802.15.4z HRP UWB

Estimation and Mitigation of Time-Variant RFI Based on Iterative Dual Sparse Recovery in Ultra-Wide Band Through-Wall Radar.

Time for Change: How Clocks Break UWB Secure Ranging

Random Time-hopping Secure Ranging Strategy Against Distance-Reduction Attacks in UWB

Experimental Evaluation of IEEE 802.15.4z UWB Ranging Performance under Interference

System Synchronization and Channel Estimation Analysis for IEEE 802.16e OFDMA Downlink System

STS_4e: Secure Time Synchronization in IEEE802.15.4e Networks

Enhanced Secure Time Synchronisation Protocol for IEEE802.15.4e-based Industrial Internet of Things.

Attack-Aware Synchronization-Free Data Timestamping in LoRaWAN

An Improved Channel Estimation Technique for IEEE 802.11p Standard in Vehicular Communications

Security Vulnerabilities and Countermeasures for Time Synchronization in Ieee802.15.4e Networks

Numerical Study Of Ieee 802.15.4 Performance

Ranging Implementation Using Finite-Resolution Digital Receiver For Ieee 802.15.4a Systems

An Overview of the IEEE 802.15.4z Standard its Comparison and to the Existing UWB Standards

Time Synchronisation Attacks and Defences in IEEE802.15.4e Networks

UWB-ED: Distance Enlargement Attack Detection in Ultra-Wideband

Time Synchronization Attacks in IEEE802.15.4e Networks

Ghost Peak: Practical Distance Reduction Attacks Against HRP UWB Ranging

A Novel Timing Acquisition Algorithm for Differential Transmitted Reference Uwb Receivers

Adaptive Synchronization and Integration Region Optimization for Energy Detection IR-UWB Receivers.