Motion State Monitoring Based GNSS Spoofing Detection Method for Repeater Spoofing Attack

Wentao Bai,Hong Li,Yichen Yang,Mingquan Lu

DOI: https://doi.org/10.33012/2016.13456

2016-01-01

Abstract:The GNSS repeater spoofing scenarios can be classified into two categories, namely all-channel and part-channel attacks. Due to the different navigation environments of the repeater and the victim receiver, it is quite difficult to guarantee that all the authentic signals would be copied by the repeater. Therefore part-channel repeater spoofing is ordinary for most repeater spoofing scenarios.Under part-channel repeater spoofing, we find that the positioning result of the victim receiver not only takes a sudden jump but also appears an approximately linear variation for a period. Based on the properties, a motion state monitoring based detection method is proposed in the paper. The method is more intuitionistic and easier to be implemented than many other detection methods for detecting the part-channel repeater spoofing attack. The proposed method keeps an eye on the change of the motion state depicted by the PVT result of the receiver, comparing the actual motion state of the target receiver with the one depicted by the positioning result. If they are inconsistent, it means there may be a repeater spoofing attack. The method is suitable for many situations, such as for the cellphone towers of 3G, 4G, and future 5G, handheld equipment and other users which roughly know some prior information of themselves. To investigate the performance of the method, many simulations and experiments of GPS signals are conducted. In the simulations, the signals are generated by a GPS signal simulator and a part of them are delayed. In the livesignal experiment, the real GPS signals from the spoofing receiving antenna are delayed by a repeater spoofer and transmitted to the antenna of the receiver. All the signals are processed by a software defined receiver. The results demonstrate the validity of proposed method.