On Secure and Precise IR-UWB Ranging

To provide high ranging precision in multipath environments, a ranging protocol should find the first arriving path, rather than the strongest path. We demonstrate a new attack vector that disrupts such precise Time-of-Arrival (ToA) estimation, and allows an adversary to decrease the measured distan...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on wireless communications 2012-03, Vol.11 (3), p.1087-1099
Main Authors: Poturalski, M., Flury, M., Papadimitratos, P., Hubaux, J., Boudec, J. L.
Format: Article
Language:English
Subjects:
Applied sciences
Channels
Detection, estimation, filtering, equalization, prediction
distance bounding
Distance measurement
Exact sciences and technology
impulse radio
Information, signal and communications theory
Interference
Mathematical analysis
Measuring instruments
Modulation
Modulation, demodulation
Protocols
ranging
Receivers
Relays
Security
Services and terminals of telecommunications
Signal and communications theory
Signal to noise ratio
Signal, noise
Simulation
Synchronization
Systems, networks and services of telecommunications
Telecommunications
Telecommunications and information theory
Telemetry. Remote supervision. Telewarning. Remote control
ultra-wideband
Ultrawideband
Vectors (mathematics)
Wireless communication
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:To provide high ranging precision in multipath environments, a ranging protocol should find the first arriving path, rather than the strongest path. We demonstrate a new attack vector that disrupts such precise Time-of-Arrival (ToA) estimation, and allows an adversary to decrease the measured distance by a value in the order of the channel spread (10-20 meters). This attack vector can be used in previously reported physical-communication-layer (PHY) attacks against secure ranging (or distance bounding). Furthermore, it creates a new type of attack based on malicious interference: This attack is much easier to mount than the previously known external PHY attack (distance-decreasing relay) and it can work even if secret preamble codes are used. We evaluate the effectiveness of this attack for a PHY that is particularly well suited for precise ranging in multipath environments: Impulse Radio Ultra-Wideband (IR-UWB). We show, with PHY simulations and experiments, that the attack is effective against a variety of receivers and modulation schemes. Furthermore, we identify and evaluate three types of countermeasures that allow for precise and secure ranging.
ISSN:1536-1276
1558-2248
1558-2248
DOI:10.1109/TWC.2012.011812.110483