Mätfokus - Maetfokus

Of the hundreds of papers researchers presented at 2020’s annual Institute of Navigation (ION) GNSS+ conference, which took place virtually Sept. 21–25, the following six focused on combating jamming and spoofing. The papers are available at www.ion.org/publications/browse.cfm.

Using Direction of Arrival

The author presents a scheme to combine multiple measurements for GNSS spoof detection for safety-of-life applications. The author’s algorithm combines both independent and correlated direction of arrival measurements that result in an analytic solution for the detection threshold, which can be computed online by the receiver. The scheme is validated for correlated azimuth measurements with data recorded by a dual-polarization antenna mounted on a C12 aircraft in flight, and applied to data from a live spoofing event. Results show an increase in detections of 47% using just two sequential measurements, with equal robustness for false alerts compared to snapshot-based detection. The results also show using sequential spoof detection is a powerful way to improve the detection capability of an anti-spoof defense, costing only added computational complexity while introducing a timely component to the detection.

Citation. Rothmaier, Fabian; “Optimal Sequential Spoof Detection Based on Direction of Arrival Measurements.” https://doi.org/10.33012/2020.17538

Using Neural Networks

Spoofing attacks are difficult to model and counteract. Data-driven schemes become useful if enough training data is available. This article explores such an approach using the cross-ambiguity function delay/Doppler map as input to a deep neural network for classification purposes. Several neural network models are trained, and their performance compared for detection and false-alarm probabilities. Results are promising, particularly with more complex neural networks, which are able to capture the nature of spoofing attacks. The method operates on a per-satellite basis.

Citation. Borhani-Darian, Parisa; Li, Haoqing; Wu, Peng; Closas, Pau; “Deep Neural Network Approach to Detect GNSS Spoofing Attacks.” https://doi.org/10.33012/2020.17537

Using Networks for Timing

Information cross-validation can be a powerful tool to detect manipulated, dubious GNSS timing data. Opportunistic time providers, Wi-Fi beacons and dedicated timing infrastructures provide largely available, precise sources of time information. A promising approach is to leverage time obtained over networks to which a mobile device can connect, and detect discrepancies between the GNSS-provided time and the network time. The paper investigates different options to secure augmentation time information, notably Network Time Security (NTS) and modified Wi-Fi beacons to support authentication. This scheme requires limited overhead, does not disrupt the normal operation of the Wi-Fi access points, and can be readily deployed.

Citation. Spanghero, Marco; Zhang, Kewei; Papadimitratos, Panagiotis; “Authenticated Time for Detecting GNSS Attacks.”

Using Cooperative Positioning

This paper highlights possible metrics to be checked to identify malicious attacks to the positioning and navigation systems in mass-market connected devices. The network-based exchange of GNSS data — such as GNSS raw measurements recently disclosed in Android smart devices — could offer the possibility to compare or combine such metrics to better identify spoofing and meaconing attacks.

This paper provides experimental tests and analysis toward devising an anti-spoofing strategy in connected GNSS devices. Included are a classical spoofing approach (simplistic RF attack) and its effects on the raw GNSS observables. With two synchronized devices in a cooperative framework, possible metrics are highlighted to identify a spoofing attack to one of the devices by observing anomalies.

Also included is work on simulated meaconing of an already-developed collaborative positioning framework based on the exchange of raw GNSS measurements through the network. The different approaches of an attack to the framework are laid down, and the anomalies to be considered to detect an attack in a network of cooperating devices are presented.

This paper represents a part of a larger goal to develop an anti-spoofing detection and coping mechanism in connected commercial GNSS devices.

Citation. Rustamov, Akmal; Gogoi, Neil; Minetto, Alex; Dovis, Fabio; “GNSS Anti-Spoofing Defense Based on Cooperative Positioning.”

Using OSNMA in the GIANO GNSS receiver

In recent years, the awareness about jamming and spoofing risks has been increasing, particularly in the timing community because they may cause the disruption of critical services and infrastructures in the telecommunication, energy and finance sectors, which rely on GNSS timing to operate. To overcome these hazards, the European GNSS Agency (GSA) has funded the development of timing receivers for professional applications, with the aim to address specifically the above vulnerabilities, improving the receiver’s robustness and the accuracy and reliability of time transfer.

In this context, the GIANO (Galileo-based timing receiver for critical infrastructures robustness) project consortium, coordinated by Thales Alenia Space Italy and with the support of Deimos Engenharia S.A. (Portugal), the Space Research Centre PAS in Poznan (Poland), Piktime System SP. Zoo (Poland) and Business Integration Partner S.p.A. (Italy), has been awarded a contract in the framework of the GSA’s “Fundamental Elements” program to develop a timing receiver for critical infrastructure applications. Besides the implementation of some interference and spoofing detection and mitigation techniques, the GIANO receiver makes use of Galileo’s authentication service OSNMA (Open Service Navigation Message Authentication), which can be employed as an added defense against some types of spoofing.

OSNMA exploits the TESLA (Time Efficient Stream Loss-tolerant Authentication) scheme, which is a protocol based on the transmission of message authentication codes generated with a key broadcast with some delay. The receiver authenticates the satellite messages through a digital signature algorithm and a public key known by the receivers, which also validates the root key of the TESLA chain, and through message authentication codes (MAC) used to authenticate specific fields of the navigation message. The receiver will also support public key renewals over the air.

This paper presents the OSNMA implementation within GIANO receiver, including the cryptographic operations required. The GIANO OSNMA capability will be extensively tested and validated with the support of the European Commission Joint Research Centre (Ispra, Italy).

Citation. Catalano, Valeria; Prata, Ricardo; Carvalho, Filipe; Nunes, Rui; Marradi, Livio; Franzoni, Gianluca; Puccitelli, Marco; Campana, Roberto; Gioia, Ciro; “Galileo OSNMA Preliminary Implementation in the GIANO GNSS Receiver.” https://doi.org/10.33012/2020.17714

Using Chimera Authentication

Chimera is a signal authentication enhancement suitable for protecting the L1C GPS signal. As specified by the acronym itself (chips-message robust authentication), Chimera is based on the insertion of authentication features both at the message and spreading code levels. The data are digitally signed, while the spreading code is protected by the insertion of cryptographically generated punctures.

The Chimera interface specification document was made public in 2019, while its first transmission is expected to be broadcast from the Navigation Technology Satellite 3 (NTS-3) satellite, set for launch in 2023.

This paper describes the software implementation of the functions required to enable a GNSS software receiver to elaborate the Chimera authentication service. It includes a description of the development work and a detailed software profiling analysis, allowing for evaluation of the additional computational burden required by the Chimera verification and useful for providing important guidelines for receiver implementation.

Citation. Gamba, Micaela Troglia; Nicola, Mario; Motella, Beatrice; “GPS Chimera: A Software Profiling Analysis.” https://doi.org/10.33012/2020.17717

“Seen & Heard” is a monthly feature of GPS World magazine, traveling the world to capture interesting and unusual news stories involving the GNSS/PNT industry.

---

Our Spinning Globe

A highlight of the opening ceremony at the Tokyo 2021 Olympics was a revolving globe above the Olympic stadium. The 1,824 Intel Shooting Star 3 drones formed a complex set of geometrical shapes before transitioning into the games’ emblem, and then a 3D representation of Earth. The Intel Shooting Star 3 drones are designed for entertainment purposes. Each drone weighs 340 grams, is equipped with four extremely bright LEDs, and features real-time kinematic (RTK) GPS for the increased positional accuracy needed for high-resolution animations, sharp imagery and dynamic 3D animations.

---

Coffee Buzz

Illegal coffee plantations have appeared inside Bukit Barisan Selatan National Park in Indonesia, a key habitat for the endangered Sumatran tiger and other species. Conservationist Matt Leggett noticed in satellite images the declining size of the forest, and sent a team of researchers on an undercover operation on dirt bikes with cameras and GPS receivers, reports the Aug. 11 New York Times Magazine. Leggett’s team mapped hundreds of small coffee farms and investigated the complex chain of custody, which ends with major brand names. No solution has been found, though some farmers have promised to replant the forest over the next 15 years, while others continue to clear park land.

---

Now that’s heavy

Seven scientific-grade GPS stations are joining a network of 65 that the USGS Hawaiian Volcano Observatory operates on the Hawaiian Islands. As Hawaiian volcanoes erupt and grow, they add weight to the Earth’s surface, causing the Pacific Plate to flex downward and possibly causing the shelf to splinter. Earthquakes this spring in Hawaii likely were related to weight on the underlying crust and mantle from eruptions. Collecting years of data from these stations should help scientists better understand motions of the Pacific Plate, according to researcher Jeff Freymueller, Michigan State University. The first three GPS stations were installed in May; others are being installed this summer.

---

Camera Upgrade

Nikon could be launching a consumer camera equipped with GNSS instead of only GPS, providing a major upgrade for the geolocation coordinates provided with photo metadata. Filings with the governments of Russia and Indonesia describe a camera dubbed N2014, which will be equipped with GNSS as well as Wi-Fi and Bluetooth. A number of Nikon CoolPix digital cameras have built-in GPS, while other cameras — Nikon D-SLRs and select Nikon 1 — can use optional accessory GPS devices.

Xona Space Systems fully funded for first LEO satellite navigation mission

Xona Space Systems is preparing for the launch of its first commercial positioning, navigation and timing (PNT) satellite, the first in a planned 300-satellite low-Earth orbit (LEO) constellation designed to cover the globe.

Xona has raised a new funding round co-led by Seraphim Space Investment Trust and MaC Venture Capital, with participation from Toyota Ventures, Daniel Ammann (co-founder of u-blox), and Ryan Johnson (former CEO of BlackBridge, operator of the Rapideye constellation). Follow-on investors also include 1517 Fund and Stellar Solutions.

Xona’s Pulsar precision LEO positioning, navigation and timing (PNT) service leverages advances in small satellite technology to provide users with a secure and robust alternative to traditional GNSS. The satellites will orbit 25 times closer to Earth than GPS satellites do.

Xona’s patent-pending system architecture makes use of the efficiency of small satellites to provide an affordable global service with 10 times better accuracy and 100 times better interference mitigation than the legacy systems, the company claims.

“We view global coverage of a safe, secure, and highly accurate navigation service as critical to the future of autonomy and countless other markets,” said Jeff Crusey, investment director of Seraphim Space Investment Trust. “We’re excited to continue supporting Xona because they’re an extremely talented and uniquely positioned team to execute on this plan.”

The funds raised this round will support the completion of Xona’s first orbital mission, scheduled for mid-2022, to demonstrate the capabilities of their Pulsar precision LEO PNT service.

Xona successfully tested its navigation system during a ground-based demonstration earlier this year, marking a major milestone for the company. It is now expanding laboratory facilities to support further development and enable on-site testing and manufacturing. This funding round will also provide for growth of Xona’s technical team, which includes space and GNSS experts previously from NASA, Lockheed Martin, Maxar, L3 Harris, Blue Origin and SpaceX.

“Knowledge of location and time is one of the most fundamental aspects of both human life and machine operation,” said Brian Manning, CEO of Xona. “GNSS creates trillions of dollars of value by accurately answering the questions of ‘where am I?’ and ‘what time is it?’ for users all around the world. Xona was founded around the mission of enabling modern technology to operate safely in any environment, anywhere on Earth. To achieve this for both humans and machines, a foundation of reliable and accurate PNT is an absolute necessity, which is exactly what we are working to provide at Xona.”

An enhanced version of the BeiDou short message service was showcased at the First International Summit on BeiDou Navigation Satellite System (BDS) Applications held in Changsha, central China’s Hunan Province, on Sept. 16, reports China.org.bn.

The short message service enables two-way communication on mobile phones in areas not covered by ordinary mobile communication signals or when base stations are damaged, the website reports. This service would prove useful in the event of an earthquake or other emergencies, as well as offshore fishing.

“Short message service needed a larger satellite terminal such as maritime satellite phone,” said Li Jingyuan, director of the BeiDou short message team at National University of Defense Technology (NUDT). “But the enhanced version’s low-power-consumption feature enables mobile phones to send emergency messages through BeiDou satellites, even without ground mobile communication signals. The information transmission rate of the enhanced version has increased 10 times, which means pictures and voice messages can be sent out quickly.”

At the summit, NUDT, the people’s government of Hunan, and China Electronics Corporation signed an industrial cooperation agreement to further expand short message service to low orbit satellite users. The short-message service could play a role in global satellite internet of things, international life rescue, global emergency communication and other industrial applications, the website reports.

The BCM4778’s third-generation dual-frequency GNSS receiver features advanced multipath mitigation, L5 acquisition capability, LTE filtering and jamming protection

Broadcom Inc. has launched the BCM4778, its lowest power L1/L5 GNSS receiver chip optimized for mobile and wearable applications. Equipped with the latest GNSS innovations, the third-generation chip is 35% smaller and consumes five times less power than the previous generation.

---

Broadcom will be presenting further information on the chip in the Session B5, Panel: GNSS Chipset Technology – Trends, Opportunities and Challenges panel at the ION GNSS+ 2021 on Sept. 24.

---

Dual-frequency GNSS continues to be an important location feature for modern mobile and wearable devices, providing greater positioning accuracy for location-based applications. The advanced L5 signal enables sidewalk-level accuracy for pedestrian navigation in urban environments, as well as lane-level accuracy for vehicle navigation.

Reduction in GNSS power consumption is crucial to extending the battery life of a mobile or wearable device. Compared to GNSS receivers used in integrated platforms, Broadcom’s single-chip BCM4778 delivers significantly lower power consumption and higher performance while offering more advanced GNSS features, such as the next-generation Grid Tracking urban multipath mitigation technology.

---

“We are excited to see this impressive power reduction, combined with the L5 Grid Tracking technology in the new Broadcom GNSS chip. This will increase the impact of Google’s 3DMA ray-tracing for urban multipath mitigation,” said Frank van Diggelen, principal software engineer at Google.

---

Longer battery life. The BCM4778 increases the GNSS always-on battery life on a smartwatch by 30 hours compared to the previous generation chip operating on a 300-mAh battery. The extended battery life helps drive new experiences in smartwatches and phones, including keeping the GNSS always-on for fitness applications for multiple days on a single battery charge.

In addition, the BCM4778 features fully integrated LNAs for L1 and L5 bands, which reduces RF front-end BOM costs and footprint requirements, suitable for space-constrained applications. The chip offers increased flexibility to smartwatch and phone designers with its small size. Having the ability to place the BCM4778 closer to the antenna helps improve signal reception and enhances overall GNSS performance.

Product Highlights

• 7nm CMOS technology
• Typical power consumption
• 4mW L1 band only
• 6mW L1+L5 simultaneous
• FCBGA package
• New Grid Tracking technology
• Advanced multipath mitigation
• Continuously tracks the full L5 channel
• Capable of L5 acquisition
• Increased processing capability and throughput
• Advanced LTE filtering and jamming mitigation
• Enhanced LTE Band 13 and Band 14 filtering
• Spoofing and jamming detector
• Jamming mitigation through multiband and multi constellation
• Reduced BOM cost and footprint
• Flexibility in using internal LNAs
• Optional operation without interstage SAW filters
• Integrated switching regulator with direct connect to battery

“With the launch of this third generation dual-frequency GNSS receiver chip, Broadcom continues the tradition of raising the bar for mobile GNSS,” said Vijay Nagarajan, vice president of marketing for the Wireless Communications and Connectivity Division at Broadcom. “Always-on dual frequency GNSS is a key request from mobile and wearable OEMs, and we are thrilled to deliver it.”

“Consumer electronic companies have been faced with the challenge of managing power consumption versus performance, often having to choose one over the other. Broadcom’s innovative approach to the BCM4778 allows their customers to realize improvements on both fronts,” said Ramon T. Llamas, research director for mobile devices at IDC. “The result: device manufacturers can enable new experiences and run applications over a sustained period of time. In addition, by reducing its BOM cost and its physical footprint, Broadcom is enabling further benefits from cost savings and design configurability.”

Broadcom is currently sampling the BCM4778 to its early access partners and customers. Please contact your local Broadcom sales representative for samples and pricing.

The next-generation SLAM algorithm — GeoSLAM Beam — powers the new software

GeoSLAM has released a software update, Connect 2.0, at the Intergeo 2021 trade show. Intergeo is taking place this week in Hannover, Germany.

Connect 2.0 enables GeoSLAM scanners to achieve a higher level of accuracy compared to other SLAM-based mapping systems. Colorization from the new ZEB Vision panoramic camera provides even more visual context to a point cloud, as well as interactive “bubble” walkthroughs and measurements.

The update is powered with the next generation of GeoSLAM’s algorithm GeoSLAM Beam, which includes new filtering and georeferencing tools to help users get the best results from their datasets.

Connect 2.0 also simplifies data processing through a series of workflow scripts. This includes automatic data processing, stop-and-go georeferencing and stop-and-go alignment, all available as standard.

Connect 2.0 Features

• Intuitive interface – The Connect viewer is integrated into the main software interface, making it easy to view multiple point clouds simultaneously and measure the distance between data points.
• Change detection – Multiple point clouds can be compared, and any areas that have changed are automatically highlighted. Point clouds also can be compared with CAD models to track progress on a construction site or view changes between scans.
• Floor slices – Horizontal and vertical slices can be taken from any location within the point cloud. Horizontal floor slices can also be automatically taken at any given height above the floor.
• Environmental presets – Data is processed according to the environment it was captured in (indoor, outdoor, UAV or vehicle).
• Draw 4.0 – Draw projects can now be created automatically for any dataset.

GeoSLAM customers with a Care subscription will have full access to Connect 2.0. Any new product shipped starting today comes with both Connect and Hub software.

Real-time processing

GeoSLAM has also launched real-time SLAM processing through remote access. Using an API for remote data capture or automated robotic navigation, users can see the point cloud and trajectory in real time. The ZEB Revo RT can be used on and off a robotic platform.

ZEB Vision panoramic camera

The ZEB Vision 16MP panoramic camera is now available for pre-order. Suitable for any ZEB Horizon, the new camera provides better colorization, image walkthroughs and pointcloud measurements using optional Draw software.

Use on UAVs. Further updates mean that GeoSLAM customers can now take a ZEB Horizon from handheld to UAV usage to get a more complete picture of projects. ZEB Horizon is compatible with the DJI Matrice 300 UAV.

SimOSNMA provides vital test tools for Galileo’s emerging end-to-end security protocol

Spirent Communications plc and Qascom have announced a simulation test solution for the Galileo Open Service Navigation Message Authentication (OSNMA) mechanism.

SimOSNMA is designed to work with Spirent’s GNSS simulation platforms to test OSNMA signal conformance, which will bring new levels of robustness for both civilian and commercial GNSS uses.

SimOSNMA provides developers with new simulation tools to test for OSNMA, the security protocol that enables GNSS receivers to verify the authenticity of signals distributed from the Galileo satellite constellation. Designed to combat spoofing, OSNMA ensures the data received is authentic and has not been modified in any way. It is now completing the test phase before its formal launch.

SimOSNMA enables developers to simulate and test OSNMA signals and features, allowing GNSS receiver manufacturers and application developers to accelerate and assure development programs.

Qascom has been a significant contributor to the development of Galileo OSNMA. The company helped create the main test vectors for early testing and led the Position Authenticated Tachograph for OSNMA Launch (PATROL) project, which is the European Union Agency for the Space Program (EUSPA) procurement looking at the implementation of OSNMA into automotive and mass-market GNSS receivers.

“During the development of the first OSNMA receiver prototype, we needed a tool that would allow us to run tests in a controlled and repeatable environment, generate reference data, test corner cases and system events that seldomly occur in reality,” said Carlo Sarto, head of Security Engineering Domain Area. Qascom. “SimOSNMA will allow industries and agencies to speed up the development and qualification of their systems.”

Since the inception of the Galileo project, Spirent has provided crucial simulation and test capabilities to many of the key organizations and projects responsible for development of the European Space Agency (ESA) program.

SimOSNMA is available now for Spirent GSS7000 and GSS9000 platforms.

Telit has launched the SE150A4 system-on-module series with an embedded multi-constellation GNSS (GPS, BeiDou, GLONASS and Galileo) receiver for high-performance positioning and navigation.

The SE150A4 module is designed for retail and point-of-service (POS) devices, home automation and security, law enforcement and other applications that need high data rates, advanced human-machine interfaces and edge-computing functionality. It features the Android OS and the Qualcomm QCM2150, and is designed to serve internet of things (IoT) device makers and customers.

With LTE Category 4 for maximum data rates of up to 150 Mbps downlink and 50 Mbps uplink, the SE150A4 series is designed for bandwidth-intensive applications such as live, high-definition (1080p/30 fps) video from law enforcement cameras, home security systems and robots. Along with GNSS, Wi-Fi (802.11a/b/g/n) and Bluetooth Low Energy (BLE) 4.2 provide additional connection flexibility.

The SE150A4 series provides native support for integrated peripherals such as high-resolution touch displays, advanced cameras, sensors and audio interfaces, as well as SDIO 3.0, USB 2.0, UART, SPI and I2C digital interfaces. Android OS gives device OEMs, systems designers and other users access to a vast developer community and broad selection of tools and ready-to-use software components.

The modules are available in two versions.

• The SE150A4-NA for North America supports 13 LTE bands, including Band 14 for AT&T FirstNet Band and Bands 66 and 71 for T-Mobile, as well as 3G fallback.
• The SE150A4-EU for Europe and the rest of the world supports Band 28 and nine additional LTE bands, as well as 2G/3G fallback.

At 40.5 x 40.5 mm, the LCC +LGA form factor allows easy integration in portable, wearable and handheld devices, including mobile point-of-sale terminals, medical monitors, industrial PDAs and telematics cameras. The modules are also suitable for fixed applications such as smart-home gateways and alarm systems.

GeoMax has announced a new GNSS smart antenna, the Zenith60.

The Zenith60 is a calibration-free tilt compensating GNSS smart antenna that incorporates state-of-the-art technology. The antenna’s tilt capability makes surveys faster and more convenient, hence more productive and efficient, the company said.

The incorporated calibration-free inertial measurement unit (IMU) technology is designed to save time. The Zenith60’s resistance to magnetic fields ensures reliable data collection.

The antenna reaches its maximum performance when combined with X-PAD Ultimate field software and GeoMax field controllers, the company said.

Fendt machines in North America, Europe and the Middle East equipped with Fendt Guide guidance systems powered by Fuse Smart Farming now come with NovAtel’s SMART7 GNSS receiver as the default configuration choice.

“We have been working with NovAtel for years, and their support and willingness to adapt to meet our needs makes them the key GNSS receiver supplier for our Fendt Guide guidance system,” said Bernhard Schmitz, director, FendtONE Market Readiness and Agronomy EME. “They are easy to work with and have high-quality products that integrate seamlessly into our machines.”

The SMART7 combines a powerful GNSS receiver with a precision antenna in a durable, all-in-one enclosure designed to stand up to the vibration, weather and temperature demands of harsh agricultural environments. Delivering exceptional positioning, the SMART7 is optimized to succeed in demanding agriculture and off-road applications.

The SMART7 uses multi L-band tracking to access TerraStar Correction Services globally, bringing repeatable centimeter-level accuracy to any application, anywhere in the world. Access to multi-frequency GPS, GLONASS, BeiDou, Galileo and QZSS signals provides better satellite availability in challenging environments.

Resiliency to radio frequency interference is ingrained in NovAtel’s hardware designs, and the company’s Interference Toolkit firmware suite provides detection and additional protection from any potential intentional or unintentional interference.

Powered by NovAtel GNSS+INS technology, the SMART7 uses an optional integrated inertial measurement unit (IMU) to provide continuous 3D positioning, velocity and roll/pitch/azimuth for deeper integration with vehicle guidance and steering systems. Additional optional features on the SMART7 include Wi-Fi and Ethernet for remote connectivity and monitoring.