Advances of SBAS authentication technologies

Ying Chen1, Weiwei Gao2, Xiao Chen3, Ting Liu3, Cheng Liu1, Chengeng Su1, Lu Jun1, Wei Wang1, Shenglin Mu3
1Beijing Institute of Tracking and Telecommunication Technology, Beijing 100094, China
2Beihang University, Beijing, China
3Aerospace Information Research Institute, Chinese Academy of Sciences, Beijing 100094, China

Tóm tắt

AbstractSatellite Based Augmentation System (SBAS) provides the corrections and integrity information to users, but as its signal format is opened to the public and Global Navigation Satellite System (GNSS) spoofing technology becomes more realistic, more feasible and cheaper. It's foreseeable that there will be risks of spoofing threats against SBAS in the future. SBAS signal authentication technology provides a system-level solution to spoofing threats by adding special markers to SBAS signals so that receivers can verify whether the SBAS signals are from the on-orbit Geostationary Earth Orbit (GEO) satellites or whether the signal information has been forged and tampered with. First, this article introduces the existing anti-spoofing methods that can be applied to SBAS, especially the Elliptic Curve Digital Signature Algorithm (ECDSA) and Timed Efficient Stream Loss-Tolerant Authentication (TESLA) protocols. Then it discusses four possible solutions in a combination with the existing SBAS Interface Control Document (ICD). Two main Key Performance Indicators (KPIs), Time Between Authentication (TBA) and Authentication Latency (AL), obtained in the four main scenarios are compared. By analyzing the EGNOS Authentication Security Testbed (EAST) test simulation results of European Geostationary Navigation Overlay Service (EGNOS) in Europe, the impact of SBAS after joining the authentication service is obtained.

Từ khóa


Tài liệu tham khảo

Chiara, A. D., Broi, G. D., Pozzobon, O., Sturaro, S., Caparra, G., Laurenti, N., & Chatre, E. (2016a) Authentication Concepts for Satellite-Based Augmentation Systems, ION GNSS+ 2016, Portland.

Chiara, A. D., Broi, G. D., Pozzobon, O., Sturaro, S., Caparra, G., Laurenti, N., & Chatre, E. (2016b). Authentication concepts for satellite-based augmentation systems. In Proceedings of the 29th international technical meeting of the satellite division of the institute of navigation (ION GNSS+ 2016) (pp. 3208–3221).

Chiara, A. D., Broi, G. D., Pozzobon, O., Sturaro, S., Caparra, G., Laurenti, N., & Fernandez-Hernandez, I. (2017). SBAS authentication proposals and performance assessment. In Proceedings of the 30th international technical meeting of the satellite division of the institute of navigation (ION GNSS+ 2017) (pp. 2106–2116).

Draft IWG SBAS L5 DFMC Interface Control Document (SBAS L5 DFMC ICD), E-OC-7260-ESA, 1 Draft 036, March 2015.

EGNOS Grant Plan 2019. (2018). GSA-EGN-PM-PL-244825 v1.0. https://www.gsa.europa.eu/sites/default/files/content/egnos_2019_grant_plan.pdf

Enge, P., Walter, T. (2014). Digital message authentication for SBAS (and APNT). In ION GNSS+ 2014, Tampa, FL.

Fernández-Hernández, I., Châtre, E., Chiara, A. D., Broi, G. D., Pozzobon, O., Fidalgo, J., & Rijmen, V. (2018). Impact analysis of SBAS authentication NAVIGATION. Journal of the Institute of Navigation, 65(4), 517–532.

Fernández-Hernández, I., Rijmen, V., Seco-Granados, G., Simón, J., Rodríguez, I., & Calle, J. D. (2014). Design drivers, solutions and robustness assessment of navigation message authentication for the galileo open service. In Proceedings of the 27th international technical meeting of the satellite division of the institute of navigation (ION GNSS+ 2014) (pp. 2810-2827)..

Fernández Hernández, I. (2014a). GNSS authentication: design parameters and service concepts. In: Proceedings of the European navigation conference.

Fernández Hernández, I. (2014b). GNSS authentication: design parameters and service concepts. In: Proceedings of the European navigation conference.

ICAO, Annex 10-Volume 1 Aeronautical Telecommunications - Radio Navigation Aids.

Kerns, A. J., Wesson, K. D., & Humphreys, T. E. (2014). A blueprint for civil GPS navigation message authentication. In 2014 IEEE/ION position, location and navigation symposium-PLANS 2014 (pp. 262–269). IEEE.

Liu R. (2015). Information Authentication Based Beidou II Civil Signal Anti-spoofing Method. Civil Aviation University of China, 2015.

Liu T. (2018). Design of Navigation Message Authentication Scheme and Analysis of Performance. In Proceeding of the 29th Conference of Spacecraft TT&C Technology in China, Shanghai, 2018.

Lo, S., DeLorenzo, D., Enge, P., Akos, D., & Bradley, P. (2009). Signal authentication. Inside GNSS, 4(5), 30–39.

Minimum Operational Performances standards for global positioning system/wide area augmentation system airborne equipment (SBAS L1 MOPS), RTCA DO-229D, 2006.

Mu, S., Chen, Y., Liu, T., Liu, C., & Chen, X. (2020). Design of message authentication and OTAR broadcast strategy for BDSBAS. Journal of Beijing University of Aeronautics and Astronautics. https://doi.org/10.13700/j.bh.1001-5965.2020.0222.

Neish, A., Walter, T., & David Powell, J. (2019). Design and analysis of a public key infrastructure for SBAS data authentication. Navigation, 66(4), 831–844.

Neish, A., Walter, T., & Enge, P. (2019). Quantum-resistant authentication algorithms for satellite-based augmentation systems. Navigation, 66(1), 199–209.

Neish, A., Walter, T., & Powell, J. D. (2017) SBAS Data authentication: a concept of operations.

Neish, A., Walter, T., & Enge, P. (2018). Parameter selection for the TESLA keychain. ION GNSS. Vol. 1.

Neish, A., Walter, T., & Powell, J. D. (2019). SBAS data authentication: a concept of operations. In Proceedings of the 32nd international technical meeting of the satellite division of the institute of navigation (ION GNSS+ 2019) (pp. 1812–1823).

Perrig, A., Canetti, R., Tygar, J. D., & Song, D. (2000). Efficient authentication and signing of multicast streams over lossy channels. In Proceeding 2000 IEEE symposium on security and privacy. S&P 2000 (pp. 56–73). IEEE.

Pozzobon, O., Wullems, C., Kubik, K., et al. (2004). Secure tracking using trusted gnss receivers and galileo authentication services. Positioning, 3(08), 200.

Psiaki, M. L., & Humphreys, T. E. (2016). GNSS Spoofing and Detection. Proceedings of the IEEE, 104(6), 1258–1270.

Scott, L. (2003). Anti-spoofing and authenticated signal architectures for civil navigation systems. In: Proceedings of the ION GNSS meeting (pp. 1542–1552).

Standardization Administration (2016a) GB/T 32918.1——2016, SM2 Public key cryptographic algorithm SM2 based on elliptic curves, Part 1: General.

Standardization Administration (2016b) GB/T 32918.1——2016, SM2 Public key cryptographic algorithm SM2 based on elliptic curves, Part 2: Digital signature algorithm.

Tan, S. (2008). Development and thought of compass navigation satellite system. Journal of Astronautics., 29, 391–396.

Walter, T., Neish, A., Clark, B (2019) Recommended removal of the authentication time to detect key performance indicator for SBAS Authentication of the 15th joint working groups meeting of the navigation systems panel, Montreal, October 15–24. JWGs/5-WP/67.

Wesson, K., Rothlisberger, M., & Humphreys, T. (2012). Practical cryptographic civil GPS signal authentication NAVIGATION. Journal of the Institute of Navigation, 59(3), 177–193.

Wullems, C., Pozzobon, O., & Kubik, K. (2005). Signal authentication and integrity schemes for next generation global navigation satellite systems. In European navigation conference (ENC-GNSS 2005).

Yuki, H. (2016). ANGO GIJUTSU NYUMON. The Third Edition. Post&Telecom Press, Vol. 12.