On Secure and Precise IR-UWB Ranging
2012 (English)In: IEEE Transactions on Wireless Communications, ISSN 1536-1276, E-ISSN 1558-2248, Vol. 11, no 3, 1087-1099 p.Article in journal (Refereed) Published
To provide high ranging precision in multipath environments, a ranging protocol should find the first arriving path, rather than the strongest path. We demonstrate a new attack vector that disrupts such precise Time-of-Arrival (ToA) estimation, and allows an adversary to decrease the measured distance by a value in the order of the channel spread (10-20 meters). This attack vector can be used in previously reported physical-communication-layer (PHY) attacks against secure ranging (or distance bounding). Furthermore, it creates a new type of attack based on malicious interference: This attack is much easier to mount than the previously known external PHY attack (distance-decreasing relay) and it can work even if secret preamble codes are used. We evaluate the effectiveness of this attack for a PHY that is particularly well suited for precise ranging in multipath environments: Impulse Radio Ultra-Wideband (IR-UWB). We show, with PHY simulations and experiments, that the attack is effective against a variety of receivers and modulation schemes. Furthermore, we identify and evaluate three types of countermeasures that allow for precise and secure ranging.
Place, publisher, year, edition, pages
2012. Vol. 11, no 3, 1087-1099 p.
Security, ranging, distance bounding, impulse radio, ultra-wideband
Electrical Engineering, Electronic Engineering, Information Engineering Telecommunications
IdentifiersURN: urn:nbn:se:kth:diva-93006DOI: 10.1109/TWC.2012.011812.110483ISI: 000301509200025ScopusID: 2-s2.0-84858339504OAI: oai:DiVA.org:kth-93006DiVA: diva2:514895
FunderICT - The Next Generation
QC 201204112012-04-112012-04-102013-04-11Bibliographically approved