Graduate School and Research Center in Digital Sciences

Physical-layer attacks on chirp-based ranging systems

Ranganathan, Aanjhan; Danev, Boris; Francillon, Aurélien; Capkun, Srdjan

WISEC 2012, 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, April 16-18, 2012, Tucson, Arizona, USA

Chirp signals have been extensively used in radar and sonar systems to determine distance, velocity and angular position of objects and in wireless communications as a spread spectrum technique to provide robustness and high processing gain. Recently, several standards have adopted chirp spread spectrum (CSS) as an underlying physical-layer scheme for precise, low-power and low-complexity real-time localization. While CSS-based ranging and localization solutions have been implemented and deployed, their security has so far not been analyzed.                               In this work, we analyze CSS-based ranging and localization systems. We focus on distance decreasing relay attacks that have proven detrimental for the security of proximity-based access control systems (e.g., passive vehicle keyless entry and start systems). We describe a set of distance decreasing attacks realizations and verify their feasibility by simulations and experiments on a commercial ranging system. Our results demonstrate that an attacker is able to effectively reduce the distance measured by chirp-based ranging systems from 150 m to 600 m depending on chirp configuration. Finally, we discuss possible countermeasures against these attacks.  

Document Doi Bibtex

Title:Physical-layer attacks on chirp-based ranging systems
Keywords:Chirp, Ranging Systems, Physical-layer attacks
Type:Conference
Language:English
City:Tucson
Country:UNITED STATES
Date:
Department:Digital Security
Eurecom ref:3627
Copyright: © ACM, 2012. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in WISEC 2012, 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks, April 16-18, 2012, Tucson, Arizona, USA http://dx.doi.org/10.1145/2185448.2185453
Bibtex: @inproceedings{EURECOM+3627, doi = {http://dx.doi.org/10.1145/2185448.2185453}, year = {2012}, title = {{P}hysical-layer attacks on chirp-based ranging systems }, author = {{R}anganathan, {A}anjhan and {D}anev, {B}oris and {F}rancillon, {A}ur{\'e}lien and {C}apkun, {S}rdjan}, booktitle = {{WISEC} 2012, 5th {ACM} {C}onference on {S}ecurity and {P}rivacy in {W}ireless and {M}obile {N}etworks, {A}pril 16-18, 2012, {T}ucson, {A}rizona, {USA}}, address = {{T}ucson, {UNITED} {STATES}}, month = {04}, url = {http://www.eurecom.fr/publication/3627} }
See also: