BACKGROUND

1. Background Field

This patent application relates to devices and methods for securing a Global Navigation Satellite System (GNSS), by use of point-to-point sessions, to transfer encrypted data related to position determination, between mobile devices and a server.

2. Background Information

Position location technologies typically utilize wireless signals concurrently transmitted from known locations to determine position. In many prior art technologies, the wireless signals are concurrently transmitted from a multiplicity of satellites (in satellite positioning systems) at a known time, and with a predefined frequency. For example, the Global Positioning System (GPS), the GLONASS owned by the Russian Federation Government, Quasi-Zenith Satellite System (QZSS) over Japan, Indian Regional Navigational Satellite System (IRNSS) over India, Beidou over China and Galileo over Europe, are satellite systems that provide users equipped with a GNSS receiver the ability to determine their location. A GNSS receiver determines its location by measuring signals transmitted by the GNSS satellites. Specifically, a GNSS receiver acquires a signal from each satellite within its view of the sky. The times of arrival of the signals along with the exact location of the in-view satellites and the exact times the signals were transmitted from each satellite are used to locate the position of the GNSS receiver, via a trilateration calculation well known in the art.

There are multiple functions implemented by an exemplary GNSS receiver of such satellite signals: (1) computation of pseudoranges to the various satellites, (2) based on data transmitted in the satellite signals, determination of satellite timing, and extraction of ephemeris (position) data, and (3) based on a combination of these (specifically, pseudoranges, timing and ephemeris) computation of the position of the satellite receiver. Pseudoranges (PRs) measure the time delays (or equivalently the ranges) between the satellites and the receiver, with a bias due to (a) the local clock in the receiver and (b) satellite clock. In conventional autonomous satellite receivers, the satellite ephemeris and time of transmission data are extracted from the satellite signal, once the satellite signal is acquired and tracked.

However, GNSS signals are relative easy to spoof. Spoofed GNSS signals can provide incorrect observable metrics (e.g. Time, C/No, Doppler, pseudorange, Carrier Phase). Spoofing of data modulated in a signal can present incorrect ephemeris and almanac information (orbit/clock/health). There appear to be no built-in authentication methods for civilian signals, although GPS has Y code for military users. A certification method for civilian use appears to be in discussion, for Galileo. And, currently, there appears to be no built in authentication methods for civilian use of such GNSS signals. Even when not spoofed, actual GNSS signals are not guaranteed to be correct all the time. For example, GNSS constellations can break due to: (a) single satellite failures, for example unpredicted clock errors or other satellite vehicle (SV) malfunctions, (b) system wide failures, for example, corrupt upload of content such as the Glonass ephemeris failures, and (c) constellation can be intentionally directed to not comply with a published standard (e.g. ICD). GNSS failures of the type described above can affect various applications and/or users, such as: accurate timing of transactions, authentication of transactions (relying on trusted location sources), synchronization of infrastructure (Power, Communications), positions used by E911/public safety, positions for navigation, automobile positioning on a map and route guidance, precision agriculture, positioning of drones, etc. Hence, improvements of the type described below are needed.

SUMMARY

Apparatuses and methods of securing Global Navigation Satellite Systems are disclosure. In one exemplary embodiment, a mobile device may comprise: a communication interface configured to monitor signals from a plurality of satellites, a processor configured to determine impairment of one or more satellites in the plurality of satellites using the signals form the plurality of satellites, a memory configured to store a status of the determined impairment of one or more satellites in the plurality of satellites, and the communication interface is further configured to transmit the status of the determined impairment of the one or more satellites in the plurality of satellites to a server.

In another exemplary embodiment, a method of securing a Global Navigation Satellite System, may comprise: monitoring, by a communication interface of a mobile device, signals from a plurality of satellites, determining, by a processor of the mobile device, impairment of one or more satellites in the plurality of satellites using the signals form the plurality of satellites, storing, in a memory of the mobile device, a status of the determined impairment of one or more satellites in the plurality of satellites, and transmitting, by the communication interface of the mobile device, the status of the determined impairment of the one or more satellites in the plurality of satellites to a server.

In yet another exemplary embodiment, a server may comprise a transceiver configured to receive data collected from a plurality of satellites by a set of GNSS receivers, a processor configured to determine impairment of one or more satellites in the plurality of satellites, a memory configured to store a status of the determined impairment of one or more satellites in the plurality of satellites, and the transceiver is further configured to provide the status of the determined impairment of the one or more satellites in the plurality of satellites to one or more mobile devices. The determined impairment of one or more satellites in the plurality of satellites may comprise at least one of: an integrity impairment received from an augmentation system, an identification of a type of source of the integrity impairment, or a combination thereof. The data collected from the plurality of satellites may comprise observable metrics of the plurality of satellites, modulation data of the plurality of satellites, or some combinations thereof. In some aspects, the set of GNSS receivers are located at geographically dispersed locations, and the set of GNSS receivers are protected from viruses, malware attacks and remote administration technologies.

In yet another exemplary embodiment, a method of securing a Global Navigation Satellite System, may comprise: receiving, by a transceiver of a server, data collected from a plurality of satellites by a set of GNSS receivers, determining, by a processor of the server, impairment of one or more satellites in the plurality of satellites, storing, in a memory of the server, a status of the determined impairment of one or more satellites in the plurality of satellites, and providing, by the transceiver of the server, the status of the determined impairment of the one or more satellites in the plurality of satellites to one or more mobile devices.

In some aspects, encrypted impairment SPS satellite data that includes identification of at least one of impairment or non-impairment of one or more satellite(s) in a satellite positioning system (SPS) may be received, from a wireless transmitter (e.g. of a cellular base station). Note that satellites are also sometimes referred to as satellite vehicles, abbreviated as SV in the following description. Identifier(s) of one or more impaired or unimpaired SPS satellite(s) may be decrypted from the encrypted impairment SPS satellite data received. Prior to their transmission by the wireless transmitter, the just-described identifiers of impaired (or unimpaired) SPS satellite(s) may be obtained by combining information from multiple sources, which are external to a mobile device. A position of the mobile device may be then determined, by using a plurality of observable metrics measured in the mobile device, of signals received from unimpaired SPS satellites without accessing navigation messages broadcast in the signals, based on access of navigation data related to acquiring SPS satellites stored in memory, and based on the identifier(s) of the one or more impaired or unimpaired SPS satellite(s).

In certain embodiments, a method includes receiving in a mobile device from a wireless transmitter, encrypted impairment SPS satellite data that comprises identification of at least one of impairment or non-impairment of one or more satellite(s) in a satellite positioning system (SPS). The method includes decrypting from the encrypted impairment SPS satellite data received in the mobile device, identifier(s) of one or more impaired or unimpaired SPS satellite(s) obtained by combining information from multiple sources external to the mobile device. The method includes accessing navigation data related to acquiring SPS satellites. The method includes determining a position of the mobile device, by using observable metrics measured in the mobile device of signals received from unimpaired SPS satellites without accessing navigation messages broadcast in the signals, based on the navigation data accessed by the accessing, and based on the identifier(s) of the one or more impaired or unimpaired SPS satellite(s) decrypted by the decrypting. Depending on the embodiment, the just-described accessing and determining may be performed in the mobile device, or performed in a server which receives the observable metrics measured in the mobile device.

In several embodiments, a mobile device includes a wireless receiver configured to receive from a wireless transmitter, encrypted impairment SPS satellite data that comprises identification of at least one of impairment or non-impairment of one or more satellite(s) in a satellite positioning system (SPS). The just-described mobile device also includes one or more processor(s) coupled to the wireless receiver. The one or more processor(s) are configured to decrypt from the encrypted impairment SPS satellite data received in the mobile device, identifier(s) of one or more impaired or unimpaired SPS satellite(s) obtained by combining information from multiple sources external to the mobile device. The one or more processor(s) are also configured clock offset access navigation data related to acquiring SPS satellites. The one or more processor(s) are further configured to determine a position of the mobile device, by using observable metrics measured in the mobile device of signals received from unimpaired SPS satellites without accessing navigation messages broadcast in the signals, based on the navigation data accessed by the one or more processor(s) configured to access, and based on the identifier(s) of the one or more impaired or unimpaired SPS satellite(s) decrypted by the one or more processor(s) configured to decrypt.

In some embodiments, one or more non-transitory computer-readable storage media have stored thereon, instructions, which, when executed by one or more computer(s), cause one or more processor(s) in the computer(s) to receive encrypted impairment SPS satellite data that comprises identification of at least one of impairment or non-impairment of one or more satellite(s) in a satellite positioning system (SPS). The just-described instructions, when executed by the one or more computer(s), may further cause the one or more processor(s) in the computer(s) to decrypt from the encrypted impairment SPS satellite data, identifier(s) of one or more impaired or unimpaired SPS satellite(s) that may be obtained by combining information from multiple sources external to the computer(s). The just-described instructions, when executed by the one or more computer(s), may also cause the one or more processor(s) in the computer(s) to access navigation data related to acquiring SPS satellites. The just-described instructions, when executed by the one or more computer(s), may further cause the one or more processor(s) in the computer(s) to determine a position of a mobile device, by using observable metrics measured in the mobile device of signals received from unimpaired SPS satellites without accessing navigation messages broadcast in the signals, based on the navigation data accessed execution of the instructions to access, and based on the identifier(s) of the one or more impaired or unimpaired SPS satellite(s) decrypted by execution of the instructions to decrypt.

In many embodiments, an apparatus includes means for receiving encrypted impairment SPS satellite data that comprises identification of at least one of impairment or non-impairment of one or more satellite(s) in a satellite positioning system (SPS), means for decrypting from the encrypted impairment SPS satellite data received by the means for receiving, identifier(s) of one or more impaired or unimpaired SPS satellite(s) obtained by combining information from multiple sources external to the apparatus, means for accessing navigation data related to acquiring SPS satellites, and means for determining a position of a mobile device, by using observable metrics measured in the mobile device of signals received from unimpaired SPS satellites without accessing navigation messages broadcast in the signals, based on the navigation data accessed by the means for accessing, and based on the identifier(s) of the one or more impaired or unimpaired SPS satellite(s) decrypted by the means for decrypting.

In some embodiments, a method of securing a Satellite Positioning System (SPS) performed by a mobile device, includes receiving an encrypted data from a server via a point-to-point communication session between the mobile device and the server; decrypting the encrypted data from the server, wherein the decrypted data comprises an assistance data for a geographical region of the mobile device, where the assistance data comprises navigation data and impairment status of satellites in the geographical region of the mobile device; and monitoring signals from a plurality of satellites obtained using the assistance data for the geographical region of the mobile device for position determination of the mobile device.

In some embodiments, a mobile device configured for a secure a Satellite Positioning System (SPS), includes a communication interface configured to wirelessly communicate with a server; an SPS receiver configured to receive signals from satellites; at least one memory; and at least one processor coupled to the communication interface, the SPS receiver, and the at least one memory and configured to: receive, via the communication interface, an encrypted data from the server in a point-to-point communication session interface between the mobile device and the server; decrypt the encrypted data from the server, wherein the decrypted data comprises an assistance data for a geographical region of the mobile device, where the assistance data comprises navigation data and impairment status of satellites in the geographical region of the mobile device; and monitor signals received by the SPS receiver from a plurality of satellites obtained using the assistance data for the geographical region of the mobile device for position determination of the mobile device.

In some embodiments, a mobile device configured for a secure a Satellite Positioning System (SPS), includes means for receiving an encrypted data from a server via a point-to-point communication session between the mobile device and the server; means for decrypting the encrypted data from the server, wherein the decrypted data comprises an assistance data for a geographical region of the mobile device, where the assistance data comprises navigation data and impairment status of satellites in the geographical region of the mobile device; and means for monitoring signals from a plurality of satellites obtained using the assistance data for the geographical region of the mobile device for position determination of the mobile device.

In some embodiments, a non-transitory computer readable medium storing instructions for execution by one or more processors of a mobile device to configure the mobile device for a secure a Satellite Positioning System (SPS), includes program code to receive an encrypted data from a server via a point-to-point communication session between the mobile device and the server; program code to decrypt the encrypted data from the server, wherein the decrypted data comprises an assistance data for a geographical region of the mobile device, where the assistance data comprises navigation data and impairment status of satellites in the geographical region of the mobile device; and program code to monitor signals from a plurality of satellites obtained using the assistance data for the geographical region of the mobile device for position determination of the mobile device.

It is to be understood that several other aspects and embodiments will become readily apparent to those skilled in the art from the description herein, wherein it is shown and described in various aspects and embodiments, by way of illustration. The drawings and detailed description below are to be regarded as illustrative in nature and not as restrictive.

