> These can help against GPS spoofing / jamming by identifying false signals
Hrm, it would definitely stop a spoofer from misleading you about what time it is.
If you care about your position: given the fact that GPS satellites are so far away and the signal is so weak, I don't see how it provides any defense against jamming specifically. If you can't hear the satellites, you can't hear them.
Regarding spoofing, it really only defends against spoofed signals emanating from other satellites. This is a big concern for the military. For everybody else "spoofing" means spoofed signals from other land-based or atmospheric transmitters, which once again are close enough to easily drown out the true signal completely.
TL;DR: useful if threat model includes attacker-controlled satellites.
I'm not sure how much you know about GPS, but position in GPS is intrinsically linked to time. You know a satellite's orbit from its orbital elements, so, a given moment in time, you know where it is. The satellite emits signals with its internal time. You receive the signal sometime later. The difference between those times gives you the distance to the satellite at that frame[0]. When you have three or more measurements, you can triangulate your position in 3D.
In terms of spoofing, one method is to emit signals from ground based transmitters that match the signal from the actual satellite, but with offset times, and at higher power levels than the actual satellite[1]. This gives the receiver a false location.[2] If you have a source of time-truth, you can reject these signals.
In terms of jamming, you'll note that it allows rapid resynchronization after jamming. During jamming, you don't know where you are. After jamming, without a highly precise clock, you need to solve for the actual time by integrating signals from >=4 satellites. With a highly precise clock, this step is removed.
[0] There are confounding factors, like refraction in the ionosphere, but a rough approximation is that the signal is travelling at c
[1] Higher power is trivial because the signals from the satellites are very weak
This is not quite how GPS works. Because of relativity, there is a difference between local time and remote time for all GPS satellites relative to the drone.
Jamming nowadays does not work by simply throwing off random numbers. This is trivially defeated by gyroscope. It works by feeding time data that initially is exactly the same as the satellite, and slowly changes that as if it was in some other plausible direction, ultimately giving total control.
Against primitive forms of jamming, sure this might work. Against modern spoofing attacks, no there is no fix. Overall, what worked works and what doesn't work won't.
Relativity doesn't really factor into this issue; the core of the issue is false timing signals.
Any introduction of a false timing signal whose time offset from the true signal is greater than the local clock's uncertainty can be flagged as false. Higher-accuracy local clocks reduce the amount of error that can be introduced without detection.
CSACs don't solve the issue, but they do allow for detection of more spoofing signals, and they reduce the amount of error that any successful spoofing signal can introduce.
No, relativity absolutely does factor. The timing signal from the GPS satellites is warped by relativity as you move relative to them.
Without a source of location truth, you have no way of knowing if the change in the time signal is because of your movement relative to the GPS satellites, or because of spoofing.
As I said, the false GPS signal will start with a time offset of zero. They will then progressively offset the time signal of each satellite as if, for example, the GPS receiver was deviating slightly right, after which the drone will turn left.
Relativity matters in GNSS in general, but it doesn't really matter for the issue of spoof detection; relativistic effects would be solved for by both the attacker and receiver. There's no uncertainty in them.
Relativistic effects dictate that it is impossible to distinguish changes in relative time and changes in relative position.
Because of relativity you cannot use local time to estimate remote time, and hence you cannot use local time to make the difference between time spoofing and location changes.
GPS spoofers start off feeding you exactly the same data as the GPS satellites, then start diverging exactly as if you were slowly turning in a different direction.
Any introduction of a false timing signal whose time offset from the true signal is greater than the local clock's uncertainty can be flagged as false. Higher-accuracy local clocks reduce the amount of error that can be introduced without detection.
CSACs don't solve the issue, but they do allow for detection of more spoofing signals, and they reduce the amount of error that any successful spoofing signal can introduce.
Reading this again I wasn't as complete as I should have been.
Any introduction of a false timing signal whose time offset from the existing measurements is greater than the local clock's uncertainty can be flagged as false.
If your previous reported satellite time is Sp, previous local time is Lp, local time uncertainty is U, current local time is Lc = Lp + Ld±U, and current reported satellite time is Sc = Sp + Sd, then, roughly speaking,
if Sd > (Ld + U) or Sd < (Ld - U), the reported signal is a spoof.
So the original spoof signal as well as any subsequent spoof signals are subject to the stricter constraints offered by your higher-accuracy local time source.
Again I don't think you understand what I meant. The spoofed signal will start with an offset of exactly 0.
This offset will progressively increase in a way that is undistinguishable from an offset caused by receiver moving slightly left, for example.
That being said, the main source of error in GPS signals isn't the time-keeping of the receiver, but rather atmospheric interference and rounding errors in computations.
I understand what you mean. The fact remains that having a local and accurate source of time reduces the ability for an attacker to move a target off course through spoofing.
At each frame the attacker has to add to the error in the victim's position. By limiting how much error the attacker can add at each frame, you limit how much damage the attacker can do.
There are other systems involved here, including accelerometers and gyros, that together with a kalman filter allow the moving system to estimate the state, read values, and output new states based on a combination of those inputs. Less uncertainty in time allows for more precise predictions and more rejection of invalid inputs.
Read the link in my original post if you don't believe me:
"If GPS is disrupted or jammed, a CSAC could provide precise time to the GPS receiver to enable rapid recovery or to protect receivers from GPS spoofing, a condition where false GPS signals are broadcast to fool GPS receivers with erroneous information. The hope is that the Soldier wouldn't even know that his GPS is being jammed," Olson said. "
There is no error. The error produced is completely indistinguishable from the plane turning left or right.
I mentioned gyros and accelerometers in my first comment. They are the only thing that can at all help with advanced spoofing attacks. They are not sufficient. If they were sufficient, there would be no use for GPS to begin with.
This chip can only help against primitive attacks. It can help if the GPS signal is being jammed with nonsense signals by allowing the navigation system to lock back into the correct signal more quickly.
In the case of a sophisticated attack, the navigation system will not be able to detect the spoofing at all. The error induced by the spoofing will be completely indistinguishable from gyro drift.
That is to say, in the RQ-170 incident, the attacker was limited in the amount of error that could be added each frame by the gyros and accelerometer. Now, the attacker is still limited by the gyros and accelerometer, there is no change to the amount of error that can be added over time.
This chip can help against unsophisticated attacks. It cannot do anything at all for sophisticated attacks like those that allowed the capture of the RQ-170.
Let us have a thought experiment to ascertain this. Imagine a drone with an unphysically perfect clock. The drone receives time from 4 satellites and uses this time delta to calculate the distance from all four satellites.
Now let us imagine an attacker which overpowers this time signal. Initially, the signal is exactly the same as before the jamming. The signal at time t is such that it is exactly equal to that if the drone was turning left at exactly half of the gyro drift rate.
How would you be able to detect that this signal is incorrect? The answer is, it is impossible.
You may claim that the clock will be able to detect errors in the time by the spoofer. However, there is inherent noise in the time signal from GPS due to numerical errors in the predicted orbit of the satellites as well as interference from the ionosphere. The stochastic component of this noise is equal to more or less 3 meters. So the time is error in the date signal from the GPS is already of the order of 1/(100 000 000) seconds, meaning that any clock with better than that is not useful for discriminating against sophisticated attacks (but still useful against unsophisticated attacks).
I don't want to carry this on forever, but I will add this: the interference from the ionosphere is large, yes, but the difference in error is related to geographic location. For example, the error from the ionosphere at two points on the earth 5m apart is very similar. This is why things like CORS base stations and GNSS post-processing work. The range limit on those that NGS uses is 70km. This can be extended to the error from one frame of the solution to the next. The same is true of other error sources: the a priori error is large, but the error from one moment to the next for a receiver is small, for orbital elements, atmospheric noise, satellite clock error, etc.
For the issue of the gradually-increasing-error type of attack you mention, this article restates the point I've been driving at[0]. Their example is not chip-scale, but in all other respects it's the same. Note that they separately describe using a source of location-truth, but they still describe a method for spoofing attack detection that just relies on a cesium clock.
This[1] article is a good read, too, though their setup was GNSS-only, no IMU. They detect spoofs down to 2m (the shortest distance tested) with CSACs, but do not detect spoofs at that distance with classical receiver clocks.
Again, this doesn't completely remove the potential for spoofing attacks, it just reduces them. I don't have numbers on the actual limits in position change over time that would be detectable. But the principle for detecting gradual spoofed shifts is valid.
(and yes, I did look up these articles to respond.. not sure what that says about my time-management, but it's an interesting topic :)
From article [0]:
"Certain spoofing attacks work by producing and broadcasting a falsified version of the GPS signal, but at a slightly greater power, which tricks a GPS receiver into locking onto the spoofed signal. Once the receiver has locked onto the spoofed signal, the false signal gradually phases out of sync with the GPS signal, causing the GPS receiver to report a false PNT, one dictated by the spoofer. The incremental phase out makes the spoofing attack very difficult to detect.
...
For a trusted input, TADA uses an atomic clock frequency. In simple terms, for each second measured by the incoming GPS timing signal, TADA counts the number of frequency cycles generated by a cesium clock. If the incoming GPS signal is valid, TADA will count exactly the expected number of Cesium frequency cycles. But if TADA measures a higher or lower number of timing signals than expected, it will display the difference. A difference outside the acceptable margin of error will prompt TADA to alert its users that the GPS timing signal is possibly being spoofed."
Instead of a beam of Cesium atoms being sensed with microwaves, this has a vapor cell sensed with microwave modulated light. This eliminates the finite lifespan previously associated with Cesium Beam atomic clocks.
Unlike Rubidium references, the light is supplied by a solid state laser, eliminating another huge power sink.
I expect these devices have a practically infinite life. What an amazing set of innovations.
If someone had a celestial database, and a telescope, how accurately could one determine their position on earth using this device? Assuming no GPS satellites are available.
The telescope and timing part of this problem are actually relatively easy. You can align a fairly cheap telescope towards a star with an accuracy of about an arcsecond, which is a distance of about 30 metres on the earth's surface. Beyond that, the turbulence in the atmosphere tends to blur the view, so it is hard to get much more accurate.
One of those arcseconds passes by approximately 15 times a second, so using an atomic clock for that is way overkill - any time source more accurate than 1/15 of a second is unnecessary.
The main problem is that once you have aligned your telescope, now what you are trying to do is measure the direction of gravity, compared to the direction you're pointing the telescope, and that's a lot harder. Partly because that's a mechanical angle measurement (you need a pendulum that can freely swing and rest with minimal friction pointing directly in the direction of gravity, and then you need to measure angle). But then also, you need to take account of the fact that the gravitational field on the Earth is lumpy. If you're sitting next to a mountain, the gravitational field will be deflected slightly from pointing directly downwards - and in fact that was used a while back to measure the density of the Earth.
But theoretically, if you can solve the angle measurement bit, you could determine your location on Earth with an error of around 30m.
Yes. To a large extent, the positions of the stars are fixed with respect to each other. It's just the Earth that moves around. You're trying to get latitude, which you can get from the altitude of a star above the southern horizon, and longitude, which you get from when the star passes east to west. Choosing another star doesn't get you out of having to measure which direction is down. The "which direction is down" question is the answer to "where am I on Earth" - the telescope and timer are just there to set your frame of reference.
Sextants used at sea find altitude angles by measuring between the stars(or other astronomical objects) and the horizon. There is a correction that can be applied to account for wave height as it affects the "eye height." Azimuth can be found by measuring against stars that are low in the sky, but most of the time you do not need this for sea navigation. "Down" is inferred as the shortest path between a star and the horizon. It takes a bit of practice to get a good measurement from a rolling boat, but it is skill anyone can learn.
At sea the fact that "down" is perpendicular to the horizon is useful, because the horizon is pretty much a straight line. On land this is irrelevant because the horizon is rarely flat on land.
You would suspend your measuring apparatus in a device that absorbed or heavily dampened the motion of the waves (like gas struts, or something similar).
We looked at using these in a previous job that had a very tight tolerance on RF frequency tolerance. Vibration tolerance makes the use of crystals difficult.
Unfortunately, the phase noise of this device wasn't good enough to be the frequency source for the radio itself, so we would have had to use the CSAC to discipline a tcxo. By the time we did that, it really wasn't that advantageous.
It looks like they have a low-noise option that includes a tcxo now, but (no surprise), it doesn't appear to have a operating vibration spec.
At the heart of any atomic clock is a quartz crystal clock that is steered to match the resonance dip of the atom. It is that oscillator that actually outputs the 10Mhz, gets divided to 1PPS, etc.
Perhaps it would be possible to have a pair of identical crystals tied together but electrically opposite in phase so that external vibrations tended to cancel. (Like a differential signaling pair in a cable)
For some applications that's not that much. Imagine SpaceX putting one of these in each StarLink satellite and providing their own GPS-like service.
I'm not sure if this clock would be good enough for GPS. It's 3 orders of magnitude less accurate than a cesium clock. But with so many StarLink sats overhead, and synchronizing with more accurate ground clocks, might make up for that.
One application I am familiar with is their use in ocean bottom hydrophone and geophone recording nodes for reflection seismology. Land based, transition zone, and boat tethered systems can be synced to GPS time. Battery powered ocean bottom nodes have to maintain an independent clock with a limit on the maximum amount of clock PPS drift from the moment they are deployed. The longer you want it to operate usefully on the ocean bottom, the more accurate your timekeeping clock has to be. I don't know if I would say this is a non-practical purpose, but anything I can think of to do with a highly accurate clock would have some practicality
Yes, we use these in ocean bottom and subsurface buoys. However only for audio and seismic activity do we need this kind of accuracy.
The cost is high, they don't always work perfect, and they consume a fair amount of power for long deployments. Overall we try to avoid them if possible.
{Small, cheap, low-power} x {SpaceX launch capacity} == highly redundant and very resilient GPS equivalent?
This thing is sufficiently small, low-power, and low-cost to use in something like StarLink sats, and it's accuracy is advertised as "±5.0E-11 accuracy at shipment", compared to about ~3e-15 or so for cesium clocks. With 30k+ StarLink sats in orbit one might be able to see enough sats overhead to provide comparable accuracy on the ground as GPS (but I've not done the math).
If there are any current (or ex-) Symmetricom employees reading this, then I'd love to hear about your work. I have a profound interest in the domain of high-precision timekeeping.
No, the CSAC is a Rubidium standard. It measures the ~6.8 GHz ground-state hyperfine splitting in 87Rb using coherent population trapping with a modulated 780 nm diode laser. This signal is used to lock the local oscillator to the atomic transition frequency. And all that in a tiny package with 120 mW power consumption. Pretty cool stuff!
Edit: At second glance, it seems liks they are actually using Cesium now (some other demonstrators use Rubidium). The principle is the same, but the hyperfine splitting is 9.192631770 GHz (by definition) and the laser wavelength is 894 nm.
Rubidium fountains actually launch ions up against gravity so that they are in free fall (in a vacuum, with magnetic fields nulled out) during their sample period. That's not something I can see being miniaturized, or put in use on a moving platform.
Atomic fountains use neutral atoms. It is almost impossible to see the effect of gravity on ions since a single stray electron anywhere in your system creates a way larger Coulomb force.
Fountains need to have a minimum size in order to achieve a sufficient flight time when throwing the atoms up on a ballistic trajectory. Obviously, they also have to be very carefully aligned with respect to gravity.
Somebody already made one - Hoptroff, a London-based watchmaker produced a pair of wristwatches based on the CSAC a few years ago. Don't bother searching for a price or where to buy; they've since pivoted from making watches to being a time-as-a-service software company.
IMO it was a bit of gimmick. Apart from being a little too chunky for a wristwatch, just because it's an "atomic clock" doesn't mean it's "atomic powered". IIRC the CSAC uses about 1/8 W which is really pushing it for a low-power device like a watch. It might lose "one second per millennium" as advertised but good luck keeping it continuously operating anywhere near a thousand years.
https://www.army.mil/article/88361/Miniaturized_atomic_clock...
Also related, NASA has a spaceborne atomic clock in testing that, if it works, will make space navigation much more efficient: https://www.nasa.gov/mission_pages/tdm/clock/index.html