GNSS Vulnerability Issues in Korea May 14, 2013 Sang Jeong Lee National GNSS Research Center Chungnam National University [email protected] Contents . GPS jamming in Korea . GoK policy . GBAS deployment plan . JLOC as a National Agenda Program 2 National GNSS Research Center, CNU May 14. 2013. GPS Jamming in Korea GNSS Vulnerability . Critical issue especially for infrastructure, e.g. airport, wireless communications network GPS jamming in Korea . GPS disruptions for the past three years due to North Korean jamming(reported by the Central Radio Management Office of South Korea) GPS jamming Aug 23–26, Mar 4–14, Apr 28 – May 13, Jammer Dates 2010 2011 2012 50~100Km area North Korea jamming (16 days) (4 days) (11 days) (Maximum GaeSeong 400Km) Kaesong, HaeJu Jammer Kaesong Mountain Kaesong locations Kumgang Seoul Affected Gimpo, Paju, Gimpo, Paju, Gimpo, Paju, Incheon areas etc. Gangwon, etc. etc. International Effected the Airport communication and some of 181 cell 145 cell military South Korea GPS towers, towers, 1,016 airplanes, equipment disruptions 15 airplanes, 106 airplanes, 254 ships 1 battle ship 10 ships 3 National GNSS Research Center, CNU May 14. 2013. GoK Policy GNSS vulnerability issues in civil applications . GBAS deployment plans . Widely deployed wireless communications network Governmental policy . International cooperation • ICAO, ITU . Development of countermeasures • Field manuals in case of jamming • Jammer location technology 4 National GNSS Research Center, CNU May 14. 2013. International Cooperation ITU(2012.05.11) . the problem about ‘whether the North Korea jamming violate or obey the international regulation’ ICAO(2012.07.05) . Expressed serious concern about North Korea's GPS jamming and urged to prevent recurrence of similar incidents . ITU and ICAO will conduct joint research about the impact of GPS jamming in the international civil aviation . Notice the decision of the board of directors for all 191 ICAO member states National GNSS Research Center, CNU May 14. 2013. National Countermeasures Ministry of Security and Public Administration (2012.12, 2013.02) . prepare the field manual in case of GPS jamming Korea Communications Commission (2013.02.18) . operate the warning system and GPS emergency response team Development of Countermeasure for Safety of Life application . GBAS Development plans (2010~2014) . JLOC as National Agenda Program (2010~2015) • To protect integrity, ground facilities must quickly detect the presence of any hazardous interference falling within the restricted band used by GNSS • To protect availability, ground personnel must be able to quickly locate and deactivate the interference source National GNSS Research Center, CNU May 14. 2013. GBAS Deployment Plans Issues and Needs in Korea . Amount of the Air traffic increases 5% per year in Korea . Mountainous terrain over 70%, Airspace & Route are restricted due to MOA . Difficult to implement two-way ILS service in some airports . Demand for new green technologies for the aircraft operation * MOA : Military Operating Area 7 National GNSS Research Center, CNU May 14. 2013. GBAS Operational Technology Development GBAS CAT-I Operational Technology Development Program Purpose Establish the GBAS Approval Process for Korea Build up the National Research Infrastructure and the GBAS Demo. Airport Develop the Research Capability for GBAS Technology Schedule 2010. 10. ~ 2014. 8. (3 Years and 11 Months) Supported by MLTM (Ministry of Land, Transport and Maritime Affairs) Scope Establish the FAA Certified System at the GBAS Demonstration Airport Develop the T&E Equipment and System for Approval Activities; SDA, FA, OA Build up the Government Approval Process and TDP Establish the Korean Ionosphere Threat Model Improve the Integrity S/W with Field Data Verification National GNSS Research Center, CNU May 14. 2013. GBAS Operational Technology Development Milestone of GBAS 1st Year 2nd Year 3rd Year 4th Year (2010. 9 – 2010. 8) (2011. 9 – 2012. 8) (2012. 9 – 2013. 8) (2013. 9 – 2014. 8) 10-11 12-2 3-5 6-8 9-11 12-2 3-5 6-8 9-11 12-2 3-5 6-8 9-11 12-2 3-5 6-8 GBAS SAT GBAS GBAS Contract GBAS GBAS KARI KOM (PMP, KOM TEMP) Acceptance GBAS GBAS Selection MSD, Stability Stability MSD, FAT Test Approval process Study Airport Procedure Civil Work development Test Ground Test Construction Construction Plan FRR Flight & test Permission Final report Test Airport Test Civil Civil Work Site Survey Site TRR inspection Test Airport Test T&E Design Selection Site Survey Site Equipment PMP : Project Management Plan TEMP : T&E Master Plan FAT : Factory Acceptance Test TRR : Test Readiness Review MSD : Measured Site Data SAT : Site Acceptance Test FRR : Flight Readiness Review National GNSS Research Center, CNU May 14. 2013. Summary Finished Site Survey/Site selection and started civil work for installing GBAS Ground system at Gimpo Airport. Developed Test Equipment and decided Testing/Inspection Requirements for Ground/Flight testing and inspection of GBAS Designed GBAS Flight Procedure(ILS-like) for GLS GBAS Ground system will be installed into Gimpo Airport by the 2nd Quarter of this year. National GNSS Research Center, CNU May 14. 2013. Jammer Location Technology as a National Agenda Program Funded by Korea Research Council of Fundamental Science Technology in 2010~2015 Development of Jammer location technologies for GBAS operation 11 National GNSS Research Center, CNU May 14. 2013. System configuration for field test . Control Station Monitoring Station IF Snapshot Google Map Data Sampling Data Collection (4xTDOA, 2xAOA) Jammer Location TCP/IP, Monitor TDOA, result AOA Server, algorithm Algorithm HTTP HTTP processor Jammer Wireless IF data Location Network storage Algorithm Control Station H/W Wireless Network Antenna Jamming Signal Receiving Station Power supply RF/IF signal processor Time synchronization Jamming Jamming Jamming Jamming processor Signal Signal Signal Signal Receiver Receiver Receiver Receiver (TDOA,AOA) (TDOA,AOA) (TDOA) (TDOA) Receiving Station H/W CW, DSSS Jamming Signal 12 National GNSS Research Center, CNU Jamming Signal May 14. 2013. TDOA Data Sever/HDD PC Antenna Receiver AOA Data Data Google TDOA Receiver receive S/W Map Antenna REF/Time Web AOA Syn. Supply Server Antenna Novatel Controller Power Supply AOA/TDOA Data Receiver Power REF Clock/Time Sync. Supply Hardware Data trans. SW Software 5 element array antenna Novatel, DL V3 Receiver 13 National GNSS Research Center, CNU May 14. 2013. Field test environment. System operation confirmation . GPS receiver operation confirmed . Wireless Network confirmed . Jamming signal transmission(A site) . Jammer location operation confirmed . Jamming signal shutdown(A site) . GPS receiver reoperation confirmed 14 National GNSS Research Center, CNU Experimental field May 14. 2013. Field test environment . Location : a radio test site of a national research center Control Station 4th signal receiving station 3rd signal receiving station 1st signal receiving station Reference station(for TDOA) 15 National GNSS Research Center, CNU 2ed signal receiving station May 14. 2013. Experimental environment Field test results. TDOA algorithm Correlation result TDOA measurement TDOA measurement 7 x 10 correlation function(Rcv1-Rcv1), peak = 151 1.12 1.115 TDOA measurement(Rcv1-Rcv2), var = 7.3011 1.11 -114 1.105 -116 1.1 -118 1.095 Correlation value Correlation -120 1.09 Reference 1.085 -122 10m 1.08 -124 1.075 station 0 50 100 150 200 250 300 -126 Sample TDOA measurement 7 x 10 correlation function(Rcv1-Rcv2), peak = 191 -128 1.468 Variance = 7.3m -130 TDOA meas. 1 1.466 -132 1.464 0 20 40 60 80 100 120 140 160 time[s] 1.462 TDOA measurement(Rcv1-Rcv3), var = 3.4968 1.46 468 Correlation value Correlation 1.458 466 2ed signal 1.456 464 1.454 462 receiving station 0 50 100 150 200 250 300 NE plot, var = 72.1007 var = 968.9204 Sample N E 460 7 x 10 correlation function(Rcv1-Rcv3), peak = 38 1.175 10m TDOA meas. 2 458 456 TDOA TDOA measurement CEP = 23.9m 1.17 454 350 1.165 Variance = 3.5m 452 150m 450 1.16 Correlation value Correlation 0 20 40 60 80 100 120 140 160 300 time[s] 1.155 TDOA measurement(Rcv1-Rcv4), var = 3.2477 3rd signal 218 50m 1.15 0 50 100 150 200 250 300 216 receiving station North Sample TDOA meas. 3 250 214 7 x 10 correlation function(Rcv1-Rcv4), peak = 97 1.09 212 210 200 208 1.085 10m True position 206 TDOA TDOA measurement 204 Correlation value Correlation 1.08 202 Variance = 3.3m 150 200 600 650 700 750 800 198 1.075 0 20 40 60 80 100 120 140 160 16 0 50 100 150 200 250 300 East National4th signal GNSS Research Center,Sample CNU time[s] receiving stationMay 14. 2013. Field test results. AOA algorithm AOA measurement 1st signal receiving station 2ed signal receiving station Improvement is being done 17 National GNSS Research Center, CNU May 14. 2013. Future work modification . Improvement of AOA technique (Multi, Dynamic . Considering dynamic jammer using FDOA, Jammer) TDOA/FDOA algorithm . Considering multiple jammers . Other jammer type . CW, DSSS, Swept, Pulse Implementation . Synchronization at Airport . GPS sync. Atomic clock sync. Jammer Location . Implementation at an airport test bed Operation 18 National GNSS Research Center, CNU May 14. 2013. Milestone of NAP 1st Year 2nd Year 3rd Year 4th Year 5th Year 6th Year 2010 2011 2012 2013 2014 2015 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 1-6 7-12 Feasibility Feasibility test(H/W) Feasibility Feasibility test(S/W) Preliminary for JLOC for Preliminary Specification for Component Component test Field test environment Field test environment Final field test jammer localization technologiesjammer Implementation at the Implementationthe at international airport field test (GPS clock →Atomic →Atomic clock)(GPS clock construction Jammer Localization System Jammer Time synchronization Time Development of Development Test Algorithm Algorithm complementation - operation for multi for - jammer reconfiguration H/W & S/W Field test 19 National GNSS Research Center, CNU May 14.