ASI Agenzia Spaziale Italiana Galileo Workshop Roma 26/07/2012. Alessandro Pozzobon, Project Manager & Co-founder Qascom

Size: px

Start display at page:

Download "ASI Agenzia Spaziale Italiana Galileo Workshop Roma 26/07/2012. Alessandro Pozzobon, Project Manager & Co-founder Qascom"

Primrose Merritt
8 years ago
Views:

1 ASI Agenzia Spaziale Italiana Galileo Workshop Roma 26/07/2012 Alessandro Pozzobon, Project Manager & Co-founder Qascom

2 Who is Qascom Quality And Secure COMmunications Bassano del Grappa Focused on: Security of Satellite Navigation Systems Authentication of civil GNSS at signal and receiver level against Signal simulation Intentional interference

3 FP7-Galileo 3 projects as coordinator: TIGER Trusted Innovative GNSS receiver PUMA Precise and secure automotive tracking STON Security Technologies based on location

4 TIGER

5 Mission To develop a trusted GNSS receiver & To enhance security of IT infrastructures with trusted location and time policies

6 Technology and Product Trusted GNSS Receiver Access Control Token Information Security Applications: Access Control for banking Access Control for Enterprise Secure Timestamp Implementation Trusted GNSS Receiver Trusted GNSS Receiver GPS/GSM/ SAT Tracking Road & Marine: Road Tolls Attestation Road Tolls Access control PAYG Attestation Vessels border control Secure HazMat Tracking Future Market Opportunities Trusted GNSS Receiver GNSS Data Logger Security Applications: Covert operations Attestation Law enforcement border control Future Market Opportunities All other applications that demand trusted location 6

7 Tiger Technology Uses civilian GNSS signals GNSS security issues addressed by Tiger: Spoofing Falsification of position Detection of in-band interference Large errors in the navigation solution PVT and signal authentication attestation - PKI Supports SHA-1, SHA-256, RSA 2048 Suitable for the niche of needing high security no mass market

8 Protection from physical attacks Red / Black zone separation Tamper Resistant Coating (TRC) Tamper Detection Mesh Security Supervisor GNSS Security Processing GORE Secure Encapsulated Module RF Tamper detection Mesh Epoxy glue Metal Shielding UART Interface SEC micro SUP Connectors GNSS Inner layers UFL Connector GNSS acquisition,tracking and navigation processing TIGER tamper mesh concept 8

9 Tiger Embodiment TIGER is the first worldwide USB security token with trusted location based functionalities

10 Features Location based authentication and access control Network and VPN access, web access, etc. only from trusted zones Geo-encryption Files, documents, folders, s Attestation On top of standard strong authentication

11 How 1. Trusted token with certified position 2. Location constrains 11 * For geo-encryption: third party or proprietory E-DRM or DLP solutions

12 Geo-encryption process

13 PUMA

14 Mission Authenticate the GNSS Signal in the Road User Charging Domain

15 Scenario GNSS Egnos GNSS Jammer Tunnels Tracking Server Urban canyons Spoofer Precise and Secure Tracking

16 GNSS open challenges Availability RFI Radio Frequency interference Jamming Urban canyon and dense foliage Indoor Integrity Urban canyon and dense foliage Indoor Obstacles Geometry Authentication Spoofing Physical tampering Photo: Rene Schwietzke

17 The concept GNSS Spoofed signal S1 S2 DR s path S0 S3 GNSS s path S-1

18 Advances Attained through Development of PUMA Minimization of obstacles to the introduction of road toll applications, without the need of expensive infrastructure Detection of GNSS jamming, spoofing Navigation Aiding and GNSS Spoofing Detection using Dead-reckoning Interfacing of In-Vehicle Sensors for Dead- Reckoning via automotive interface

19 The demonstrator The project has received funding from European Community s framework programme ([FP7/ ][FP7/ ]) under grant agreement n

20 Spoofing Detection and performance DR Performance: Distance: 23 km Error: 3,16 km Error rate: 18% Green: GPS/theoretical path Blu: Dead Rekoning with PUMA Red point: Start spoofing Start Path

21 Future improvements Map matching Gyroscope Use of additional sensors available in the CAN Initialization of wheel tick Signal of opportunities

22 STON

23 Mission Server side signal authentication & To offer a security layer to authenticate users based on their position

24 The concept Low cost security token (HW or SW) Location anywhere Mass market - SME Medium IT security always connected Focus on IT Authentication -Server side to reduce costs STON token Or REQUEST LOGIN Web service Smartphone/device with STON acquisition layer User requiring access to information Is it a trusted location? Is there any inconsistency? Are the user and the token in the same position?

25 Progress beyond the state of the art Innovation in signal acquisition method RF front end with crypto integrity of sampled data Indoor mitigation (GSM, WiFi, IP) Security architecture Centralized security Signal authentication With front end and signal sample Using Galileo Commercial Service Providing strong authentication in different domains (IT security, road toll)

26 Conclusion R&D GNSS signal processing and security, signal authentication e secure GNSS receiver Know how in: Software / Telecommunication Engineering GNSS Security Target all the markets that rely on a secure PVT

27 Thanks Alessandro Pozzobon Qascom S.r.l. ph

Galileo Ready Advanced Mass Market Receiver (GRAMMAR) Project Workshop Outline

DLR ACO TUT 2011 Project Overview ICL-GNSS, Tampere, Finland, June 29-30 2011 Page 1 30.06.2010 Galileo Ready Advanced Mass Market Receiver (GRAMMAR) Project Workshop Outline» Part I (9:45-11:00)» Overview