# US 12,601,810 B2 · Device and method of detecting for HRP UWB ranging against distance reduction attacks

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,601,810 B2
- Document ID: US12601810B2
- Status: Granted
- Kind: B2
- Application number: 18/242,743
- Filed: 2023-09-06
- Published: 2024-03-07
- Granted: 2026-04-14
- Earliest claimed: 2022-09-06
- Assignees: Korea University Research and Business Foundation
- Applicants: Korea University Research and Business Foundation
- Inventors: Kyungho Joo; Yeonseon Jeong; Dong Hoon Lee
- Web page: https://patentgrep.com/patent/US12601810B2

## CPC

- G01S 7/021: {Auxiliary means for detecting or identifying radar signals or the like, e.g. radar jamming signals}
- G01S 7/36: Means for anti-jamming {, e.g. ECCM, i.e. electronic counter-counter measures}
- G01S 13/0209: {Systems with very large relative bandwidth, i.e. larger than 10 %, e.g. baseband, pulse, carrier-free, ultrawideband}
- H04W 12/122: Counter-measures against attacks; Protection against rogue devices
- G01S: RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Disclosed are a device and method for detecting distance reduction attack in an ultra-wide band (UWB) high rate pulse (HRP) mode. The method for detecting distance reduction attack is a method performed by a receiver or transmitter operating in the UWB HRP mode, the method comprising receiving a message frame targeted for distance reduction attack; splitting a scrambled timestamp sequence (STS) field included in the message frame into a plurality of sub-fields; computing a correlation between each of the sub-fields and a corresponding sub-template among a plurality of sub-templates split from a local template; extracting a plurality of maximum peaks, each corresponding to each of the correlations; and detecting the distance reduction attack based on extracted maximum peaks.

## Claims

### Claim 1

A method for detecting distance reduction attack which is performed by a receiver or transmitter operating in an ultra-wide band (UWB) high rate pulse (HRP) mode, the method comprising:
receiving a message frame targeted for distance reduction attack;
splitting a scrambled timestamp sequence (STS) field included in the message frame into a plurality of sub-fields;
computing a correlation between each of the sub-fields and a corresponding sub-template among a plurality of sub-templates split from a local template;
extracting a plurality of maximum peaks, each corresponding to each of the correlations; and
detecting the distance reduction attack based on extracted maximum peaks.

### Claim 2 (depends on 1)

The method of claim 1, wherein the message frame includes any one of a response frame of single-sided two-way ranging (SS-TWR), a response frame of a double-sided two-way ranging (DS-TWR), and a final frame of the DS-TWR.

### Claim 3 (depends on 1)

The method of claim 1, wherein a number of the plurality of sub-fields and a number of the plurality of sub-templates are the same.

### Claim 4 (depends on 1)

The method of claim 1, wherein the detecting the distance reduction attack includes determining that the distance reduction attack has occurred when at least one of the maximum peaks is out of a predetermined location interval.

### Claim 5 (depends on 1)

The method of claim 1, wherein the detecting the distance reduction attach includes:
computing a location offset from a predetermined location for each of the maximum peaks;
accumulating the computed location offset; and
determining that the distance reduction attack has occurred when the accumulated location offset exceeds a predetermined threshold.

### Claim 6 (depends on 1)

The method of claim 1, wherein the detecting includes operating a verifier that determines the message frame is abnormal when at least one maximum-peak location lies outside a predetermined permissible interval and also determines the message frame is abnormal when a total of location offsets of the maximum-peak locations across the plurality of sub-fields exceeds a threshold, and wherein the verifier declares a distance-reduction attack only when the at least one maximum-peak location lies outside the predetermined permissible interval and when the total of location offsets of the maximum-peak locations across the plurality of sub-fields exceeds the threshold.