Geothentication based on network ranging
AssigneeThe Boeing Company
InventorsDavid A. Whelan, Gregory M. Gutt, David G. Lawrence, Michael Lee O'Connor, Rachel Rane' Schmalzried
Life of this patent
Estimating the term…
Loading patent…
AssigneeThe Boeing Company
InventorsDavid A. Whelan, Gregory M. Gutt, David G. Lawrence, Michael Lee O'Connor, Rachel Rane' Schmalzried
Estimating the term…
A system, method, and apparatus for the authentication of the physical location of a target node are disclosed herein. In one or more embodiments, the authentication of the target node's physical location is achieved by using ping ranging measurements obtained from the amount of time that elapses during ping messages being sent between the target node and at least one trusted node with a known physical location. The physical location of the trusted node(s) is obtained by using satellite geolocation techniques. The accuracy of the ranging measurements may be improved upon by using pre-coordination and/or priority determination of the ping messages being sent between the target node and the trusted node(s). In at least one embodiment, the ping messages are sent by dedicated ping response hardware that is associated with the target node and/or the trusted node(s). In some embodiments, the ping messages include a pseudo random code bit sequence.
A method for authenticating a physical location of a target node, the method comprising:
A method for authenticating a physical location of a target node, the method comprising:
A system for authenticating a physical location of a target node, the system comprising:
An apparatus for fast tracking a response message, the apparatus comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
The present disclosure relates to geothentication. In particular, it relates to geothentication based on network ranging.
The present disclosure relates to a method, system, and apparatus for authenticating the physical location of a target node. In particular, the present disclosure teaches a method involving sending, by the target node, a geothentication request to at least one trusted node with a known physical location. The method further involves receiving, by at least one trusted node, the geothentication request. Also, the method involves sending, by at least one trusted node, an inquiry message (e.g., a ping or ping-like message) to the target node. The method further involves receiving, by the target node, the inquiry message. Additionally, the method involves sending, by the target node, a response message (e.g., a response ping or response ping-like message) to at least one trusted node. In addition, the method involves receiving, by at least one trusted node, the response message. Additionally, the method involves calculating, by at least one processor, a ranging measurement from the target node to at least one trusted node by using the amount of time elapsed from the sending of the inquiry message to the receiving of the response message. Further, the method involves authenticating, by at least one processor, the physical location of the target node by using the ranging measurement from the target node to at least one trusted node.
In one or more embodiments, the target node and/or at least one trusted node are each a router, a server, a personal computing device, a personal digital assistant, a cellular phone, a computer node, an internet protocol (IP) node, a network node, a gateway, a Wi-Fi node, a personal area network (PAN) node, a local area network (LAN) node, a wide area network (WAN) node, a Bluetooth node, a ZigBee node, a Worldwide Interoperability for Microwave Access (WiMAX) node, a second generation (2G) wireless node, a third generation (3G) wireless node, and/or a fourth generation (4G) wireless node.
These and other features, aspects, and advantages of the present disclosure will become better understood with regard to the following description, appended claims, and accompanying drawings where:
FIG. 1 is a schematic diagram of the disclosed system for authenticating the physical location of a target node, in accordance with at least one embodiment of the present disclosure.
FIG. 2A is a flow diagram of the disclosed method for the physical location of a target node where the target node sends a geothentication request, in accordance with at least one embodiment of the present disclosure.
The methods and apparatus disclosed herein provide an operative system for geothentication based on network ranging. In particular, this system relates to authenticating the physical location of a network node (referred to as a target node) by using ranging measurements taken from at least one network node with a known physical location (referred to as a trusted node(s)). The physical location of at least one trusted node is obtained via satellite geolocation techniques. Various types of satellite geolocation techniques may be employed by the disclosed system. The description of FIGS. 6 through 9 in the present disclosure discusses one exemplary satellite geolocation technique (i.e. spot beam based authentication) that may be utilized by the disclosed system.
Currently, cyber security is becoming increasingly important as electronic systems become more and more engrained into everyday business and social tasks. Vast amounts of critical data are stored in networked systems that, if accessed by an unauthorized party, would have varying degrees of societal impact from annoyance to catastrophe.
In parallel with this increased reliance on electronic systems, the nation has also seen a dramatic increase in cyber terrorism, thus requiring improved methods to protect networked computer systems. Cyber attacks are becoming all too common, which has brought about a continued discussion of the dangers of network penetrations by external threats in both commercial and military environments.
For authentication of entities: by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity…
Satellite systems for providing broadband data service to individual earth stations: arrangements for preventing unauthorised access or for…
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
About 4 years 2 months of term left · ends 8 Jan 2031 (estimated)