V-Range: Enabling Secure Ranging in 5G Wireless Networks

Srdjan Capkun, Mridula Singh, Marc Röschlin, Aanjhan Ranganathan
A number of safety-and security-critical applications such as asset tracking, smart ecosystem, autonomous vehicles, driver assistance functions, etc. are expected to benefit from the position information available through 5G. Driven by the aim to support such a wide-array of location-aware services and applications, the current release of 5G seeks to explore ranging and positioning [12] as an integral part of 5G technology. In recent years, many attacks on positioning and ranging systems have
more » ... ging systems have been demonstrated, and hence it is important to build 5G systems that are resilient to distance and location manipulation attacks. No existing proposal either by 3GPP or the research community addresses the challenges of secure position estimation in 5G. In this paper, we develop V-Range, the first secure ranging system that is fully compatible with 5G standards and can be implemented directly on top of existing 5G-NR transceivers. We design V-Range, a system capable of executing ranging operations resilient to both distance enlargement and reduction attacks, including a novel carrier-frequency offset attack where an adversary can undermine the distance calculation by manipulating the carrier-frequency offset estimation, a key component responsible for detecting data in 5G-NR receivers. We experimentally verify that V-Range achieves high precision, lowlatency, and can operate in both the sub-6GHz and mm-wave bands intended for 5G. Our results show that an attacker cannot reduce or increase the distance by more than the imprecision of the system, without being detected with high probability.
doi:10.3929/ethz-b-000440601 fatcat:vz7sx4erlfdlxlygjj2eyjjtdm