Testing GNSS Systems and Devices David Pearce Simplifying the - - PowerPoint PPT Presentation
Testing GNSS Systems and Devices David Pearce Simplifying the - - PowerPoint PPT Presentation
Testing GNSS Systems and Devices David Pearce Simplifying the integration of Position, Navigation, and Timing technologies into mission-critical systems. High-End Commercial Apps Military / Aerospace Datacenters UAVs
- Military / Aerospace
- UAVs
- Electronic Warfare
- C4ISR
Simplifying the integration of Position, Navigation, and Timing technologies into mission-critical systems.
2 1/13/2017 GNSS Testing
- High-End Commercial Apps
- Datacenters
- Robotics/Telematics
- IDM
- GIS Data Mining
Testing GPS Systems & Integration
4
GNSS Test Methods
1/13/2017 GNSS Testing
5 1/13/2017 GNSS Testing
GNSS Test Methods
Simulation Record/ Replay Live Sky True real life constellation replication X X X Repeatable tests X X Replay fixed scenarios ”that has already happened” X X Modify parameters during test X Scenarios that have ”not yet happened” X Simulate events (satellite drop out, change received signal strength, etc) X Simulate multipath X Simulate noise and test sensitivity X Simulate leap second X Test performance with future systems X
- Sensitivity
- Acquisition
- Tracking
- Re-aquisition
- Time to First Fix (TTFF)
- Location Accuracy
- Stationary
- Dynamic
- Trajectories
- Time Transfer
- Leap Second
6 1/13/2017 GNSS Testing
Basic Test Cases
- 1. Receiver warm-up time
- 2. Acquisition time
- 3. Settling time for code and carrier
tracking
- 4. Navigation data read time
- 5. Time to compute the navigation
solution
- 6. Time the retrieve the system time
reference
- Almanac
- Orbit and status information for EVERY satellite
- Each satellite transmits the entire almanac
- Ionospheric model
- Leap second information
- 1/25 of the Almanac data is transmitted in the navigation message
- Takes 25 complete navigation messages to receive entire almanac (12.5
minutes)
- Considered valid for 180 days
- Ephemeris
- Orbital information for each satellite
- Each satellite only transmits its own data
- Considered valid for about 4 hours
Time to First Fix
Almanac Ephemeris Position/Time Cold Start No No No Warm Start Yes No Yes Hot Start Yes Yes Yes Understand cold vs warm vs hot start is critical when generating GPS RF
1/13/2017 GNSS Testing 7
- Time accuracy
- Leap second handling
8 1/13/2017 GNSS Testing
Time Transfer
- Multipath
- Interference
- Signal fading
9 1/13/2017 GNSS Testing
Impairments to GPS
Test Susceptibility to Jamming and Spoofing
- In either case, after detection, there are various mitigation techniques
- Types of GPS/GNSS Interferers:
What is IDM and GPS Spoofing?
11 1/13/2017 GNSS Testing
Interference Detection and Mitigation for improving resiliency of PNT
Accidental / Unintentional Jamming Intentional Jamming (easy to do) Intentional Spoofing (harder to do) Jamming Easy to Detect Spoofing Difficult to Detect!
- Interference: radio-frequency signals
that interfere with the ability of the GNSS receiver to extract GNSS signal information from the background noise
- Jamming: Intentional Interference
- PPD: Personal Privacy Device
12 1/13/2017 GNSS Testing
Jamming & Interference
Jammer Types
- Majority of PPD jammers are chirp
jammers
- GPS L1 Frequency – 1.57542GHz
- Common Sweep Period – 9us
- Bandwidth 1kHz (CW) – 44.9MHz, 20MHz
is typical
- Also available
- Narrowband Jammers
- CW Jammers
- Location Based Jammers
Simulating Jammers
- CW – choose frequency based on
GNSS constellation
- Simulates the CW type jammer
- Noise – set bandwidth around center
frequency
- Simulates the narrowband jammer
- Sweep – set sweep time 4µs – 20µs
- Simulates the chirp jammer
- All GNSS frequency bands can be
simulated
13 1/13/2017 GNSS Testing
Testing Jamming
- Receiver alone
- Example setup:
- Simulator used for GNSS signals + jamming signals
- When the jamming signal is applied navigation is lost
Use Case 1: Jamming a Receiver for Navigation
1/13/2017 GNSS Testing 14
- Testing a Geo-PNT (Receiver with IMU + timing outputs)
- Example Setup:
- Simulator used as a jamming source with live sky signals
- When the jamming signal is applied, the IMU allows navigation to continue
Use Case 2: Jamming a Receiver+ IMU for Navigation
15 1/13/2017 GNSS Testing
- Testing a Timing Receiver
- Monitor the 1PPS signal
- Using a frequency counter monitor the 1PPS signal of the device-under-test against a stable 1PPS reference
- 1PPS signal is stable until the receiver is jammed (900 seconds after the start of test)
- The 1PPS becomes unstable as the receiver tries to overcome the jamming signal
Use Case 3: Jamming a Timing Receiver
1/13/2017 GNSS Testing 16
Spoofing requires replicating attributes:
1. TIME SYNC Signal matched to satellite transmission 2. POSITION Accuracy requires real-time tracking of victim location 3. POWER Level controlled in real-time to match receiver
Why is Spoofing so difficult?
17 1/13/2017 GNSS Testing
An “perfect” spoofer would be indistinguishable from the Live Sky signal!
- Malfunction? Fault?
- Position drift?
- Time sync drift?
- Does it issue an ALERT
- r does it just FAIL SILENTLY?
- Which is worse?
Hardening GPS/GNSS Systems
18 1/13/2017 GNSS Testing
What happens to your system if GPS/GNSS is spoofed?
GNSS Simulators
19 1/13/2017 GNSS Testing
20 1/13/2017 GNSS Testing
GNSS: Multi-Frequency, Multi-Constellation
GPS GLONASS Galileo Beidou
SBAS WAAS EGNOS GAGAN MSAS L1/L1C L2/L2C L5 E5 E6
Frequency Bands Constellations
E1 B1 B2 B3 L1 L2 1 2 3 4
Regional
QZSS
L1 L2C L5 L5
IRNSS
Global
GSG-5/6 Series GNSS Simulators
21 1/13/2017 GNSS Testing
Affordable Easy to Use Accurate Powerful
- Powerful
- Up to 64 independent satellite channels
- GPS L1, L2, C/A, P-Code, P(p-Y), L2C and L5
- GLONASS L1 and L2
- Galileo E1 and E5a/E5b
- Beidou B1, B2
- SBAS (EGNOS, WAAS, MSAS, GAGAN)
- QZSS L1 C/A, SAIF, L2C, L5
- IRNSS L5
- White noise generation
- Multipath, interference and jammer simulation
- Utilizes RINEX navigation data, and optional ALM and e.g. NMEA files as inputs
- Logs RINEX obervation data, almanac, NMEA and more
- High accuracy time base
- Programming interface for automated testing
- Accurate, variable output level from –65 to –160 dBm, and more
GSG Family of GNSS Simulators
22 1/13/2017 GNSS Testing
- Affordable
- Modular architecture sets new industry
performance/price standards
- High performance R&D lab simulator features
- Priced to support efficient production applications
and use as a common engineering tool
- Easy to use
- Create versatile scenarios
- Full I/O control from intuitive front panel User
Interface
- GSG StudioView™ PC-based software with Google
Maps interface
- Remote operation via a web-based interface or via
SCPI commands
23 1/13/2017 GNSS Testing
GSG Family of GNSS Simulators
24 1/13/2017
Vulnerability Test System
GNSS Testing
- Simulation allows full testing of systems with integrated an GPS/GNSS
receiver
- Mission-critical applications require a high degree of operational
validation when transitioning to a new receiver
- A simulator capable of performing the necessary tests for the application
will greatly simplify the integration of an GNSS receiver
Summary
25 1/13/2017 GNSS Testing