Patrotest Wiki

Trace:

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
gp_simulator:operation_manual [2019/02/27 11:28]
yasko
gp_simulator:operation_manual [2019/02/27 12:18] (current)
yasko
Line 71: Line 71:
 \\ \\
  
-==Time ​shift tab== +==Time ​Shift Tab== 
-Here you can shift the 1PPS or timestamp of the DUT in different ways.+In the "Time shift" tab, you can shift the 1PPS or timestamp of the DUT in different ways.
 \\ \\
-{{:​gp_simulator:​gp-simulator_time_shift_controls.png|}}\\ + 
-  * Current 1PPS offset, s - Adds an offset to the generated sequence in such a way as to shift the 1PPS signal of the DUT. +{{:​gp_simulator:​gp-simulator_time_shift_controls.png|}} 
-  * Current GPS Time of week offset, s - Dramatically changes the ToW in HOW in all subframes. The position of all satellites is recalculated based on the new time. Thus, the receiver ​is temporarily ​lost tracking the satellites. Make sure that the power level of the generated signal is sufficient to block the real signals. +\\ 
-  * Sats clock corr offset, s - Sinhronius ​simulates clock drift on all satellites. Leads to a smooth drift of 1PPS impulse ​of the DUT + 
-==DUT movement==+  ​* **Current 1PPS offset, s** - Adds an offset to the generated sequence in the way that it shifts ​the 1PPS signal of the DUT; 
 +  ​* **Current GPS Time of week offset, s** - Dramatically changes the ToW in HOW in all subframes. The position of all satellites is recalculated based on the new time. Thus, the receiver temporarily ​stops tracking the satellites. Make sure that the power level of the generated signal is sufficient ​enough ​to block the real signals; 
 +  ​* **Sats clock corr offset, s** Synchronously ​simulates clock drift on all satellites. Leads to a smooth drift of the DUT 1PPS impulse. 
 +\\ 
 + 
 +==DUT Movement Tab== 
 +In the "DUT movement"​ tab, you can move the coordinates of the DUT for a certain number of meters for a certain time period. 
 +\\ 
 {{:​gp_simulator:​gp-simulator_dut_movement_controls.png|}}\\ {{:​gp_simulator:​gp-simulator_dut_movement_controls.png|}}\\
-Here you can move the coordinates of the DUT for a certain number ​of meters for a certain time + 
-==DUT ECEF impairment==+\\ 
 + 
 +==DUT ECEF Impairment Tab== 
 +This tab is experimental. In the "DUT ECEF impairment"​ tab, can you add a fixed offset and noise to the coordinates of the DUT and noise to the Doppler offset. You can also set the "​Mean"​ value and the standard deviation (STD) of the noise. 
 +\\ 
 {{:​gp_simulator:​gp-simulator_dut_ecef_impairment_controls.png|}}\\ {{:​gp_simulator:​gp-simulator_dut_ecef_impairment_controls.png|}}\\
-This is the experimental ​tab. Where can you add an fixed offset and noise to the coordinates of the DUT and the noise to Doppler offset. You can set the mean value and the standard deviation of the noise+ 
-==Satellites ​ impairment==+\\ 
 + 
 +==Satellites ​ Impairment Tab== 
 +In the "​Satellites ​ impairment" ​tab, you can set the relative power, pseudorange ​offset and Doppler offset ​for each satellite
 +\\ 
 {{:​gp_simulator:​gp-simulator_satellites_impairment_controls.png|}}\\ {{:​gp_simulator:​gp-simulator_satellites_impairment_controls.png|}}\\
-On this tab you can set the relative power, pseudorange offset and Doppler offset for each satellite.+ 
 +\\ 
 ====Conducted testing==== ====Conducted testing====
-Below is typical DUT testing ​diagram ​for valuentabilities ​to spoofing and jamming:\\+Below is displayed the diagram of typical DUT testing for vulnerabilities ​to spoofing and jamming.\\ 
 {{:​gp_simulator:​gp-simulator_conducted_testing.png?​600}} {{:​gp_simulator:​gp-simulator_conducted_testing.png?​600}}
 \\ \\
-We recommend using a directional coupler ​to suspend ​the signal ​from the simulator to the real signal. Oscilloscope is used for measurement of 1PPS impulse offset. ​  +We recommend using a directional coupler ​for injecting ​the simulated ​signal ​into the real one. Oscilloscope is used for measuring ​1PPS impulse offset. ​ 
-==Application ​settings== +\\ 
-Wait for the UBLOX M8T status to become ​3D Fix. Download ​almanac and ephemeris files. ​On USRP folder ​set: +  
-  * 10 MHz Ref to GPSDO +==Application ​Settings== 
-  * check Conducted Connection +First, wait for the "UBLOX M8T" ​status to display "3D Fix." Then, sownload ​almanac and ephemeris files. ​ 
-  * Set Attenuator value based on cables, attenuators and directional coupler. +\\ 
-On Start folder setup + 
-  * DUT input power. ​Usualy ​it is within -100 dBm +After that, set the following in the "​USRP"​ tab
-  * Push Start button +  ​* **10 MHz Ref** to **GPSDO**; 
-====Radiated ​testing====+  * Check the "Conducted Connection" box; 
 +  * Set the "Attenuator" ​value based on cables, attenuators and the directional coupler. 
 + 
 +In the "Startfolder setup 
 +  * DUT input power. ​Usually ​it is within ​the  "-100 dBm" range; 
 +  * Click on the "Start" ​button
 +\\ 
 + 
 +====Radiated ​Testing====
 <WRAP left round info 60%> <WRAP left round info 60%>
-Attention. +**NOTE**: ​The use of radiated radio signals may be illegal in your country. Please familiarize yourself with your local legal laws on the regulation of the radio spectrum before using this app.
-The use of radiated radio signals may be illegal in your country. Please familiarize yourself with your legislation ​on the regulation of the radio spectrum before using this app.+
 We are not responsible for your actions. We are not responsible for your actions.
-</​WRAP>​\\  +</​WRAP>​  
-\\ +
 \\  \\ 
 +
 \\ \\
 +
 \\ \\
 +
 \\ \\
-Below is a typical ​scheme ​of using our equipment for field testing of devices ​for exposure ​to GPS spoofing:\\+ 
 +Below is displayed the diagram of a typical ​use case of our equipment for field testing ​vulnerability ​of various ​devices to GPS spoofing ​exposure.\\
 {{:​gp_simulator:​gp-simulator_radiated_testing.png?​1000|}}\\ {{:​gp_simulator:​gp-simulator_radiated_testing.png?​1000|}}\\
 +
 \\ \\
-In case of radiated testing you cann'​t ​use internal USRP GPSDO like 10 MHz reference source, because it will be spoofed. ​You have to use external high quality reference source. ​Frequency ​stability should be better than 25 ppb.\\ + 
-==Application ​settings== +In the case of radiated testingyou cannot ​use internal USRP GPSDO as a "10 MHz" ​reference source, because it will be spoofed. ​Thus, you should ​use external high quality reference source. ​The frequency ​stability should be better than "**25 ppb**."\\ 
-Wait for the UBLOX M8T status to become ​3D Fix. Download ​almanac and ephemeris files. ​On USRP folder ​set: + 
-  * 10 MHz Ref to External +==Application ​Settings== 
-  * uncheck ​Conducted Connection +First, wait for the "UBLOX M8T" ​status to display "3D Fix." After that, download ​almanac and ephemeris files. ​ 
-  * Set Amplifier Gain, Attenuator, ​Anteanna ​Gain according to your connected equipment. +\\ 
-On DUT folder setup+ 
-  * direction ​to the DUT +In the "USRP" tab, set the following
-  * and known distances +  ​* **10 MHz Ref** to **External**; 
-On Start folder setup +  * Uncheck the "Conducted Connection" box; 
-  * DUT input power. Usualy ​it is within -100 dBm +  * Set "Amplifier Gain," "Attenuator," and "​Antenna ​Gain" ​according to your connected equipment. 
-  * Push Start button+ 
 +In the "DUT" tab, set the following
 +  * **Direction** ​to **DUT**; 
 +  * and known distances. 
 + 
 +In the "Start" tab, set up the following: 
 +  * DUT input power that is usually ​it is within ​the "-100 dBm" range; 
 +  * Click on the "Start" ​button
 + 
 +\\ 
 ====Synchronous and asynchronous mode==== ====Synchronous and asynchronous mode====
 In the case of an asynchronous attack, a spoofer transmits false signals that are stronger than the original ones, causing the receiver to lose track of the satellites and lock on to the overpowering spoofing signal(s). On the other hand, synchronous attacks imply transmitting signals that are synchronized with the original ones and then gradually overpowering the latter.\\ In the case of an asynchronous attack, a spoofer transmits false signals that are stronger than the original ones, causing the receiver to lose track of the satellites and lock on to the overpowering spoofing signal(s). On the other hand, synchronous attacks imply transmitting signals that are synchronized with the original ones and then gradually overpowering the latter.\\
-In more detail, ​the differences are synchronous and asynchronous ​attack you can read in our [[https://​gpspatron.com/​chapter-1-asynchronous-spoofing-attacks/​|article]].\\ +You can learn more about the difference between ​synchronous and asynchronous ​attacks ​in our dedicated article on [[https://​gpspatron.com/​chapter-1-asynchronous-spoofing-attacks/​|this page]]. 
-In synchronous ​mode, our simulator generates a signal that is aligned with real up to 100 ns.\\ +\\ 
-The selection of the spoofing mode can be made in the USRP tab:\\+ 
 +In the "​Synchronous" ​mode, our simulator generates a signal that is aligned with the real one up to "100 ns." To select a particular ​spoofing mode, go to the "USRP" ​tab
 +\\ 
 {{:​gp_simulator:​gp-simulator_spoofing_mode_selection.png|}}\\ {{:​gp_simulator:​gp-simulator_spoofing_mode_selection.png|}}\\
 \\ \\
-If you selected ​the synchronous ​mode, then you can set an additional offset for the start of generation. This is convenient for examining the DUT correlation analysis window.\\+ 
 +If you select ​the "​Synchronous" ​mode, then you can set an additional offset for the start of the generation. This is convenient for examining the DUT correlation analysis window.\\ 
 +\\ 
 + 
 + 
 +To work in the "​Synchronous"​ mode, you need to wait for the following flag: "GPS Locked":​ 
 \\ \\
-To work in synchronous mode, you must wait for the flag: "GPS Locked":​\\ 
 {{:​gp_simulator:​gp-simulator_gpsdo_locked_flag.png|}}\\ {{:​gp_simulator:​gp-simulator_gpsdo_locked_flag.png|}}\\
 \\ \\
-In synchronous ​mode, the generation does not start immediately,​ but only at a certain ​time:\\+ 
 +In the "​Synchronous" ​mode, the generation does not start immediately,​ but only at a particular ​time: 
 +\\ 
 {{:​gp_simulator:​gp-simulator_start_time.png|}} {{:​gp_simulator:​gp-simulator_start_time.png|}}