How to Catch Criminals who use GPS Jammers Gone in 20 Seconds

Transcription

1 How to Catch Criminals who use GPS Jammers Gone in 20 Seconds GENIUS 19 th November 2014 Prof. Charles Curry BEng, CEng, FIET Chronos Technology Ltd

2 Presentation Contents Background Research Who or What is Jamming? Where to buy your jammers GPS Jammer Detection Solutions Testing Catching the Criminals

3 UK Research on topic

4 The SENTINEL Project GNSS SErvices Needing Trust In Navigation, Electronics, Location & timing 2011: UK Government Funded R&D Project, 2 years, ~ 1.5m through Technology Strategy Board Trusted Services Call Competition Autumn 2010 Follow on from GAARDIAN ~ 2.4m Research to establish the extent to which GPS signal are being jammed by commercially available jammers.

5 Project AJR Just Starting Automatic Jamming Recognition Colocation of GPS Jamming Detection with ANPR Photos: With the permission of the Commandant, Sennybridge Training Area

6 Headlines!

7 GPS Jamming Assisted Crime Top end vehicles Doors open in 10 seconds Jammer on back seat Gone in 20 seconds! Plant Jammer in cab Drive away Park in container for export

8 Easy Targets Lost any Mercedes Sprinter Vans lately? Photo courtesy of Hampshire Police

9 White Van Man Events By Day Indicates Working Week Use

10 Maritime Jamming Applications

11 Unauthorised Truck Journeys Truck driver uses Jammer so he can sleep at home not at the Highway Truck-Stop Cell Site off-air for 8 hours!!

12 Rogue Antennas

13 Where to buy Jammers Over 50 active Chinese Web Sites Power ~ 100mW to 50W!

14 GPS Jamming Detection Solutions Handhelds CTL3510, CTL3520 Rapid Deployment Threat Demonstrators Just needs power & permission Meshed Threat Geolocation Networks Scales to National / International Localised CNI Protection All field trial proven solutions

15 Rapid Deployment Threat Demos Systems in UK, USA and around the World Backhaul: Wireless mesh, ADSL, 3G/4G Weather-proof, mains power with UPS backup Real time, web based data collection and display Data Analytics, Download event logs, Reports Deployment < 2weeks (subject to site survey)

16 CTL3510 Key Features Hand Held, Simple to use Identifies Jammer Activity Detecting GPS jamming High sensitivity Visual LED display of jammer strength Covert Vibration jammer indication Rechargeable battery via micro USB Event Log

17 CTL3520 Key Features Hand Held, Simple to use Identifies which car! Direction Finding Capability Detects GPS L1 jamming High sensitivity, LED Display Attenuator for detection of High Power Jamming Rechargeable battery via micro USB

18 24x7 Jammer Monitoring Uses 24x7 field deployed sensors Actionable Intelligence Central management system Logs jamming event data alerts Roadmap features include. GSM jamming detection Small footprint co-located with ANPR

19 Dissimilar Detection Techniques A recent 10 minute event outside the Stock Exchange! 1: Power in L1 Spectrum using FFT 2: Susceptibility of GPS by measuring C/No

20 City Data Analysis Total of all events by Hour of Day Jan to mid April Midday

21 Events detected on rural motorway 200ft from ILS cabin at provincial airport Events by Month Events by Hour through Day Events by Day of Week Typical Event

22 Events detected - London Stock Exchange Events by Month Events by Hour through Day Events by Day of Week Typical Event July events : July events

23 Real Data! Real Ops! Operation Toyer

24 Signal Sentry 1000 (SS1000) Chronos Sensor solutions in Exelis SS1000 Jamming Sensor Network Mesh Real time geolocation of threat Individual jammer detection and geolocation Identifies approximate location Agents on ground use CTL3520 to identify exact location Scalable from CNI to national / international Trialled at US Super Bowl Met Life Stadium UK Trial in December

25 Sennybridge Testing Photos: With the permission of the Commandant, Sennybridge Training Area

26 Power [dbm], Power difference [db] AJR Automatic Jamming Recognition AJR Sennybridge: 7/8/14 14:07 BST Estimated jammer speed: 38 mph, detector angle: deg ccw Time [s] (negative approaching) T0-0.33s T0 T0+0.33s

27 Find Out More? Improve anti-jamming and spoofing deterrence and enforcement Promote establishment of resilient terrestrial navigation and timing systems Dana Goward - dgoward@rntfnd.org

28 Further Reading Royal Academy of Engineering Reports GNSS Vulnerabilities & Space Weather Chronos Report Find with Google SENTINEL Research

29 Catching the Criminals Criminals are exposed whilst they use jammers No electronic counter measures! Only speed of removal of GPS tracker creates invisibility You need to move fast Crime to Invisibility 20 minutes. Deploy Jamming Detection Fixed and Hand Held solutions Trials happening now

30 Conclusion Vehicle Crime, Serious Crime Criminals know about GPS Jammers A brief insight into the world of criminal jamming Handheld and Network detection methods In production and in use around the world Police are at last seizing jammers

31 Thankyou

32 Backup Slides Threat & Mitigation

33 Black Swan Events Nassim Nicholas Taleb Surprise to the observer Significant impact With hindsight could have been predicted Not necessarily a surprise to everyone

34 Recent Black Swan Events GPS SVN/PRN23 1 st Jan 2004 Rb failure, massive loss of GPS timing GPS - The San Diego Incident US Navy Own Goal CDMA Network down 3 hours GPS - North Korea 2010 & on-going! South Korea suffers wide area GPS Jamming GPS - The Newark Incident White Van man on I95, Honeywell SmartPath GBAS Glonass 1 st April 2014 Failure of all sats for11 Hours, Bad ephemerides upload 14 th April sats set unhealthy for 30 minutes Galileo Failure of GSAT104 on 27 th May 2014

35 Spoofing 2.7 msec 300 µsec / div 5 Mins / div 1 Hour

36 Some Results TIE and MTIE TIE Graphs Blue: GPS Red: Indoor eloran 3 days, 10ns/div MTIE Plots Mask: G.8272 PRTC Blue: GPS Red: Indoor eloran 3 days

37 Distant Station Testing Over 1000Km away! indoors, under G.8272 PRTC, no external GNSS. Colour Station Range Location Path Red Lessay 300km Northern France Land and Sea Blue Anthorn 350km North-West England Land Cyan Sylt 800km North Germany Land and Sea Green Soustons 900km Southern France Land and Sea Magenta Vaerlandet 1150km South-West Norway Land and Sea

38 Mitigation Ideas - CRPA Roof in London Loan of GAJT-700ML courtesy Novatel, Inc. Photo: Canadian Army