Compound transmission security (TRANSEC) for military-grade fifth generation (5G) radio systems
11540123 · 2022-12-27
Assignee
Inventors
Cpc classification
H04K3/45
ELECTRICITY
H04K2203/36
ELECTRICITY
H04K3/42
ELECTRICITY
H04K3/25
ELECTRICITY
Y04S40/20
GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
H04K1/003
ELECTRICITY
H04K3/827
ELECTRICITY
International classification
H04M1/66
ELECTRICITY
H04M3/16
ELECTRICITY
Abstract
A multi-user (MU) multiple-input/multiple-output (MU MIMO) module for a fifth-generation (5G) software-defined radio (SDR) network environment is disclosed. In embodiments, the MU MIMO module of a transmitting SDR system of a 5G mobile ad hoc network (MANET) or other peer-to-peer directional network receives feedback from a receiving SDR system based on a prior or current frame and generates, based on the feedback, a compound transmission security (TRANSEC) encryption key for a subsequent frame. The compound TRANSEC encryption key encrypts the transmission of the subsequent frame through a combination of frequency-hopping encryption codes, orthogonality-hopping encryption codes, and dynamic pseudorandom distribution of transmitting power among antenna elements to simulate multipath hopping. The SDR system may include an antenna controller capable of managing dynamic power distribution according to the compound TRANSEC encryption keys as well as directionality shifts and beamforming operations to evade jammers detected within the 5G network environment.
Claims
1. A multi-user (MU) multiple-input multiple-output (MIMO) module installable in a fifth-generation (5G) communications platform, comprising: at least one control processor in communication with a plurality of MIMO antenna elements of a transmitting (Tx) 5G communications platform associated with a peer-to-peer network environment, the control processor configured to: receive, from at least one receiving (Rx) 5G communications platform of the peer-to-peer network environment, receiver feedback corresponding to a current frame of a transmission from the Tx 5G communications platform to the Rx 5G communications platform; generate, based on the receiver feedback, a compound transmission security (TRANSEC) key corresponding to a subsequent frame of the transmission, the subsequent frame directly following the current frame, the compound TRANSEC key configured to encrypt the subsequent frame via two or more of: dynamic distribution of transmission power among a plurality of MIMO antenna elements configured for transmission of the subsequent frame; selection of one or more spectrum resources blocks associated with the transmission of the subsequent frame based on at least one frequency hopping code; and selection of the one or more spectrum resources blocks based on at least one orthogonality hopping code; and at least one antenna controller configured to adjust the dynamic distribution of transmitting power to the plurality of MIMO antenna elements based on the compound TRANSEC key.
2. The MU MIMO module of claim 1, wherein: the receiver feedback is based on one or more training symbols transmitted with the current frame.
3. The MU MIMO module of claim 1, wherein the compound TRANSEC key is configured to prevent a null power distribution to at least one antenna element of the plurality of MIMO antenna elements.
4. The MU MIMO module of claim 1, wherein the receiver feedback incudes at least one of: an identification of a least faded path from at least one antenna element of the plurality of MIMO antenna elements to at least one remote MIMO antenna element of the Rx 5G communications platform; and an identification of an optimally performing element of the plurality of MIMO antenna elements.
5. The MU MIMO module of claim 1, wherein the control processor is configured to generate the compound TRANSEC key based on at least one of: a detected presence of a jammer; and a detected location of the jammer.
6. The MU MIMO module of claim 5, wherein the compound TRANSEC key is configured to evade the jammer via at least one of: adjusting at least one directionality of the plurality of MIMO antenna elements; and adjusting at least one beam emitted by the plurality of MIMO antenna elements.
7. The MU MIMO module of claim 5, wherein: the Tx 5G communications platform and the Rx 5G communications platform correspond to at least one first transmitter-receiver (Tx-Rx) pair, and the receiver feedback is first receiver feedback; the control processor is configured to forward the receiver feedback to at least one arbitrator of the peer-to-peer network environment, the arbitrator in communication with one or more second Tx-Rx pairs associated with the peer-to-peer network environment, the one or more second Tx-Rx pairs associated with second receiver feedback; and the control processor is configured to receive at least one of the detected presence and the detected location from the arbitrator, the detected presence and the detected location based on at least one of the first receiver feedback and the second receiver feedback.
8. The MU MIMO module of claim 7, wherein the arbitrator includes at least one of: a centralized spectrum arbitrator; and a 5G communications platform of the one or more second Tx-Rx pairs.
9. A method for enhancing transmission security (TRANSEC) within a fifth-generation (5G) peer-to-peer network environment, the method comprising: transmitting, via a plurality of multiple-input multiple-output (MIMO) antenna elements of a transmitting (Tx) 5G radio system, a current frame to a receiving (Rx) 5G radio system according to at least one current compound TRANSEC encryption key; receiving, from the Rx 5G radio system, receiver feedback corresponding to the transmitting of the current frame; generating, via a multi-user (MU) MIMO module of the Tx 5G radio system, at least one subsequent compound TRANSEC encryption key based on the receiver feedback, the subsequent compound TRANSEC encryption key configured to encrypt the transmission of a subsequent frame immediately following the current frame via at least two of: dynamic distribution of transmission power among the plurality of MIMO antenna elements; selection of one or more spectrum resources blocks associated with the transmission of the subsequent frame based on at least one frequency hopping code; and selection of the one or more spectrum resources blocks based on at least one orthogonality hopping code; and adjusting, via an antenna controller of the Tx 5G radio system, the dynamic distribution of transmitting power to the plurality of MIMO antenna elements based on the subsequent compound TRANSEC encryption key.
10. The method of claim 9, wherein: transmitting, via a plurality of multiple-input multiple-output (MIMO) antenna elements of a Tx 5G radio system, a current frame to a Rx 5G radio system includes transmitting a plurality of training symbols to the Rx 5G radio system; and receiving, from the Rx 5G radio system, receiver feedback corresponding to the transmitting of the current frame includes receiving, from the Rx 5G radio system, receiver feedback based on the plurality of training symbols.
11. The method of claim 9, wherein receiving, from the Rx 5G radio system, receiver feedback corresponding to the transmitting of the current frame includes at least one of: receiving, from the Rx 5G radio system, at least one identification of a least faded path from at least one antenna element of the plurality of MIMO antenna elements to at least one remote MIMO antenna element of the Rx 5G radio system; and receiving, from the Rx 5G radio system, at least one identification of an optimally performing element of the plurality of MIMO antenna elements.
12. The method of claim 9, wherein the Tx 5G radio system and the Rx 5G radio system comprise a first transmitter-receiver (Tx-Rx) pair of the peer-to-peer network environment and the receiver feedback is first receiver feedback, further comprising: forwarding, via the MU MIMO module, the receiver feedback to at least one arbitrator of the peer-to-peer network environment, the arbitrator in communication with at least one second Tx-Rx pair of the peer-to-peer network environment, the second Tx-Rx pair associated with second receiver feedback; and receiving, via the MU MIMO module, at least one indication of a jammer from the arbitrator, the indication based on one or more of the first receiver feedback and the second receiver feedback.
13. The method of claim 12, wherein adjusting, via an antenna controller of the Tx 5G radio system, the dynamic distribution of transmitting power to the plurality of MIMO antenna elements based on the subsequent compound TRANSEC key includes at least one of: adjusting at least one directionality of an antenna element of the plurality of MIMO antenna elements based on the indication; and adjusting at least one beam emitted by an antenna element of the plurality of MIMO antenna elements based on the indication.
14. The method of claim 9, wherein adjusting, via an antenna controller of the Tx 5G radio system, the dynamic distribution of transmitting power to the plurality of MIMO antenna elements based on the subsequent compound TRANSEC key includes: adjusting, via an antenna controller of the Tx 5G radio system, the dynamic distribution of transmitting power to prevent a null power distribution to any antenna element of the plurality of MIMO antenna elements based on the subsequent compound TRANSEC key.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
(1) The detailed description is described with reference to the accompanying figures. The use of the same reference numbers in different instances in the description and the figures may indicate similar or identical items. Various embodiments or examples (“examples”) of the present disclosure are disclosed in the following detailed description and the accompanying drawings. The drawings are not necessarily to scale. In general, operations of disclosed processes may be performed in an arbitrary order, unless otherwise provided in the claims. In the drawings:
(2)
(3)
(4)
(5)
(6)
(7)
DETAILED DESCRIPTION
(8) Before explaining one or more embodiments of the disclosure in detail, it is to be understood that the embodiments are not limited in their application to the details of construction and the arrangement of the components or steps or methodologies set forth in the following description or illustrated in the drawings. In the following detailed description of embodiments, numerous specific details may be set forth in order to provide a more thorough understanding of the disclosure. However, it will be apparent to one of ordinary skill in the art having the benefit of the instant disclosure that the embodiments disclosed herein may be practiced without some of these specific details. In other instances, well-known features may not be described in detail to avoid unnecessarily complicating the instant disclosure.
(9) As used herein a letter following a reference numeral is intended to reference an embodiment of the feature or element that may be similar, but not necessarily identical, to a previously described element or feature bearing the same reference numeral (e.g., 1, 1a, 1b). Such shorthand notations are used for purposes of convenience only and should not be construed to limit the disclosure in any way unless expressly stated to the contrary.
(10) Further, unless expressly stated to the contrary, “or” refers to an inclusive or and not to an exclusive or. For example, a condition A or B is satisfied by any one of the following: A is true (or present) and B is false (or not present), A is false (or not present) and B is true (or present), and both A and B are true (or present).
(11) In addition, use of “a” or “an” may be employed to describe elements and components of embodiments disclosed herein. This is done merely for convenience and “a” and “an” are intended to include “one” or “at least one,” and the singular also includes the plural unless it is obvious that it is meant otherwise.
(12) Finally, as used herein any reference to “one embodiment” or “some embodiments” means that a particular element, feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment disclosed herein. The appearances of the phrase “in some embodiments” in various places in the specification are not necessarily all referring to the same embodiment, and embodiments may include one or more of the features expressly described or inherently present herein, or any combination or sub-combination of two or more such features, along with any other features which may not necessarily be expressly described or inherently present in the instant disclosure.
(13) Referring to
(14) In embodiments, the SDR systems 102, 104 of the peer-to-peer network 100, as well as all other nodes within the network, are peer nodes. For example, the SDR systems 102, 104 may each include antenna arrays 110, 112 of individual MIMO antenna elements 110a-n, 112a-n and antenna controllers 114, 116. In embodiments, the antenna controllers 114, 116 may control the establishment and maintenance of directional RF paths 118a-n (e.g., whereby the SDR system 102 may securely transmit to the SDR system 104) and 120a-n (e.g., whereby the SDR system 104 may similarly securely transmit to the SDR system 102).
(15) In embodiments, the MU MIMO modules 106, 108 may be built into the SDR systems 102, 104, or the MU MIMO modules may be retrofitted into existing military SDR systems in order to render the existing military SDR systems compatible with 5G waveforms and protocols. For example, the MU MIMO modules 106, 108 may serve as 5G modems for their respective SDR systems 102, 104, adapting and porting 5G protocols and their associated open-source software to general purpose processes (GPP) running on the internal processors of the SDR systems. The MU MIMO modules 106, 108 may provide enhanced transmission security (TRANSEC) at the air-interface level to enable 5G transmissions to meet the requirements of military communications without otherwise modifying the platform hardware of the SDR systems 102, 104.
(16) Referring to
(17) In embodiments, the 5G protocol stack 200 is a commercial-grade stack incorporating open wireless architecture (OWA) layer 202, upper and lower network layers 204a-b, open transport protocol (OTP) or transport layer 206, and application layer 208.
(18) In embodiments, the 5G protocol stack 200a may be implemented and may function similarly to the 5G protocol stack 200, except that the 5G protocol stack 200a may be adapted for military secure communications via multilayered security enhancements. For example, the OTP layer 206 may incorporate heightened secure transport protocols (e.g., NACK oriented reliable multicast (NORM)) and other bespoke transport protocols with enhanced security capabilities. The upper and lower network layers 204a-b may be enhanced by, e.g., strengthening packet recovery via network coding to recover data packets lost to type I decryption at the upper network layer 204a. Similarly, error resilience may be increased by taking advantage of abundant 5G bandwidth via SDR techniques (e.g., Reed-Solomon coding to reconstruct IP packets from their OWA frames, even when the frame loss rate is relatively high) at the lower network layer 204b. Finally, military-grade type I communication security (COMSEC) encryption architecture 210 (e.g., high assurance internet protocol encryption (HAIPE), other IP-based type I encryption) may be added between the upper and lower network layers 204a-b.
(19) In embodiments, the 5G protocol stack 200a may incorporate MU MIMO modules (106, 108;
(20) Referring to
(21) In embodiments, referring in particular to
(22) In embodiments, the MU MIMO module 106 may (e.g., via control processors 106a) generate compound TRANSEC encryption keys based on the orthogonal nature of 5G signals. For example, the directional RF paths 118a-n may each be associated with specific spectrum resources defined by orthogonal frequency blocks. Accordingly, the MU MIMO module 106 may generate compound TRANSEC encryption keys on a frame-by-frame basis such that the RF directional paths 118a-n appear to hop between different orthogonal dimensions. For example, whether the RF directional paths 118a-n correspond to uplink or downlink transmissions, the selection of spectrum resources by the MU MIMO module 106 may be described as orthogonal/asynchronous, as the selection may be randomized from orthogonal blocks (e.g., as compared to conventional 5G standards which provide for orthogonal/asynchronous downlink but non-orthogonal/asynchronous uplink; within the peer-to-peer network 100a, however, there is no distinction between uplink and downlink).
(23) In embodiments, referring also to
(24) In embodiments, the MU MIMO module 108 may generate receiver feedback 304 by calculating eigenvalues (308) corresponding to the reception of the training symbols 306 (e.g., as disclosed in greater detail below with respect to
(25) In embodiments, receiver feedback 304 generated by the MU MIMO module 108 and corresponding to a transmitted frame m may be conveyed to the MU MIMO module 106 of the transmitting SDR system 102 as instantaneously as possible (e.g., with minimal delay) so that the transmission of the subsequent frame m+1 (e.g., including the subsequent TRANSEC encryption key 302 and training symbols 306) by the MIMO antenna elements 110a-n of the SDR system 102 may be optimized accordingly. It should be noted that receiver feedback 304 corresponding to transmission via a set of directional RF paths 118a-n may not be symmetrical. For example, the MU MIMO modules 106, 108 of the receiving SDR 104 may not assume that a pair of MIMO antenna elements 110a/112a, 110b/112b, 110n/112n associated with a least faded path, or with optimal performance, with respect to a directional RF path 118a-n will also display identical characteristics with respect to the directional RF path 120a-n associated with transmissions from the SDR system 104 to the SDR system 102.
(26) In embodiments, the MU MIMO module 106 may further enhance signal resilience to jammers by generating compound TRANSEC encryption keys 302 configured to dynamically shift the distribution of transmission power (322) among the MIMO antenna elements 110a-n (e.g., via the antenna controller (114,
(27) Referring to
(28) In embodiments, the compound TRANSEC encryption keys 302 generated by the MU MIMO module 106 may provide for dynamic shifts of transmission power between the MIMO antenna elements 110a-n on a frame-by-frame basis such that transmission power may be distributed unevenly among the N MIMO antenna elements, but there is no null distribution of power to any single MIMO antenna element, e.g., each of the N MIMO antenna elements operates at least at a minimum power level 410. For example, as the transmission power is consistent, the area 412 under the curves 404, 406, 408 is always the same.
(29) In embodiments, referring also to
(30) In embodiments, the precise distribution (404, 404a, 406, 408) of transmission power for any given frame may be dependent on one or more factors emphasized by a given compound TRANSEC encryption keys 302 (or, e.g., on receiver feedback (304,
(31)
where A is the i-th eigenvalue of the matrix HH*, n is the number of transmit/receive antenna pairs (e.g., 110a/112a, . . . 110n/112n,
Σ.sub.i=1.sup.nP.sub.i=1
(32) In embodiments, the eigenvalues λ.sub.1, λ.sub.2 . . . λ.sub.n may be changed by adjusting the direction of each transmitting MIMO antenna element 110a-n. If, for example, the goal is to maximize the capacity C of the MIMO channel (e.g., directional RF paths 118a-n), each transmitting MIMO antenna element 110a-n (i) may seek an ideal line-of-sight (LOS) beam such that any change in the location of antenna element/s would not change the corresponding eigenvalue λ.sub.i. In this ideal situation, Σ.sub.i λ.sub.i=Σ.sub.ij|h.sub.ij|.sup.2 and the constraints on the eigenvalues are simply dependent on the channel gain. In order to maximize the channel capacity C, we may find λ.sub.1, λ.sub.2 . . . λ.sub.n and P.sub.1, P.sub.2 . . . P.sub.n such that Σ.sub.i P.sub.i is bounded by the total transmit signal energy E.sub.s. If we express Σ.sub.i λ.sub.i=L for a given signal energy, then we may seek to determine how to distribute the transmit signal energy among the different transmitting MIMO antenna elements 110a-n and how to influence directionality so as to create variation in λ.sub.1, λ.sub.2 . . . λ.sub.n.
(33) In embodiments, the eigenvalues λ.sub.1, λ.sub.2 . . . λ.sub.n may be influenced such that λ.sub.1≥λ.sub.2≥ . . . ≥λ.sub.n without losing any generality; the inequality simply varies the eigenvalues regardless of their order. By way of several non-limiting examples:
(34) (1) When signal/noise ratio (SNR) is low (e.g., power emissions are low, and the Rx SDR system 104 is nearby), P.sub.i may equal the total transmit signal energy E.sub.s and λ.sub.i=L. All other eigenvalues and transmission power levels (402, 404, 404a, 406) may be zero (λ.sub.j=P.sub.j=0 for all j>1) and the MIMO antenna elements 110a-n may create a focused beam for optimal LPD/LPI.
(35) (2) However, when signal to noise/interference ratio (SNIR) is sufficiently high, the Tx SDR system 102 may be trying to reach a distant remote Rx SDR system 104, necessitating an increase in power to overcome the added distance. For example, according to an optimal solution, λ.sub.1=λ.sub.2==λ.sub.n=L/n and P.sub.1=P.sub.2= . . . =P.sub.n=E.sub.s/n for total transmit signal energy E.sub.s and n parallel channels. By distributing signal energy evenly among all n parallel channels, directionality may be controlled and all eigenvalues kept equal, maximizing the channel capacity C.
(36) (3) In some embodiments, an adversary or jammer may affect the eigenvalues λ.sub.1, λ.sub.2 . . . λ.sub.n. For example, the Rx SDR system 104 may indicate the presence of a jammer, e.g., by observing a significant reduction in channel capacity C (jammer impact information 312,
(37)
which suggests that the antenna controller (114,
(38) Referring also to
(39) In embodiments, the compromised area 502 may be identified or detected by the receiving SDR system 104 or by the centralized spectrum arbitrator (314,
(40) Referring to
(41) At a step 602, a set of MIMO antenna elements of a transmitting (Tx) 5G SDR system of the peer-to-peer network environment transmits a current frame to a receiving (Rx) 5G SDR system according to at least one current compound TRANSEC encryption key generated by a multi-user (MU) multiple-input multiple-output (MIMO) module of the Tx 5G SDR system. In some embodiments, the current frame may include training symbols for evaluating the directional RF path or paths associated with the transmission.
(42) At a step 604, the MU MIMO module of the Rx 5G SDR system conveys feedback about the transmission of the current frame back to the MU MIMO module of the Tx 5G SDR system. In some embodiments, the receiver feedback may be responsive to channel conditions measurements performed based on the transmitted training symbols. In some embodiments, the receiver feedback may include identification of a least faded path among the RF directional paths, or an identification of an optimally performing transmitting-receiving pair of MIMO antenna elements (e.g., associated with a least faded path). In some embodiments, the receiver feedback may include an indication of a jammer or eavesdropper.
(43) At a step 606, the MU MIMO module of the Tx 5G SDR system generates a compound TRANSEC encryption key for the next frame to be transmitted, based on the receiver feedback. The compound TRANSEC encryption key encrypts the transmission of the next frame according to a combination of 1) selection of spectrum resources blocks according to frequency-hopping codes, 2) selection of spectrum resources blocks according to orthogonality-hopping codes, and 3) multipath hopping via dynamic distribution of transmission power among the transmitting MIMO antenna elements. In some embodiments, the MU MIMO module of the Tx 5G SDR system forwards the received receiver feedback to an arbitrator of the peer-to-peer network environment (e.g., a third party node (peer node) or centralized spectrum arbitrator configure to monitor other Tx/Rx pairs throughout the network environment. The MU MIMO module may receive from the arbitrator an indication of the presence of (or, in some embodiments, the direction or location of) a jammer or potential jammer, based on monitoring and analysis of receiver feedback throughout the network environment.
(44) At a step 608, an antenna controller of the Tx 5G SDR system adjusts the distribution of transmitting power to the transmitting MIMO antenna elements according to the generated compound TRANSEC encryption key. In some embodiments, the antenna controller may adjust the directionality, the transmitting power, or otherwise adjust a beam transmitted by the MIMO antenna elements, e.g., to evade a potential jammer. In some embodiments, the antenna controller may adjust power distribution so as to prevent a null power distribution to any single MIMO antenna element.
CONCLUSION
(45) It is to be understood that embodiments of the methods disclosed herein may include one or more of the steps described herein. Further, such steps may be carried out in any desired order and two or more of the steps may be carried out simultaneously with one another. Two or more of the steps disclosed herein may be combined in a single step, and in some embodiments, one or more of the steps may be carried out as two or more sub-steps. Further, other steps or sub-steps may be carried in addition to, or as substitutes to one or more of the steps disclosed herein.
(46) Although inventive concepts have been described with reference to the embodiments illustrated in the attached drawing figures, equivalents may be employed and substitutions made herein without departing from the scope of the claims. Components illustrated and described herein are merely examples of a system/device and components that may be used to implement embodiments of the inventive concepts and may be replaced with other devices and components without departing from the scope of the claims. Furthermore, any dimensions, degrees, and/or numerical ranges provided herein are to be understood as non-limiting examples unless otherwise specified in the claims.