Galileo satellite code cracked

July 17, 2006, 09:40 AM —  Techworld.com — 

Cornell University scientists have cracked the codes needed to track navigation signals from a prototype Galileo positioning system satellite, leading to a scuffle with the E.U.-based project, which intends to keep tight control over access.

Earlier this year, a team led by Mark Psiaki, professor of mechanical and aerospace engineering at Cornell and co-leader of Cornell's GPS Laboratory, devised a way of determining the pseudorandom noise (PRN) codes needed to track its navigation signal, which hadn't been released at the time. The team published their findings in the June issue of GPS World.

To Psiaki's consternation, the crack doesn't appear to sit well with the strict licensing terms the Galileo project is putting on the codes, in an attempt to keep control over which devices are permitted to track Galileo signals. That's in spite of the fact that the codes are "open source", according to Psiaki. "Apparently they were trying to make money on the open source code," he said in a statement.

Galileo is backed by the E.U. as an independent alternative to the U.S.' Global Positioning System (GPS), which is primarily intended for the military, and as recently as 2000 only provided limited access to the public. The 3 billion euro Galileo project is expected to be in operation by 2010, with the aim of providing better accuracy, improved coverage at higher latitudes and independence from the U.S. system.

While the E.U. and the European Space Agency are Galileo's prime movers, the project is three-quarters privately funded, and needs to make a profit. The project is planning measures such as an encrypted version of the service (called Commercial Service (CS) that will deliver improved accuracy -- better than 1 meter, or, with the addition of ground stations, down to less than 10 cm.

However, Galileo won't be strictly fee-based -- an Open Service (OS), freely available to any Galileo receiver, will also be provided, with accuracy within 4 meters. Manufacturers will, however, need to licence PRNs from Galileo in order to manufacture OS-capable receivers.

Psiaki targeted GIOVE-A (Galileo In-Orbit Validation Element-A), the prototype for the 30-satellite Galileo system, which went into orbit late last year. As of January, the PRN codes hadn't yet been released, except to a handful of authorized testers.

"Then it dawned on me: Maybe we can pull these things off the air, just with an antenna and lots of signal processing," Psiaki stated. His team took about a week to develop a basic algorithm to extract the codes, using codeless acquisition and statistical signal processing techniques. It then took them until mid-March to fine-tune the details.

The team published the codes on their Web site on 1 April, and a few days later, a Canadian manufacturer of GPS receivers used the codes to successfully track GIOVE-A signals.

Galileo finally published the codes in mid-May, as part of its Interface Control Document (ICD), but included intellectual property restrictions that struck industry observers as surprisingly strict.

"Use of the ICD is permitted for research and development purposes for the benefit and the promotion of European GNSS programs. Only time will tell how many manufacturers will elect to engage with Galileo under these rather restrictive terms," wrote Alison Brown, president of GPS receiver maker NAVSYS, at the time.

The PRN codes aren't high-security information, but the experience so far doesn't bode well for Galileo's approach to releasing information -- or its success in keeping sensitive information secret, according to some observers. "Security by obscurity: it doesn't work, and it's a royal pain to recover when it fails," said security expert Bruce Schneier in a blog posting last week.

» posted by abennett

Techworld.com

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
peer-to-peer

jfruh
Apple syncing patent can't come soon enough

pasmith
New Twitter features borrow from 3rd party clients

Esther Schindler
Open Source Changes the Software Acquisition Process

mikelgan
How to set up continuous podcast play on the new iTunes

David Strom
Five important Windows 7 mobility features

sjvn
Guard your Wi-Fi for your own sake                        

Sandra Henry-Stocker
Grepping on Whole Words

 

Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Featured Sponsor

AISO founders envisioned a Web hosting company that was environmentally friendly. While the company employed energy-efficient innovations like solar panels, its infrastructure produced unacceptable power and cooling requirements. Find out how AISO leveraged AMD technology to overcome their challenge in this case study white paper.

In this whitepaper, Scalar explores the opportunity to change the landscape with respect to mission critical databases built around Oracle. Leveraging technologies such as Linux, high-end commodity processing power and Oracle RAC technology to architect, design, build and maintain database infrastructure that delivers maximum availability, reliability and performance at a fraction of traditional cost.

On a typical day, weather.com, the Web site for The Weather Channel in Atlanta, serves up between 15 million and 20 million page views. But in September 2004, when back-to-back hurricanes ransacked Florida, the peak traffic on one day more than tripled: over 70 million page views by more than 7 million unique visitors. Read the full success story now.

Marketplace