Two-Dimensional Directions Determination for GNSS Spoofing Source Based on MEMS-Based Dual-GNSS/INS Integration

Abstract

Satellite navigation spoofing is a major challenge in the field of satellite/inertial integrated navigation security. To effectively enhance the anti-spoofing capability of a low-cost GNSS/MEMS-SINS integrated navigation system, this paper proposes a method integrating a dual-antenna global navigation satellite system (GNSS) and a micro-inertial measurement unit (MIMU) to determine the two-dimensional directions of spoofing signal sources. The proposed method evaluates whether the single-difference carrier-phase measurements conform to the corresponding directions given in ephemeris files and employs micro-inertial navigation technology to determine the two-dimensional directions of the signal source. Based on a set of short-baseline dual-station measurements, the accuracy of the proposed method in determining the two-dimensional azimuths of satellites in synchronous orbits is verified, and the deviation from the real value is evaluated. The experimental results show that the proposed method can effectively identify the spoofed satellite signals while providing high-precision direction information at three different distances: 100 m, 10 km, and 36,000 km. The two-dimensional angle errors do not exceed 0.2 rad, 0.05 rad, and 0.01 rad, respectively.

1. Introduction

Due to the rapid development of unmanned intelligent carriers, the utilisation of autonomous navigation systems has increased. Among them, GNSS/MIMU integrated navigation is most widely utilised because of its low cost and high accuracy. As a result of the open structure of satellite navigation signals with low ground signal power, easy interference could occur. Therefore, its security and reliability have become key research topics. With the development of global navigation satellite system (GNSS) interference technology, the means of interference have gradually evolved into more complex forms, including jamming and spoofing [1]. Spoofing can be subdivided into generative spoofing and forwarding spoofing. The rapid development of traction spoofing in recent years poses a significant risk to the normal operation of GNSS systems, which not only affects the execution of military missions but also threatens the security of various fields such as civil aviation equipment and intelligent driving [2,3].

Although emerging technologies such as zeroing antennas have effectively mitigated the effects of traditional interference techniques [4,5], GNSS spoofing attacks remain a major challenge to navigation security. Spoofing attacks mimic the strength and coding of real satellite signals, making it difficult to accurately distinguish real signals from spoofed signals via traditional signal differentiation methods [6]. To address this challenge, researchers have proposed a series of anti-spoofing techniques. Among them, navigation information encryption techniques integrate specific code sequences into extended code sequences and employ dedicated hardware and software modules for decoding and verification, significantly enhancing the authenticity check of satellite navigation signals [7,8]. However, the effectiveness of these countermeasures remains limited because the nature of forwarding spoofing does not alter the navigation information.

In signal quality monitoring (SQM) techniques, the interaction between spoofed signals and real satellite signals affects correlator outputs. By tracking and calculating correlator outputs, usually researchers can identify distortions in the correlation peaks, which typically manifest as asymmetry, unusual sharpness, or unusual flatness. Some researchers have proposed the method to detect spoofing through multi-correlator measurements of shape distortion [9,10,11,12,13]. This method compares measurements of its autocorrelation function with typical values and makes judgements based on noise variance thresholds. Unfortunately, this technique is limited by its use of a scalar tracking structure, which is ineffective in the absence of overlapping correlation peaks. Zhang et al. [14] addressed this limitation by introducing an SQM detection method based on a vector tracking structure. In this method, the received signals are jointly analysed even in the absence of overlapping correlation peaks, thereby facilitating spoofing detection. Nonetheless, accurate determination of the positions of spoofing signal sources remains challenging.

Additionally, machine learning-based spoofing detection techniques have been increasingly applied for identifying spoofed signals. Junzhi et al. explored the feasibility of applying generative adversarial networks (GANs) to spoofing detection and utilising their powerful generative and generalisation capabilities [15,16]. Their experiments showed that the detection rate attains 98% when the pseudo-range code-phase difference between the spoofed and real signals exceeds 0.5 code slices [16]. Xu et al. [17] proposed a multi-channel one-dimensional fully convolutional neural network (CNN) for spoofing detection. This method utilises the residual sequences of the system measurements to extract features at various scales, generating point-by-point decision-making results and yielding good detection and false alarm rates. However, this technique requires massive computational resources and remains incapable of determining the exact positions of spoofing signal sources.

Existing spatial information processing techniques can be categorised mainly into three types: mobile single-antenna, dual-antenna array, and multi-antenna array. The mobile single-antenna technique detects spoofing in basic static scenarios based on Doppler information and single-differenced carrier-phase information; however, there are limitations in identifying the directions of the signal sources. Chen et al. employed two fixed antennas to form a baseline vector and ascertain the similarity of carrier-phase data to achieve spoofing detection [18]. However, this model is unable to effectively determine the direction of arrival (DOA) of a signal source and cannot provide direction indication for countermeasures such as zeroing antennas.

This study aims to independently determine the DOA of a navigation signal from a single satellite through integrated navigation based on the inter-station single-difference carrier-phase information received by the common-clock dual antennas and the information provided by a micro-inertial measurement unit (MIMU). The direction of the signal source is determined by constructing a dual-antenna inter-station single-difference carrier-phase observation model and utilising the multi-epoch data of the carrier in the dynamic motion state. The proposed method effectively addresses the challenges faced by small vehicles equipped with dual GNSS antennas in identifying spoofed signals and determining the directions of signal sources.

Based on the background mentioned earlier, this paper proposes a method for determining the directions of the deceptive signal source in the dynamic carrier coordinate system based on the dual-antenna carrier phase observations and inertial measurements with multiple epochs. A new method is proposed to determine the single-differenced integer ambiguity between two GNSS antenna with short baseline which is combined with the dual-GNSS antenna/MIMU integration information to determine the two-dimensional directions of the spoofing interference source. This method utilises the broadcasted satellite ephemeris and MEMS-based inertial navigation to forecast the direction of satellite navigation signals. By analysing the anomalies between the direction of the spoofing signal source and the forecasted direction from the ephemeris information, effective identification of the spoofing signals can be achieved. Due to insufficient observation information from a single epoch, this paper proposes a trajectory planning strategy that involves significant manoeuvring in at least one direction over multiple epochs. A multi-epoch observation model is established based on the changes in the attitude and carrier-phase observations along the trajectory, thereby providing high-accuracy two-dimensional direction information for the spoofing signal source. Furthermore, this paper establishes a real-time two-dimensional direction determination model for extended Kalman Filter (EKF) filtering. This study assesses the effectiveness and accuracy of the proposed method through both simulation and experimental tests.

The structure of the paper is presented as follows. Section 2 briefly introduces the system models of the proposed method, including the integrated system model, the satellite signal observation model, and two-dimensional direction model for spoofer. Section 3 derives a new method for single-frequency single-epoch dual-frequency station single-difference ambiguity resolution, and establishes the two-dimensional direction determination method for spoofing signal sources. Section 4 verifies the effectiveness of the proposed method through a comprehensive simulation analysis and a land vehicular test. Section 5 concludes this paper.

2. System Model and Signal Processing Methods

To meet the demand for precise and reliable autonomous navigation of carriers under GNSS-denied conditions, this paper focuses on the research of anti-jamming technology for BeiDou deceptive interference modes using airborne dual-antenna BeiDou/MIMU integrated navigation systems. It proposes a method for determining the direction of deceptive signal sources based on dual-antenna BeiDou/MIMU integration to endow carriers with credible navigation capabilities under BeiDou-denied conditions and counteracting abilities to determine the position of interference sources.

This study proposes a direction-finding method for GNSS spoofing signal sources, utilising a MEMS-based dual antenna GNSS/INS integrated navigation system and a short-baseline common-clock GNSS receiver. The proposed method is usually applied to the scenario depicted in Figure 1. By carrying a dual-antenna GNSS/MIMU system and a common-clock receiver, the vehicles, which travel normally in this scenario, can process the real satellite signals as well as the spoofed signals using the proposed method, making it possible to effectively identify and locate GNSS spoofing signal sources. Additionally, the proposed method is applicable to the localisation for GNSS spoofing signal sources in airborne or shipborne scenarios.

2.1. Integrated Navigation Model

Liu et al. [19] proposes a direction-finding model for satellite navigation signal sources identified by a 6 + 1 antenna array; however, it is expensive, and the inertial measurement unit (IMU) carried by common carriers remains underutilised. Effective identification and correction of deceptive interference can be realized with the aid of auxiliary information from IMU or wheel sensor [20]. However, the classic pseudorange consistency detection makes it difficult to support high-accuracy signal source identification and localization. Therefore, this study utilises an integrated navigation model as illustrated in Figure 2, wherein two antennas are arranged along the X-axis of the MIMU body coordinate system. The proposed method is applicable to any antenna and common-clock receiver that can simultaneously receive at least two navigation frequency bands of the same navigation satellite. The model can be widely applied in vehicles and other carriers that require MIMU/satellite integrated navigation because of its length demand for a single direction only. Additionally, this research proposes a short-baseline integer ambiguity determination method based on an improved ambiguity function method (AFM); therefore, there is no spatial ambiguity between the two antennas. Consequently, the baseline length between the units is extended, providing higher direction-finding accuracy.

As illustrated in Figure 2, two antennas and an MIMU are solidly connected to the carrier. Antenna 1 serves as the origin of the body coordinate system. The baseline vector between the two antennas aligns with the X-axis of the carrier coordinate system. The X-axis of the MIMU body coordinate system is parallel to the X-axis defined for the carrier coordinate system. The $o-x_{MIMU}^b{y}_{MIMU}^b$ plane of the MIMU body coordinate system coincides with the $o-x^b{y}^b$ plane of the carrier body coordinate system. The Y-axis of the MIMU body coordinate system is parallel to the Y-axis defined for the carrier coordinate system.

2.2. Observation Model for Real Signals

After data acquisition via the integrated navigation model discussed in Section 2.1, all the real and spoofed GNSS signals received by each antenna are efficiently processed, and MIMU measurements are recorded. This ensures accurate acquisition, tracking, and carrier-phase measurements of all signal sources.

The carrier-phase observation equation is given as follows:

$${\tilde{\varphi }}_j^i={\displaystyle \frac{1}{\lambda }}(\left|{\tilde{\mathit{r}}}^i-\tilde{\mathit{r}}\right|-\mathrm{\delta }{\rho }_{kn}^i-\mathrm{\delta }{\rho }_{kp}^i)+f\cdot \mathrm{\delta }{t}^i-N^i$$

(1)

where $\lambda$ is the wavelength of the carrier phase, $\Delta {\tilde{\varphi }}_j^i$ is the real value of the carrier phase, and $N$ is the integer ambiguity of the carrier phase; $f$ is the frequency of the carrier phase; ${\tilde{\mathit{r}}}^i$ is the real position of Satellite i, $\tilde{\mathit{r}}$ is the real position of Antenna 1, and $\mathrm{\delta }{t}^i$ is the clock difference between Antenna 1 and the receiver; $\mathrm{\delta }{\rho }_{kn}^i$ and $\mathrm{\delta }{\rho }_{kp}^i$ are ionospheric and tropospheric errors, respectively. When the distance between the two stations is short, the ionospheric and tropospheric errors experienced by the two stations are approximately identical. Therefore, errors can be eliminated in the differences. The single-difference carrier-phase ambiguity observation equations are constructed for the two frequency points of the two stations as follows:

$$\left\{\begin{array}{l}\Delta {\tilde{\varphi }}_{12,B_1}^i={\displaystyle \frac{1}{{\lambda }_{B_1}}}\left(\left|{\tilde{\mathit{r}}}_1^i-{\tilde{\mathit{r}}}_1\right|-\left|{\tilde{\mathit{r}}}_2^i-{\tilde{\mathit{r}}}_2\right|\right)+f_{B_1}\cdot \mathrm{\delta }{t_{12,B_1}}^i-N_{12,B_1}^i\\ \Delta {\tilde{\varphi }}_{12,B_3}^i={\displaystyle \frac{1}{{\lambda }_{B_3}}}\left(\left|{\tilde{\mathit{r}}}_1^i-{\tilde{\mathit{r}}}_1\right|-\left|{\tilde{\mathit{r}}}_2^i-{\tilde{\mathit{r}}}_2\right|\right)+f_{B_3}\cdot \mathrm{\delta }{t_{12,B_3}}^i-N_{12,B_3}^i\end{array}\right.$$

(2)

where $\Delta {\tilde{\varphi }}_{12,B_1}^i$ and $\Delta {\tilde{\varphi }}_{12,B_3}^i$ denote the real values of the single-difference carrier phases between the two stations at two frequency points, $B_1$ and $B_3$, respectively; ${\tilde{\mathit{r}}}_1^i$ and ${\tilde{\mathit{r}}}_2^i$ denote the positions of the satellite $i$ corresponding to the signals received by Antennas 1 and 2, respectively; ${\tilde{\mathit{r}}}_1$ and ${\tilde{\mathit{r}}}_2$ represent the real positions of Antennas 1 and 2, respectively; $f_{B_1}$ and $f_{B_3}$ are the frequencies of the two frequency points, $B_1$ and $B_3$, respectively; $\mathrm{\delta }{t_{12,B_1}}^i$ and $\mathrm{\delta }{t_{12,B_3}}^i$ are the inter-station clock difference between Antennas 1 and 2 at the two frequency points, $B_1$ and $B_3$, respectively; $N_{12,B_1}^i$ and $N_{12,B_1}^i$ indicate the single-difference integer ambiguities of Antennas 1 and 2 relative to satellite $i$ at the two frequency points, $B_1$ and $B_3$, respectively.

As depicted in Figure 3, θ (i.e., the angle between the DOA and the baseline vector formed by Antennas 1 and 2) can be expressed as follows:

$$\lambda \cdot \left(\Delta {\varphi }_{12}+N_{12}\right)=L\cos \theta$$

(3)

As illustrated in Figure 4, θ in Equation (3) can be decomposed into the pitch angle (β) and yaw angle (α) from the carrier to the signal source.

The yaw angle α and pitch angle β in the figure are the objectives to be solved in this study. When the signal source is a real satellite signal, the geometric configuration of the cosine function is given by

$$\cos \theta ={\displaystyle \frac{\left[\begin{array}{ccc}L& 0& 0\end{array}\right]·{\mathit{C}}_{\mathrm{e}}^{\mathrm{b}}\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_1\right)}{\left|L\right|\left|\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_1\right)\right|}}$$

(4)

Then Equation (3) can be reduced to

$$\lambda \cdot \left(\Delta {\tilde{\varphi }}_{12}^{\mathrm{i}}+N_{12}^{\mathrm{i}}\right)={\displaystyle \frac{\left[\begin{array}{ccc}L& 0& 0\end{array}\right]·{\mathit{C}}_{\mathrm{e},\mathrm{imu}}^{\mathrm{b}}\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)}{\left|\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)\right|}}$$

(5)

2.3. Two-Dimensional Direction Observation Model for Spoofing Signal Sources

The vector of the carrier’s Antenna 1 pointing to the signal source ${\mathit{r}}_{\mathrm{s},\mathrm{t}}$ at the same moment can be expressed as ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{\mathrm{b}}$ in the $\mathit{b}$ system, and $x_{s,t}^b$, $y_{s,t}^b$, and $z_{s,t}^b$ are the axial components of ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{\mathrm{b}}$, as follows:

$$\left[\begin{array}{c}{x}_{s,t}^b\\ y_{s,t}^b\\ z_{s,t}^b\end{array}\right]=\left[\begin{array}{c}{d}_{s,t}^b\cos {\beta }_{s,t}^b\cos {\alpha }_{s,t}^b\\ {\alpha }_{s,t}^b\cos {\beta }_{s,t}^{b_0}\sin {\alpha }_{s,t}^b\\ d_{s,t}^b\sin {\beta }_{s,t}^b\end{array}\right]$$

(6)

Equation (5) can be reduced to a two-dimensional direction observation equation for signal sources:

$$\lambda \cdot \left(\Delta {\tilde{\varphi }}_{12}^{\mathrm{s}}+N_{12}^{\mathrm{s}}\right)=\left[\begin{array}{ccc}L& 0& 0\end{array}\right]\cdot \left[\begin{array}{c}\cos {\beta }_s^b\cos {\alpha }_s^b\\ \cos {\beta }_s^b\sin {\alpha }_s^b\\ \sin {\beta }_s^b\end{array}\right]$$

(7)

As the scenario defined in this study is that there exists a spoofing risk in satellite navigation, satellite navigation and positioning pose a risk of unreliability. In Equation (5), ${\tilde{\mathit{r}}}_1^i$ is obtained by extrapolating the data in ephemeris files, ${\mathit{r}}_1$ is obtained by independently extrapolating the data provided by the MIMU, and $N_{12}^{\mathrm{i}}$ is to be solved.

Conventional methods for solving inter-station single-difference carrier phases in satellite navigation include multi-epoch filtering techniques such as the least-squares ambiguity decorrelation adjustment (LAMBDA) algorithm and objective function solving techniques such as the AFM algorithm [21,22,23,24,25]. The former requires multi-epoch filtering of possibly unreliable pseudo-range information, and the latter is disadvantaged by large computational amounts and insufficient reliability. Therefore, this study constructs a novel AFM objective function to rapidly resolve the integer ambiguities of carrier phases in the environment of this study via a single channel. Additionally, in the two-dimensional observation equation for spoofing signal sources, that is, Equation (7), the observed value has one dimension, and the value to be observed has two dimensions. There is a rank loss in single-epoch direction finding for spoofing signal sources. However, due to the non-linearity of the two-dimensional direction observation model, it is more complicated to calculate the matrix of state transfer between two consecutive epochs. Therefore, it is necessary to propound a new multi-epoch observation model and construct a least squares observation equation and an Extended Kalman Filter (EKF) model to determine high-precision directions of spoofing signal sources.

3. Proposed Methods

As it is challenging to effectively identify spoofing in terms of signal strength, angle estimation based on the antenna array can barely achieve effective direction finding for spoofing. Considering the DOA stability of spoofing, we apply the system and signal processing model discussed in Section 2 to determine the inter-station single-difference directions of all the GNSS signals received by the dual-antenna GNSS/MIMU system so as to obtain the DOA angles of the single sources for each epoch. We propose a mobile dual-antenna GNSS/MIMU-based method for direction finding of signal sources. The proposed method first utilises the inter-station single-difference carrier-phase measurements after integer ambiguity compensation to distinguish real GNSS signals from spoofed signals to confirm and extract false and spoofed satellite signals. Subsequently, we select the most favourable computational coordinate system based on multiple simplified assumptions. Finally, based on multi-epoch DOA angle measurements of spoofing signal sources, we establish a multi-epoch least squares observation equation and an EKF filtering model to determine high-precision directions of spoofing signal sources. The proposed method is described in this section.

3.1. Method for Determining the AFM Carrier-Phase Ambiguity at Dual Frequencies

In this method, the short-baseline inter-station single-difference integer ambiguity is effectively determined after real and spoofed GNSS signals are successfully received, thus realising subsequent positioning of spoofed signals. This method utilises the inter-frequency information difference to fuse the inter-station single-difference carrier-phase information at dual frequencies so as to obtain a strong correlation constraint between dual-frequency carrier phases and their ambiguities. Additionally, a new method for resolving the ambiguities of short-baseline inter-station carrier phases is proposed.

As the effect of the inter-station clock difference between the two antennas still exists in Equation (2) given in Section 2, we can obtain the following equation by subtracting the upper and lower equations of Equation (2):

$$\begin{array}{r}{\lambda }_{B_1}\left(\Delta {\varphi }_{12,B_1}^i+N_{12,B_1}^i\right)-{\lambda }_{B_3}\left(\Delta {\varphi }_{12,B_3}^i+N_{12,B_3}^i\right)\\ =c\cdot \left(\mathrm{\delta }{t}_{12,B_1}^i-\mathrm{\delta }{t}_{12,B_3}^i\right)+{\epsilon }_{12}^i\end{array}$$

(8)

where $\Delta {\varphi }_{12,B_1}^i$ and $\Delta {\varphi }_{12,B_3}^i$ are the inter-station single-difference carrier-phase measurements for satellite i at two frequency points, $B_1$ and $B_3$, respectively; ${\epsilon }_{12,B_1}^i$ and ${\epsilon }_{12,B_3}^i$ are the inter-station single-difference carrier-phase measurement errors for satellite i at two frequency points, $B_1$ and $B_3$, respectively.

By analysing the clock difference part in Equation (8), we obtain

$$\begin{array}{c}\mathrm{\delta }{t}_{12,B_1}^i-\mathrm{\delta }{t}_{12,B_3}^i=(\mathrm{\delta }{t}_{1,B_1}-\mathrm{\delta }{t}_{2,B_1})-(\mathrm{\delta }{t}_{1,B_3}-\mathrm{\delta }{t}_{2,B_3})\\ =\left(\mathrm{\delta }{t}_{1,B_1}-\mathrm{\delta }{t}_{1,B_3}\right)-\left(\mathrm{\delta }{t}_{2,B_1}+\mathrm{\delta }{t}_{2,B_3}\right)\end{array}$$

(9)

The clock difference between two frequency points, $B_1$ and $B_3$, of the same receiver can be ignored because it is considerably smaller than the noise (random error).

Moreover, the inter-station single-difference carrier phase at $B_1$ and $B_3$ represents the same distance, and this distance does not exceed the baseline length. Therefore, we obtain

$$\left\{\begin{array}{c}\left|{\lambda }_{B_1}\left(\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+N_{12,B_1}^i\right)\right|\le L\\ \left|{\lambda }_{B_3}\left(\Delta {\varphi }_{12,B_3}^{\mathrm{i}}+N_{12,B_3}^i\right)\right|\le L\end{array}\right.$$

(10)

$${\lambda }_{B_1}\left(\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+N_{12,B_1}^i\right)-{\lambda }_{B_3}\left(\Delta {\varphi }_{12,B_3}^{\mathrm{i}}+N_{12,B_3}^i\right)=0$$

(11)

As depicted in Figure 5, the points in the range of Equation (10) represent the integer ambiguity group $\left(N_{12,B_1}^i,N_{12,B_3}^i\right)$ at $B_1$ and $B_3$.

Considering the stochastic measurement errors ${\epsilon }_1$ and ${\epsilon }_3$ with the same standard deviation $\sigma$, Equations (10) and (11) can be transformed as follows:

$$\left\{\begin{array}{c}{N}_{12,B_3}^i={\displaystyle \frac{{\lambda }_{B_1}}{{\lambda }_{B_3}}}\left(\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+{\epsilon }_{12,B_1}^{\mathrm{i}}+N_{12,B_1}^i\right)-\left(\Delta {\varphi }_{12,B_3}^{\mathrm{i}}+{\epsilon }_{12,B_3}^{\mathrm{i}}\right)\\ -{\displaystyle \frac{L}{{\lambda }_{B_1}}}-\Delta {\varphi }_{12,B_1}^{\mathrm{i}}-3\sigma \le N_{12,B_1}^i\le {\displaystyle \frac{L}{{\lambda }_{B_1}}}-\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+3\sigma \\ -{\displaystyle \frac{L}{{\lambda }_{B_3}}}-\Delta {\varphi }_{12,B_1}^{\mathrm{i}}-3\sigma \le N_{12,B_3}^i\le {\displaystyle \frac{L}{{\lambda }_{B_3}}}-\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+3\sigma \end{array}\right.$$

(12)

The optimal solution $\left(N_{12,B_1}^i,N_{12,B_3}^i\right)$ to Equation (12) can be obtained using the AFM-based objective function as follows:

$$\xi ={\lambda }_{B_1}\left(\Delta {\varphi }_{12,B_1}^{\mathrm{i}}+N_{12,B_1}^i\right)-{\lambda }_{B_3}\left(\Delta {\varphi }_{12,B_3}^{\mathrm{i}}+N_{12,B_3}^i\right)$$

(13)

It is indicated in Equation (13) that the integer ambiguity $\left(N_{12,B_1},N_{12,B_3}\right)$ can be approximately obtained with the smallest error at $B_1$ and $B_3$.

3.2. Method for Determining Spoofed Signals

The method described in Section 3.1 can quickly determine carrier-phase integer ambiguities from received GNSS signals using two short-baseline common-clock antennas. On this basis, we directly determine spoofed signals by using the inter-station single-difference carrier-phase measurements after integer ambiguity compensation and the information provided by the MIMU of the carrier. Due to the dynamic nature of the observation scenario in this paper, there are certain carrier-phase measurement errors, as well as extrapolation errors from the MIMU of the carrier.

Therefore, the attitude transformation matrix from the $e$ system (CGCS2000) to the b system (carrier body coordinate system) provided by the MIMU in the trusted environment of satellite navigation before spoofing is ${\mathit{C}}_{e,imu}^{\mathrm{b}}$ and ${\mathit{r}}_{1,imu}$. If there is no spoofing, we can derive the following equation from Equation (5):

$$\lambda \cdot \left(\Delta {\tilde{\varphi }}_{12}^{\mathrm{i}}+N_{12}^i\right)={\displaystyle \frac{\left[\begin{array}{ccc}L& 0& 0\end{array}\right]·{\mathit{C}}_{\mathrm{e},\mathrm{imu}}^{\mathrm{b}}\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)}{\left|\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)\right|}}$$

(14)

The information on the right side of the above equation is obtained based on the MIMU measurements and ephemeris files, while the information on the left side of the equation is solved based on the satellite navigation signal measurements. Therefore, we define $\mathrm{\delta }{\varphi }_{\mathrm{error}}$ as follows:

$$\mathrm{\delta }{\varphi }_{\mathrm{error}}=\lambda \cdot \left(\Delta {\tilde{\varphi }}_{12}^{\mathrm{i}}+N_{12}^{\mathrm{i}}\right)-{\displaystyle \frac{\left[\begin{array}{ccc}L& 0& 0\end{array}\right]·{\mathit{C}}_{\mathrm{e},\mathrm{imu}}^{\mathrm{b}}\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)}{\left|\left({\tilde{\mathit{r}}}_1^i-{\mathit{r}}_{1,imu}\right)\right|}}$$

(15)

where $\lambda$ is known; $L$ can complete the calibration work in advance; ${\mathit{r}}_{1,imu}$ and ${\tilde{\mathit{r}}}_1^i$ vary not much in two consecutive epochs; $\Delta {\tilde{\varphi }}_{12}^{\mathrm{i}}$ is the measured value; $N_{12}^{\mathrm{i}}$ is the carrier-phase integer ambiguity revolved in Section 3.1.

By defining the threshold at $\mathrm{\delta }{\varphi }_{\mathrm{error}}\ge \mathrm{\delta }{\varphi }_{\max }$, we can determine that the measured signals of the satellite are spoofed signals. The value of $\mathrm{\delta }{\varphi }_{\mathrm{error}}$ is defined by the maximum error of satellite two-dimensional direction determination in the following paper.

3.3. Multi-Epoch Method for Determining the Two-Dimensional Directions of Spoofing Signal Source

After determining spoofed signals (Section 3.2), we track the same signal source in multiple epochs. First, an appropriate computational coordinate system is selected. Then, the dynamic multi-epoch inter-station single-difference carrier-phase measurements after integer ambiguity compensation and MIMU observation information are used to perform multi-epoch least-squares operation for the target spoofing signal source to obtain the initial position of the spoofing signal source. Finally, the two-dimensional direction information of the spoofing signal source is obtained through filtering in real-time.

To determine the two-dimensional direction of the signal source, it is first necessary to select a suitable observation coordinate system. Because the direction of the signal source changes in real-time under the real-time body coordinate system for the carrier, the model constructed is characterised by high complexity. Additionally, geoid systems, especially CSCG2000, have larger value representations for positions, which is not beneficial to computation. Therefore, we choose the body coordinate system ${\mathit{b}}_0$ created for the epoch where the signal source points approximately to the X-axis in the motion as the observation coordinate system. In this coordinate system, the direction of the carrier-pointing signal source in this epoch is the value to be solved by the model.

As shown in Figure 4, if the carrier has a hovering motion on a horizontal plane, then ${\beta }_{s,i}^{b_i}$ is approximately stable, and the value of ${\theta }_{s,i}^{b_i}$ is directly affected by ${\alpha }_{s,i}^{b_i}$. From the geometric relationship, we can obtain

$$\cos {\theta }_{s,i}^{b_t}=\cos {\beta }_{s,i}^{b_t}\cos {\alpha }_{s,i}^{b_t}$$

(16)

As shown in Equation (16), when the carrier phase reaches its maximum value, ${\alpha }_{s,i}^{b_0}$ approximates to 0, and ${\beta }_{s,i}^{b_{\mathrm{i}}}\approx {\theta }_{s,i}^{b_{\mathrm{i}}}$. This moment is recorded as Moment 0, at which the body coordinate system is the ${\mathit{b}}_0$ system.

For a brief period, the body system error in the process of MIMU-assisted rotation does not significantly vary with time. The value of the signal source ${\mathit{r}}_{\mathrm{s},\mathrm{t}}$ in the b system at different moments can be expressed as ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{\mathrm{b}}$. The distance from the carrier to the signal source is much larger than the change in the position of the signal source, i.e., ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{{\mathrm{b}}_0,0}-{\mathit{r}}_{\mathrm{s},0}^{{\mathrm{b}}_0,0}\approx 0$.

As the MIMU can obtain the rotation matrix from the ${\mathit{b}}_i$ system (i.e., the body coordinate system for the current epoch) to the $e$ system, we use the $e$ system for the transfer. ${\mathit{r}}_{\mathrm{s},\mathrm{i}}^{\mathrm{b}}$ and ${\mathit{r}}_{\mathrm{s},\mathrm{i}}^{{\mathrm{b}}_0}$ are defined as the representations of the vector ${\mathit{r}}_s$ from the carrier to the signal source in the ${\mathit{b}}_i$ and ${\mathit{b}}_0$ systems, respectively; ${\mathit{C}}_{\mathrm{e}}^{{\mathrm{b}}_0}$ is the rotation matrix from the $e$ system to the ${\mathit{b}}_0$ system; ${\mathit{C}}_{{\mathrm{b}}_i}^{\mathrm{e}}$ is the rotation matrix from the ${\mathit{b}}_i$ system to the $e$ system.

$${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{{\mathrm{b}}_t}={\mathit{C}}_{\mathrm{e}}^{{\mathrm{b}}_t}\cdot {\mathit{C}}_{{\mathrm{b}}_0}^{\mathrm{e}}\cdot {\mathit{r}}_{\mathrm{s},\mathrm{t}}^{{\mathrm{b}}_0}$$

(17)

A Taylor expansion is performed for Equation (17) at $\left\{\begin{array}{c}{\alpha }_{s,0}^{b_0}=0\\ {\beta }_{s,0}^{b_0}=\theta \end{array}\right.$ to obtain

$${\mathit{r}}_{s,t}^{b_0,0}\approx \left[\begin{array}{c}\cos {\beta }_{s,t}^{b_0}\cos {\alpha }_{s,t}^{b_0}\\ \cos {\beta }_{s,t}^{b_0}\sin {\alpha }_{s,t}^{b_0}\\ \sin {\beta }_{s,t}^{b_0}\end{array}\right]-\left[\begin{array}{ll}-\cos {\beta }_{s,t}^{b_0}\sin {\alpha }_{s,t}^{b_0},\hfill & -\cos {\alpha }_{s,t}^{b_0}\sin {\beta }_{s,t}^{b_0}\hfill \\ \cos {\beta }_{s,t}^{b_0}\cos {\alpha }_{s,t}^{b_0},\hfill & -\sin {\alpha }_{s,t}^{b_0}\sin {\beta }_{s,t}^{b_0}\hfill \\ 0,\hfill & \cos {\beta }_{s,t}^{b_0}\hfill \end{array}\right]\cdot \left[\begin{array}{c}\mathsf{\delta }{\alpha }_{s,t}^{b_0}\\ \mathsf{\delta }{\beta }_{s,t}^{b_0}\end{array}\right]$$

(18)

where ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{{\mathrm{b}}_0,0}$ is a unit vector for ${\mathit{r}}_{\mathrm{s},\mathrm{t}}^{{\mathrm{b}}_0}$; $\mathsf{\delta }{\alpha }_{s,t}^{b_0}$ and $\mathsf{\delta }{\beta }_{s,t}^{b_0}$ are the yaw and pitch angle errors, respectively.

By establishing a least-squares observation equation set, then Equation (7) can be transformed as follows:

$$y_t={\mathit{A}}_t\cdot \mathsf{\delta }\mathit{X}+{\epsilon }_t$$

(19)

in which,

$${\mathit{A}}_{t,1\times 2}=-{\left({\mathit{L}}^{{\mathrm{b}}_{\mathrm{t}}}\right)}^{\mathrm{T}}\cdot {\mathit{C}}_{{\mathrm{b}}_0}^{{\mathrm{b}}_t}\cdot \left[\begin{array}{ll}-\cos {\beta }_{s,t}^{b_0}\sin {\alpha }_{s,t}^{b_0},\hfill & -\cos {\alpha }_{s,t}^{b_0}\sin {\beta }_{s,t}^{b_0}\hfill \\ \cos {\beta }_{s,t}^{b_0}\cos {\alpha }_{s,t}^{b_0},\hfill & -\sin {\alpha }_{s,t}^{b_0}\sin {\beta }_{s,t}^{b_0}\hfill \\ 0,\hfill & \cos {\beta }_{s,t}^{b_0}\hfill \end{array}\right]$$

(20)

$$y_t=\lambda \cdot \left(\Delta {\tilde{\varphi }}_{12,t}^{\mathrm{i}}+N_{12,t}^{\mathrm{i}}\right)-\left[\begin{array}{c}L\\ 0\\ 0\end{array}\right]\cdot {\mathit{C}}_{\mathrm{e}}^{{\mathrm{b}}_t}\cdot {\mathit{C}}_{{\mathrm{b}}_0}^{\mathrm{e}}\cdot \left[\begin{array}{c}\cos {\beta }_{s,t}^{b_0}\cos {\alpha }_{s,t}^{b_0}\\ \cos {\beta }_{s,t}^{b_0}\sin {\alpha }_{s,t}^{b_0}\\ \sin {\beta }_{s,t}^{b_0}\end{array}\right]$$

(21)

$$\mathsf{\delta }\mathit{X}=\left[\begin{array}{c}\mathsf{\delta }{\alpha }_s^{b_0}\\ \mathrm{\delta }{\beta }_s^{b_0}\end{array}\right]$$

(22)

The two-dimensional direction of the spoofing signal source is obtained after least-squares compensation as follows:

$$\left[\begin{array}{c}{\alpha }_s^{b_0}\\ {\beta }_s^{b_0}\end{array}\right]=\left[\begin{array}{c}{\alpha }_{s,0}^{b_0}\\ {\beta }_{s,0}^{b_0}\end{array}\right]-\left[\begin{array}{c}\mathrm{\delta }{\alpha }_s^{b_0}\\ \mathrm{\delta }{\beta }_s^{b_0}\end{array}\right]$$

(23)

To obtain the real-time source position information, we construct an EKF model for the carrier-phase measurement information that is updated in real-time.

We define the state parameters as the yaw angle (${\alpha }_s^{b_0}$) and pitch angle (${\beta }_s^{b_0}$) of the two-dimensional direction vector of the signal source in the ${\mathit{b}}_0$ system, and denote them in the following equation:

$$\mathit{X}=\left[\begin{array}{c}{\alpha }_s^{b_0}\\ {\beta }_s^{b_0}\end{array}\right]$$

(24)

Given that the signal source is static, then

$$\left\{\begin{array}{c}{\mathit{X}}_{t+1/t}={\mathit{X}}_{t/t}\\ \mathrm{\delta }{\mathit{X}}_{t+1/t}=\mathrm{\delta }{\mathit{X}}_{t/t}\\ {\sum }_{t+1/t}={\sum }_{t/t}\end{array}\right.$$

(25)

The measurement equation at epoch (t+1) can be established as

$$y_{t+1}={\mathit{A}}_{t+1}\cdot \mathrm{\delta }{\mathit{X}}_{t+1/t+1}+{\epsilon }_{t+1}$$

(26)

The error states and their variances can be estimated for epoch (t+1):

$$\left\{\begin{array}{c}\mathsf{\delta }{\mathit{X}}_{t+1/t+1}=\mathsf{\delta }{\mathit{X}}_{t/t}+K\left(y_{t+1}-A_{t+1}\mathsf{\delta }{\mathit{X}}_{t/t}\right)\\ {\sum }_{t+1/t+1}=\left(I-K{A}_{t+1}\right){\sum }_{t+1/t+1}{\left(I-K{A}_{t+1}\right)}^T+{\sigma }_{\Delta \varphi }^{2}K{K}^T\end{array}\right.$$

(27)

$$K={\sum }_{t/t}{A}_{t+1}{\left(A_{t+1}{\sum }_{t/t}{A_{t+1}}^{\mathrm{T}}+{\sigma }_{\Delta \varphi }^2\right)}^{-1}$$

(28)

To reduce the linearisation error of the measurement equation, we calculate the initial state value and the estimated error state for epoch (t+1) as follows:

$$\left\{\begin{array}{c}{\mathit{X}}_{t+1/t+1}={\mathit{X}}_{t/t}-\mathrm{\delta }{\mathit{X}}_{t+1/t+1}\\ \mathrm{\delta }{\mathit{X}}_{t+1/t+1}=\mathbf{0}\end{array}\right.$$

(29)

4. Test Validation

4.1. Setup of Experimental Scenarios

To verify the proposed method (i.e., the dynamic dual-antenna method for determining the directions of spoofing signal sources), we performed real-time data acquisition and analysis. Additionally, we utilised a spoofing signal source to simulate satellite navigation signals and conducted satellite navigation spoofing on the vehicle-mounted antennas. To ensure the reliability of the reference system, only the signals on B₁ and B₃ frequency points of BeiDou were spoofed. GPS observation data are reserved for reliability. The latitude, longitude, and elevation of the observation site are approximately written as (112.99 deg, 28.23 deg, 60 m).

As depicted in Figure 6, two antennas and an MIMU were firmly connected to the carrier; the X-axis of the MIMU body coordinate system coincided with the X-axis defined for the carrier coordinate system; the $o-x_{MIMU}^b{y}_{MIMU}^b$ plane of the MIMU body coordinate system coincided with the $o-x^b{y}^b$ plane of the carrier body coordinate system; the Y-axis of the MIMU body coordinate system was parallel to the Y-axis defined for the carrier coordinate system. To obtain the high-precision position and attitude information of the carrier, we installed a high-precision INS in the vehicle body, where the $o-x_{INS}^b{y}_{INS}^b$ plane of the MIMU body coordinate system coincided with the $o-x^b{y}^b$ plane of the carrier body coordinate system and the Y-axis of the MIMU body coordinate system was parallel to the Y-axis defined for the carrier coordinate system.

Real-time observation data were collected with the Sinan dual-antenna board. The high-precision attitude information associated with the reference position was obtained via the integration of high-precision inertial navigation and satellite navigation. The vehicle hovered in a nearly horizontal field with the circle-shaped trajectory.

In the experiments, the carrier-phase error of the Sinan dual-antenna board was less than 0.05 rad; signals on BeiDou B₁ and B₃ frequency points were observed; the MIMU error was less than 10 deg/h; POS620 was applied for high-precision inertial navigation, with an error being less than 0.012 deg/h. Detailed information is shown in

Table 1. MP-POS620 performance parameters.

	Gyroscope	Accelerometer
Range	±300°/s	±10 g
Bias	0.02°/h	0.01 mg
Bias Stability	0.02°/h	0.01 mg
Position Accuracy	Horizontal	0.02 m
	Vertical	0.03 m
Attitude Accuracy	Heading	0.01°
	Levelling	0.01°
Velocity Accuracy	Horizontal	0.02 m/s

,

Table 2. EIMU630 performance parameters.

	Gyroscope	Accelerometer
Range	±500°/s	±30 g
Bias	1°/h	200 μg
Bias Stability	1°/h	400 μg

and

Table 3. K825 performance parameters.

Signal Frequency	BDS	BDS-2:B1I, B2I, B3I BDS-3: B1I, B3I
First Fix Time	Cold Start	<30 s
	Hot Start	<10 s
Signal Reacquisition	Loss of Lock Reacquisition	<1 s
	Signal Acquisition Sensitivity	−138 dBm
Measurement Accuracy	Pseudo-range	≤10 cm
	Carrier Phase	≤0.005 cycle

.

In this study, experiments 1 and 2 were conducted to determine the two-dimensional direction of long-distance BeiDou satellite signal sources in synchronous orbits and a spoofing signal source in the short distance, respectively, to verify the accuracy of the system in determining the two-dimensional directions of signal sources at different distances. Experiment 3 was conducted to simulate the accuracy of determining the two-dimensional direction of a 10 km spoofing signal source in the background environment so as to illustrate the working accuracy of the model in the real-world environment.

The position of the spoofing device in the ${\mathit{b}}_0$ system was calculated using the method proposed in this study (i.e., the dual-antenna GNSS/MIMU-based method for determining the two-dimensional directions of satellite navigation signal sources). The high-precision attitude position information of the carrier was obtained based on the vehicle-mounted high-precision INS combined with the inter-station differential method. Using such information, we calculated the DOA of the satellite navigation signal source to determine its position. The computational accuracy of the proposed method was obtained by calculating the error between the real and calculated values.

4.2. Test for BeiDou Satellites in Synchronous Orbits

In order to evaluate the capability of the method model for simultaneous multi-signal source direction finding and to determine the deceptive signal recognition threshold by establishing the two-dimensional orientation accuracy towards on-orbit satellites, multiple BeiDou on-orbit satellites are used as targets for two-dimensional orientation.

Figure 7 illustrates that the two-dimensional direction of the signal source has an error of less than 0.1 rad, which aligned with the positioning error expected for the signal source.

4.3. Test for a Short-Distance Spoofing Signal Source

Due to the simplification of the carrier motion in the computational model of this method, the increased influence of positional changes on the single-difference carrier phase between satellite navigation signal stations during close-range movements may affect the accuracy and reliability of the model. To analyse how the simplification of the position changes of the carrier affected the two-dimensional direction measurements for short-distance signal sources, we utilised a spoofing signal source to deceive the carrier. The position of the target carrier relative to the spoofing signal source is illustrated in Figure 8.

Figure 9a depicts that the error in the two-dimensional heading angle of the signal source was basically less than 0.1 rad, which was in line with the expected positioning error for the signal source. When the difference between the distance of the signal source distance and the motion amplitude of the carrier was not obvious, the pitch angle error of the signal source rapidly increased, but the heading angle maintained high accuracy. When the system was applied to signal-source position search or fused with the zeroing antenna technology, it retained high reliability and effectiveness.

Moreover, Figure 9b,c illustrates that the two-dimensional direction error of the signal source basically conformed to the envelope of the $3\sigma$ line, and the error gradually converged to approximately zero.

Essentially, the sudden change of this error reflected the direction-finding error of the least squares model.

A sudden change occurred in the computational error, carrier-phase compensation noise (error), and micro-inertial navigation error. The computational error was on the order of 10⁻⁴ rad, which was not obvious under the influence of the carrier-phase compensation error. The carrier-phase compensation error was approximated as a normally distributed error with a mean value of 0, which was kept on the order of 10⁻³ rad after the error was smoothed in the multi-epoch least squares algorithm. The micro-inertial navigation error could not be smoothed in the least squares algorithm because of the existence of the error dispersion, and the error experienced a sudden change on the order of 10⁻² rad. This implies that the micro-inertial navigation error in the experimental environment as depicted in Figure 10 was the main factor causing sudden changes in navigation errors.

4.4. Test for the Spoofing Signal Source in the General Environment

This section discusses a simulation scenario wherein a spoofing signal source approximately 10 km away from the carrier is set up. The motion trajectory of the carrier remained the same trajectory as depicted in Figure 7; that is, the position of the simulated signal source is at the position [7000, 7000, −100] in the front-right-lower body coordinate system at 500 s in the carrier motion. Using the high-precision inertial navigation as the reference value, the carrier-phase observation from the spoofing signal source to the deceived carrier is generated, introducing the normal distribution noises with $\sigma =0.05\left(\mathrm{cycles}\right)$ for the simulated carrier phase observations.

Figure 11a illustrates that the error in the two-dimensional heading angle of the signal source was basically less than 0.03 rad, which aligned with the expected positioning error for the signal source. When there was a difference between the distance of the signal source distance and the motion amplitude of the carrier, both the pitch and heading angles of the signal source retained high accuracy, and the accuracy of the former was higher than that of the latter. When the system was applied to signal-source position search or fused with the zeroing antenna technology, it retained high reliability and effectiveness. This also provided high-precision angle information for multiple systems to determine the position of the spoofing signal source via multi-position orientation.

Additionally, it can be observed from Figure 11 that the two-dimensional direction error of the signal source roughly conformed to the envelope of the $3\sigma$ line, demonstrating the filtering stability of the proposed algorithm.

Table 4. The result of test validation.

Angles Error	100 m	10 km	36,000 km
Yaw	≤9°	≤2°	≤0.6°
Pitch	≤11°	≤2°	≤0.6°

lists all the maximum errors for two-dimensional directions in corresponding tests, paving the way for the quantitative analysis of the proposed algorithm.

As indicated in Table 4, the experimental results indicate that distance has a significant impact on the directional accuracy of the method, and when the distance is too close, the pitch angle error is greater than the yaw angle error. However, the errors are within an acceptable range at all distances, suggesting that the method has good adaptability in practical applications. Combining the attitude angle error curve of inertial navigation in Figure 10, it can be observed that the fluctuation peaks of the orientation error curve in Figure 9 and Figure 11 are related to the changes in inertial navigation errors.

5. Conclusions

This study proposes a dynamic dual-antenna positioning method for spoofed signals. This technique utilises the carrier body coordinate system information provided by the MIMU to identify the difference between the signal source DOA measured using the short-baseline common-clock dual-antenna method and the actual DOA of the signal source obtained from the ephemeris files, enabling the determination of signal authenticity and source direction. When the baseline length is less than 1 m, the computational error in the yaw and pitch angles of the signal source can remain less than 0.1 rad. In the short-distance case, the yaw angle error is maintained within 0.1 rad so that the direction of the signal source could be effectively determined to satisfy the zeroing angle requirement of the zeroing antenna. In the middle- and long-distance cases, the two-dimensional direction error is maintained within 0.03 rad, which basically meets the demand of multi-position orientation and thus the demand of signal source positioning. With the assistance of an MIMU, the novel common-clock short-baseline dual-antenna method for determining the DOA of the signal source can rapidly and accurately determine the DOA of the measured source under a minor increase in the size, weight, and arithmetic cost, thereby showing superiority.

Compared with the conventional methods of spoofed signal suppression, the proposed method effectively suppresses the jamming and spoofing signals by determining the two-dimensional direction of the signal source and incorporating the rapidly evolving zero-tuning antenna technology, thus showing higher application potential. In summary, the proposed method not only improves the measurement accuracy of the DOA of the signal source but also helps to improve the performance of the existing signal spoofing suppression techniques, laying a foundation for future research and application in related fields.