Starlink signals can be reverse-engineered to work like GPS—whether SpaceX likes it or not

1 year ago 148

Todd Humphreys’s connection to SpaceX was simple. With a fewer bundle tweaks, its rapidly increasing Starlink constellation could besides connection ultra-precise position, navigation, and timing. The US Army, which funds Humphreys’s enactment astatine the University of Texas astatine Austin, wanted a backup to its venerable, and vulnerable, GPS system. Could Starlink capable that role?

When the thought was first projected successful 2020, executives astatine SpaceX were unfastened to the idea, says Humphreys. Then connection came from connected high. “Elon told the leaders we spoke to: each different LEO [low Earth orbit] communications web has gone into bankruptcy,” Humphreys told MIT Technology Review. “And truthful we [SpaceX] person to absorption wholly connected staying retired of bankruptcy. We cannot spend immoderate distractions.”

But Humphreys wouldn’t instrumentality nary for an answer. For the past 2 years, his squad astatine UT Austin’s Radionavigation Lab has been reverse-engineering signals sent from thousands of Starlink net satellites successful debased Earth orbit to ground-based receivers. Now Humphreys says his squad has cracked the problem, and helium believes that regular beacon signals from the constellation, designed to assistance receivers link with the satellites, could signifier the ground of a utile navigation system. Crucially, this could beryllium done without immoderate assistance from SpaceX astatine all. 

In a non peer-reviewed paper that helium has posted connected his lab's website, Humphreys claims to person provided the astir implicit characterization of Starlink’s signals to date. This information, helium says, is the archetypal measurement toward processing a caller planetary navigation exertion that would run independently of GPS oregon its European, Russian, and Chinese equivalents. 

“The Starlink strategy awesome is simply a intimately guarded secret,” says Humphreys. “Even successful our aboriginal discussions, erstwhile SpaceX was being much cooperative, they didn’t uncover immoderate of the awesome operation to us. We had to commencement from scratch, gathering fundamentally a small vigor scope to eavesdrop connected their signals.”

To get the task started, UT Austin acquired a Starlink terminal and utilized it to watercourse high-definition tennis videos of Rafael Nadal from YouTube, 24/7. This provided a changeless root of Starlink signals that a abstracted adjacent antenna could perceive successful on.

Humphreys rapidly realized that Starlink relies connected a exertion called orthogonal frequency-division multiplexing (OFDM). OFDM is an businesslike method of encoding integer transmissions, primitively developed astatine Bell Labs successful the 1960s and present utilized successful Wi-Fi and 5G. “OFDM is each the rage,” says Mark Psiaki, a GPS adept and aerospace prof astatine Virginia Tech. “It’s a mode to battalion the astir bits per 2nd into a fixed bandwidth.” 

The UT Austin researchers did not effort to interruption Starlink’s encryption oregon entree immoderate idiosyncratic information coming down from satellites. Instead, they sought retired synchronization sequences—predictable, repeating signals beamed down by the satellites successful orbit to assistance receivers coordinate with them. Not lone did Humphreys find specified sequences, but “we were pleasantly amazed to find that they [had] much synchronization sequences than is strictly required,” helium says.

Each series besides contains clues to the satellite’s region and velocity. With the Starlink satellites transmitting astir 4 sequences each millisecond “that’s conscionable fantastic for dual usage of their strategy for positioning,” says Humphreys. 

If the terrestrial receiver has a bully thought of the satellites’ movements—which SpaceX shares online to trim the hazard of orbital collisions—it tin usage the sequences’ regularity to enactment retired which outer they came from, and past cipher the region to that satellite. By repeating this process for aggregate satellites, a receiver tin find itself to wrong astir 30 meters, says Humphreys.

If SpaceX aboriginal decided to cooperate by including further information connected each satellite’s nonstop presumption successful its downlinks, that accuracy could theoretically amended to little than a meter—making it competitory with GPS. SpaceX did not respond to requests for comment.

Other researchers person been treading a akin path. Zak Kassas is simply a prof successful the section of Electrical and Computer Engineering astatine Ohio State University and the manager of a US Department of Transportation halfway focusing connected navigation resiliency. Last year, his squad was the first to show that Starlink signals could beryllium utilized for positioning, successful portion utilizing instrumentality learning. 

Kassas’s approach, which helium calls cognitive opportunistic navigation, analyzes the play and changing frequencies of signals from a outer arsenic it travels overhead. The receiver besides uses the synchronization sequences, learns the satellite’s orbit, and tracks it. With aggregate outer passes, the receiver yet calculates its ain location. At a recent conference, Kassas claimed his strategy had present achieved accuracies of little than 10 meters with Starlink. “It’s a model that is truthful wide we tin use it to immoderate terrestrial oregon extraterrestrial signal,” helium says. “It volition larn connected the fly, archer you what is being transmitted, and archer you wherever you are.”

A fuller knowing of Starlink’s signals has implications beyond navigation. For instance, the Starlink satellites presently don’t look to beryllium utilizing 2 of the 8 channels that SpaceX is licensed for. Humphreys speculates that this could beryllium due to the fact that Musk is keen not to interfere with vigor telescopes operating astatine neighboring frequencies. The agleam streaks of orbiting Starlink satellites person already been accused of disrupting optical astronomy.

UT Austin’s findings besides item the anticipation of deliberate interference with Starlink itself. Humphreys notes that portion the synchronization sequences clasp committedness for navigation, the information that they are utterly predictable and are utilized crossed the full constellation is simply a information vulnerability. “Humphreys has done a large work to the navigation assemblage identifying these sequences,” says Psiaki. “But immoderate navigation strategy moving connected open-source sequences could decidedly beryllium spoofed, due to the fact that everyone volition cognize however to spot those signals and make fake ones.”

Starlink reportedly suffered a catastrophic nonaccomplishment of communications successful precocious September successful Ukraine, wherever it is being wide utilized for dependable and physics communications, to assistance alert drones, and adjacent to close artillery fire. Although it is unclear whether the outages were owed to jamming by Russian forces, Musk tweeted past week: “Russia is actively trying to termination Starlink. To safeguard, SpaceX has diverted monolithic resources towards defense.”

Starlink has unquestionably been a lifesaver for Ukraine. However, reports of the outages and continued confusion astir who volition beryllium paying for Starlink services determination rise concerns implicit its future. 

“As clip goes connected and their dependence connected Starlink deepens, Ukraine and its allies successful the West are coming to admit that they person small power implicit Starlink and cognize small astir it,” says Humphreys. “But present galore millions person a vested involvement successful Starlink security, including its resilience to jamming.  Assessing that information starts with a wide knowing of the awesome structure.”

Read Entire Article