Office Action 3: Notice of Allowance (2024-08-22)

CLAIMS:
IN THE CLAIMS:

Claims 1, 12, 13, and 19 are proposed to be amended herein. Please note that all claims

currently pending and under consideration in the above-referenced application are shown below.Please enter these claims as amended. This listing of claims will replace all prior versions and listings of claims in the application.

Listing of Claims:

1\. (Currently Amended) A device fingerprinting system, comprising:
one or more servers configured to store, in a database, fingerprint data and known identification codes associated with a plurality of identified transmitting devices;
a receiver configured to receive, from an unidentified transmitting device, wireless communications; and
a machine learning computing device configured to:
provide a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based, at least in part, on the preamble portion;
capture features in the preamble portion of each of the wireless communications via the CNN;and average the captured features;
determine a device fingerprint responsive to the wireless communications using he CNN; and
compare the determined device fingerprint to the stored fingerprint data in the database.
2\. (Canceled)
3\. (Canceled)
4\. (Canceled)

5\. (Original) The system of claim 1, wherein each of the wireless communications comprises a demodulated identification code.

6\. (Previously Presented) The system of claim 5, wherein the machine learning computing device is further configured to compare demodulated identification codes of the wireless communications with the known identification codes associated with the plurality of identified transmitting devices responsive to a determination that the determined device fingerprint matches the stored fingerprint data in the database.

7\. (Previously Presented) The system of claim 5, wherein the wireless communications are automatic dependent surveillance-broadcast (ADS-B) messages from an aircraft and demodulated identification codes are international civil aviation organization (ICAO) aircraft addresses.

8\. (Original) The system of claim 7, wherein the ADS-B messages indicate one or more of aircraft types, encoded latitudes, encoded longitudes, airborne velocities, surface positions, airborne positions, altitudes, aircraft identifications, and parity bits for error detection.

9\. (Original) The system of claim 1, wherein the wireless communications further comprise geolocation data indicating a current location of the unidentified transmitting device.

10\. (Original) The system of claim 1, wherein the machine learning computing device is further configured to add the determined device fingerprint to the database responsive to a determination that the determined device fingerprint does not match the stored fingerprint data in the database.

11\. (Original) The system of claim 1, wherein the one or more servers are remotely located from the receiver and the machine learning computing device.

12\. (Currently Amended) The system of claim 1, wherein he few-shot learning techniques comprises using prototypical networks.

13\. (Currently Amended) A device fingerprinting method comprising:
storing fingerprint data indicating device fingerprint features detected for a plurality of identified transmitting devices in a database;
receiving, at a communication device, wireless communications from an unidentified transmitting device;
providing a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based, at least in part, on the preamble portion;
determining, via the trained CNN, a device fingerprint responsive to the preamble portion of each of the wireless communications using he CNN; and comparing the determined device fingerprint to the stored fingerprint data in the database.

14\. (Previously Presented) The method of claim 13, wherein determining a device fingerprint comprises:
capturing features in the preamble portion of each of the wireless communications; and averaging the captured features of each of the wireless communications.

15\. (Original) The method of claim 13, further comprising determining whether the determined device fingerprint matches the stored device fingerprint features for one of the plurality of identified transmitting devices.

16\. (Original) The method of claim 15, wherein receiving the wireless communications indicates a demodulated identification code associated with the unidentified transmitting device.

17\. (Original) The method of claim 16, further comprising:
responsive to determining that the device fingerprint does not match the stored device fingerprint features, adding the device fingerprint and the demodulated identification code associated with the unidentified transmitting device to the database.

18\. (Original) The method of claim 16, further comprising:
responsive to determining that the device fingerprint matches the stored device fingerprint features, determining whether the demodulated identification code matches a known identification code associated with the matched device fingerprint features.

19\. (Currently Amended) A non-transitory computer-readable medium having computer-readable instructions stored thereon, the computer-readable instructions configured to instruct one or more processors to:
train a neural network configured to perform few-shot learning techniques for fingerprinting an unidentified transmitter device;
capture features of a preamble portion of signals received from the unidentified transmitter device using the trained neural network;
determine a prototype for the signals by averaging the captured features of each of the signals;and compare the prototype to previously stored fingerprint data contained in a database.

20\. (Previously Presented) The computer-readable medium of claim 19, wherein the non-transitory computer-readable instructions are further configured to instruct the one or more processors to:
responsive to determining that the prototype matches the previously stored fingerprint data in the database, determine whether a demodulated identification code associated with the signals matches a known identification code associated with the previously stored fingerprint data.

21\. (Previously Presented) The non-transitory computer-readable medium of claim 19, wherein the computer-readable instructions are further configured to instruct the one or more processors to:
responsive to a determination that the prototype does not match the previously stored fingerprint data in the database, add the prototype and a demodulated identification code associated with the signals to the database.

22\. (Previously Presented) The non-transitory computer-readable medium of claim 19, wherein the neural network is a convolutional neural network (CNN).

OFFICE ACTION:
DETAILED ACTION
1. 	This is in response to RCE that is filed on July 29, 2024. Claims 2-4 were canceled and claims 1 and 5-22 are pending and claims 1, 13 and 19 are independent.  Each independent claim is amended.
Notice of Pre-AIA  or AIA  Status
2.	The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Continued Examination Under 37 CFR 1.114
3.	A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 1.17(e), was filed in this application after allowance or after an Office action under Ex Parte Quayle, 25 USPQ 74, 453 O.G. 213 (Comm'r Pat. 1935). Since this application is eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, prosecution in this application has been reopened pursuant to 37 CFR 1.114.  Applicant's submission filed on 07/29/2024 has been entered
Allowable Subject Matter
4.	Claims 1 and 5-22 are allowed.
5.	The following is an examiner’s statements of reasons for allowance:
6. 	 The following references/prior arts disclose the general subject matter recited in independent claims 1, 13 and 19 before the current amendment is made.
7. 	Regarding independent claims 1, 13 and 19, Haoran discloses a device fingerprinting system [See figure 1 and 5], comprising: one or more servers configured to store, in a database, fingerprint data and known identification codes associated with a plurality of identified transmitting devices [See at least figure 5 that shows a laptop computer which functions as the server to receive signals originating for a radio or an aircraft];
a receiver [ADS-B signal detection] configured to receive, from an unidentified transmitting device [radio or ADS-B system], wireless communications; and
a machine learning computing device [This device may be integrated in the laptop of figure 5 or be a separate entity as shown in the schematic drawing of figure 1, for instance in the box labeled “data processing”] configured to:
“
determine a device fingerprint responsive to the wireless communications [ See at least page 1, right column, line 9-11]
compare the determined device fingerprint to the stored fingerprint data in the database [See page 2, left column line 21-23].
Hoaran substantially discloses all the limitation recited in the claim but doesn’t explicitly disclose the following underlined or bolded claim limitation: “determine a device fingerprint responsive to the wireless communications using few-shot learning techniques”
However, Sheng-Hung discloses: “determine a device fingerprint responsive to the wireless communications using few-shot learning techniques” [See page 133,651, right column, line 26-34]
Hoaran and Sheng-Hung  substantially discloses all the limitation recited in the claim but doesn’t explicitly disclose the following underlined or bolded amended claim limitation: “
“provide a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN); capture features in the preamble portion of each of the wireless communications via the CNN; and “average the captured feature”
However, Gopalakrishnan discloses the above claim limitation. In particular Gopalakrishnan discloses:
“provide a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) [See figure 1, See how ADS-B Preamble portion is provided as input to a trained convolutional n neural network (CNN)]
; capture features in the preamble portion of each of the wireless communications via the CNN [See figure “Complex Conv. Layer, kernel size 40 followed by kernel size 5; and stride 20 followed by stride 1, 100 filters followed by another 100 filters see how ADS-B preamble signal received from transmitter device using convolutional neural network (CNN). Fig. 1 depicts a sample complex convolutional architecture for ADS-B signals. We use a series of complex 1D convolutions followed by an | · |2 layer to convert complex representations to real ones, and then a series of real-valued layers after a temporal averaging layer to obtain the fingerprint. See also page column 2, “….using the preamble, which is common to all packets from all transmitters, suffices to obtain reasonable accuracies, despite the relatively short length of the preamble compared to the length of the entire message” page 2, right column, “We then focus on learning fingerprints from the preamble”. See VI Conclusions, “In this paper, we have demonstrated the efficacy of complex valued CNNs for wireless fingerprinting. This technique does not rely on signal domain knowledge and, as illustrated by our experiments with WiFi and ADS-B data, can be used across diverse wireless protocols. We show the vulnerability of the approach to “cheating” using transmitter ID when using the entire message to extract the fingerprint. When using the preamble alone, reasonably high accuracies are obtained, and performance is significantly enhanced by noise augmentation” See page 3, first column, “Performance”, We provide results for an external database for two different wireless protocols: WiFi 802.11a (5.8 GHz) and 802.11g (2.4 GHz) commercial off-the-shelf emitters with a signal bandwidth of 20 MHz, and ADS-B (1.09 GHz) narrowband air traffic control signals. We start by using only the preamble for fingerprinting, with signals normalized to unit power. When sampled at 20 MHz, the length of the preamble is 320 I/Q samples for both protocol types.]
; and average the captured feature”[ See figure 1, “Temporal average,” , Fig. 1 depicts a sample complex convolutional architecture for ADS-B signals. We use a series of complex 1D convolutions followed by an | · |2 layer to convert complex representations to real ones, and then a series of real-valued layers after a temporal averaging layer to obtain the fingerprint See page 3, first column, “Performance”, We provide results for an external database for two different wireless protocols: WiFi 802.11a (5.8 GHz) and 802.11g (2.4 GHz) commercial off-the-shelf emitters with a signal bandwidth of 20 MHz, and ADS-B (1.09 GHz) narrowband air traffic control signals. We start by using only the preamble for fingerprinting, with signals normalized to unit power. When sampled at 20 MHz, the length of the preamble is 320 I/Q samples for both protocol types. We report accuracies for the following networks: • ADS-B: 100 C 40×20 – 100 C 5×1 – | · |2 – Avg – 100 D. • WiFi: 100 C 20×10 – 100 C 10×1 – | · |2 – Avg – 100 D. The notation should be read as follows:C×, andD, where C represents a convolutional layer and D a fully connected layer, with complex-valued layers prior to the | · |2] layer and real-valued layers afterward. ‘Avg’ denotes a temporal averaging layer. We train networks for 200 epochs with a batch size of 100, using the Adam optimizer with default hyperparameters and ℓ2 regularization constant of 10-3]
8.	Furthermore, the following the new prior arts/references that are found as a result of an updated search disclose the general subject matter recited in independent claims 1, 13 and 19 [Updated Search]
A.	US Publication No. 20210360453A1 to Kleinbeck discloses methods and apparatus are disclosed for automatic signal detection in an RF environment. An apparatus comprises at least one receiver and at least one processor coupled with at least one memory. The apparatus is at the edge of a communication network. The apparatus sweeps and learns the RF environment in a predetermined period based on statistical learning techniques, thereby creating learning data. The apparatus forms a knowledge map based on the learning data, scrubs a real-time spectral sweep against the knowledge map, and creates impressions on the RF environment based on a machine learning algorithm. The apparatus is operable to detect at least one signal in the RF environment.
B.	US Publication No. 20210281565 A1 to Akella discloses systems and methods for device fingerprinting wherein the methods to generate a device composite fingerprint associated with a computing device are described. In one embodiment, communication data associated with the computing device is accessed. The communication data includes device identification data, device group data, and device operational data. A device identity fingerprint associated with the computing device is generated using the device identification data. A device group fingerprint associated with the computing device is generated using the device group data. A device operational fingerprint associated with the computing device is generated using the device operational data. The device identity fingerprint, the device group fingerprint, and the device operational fingerprint are combined to generate a device composite fingerprint.
C.	US Publication No. 20180211179 A1 to Dzierwa discloses systems, methods and apparatus for automatic signal detection with temporal feature extraction in an RF environment are disclosed. An apparatus learns the RF environment in a predetermined period based on statistical learning techniques, thereby creating learning data. A knowledge map is formed based on the learning data. The apparatus automatically extracts temporal features of the RF environment from the knowledge map. A real-time spectral sweep is scrubbed against the knowledge map. The apparatus is operable to detect a signal in the RF environment, which has a low power level or is a narrowband signal buried in a wideband signal, and which cannot be identified otherwise.
D.	US Patent No. 7724717B2 to Porras discloses a system, for securing a wireless computing network, comprising: means for receiving a communication from an unidentified transmitter; means for identifying the transmitter in accordance with a fingerprint generated from one or more radio frequency signal characteristics extracted from the communication;
means for making one or more access control decisions in response to an identity of the transmitter; and a fingerprint store comprising fingerprint data for one or more transmitters known to the wireless computing network, wherein the fingerprint store is an extension of an address resolution protocol cache.
E.	US Publication No. 20170290075 A1 to Carbajal discloses systems, methods, and apparatus are provided for automated identification of baseline data and changes in state in a wireless communications spectrum, by identifying sources of signal emission in the spectrum by automatically detecting signals, analyzing signals, comparing signal data to historical and reference data, creating corresponding signal profiles, and determining information about the baseline data and changes in state based upon the measured and analyzed data in near real time, which is stored on each apparatus or device and/or on a remote server computer that aggregates data from each apparatus or device.
F.	See the other cited prior arts
However, as it is persuasively argued, the above prior arts of record including the rest of the cited prior arts either taken alone or in combination neither anticipates nor renders obvious the amended claim limitations recited in independent claims 1, 13 and 19 shown above.
For this reason, the specific claim limitations recited in the independent claims 1, 13 and 19 taken as whole is allowed.
9.	The dependent claims which are dependent on the above independent claims 1, 13 and 19 being further limiting to the independent claim, definite and enabled by the specification are also allowed.
10.	Any comments Applicants considers necessary must be submitted no later than the payment of the Issue Fee and to avoid processing delays, should preferable accompany the Issue Fees. Such submission should be clearly labeled Comments on Statement of Reasons for Allowance. In event of any post-allowance papers (e.g. IDS, 312 amendment, petition, etc.), Applicant is exhorted to mail papers to the Production Control branch in Publications or faxed to post-allowance papers correspondence branch at (703) 308-5864 to expedite issuing process or call PUB's Customer Service if any questions at (703) 305-8497.
Conclusion
11.

APPLICANT REBUTTAL: REMARKS
The Final Office Action of April 25, 2024 has been received and reviewed. Claims 1 and 5-22 are currently pending in the application. Claims 1 and 5-22 stand rejected.
Applicant proposes to amend claims 1, 12, 13, and 19 herein. Support for the
amendments to claims 1, 13, and 19 is found in the as-filed specification at least at    [0073] and [0078]. The amendments to claim 12 are for clarity. No new matter has been added.
Reconsideration of the application as amended herein is respectfully requested.
After Final Consideration Pilot 2.0 Request
Applicant submits herewith an After Final Consideration Pilot (AFCP) Program Request (Form PTO/SB/434). Applicant submits that all criteria for the AFCP are met by the present amendment, including the requirement that at least one independent claim be amended in a manner that does not broaden the scope of the claim in any respect. Applicant is willing and available to participate in any interview initiated by the Examiner concerning this amendment. Thus, it is requested that the Examiner consider the amendment under the procedure of the AFCP
program.
35 U.S.C. § 103 Obviousness Rejections
Obviousness Rejection Based on Haoran in View of Shen
g
-Hun
g
and Gopalakrishnan
Claims 1, 5-9, 11-16, 19, 20, and 22 are rejected under 35 U.S.C. 103 as being unpatentable over "Real-World ADS-B signal recognition based on Radio Frequency Fingerprinting" to Zha Haoran et al. (hereinafter "Haoran"), in view of "A Few-Shot learning Method Using Feature Reparameterization and Dual-Distance Metric Learning for Object Re- identification" to Fan Sheng-Hung et al (hereinafter "Sheng"), and further in view of "Robust Wireless Fingerprinting via Complex-Valued Neural Networks, Aug. 26, 2019" to Soorya Gopalakrishnan (hereinafter "Gopalakrishnan"). Applicant respectfully traverses this rejection, as hereinafter set forth.
The obviousness 35 U.S.C. 103 rejection of claims 1, 5-9, 11-16, 19, 20, and 22 should be withdrawn because Haoran in view of Sheng and Gopalakrishnan does not teach, suggest, or otherwise render obvious each and every element of claim 1, and similarly claims 13 and 19 as
proposed to be amended. For instance, Haoran in view of Sheng and Gopalakrishnan does not teach a machine learning computing device configured to "provide a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based, at least in part, on the preamble portion," as recited in claim 1, and similarly in claims 13 and 19, as proposed to be amended.
On pg. 11 of the Office Action, the Examiner acknowledges that Hoaran does not
disclose using "few-shot learning techniques," instead citing Sheng merely as teaching "few-shot learning techniques."
Sheng teaches "we propose a few-shot object reidentification (FSOR) method that enhances the generalization and discrimination abilities of object Re-ID vectors and dual distance metric learning. The reparameterization mechanism transforms the primary features vector of each input image into a Gaussian distribution to enhance the robustness of the FSOR method when performing object Re-ID tasks." Sheng, Abstract. Sheng also teaches that "Global schemes extract features that represent entire object images, while local schemes extract features that represent critical parts of object images." Id. at II. Related Works, In. 5-7. Accordingly, Sheng appears to teach a machine learning model configured to use few-shot learning techniques to take an image as input and to identify
features of
objects within the image.
However, Sheng is completely silent with regard to a convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based on a preamble portion of a wireless communication. Rather, Sheng appears to teach merely using few-shot learning techniques to extract features of objects within an image, not a model using few-shot learning on a preamble portion of a signal. Indeed, Sheng is completely silent with regard to using few-shot learning techniques on a wireless communication, much less a CNN (or indeed any neural network) configured to use few-shot learning techniques to determine a device fingerprint based on a preamble portion of the wireless communication. Gopalakrishnan does not cure the deficiencies of Hoaran and Sheng in this regard.
As Hoaran, Sheng, and Gopalakrishnan, when combined, do not teach or suggest all the elements recited in claim 1, and similarly claims 13 and 19, Applicant asserts that independent
claims 1, 13, and 19 could not have been obvious to a person of ordinary skill in the art at the time the invention was made considering Haoran in view of Sheng and Gopalakrishnan.
Furthermore, the nonobviousness of claims 1, 13, and 19, precludes a rejection of claims 5-9, 11-12, 14-16, 20, and 22, which depend therefrom, because a dependent claim is obvious only if the independent claim from which it depends is obvious. See In re Fine, 5 U.S.P.Q.2d 1596, 1600 (Fed. Cir. 1988); M.P.E.P. § 2143.03. Therefore, Applicant requests that the Examiner withdraw the 35 U.S.C. § 103 obviousness rejection of dependent claims 5-9, 11-12, 14-16, 20, and 22 for at least this reason.
Obviousness Rejection Based on Haoran in View of Shen
g
, Gopalakrishnan, and Guanxion
g
Claims 10, 17, and 21 are rejected under 35 U.S.C. 103 as being unpatentable over
Haoran in view of Sheng, and further in view of Gopalakrishnan, and further in view of "Radio Frequency Fingerprint identification for LoRa Using Deep bearing" to Shen Guanxiong et al. (hereinafter "Guanxiong"). Applicant respectfully traverses this rejection, as hereinafter set forth.
Claims 10, 17, and 21 depend from claims 1, 13, and 19, respectively. As discussed
above, Haoran in view of Sheng and Gopalakrishnan does not teach or suggest each and every element of claim 1, and similarly claims 13 and 19, as proposed to be amended. Furthermore, Guanxiong does not remedy the deficiencies of Horan and Fan in this regard. For instance, Shen does not teach a machine learning computing device configured to "provide a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based, at least in part, on the preamble portion," as recited in claim 1, and similarly in claims 13 and 19, as proposed to be amended.
As Haoran, Sheng, Gopalakrishnan, and Guanxiong, when combined, do not teach or suggest all elements recited in independent claims 1, 13, and 19, Applicant asserts that independent claims 1, 13, and 19 could not have been obvious to a person of ordinary skill in the art at the time the invention was made considering Haoran, Sheng, Gopalakrishnan, and Guanxiong. Furthermore, the nonobviousness of claims 1, 13, and 19 precludes a rejection of claims 10, 17, and 21, which depend therefrom, because a dependent claim is obvious only if the independent claim from which it depends is obvious. See In re Fine, 5 U.S.P.Q.2d 1596, 1600
(Fed. Cir. 1988); M.P.E.P. § 2143.03. Therefore, Applicant requests that the Examiner withdraw the 35 U.S.C. § 103 obviousness rejection of dependent claims 10, 17, and 21 for at least this reason.
Obviousness Re
j
ection Based on Haoran in View of Shen
g
, Gopalakrishnan, and Ja
g
annath
Claim 18 is rejected under 35 U.S.C. 103 as being unpatentable over Haoran in view of Sheng and further in view of Gopalakrishnan and further in view of "A comprehensive Survey on Radio Frequency (RF) Fingerprinting: Traditional Approaches, Deep Learning, and Open Challenges" to Anu Jagannath et al. (hereinafter "Jagannath") Applicant respectfully traverses this rejection, as hereinafter set forth.
Claim 18 depends from claim 13. As discussed above, Haoran in view of Sheng and Gopalakrishnan does not teach or suggest each and every element of claim 13, as amended. Furthermore, Jagannath does not remedy the deficiencies of Haoran and Fan in this regard. For instance, Jagannath does not teach a "device fingerprinting method comprising:... providing a preamble portion of each of the wireless communications as an input to a previously trained convolutional neural network (CNN) configured to perform few-shot learning techniques to determine a device fingerprint based, at least in part, on the preamble portion," as recited in claim 13, as proposed to be amended.
As Haoran, Shen, Gopalakrishnan, and Jagannath, when combined, do not teach or
suggest all elements recited in independent claim 13, Applicant asserts that independent claim 13 could not have been obvious to a person of ordinary skill in the art at the time the invention was made considering Haoran in view of Sheng, Gopalakrishnan, and Jagannath. Furthermore, the nonobviousness of claim 13 precludes a rejection of claim 18, which depends therefrom, because a dependent claim is obvious only if the independent claim from which it depends is obvious. See In re Fine, 5 U.S.P.Q.2d 1596, 1600 (Fed. Cir. 1988); M.P.E.P. § 2143.03. Therefore,
Applicant requests that the Examiner withdraw the 35 U.S.C. § 103 obviousness rejection of dependent claim 18 for at least this reason.
ENTRY OF AMENDMENTS The proposed amendments to claims 1, 13, and 19 above should be entered by the
Examiner because the amendments are supported by the as-filed disclosure and do not add new matter to the application. Applicant respectfully asserts that the proposed amendments do not require a further search; however, should the Examiner determine otherwise, Applicant respectfully asserts that such search be conducted pursuant to the AFCP program. Finally, if the Examiner determines that the amendments do not place the application in condition for allowance, entry is respectfully requested upon filing of a Notice of Appeal herein.
CONCLUSION


CITED REFERENCE SUMMARIES: Ref US20210360453A1: Claims:
An apparatus for automatic signal detection in an electromagnetic environment, comprising: at least one receiver and at least one processor coupled with at least one memory; wherein the apparatus is at an edge of a communication network; wherein the apparatus is operable to sweep and learn the electromagnetic environment in a predetermined period, thereby creating learning data including power level measurements of the electromagnetic environment; wherein the apparatus is operable to form a knowledge map of the electromagnetic environment based on the power level measurements of the electromagnetic environment; wherein the apparatus is operable to scrub a spectral sweep against the knowledge map; wherein the apparatus is operable to calculate a first derivative of the power level measurements and a second derivative of the power level measurements; wherein the apparatus is operable to smooth the spectral sweep with a correction vector, wherein the correction vector is determined according to the spectral sweep; wherein the apparatus is operable to create impressions on the electromagnetic environment based on a machine learning algorithm; wherein the apparatus is operable to detect at least one signal in the electromagnetic environment based on matched positive and negative gradients; wherein the apparatus is operable to average the spectral sweep, remove areas identified by the matched positive and negative gradients, and connect points between removed areas to determine a baseline; and wherein the apparatus is operable to subtract the baseline from the spectral sweep to reveal the at least one signal.
at least one receiver and at least one processor coupled with at least one memory;
wherein the apparatus is at an edge of a communication network;
wherein the apparatus is operable to sweep and learn the electromagnetic environment in a predetermined period, thereby creating learning data including power level measurements of the electromagnetic environment;
wherein the apparatus is operable to form a knowledge map of the electromagnetic environment based on the power level measurements of the electromagnetic environment;
wherein the apparatus is operable to scrub a spectral sweep against the knowledge map;
wherein the apparatus is operable to calculate a first derivative of the power level measurements and a second derivative of the power level measurements;
wherein the apparatus is operable to smooth the spectral sweep with a correction vector, wherein the correction vector is determined according to the spectral sweep;
wherein the apparatus is operable to create impressions on the electromagnetic environment based on a machine learning algorithm;
wherein the apparatus is operable to detect at least one signal in the electromagnetic environment based on matched positive and negative gradients;
wherein the apparatus is operable to average the spectral sweep, remove areas identified by the matched positive and negative gradients, and connect points between removed areas to determine a baseline; and
wherein the apparatus is operable to subtract the baseline from the spectral sweep to reveal the at least one signal.
The apparatus of claim 1 , further comprising a multiplicity of receivers, wherein the multiplicity of receivers is operable to sweep multiple bandwidths and perform time-frequency analyses at the same time.
The apparatus of claim 1 , wherein the machine learning algorithm is an artificial neural network algorithm.
The apparatus of claim 1 , wherein the apparatus is operable to index the power level measurements for each frequency interval in a spectrum section in the predetermined period.
The apparatus of claim 1 , wherein the apparatus is mobile and linked to a GPS system for time and location.
The apparatus of claim 1 , wherein the apparatus is fixed, and wherein the apparatus is operable to obtain time from its own clock or a GPS system.
The apparatus of claim 1 , wherein the apparatus is operable to estimate a location of a signal emitting device from which the at least one signal is emitted based on in-phase and quadrature (I/Q) data generated from spectral sweep in the electromagnetic environment.
The apparatus of claim 1 , wherein the apparatus is operable to evaluate a performance of a radio transmitter based on frequency deterioration.
The apparatus of claim 1 , wherein the at least one signal is a narrowband signal hidden in a wideband signal, and wherein the narrowband signal having a bandwidth ranging from 1 kHz to 60 kHz is inside the wideband signal with a bandwidth up to 100 MHz.
The apparatus of claim 1 , wherein the at least one signal is a second wideband signal within a first wideband signal, wherein the first wideband signal is an aggregation of the second wideband signal and a third wideband signal, and wherein the first, second and third wideband signals are 4G or 5G wideband signals.
The apparatus of claim 1 , wherein the apparatus is operable to generate at least one report automatically for the electromagnetic environment.
The apparatus of claim 1 , wherein the apparatus is water resistant.
An apparatus for automatic signal detection in an electromagnetic environment, comprising: at least one receiver and at least one processor coupled with at least one memory; wherein the apparatus is at an edge of a communication network; wherein the apparatus is operable to sweep and learn the electromagnetic environment in a predetermined period based on statistical learning techniques, thereby creating learning data including power level measurements of the electromagnetic environment; wherein the apparatus is operable to form a knowledge map of the electromagnetic environment based on the power level measurements of the electromagnetic environment; wherein the apparatus is operable to scrub a spectral sweep against the knowledge map; wherein the apparatus is operable to calculate a first derivative of the power level measurements and a second derivative of the power level measurements; wherein the apparatus is operable to smooth the spectral sweep with a correction vector, wherein the correction vector is determined according to the spectral sweep; wherein the apparatus is operable to create impressions on the electromagnetic environment based on a machine learning algorithm; wherein the apparatus is operable to detect at least one signal in the electromagnetic environment based on matched positive and negative gradients; wherein the apparatus is operable to average the spectral sweep, remove areas identified by the matched positive and negative gradients, and connect points between removed areas to determine a baseline; and wherein the apparatus is operable to subtract the baseline from the spectral sweep to reveal the at least one signal.
wherein the apparatus is operable to sweep and learn the electromagnetic environment in a predetermined period based on statistical learning techniques, thereby creating learning data including power level measurements of the electromagnetic environment;
A method for automatic signal detection in an electromagnetic environment, comprising: learning the electromagnetic environment in a predetermined period, thereby creating learning data including power level measurements of the electromagnetic environment; forming a knowledge map of the electromagnetic environment based on the power level measurements of the electromagnetic environment; scrubbing a spectral sweep against the knowledge map; calculating a first derivative of the power level measurements and a second derivative of the power level measurements; smoothing the spectral sweep with a correction vector, wherein the correction vector is determined according to the spectral sweep; creating impressions on the electromagnetic environment based on a machine learning algorithm; detecting at least one signal in the electromagnetic environment based on matched positive and negative gradients; averaging the spectral sweep, removing areas identified by the matched positive and negative gradients, and connecting points between removed areas to determine a baseline; and subtracting the baseline from the spectral sweep to reveal the at least one signal.
learning the electromagnetic environment in a predetermined period, thereby creating learning data including power level measurements of the electromagnetic environment;
forming a knowledge map of the electromagnetic environment based on the power level measurements of the electromagnetic environment;
scrubbing a spectral sweep against the knowledge map;
calculating a first derivative of the power level measurements and a second derivative of the power level measurements;
smoothing the spectral sweep with a correction vector, wherein the correction vector is determined according to the spectral sweep;
creating impressions on the electromagnetic environment based on a machine learning algorithm;
detecting at least one signal in the electromagnetic environment based on matched positive and negative gradients;
averaging the spectral sweep, removing areas identified by the matched positive and negative gradients, and connecting points between removed areas to determine a baseline; and
subtracting the baseline from the spectral sweep to reveal the at least one signal.
The method of claim 13 , further comprising extracting at least one time-frequency feature from the knowledge map.
The method of claim 13 , wherein the at least one signal is a narrowband signal hidden in a wideband signal, and wherein the narrowband signal having a bandwidth ranging from 1 kHz to 60 kHz is inside the wideband signal with a bandwidth up to 100 MHz.
The method of claim 13 , wherein the knowledge map comprises an array of normal distributions, wherein each normal distribution corresponds to how often a power level at each frequency has been at a particular level.
The method of claim 13 , further comprising creating a profile of the electromagnetic environment based on the knowledge map, wherein the profile comprises a highest power level at each frequency during the predetermined period.
The method of claim 13 , further comprising sending a notification and/or an alarm to at least one remote device after detecting the at least one signal.
The method of claim 13 , further comprising indexing the power level measurements for each frequency interval in a spectrum section in the predetermined period.
Ref US7724717B2: Claims:
A system, for securing a wireless computing network, comprising: means for receiving a communication from an unidentified transmitter; means for identifying the transmitter in accordance with a fingerprint generated from one or more radio frequency signal characteristics extracted from the communication; means for making one or more access control decisions in response to an identity of the transmitter; and a fingerprint store comprising fingerprint data for one or more transmitters known to the wireless computing network, wherein the fingerprint store is an extension of an address resolution protocol cache.
means for receiving a communication from an unidentified transmitter;
means for identifying the transmitter in accordance with a fingerprint generated from one or more radio frequency signal characteristics extracted from the communication;
means for making one or more access control decisions in response to an identity of the transmitter; and
a fingerprint store comprising fingerprint data for one or more transmitters known to the wireless computing network, wherein the fingerprint store is an extension of an address resolution protocol cache.
The system of claim 1 , wherein at least some contents of the fingerprint store are exported to other wireless computing network security systems.
The system of claim 1 , wherein at least some contents of the fingerprint store are imported from other wireless computing network security systems.
The system of claim 1 , wherein the means for making one or more access control decisions comprises: a firewall module configured to accept or deny data link layer frames of the communication based on the fingerprint.
a firewall module configured to accept or deny data link layer frames of the communication based on the fingerprint.
The system of claim 4 , wherein the firewall module is further configured to: pass data link layer frames associated with authorized transmitters to a network stack module; and drop data link layer frames that are not associated with the authorized transmitters.
pass data link layer frames associated with authorized transmitters to a network stack module; and
drop data link layer frames that are not associated with the authorized transmitters.
The system of claim 4 , wherein the firewall module is further configured to send an alert to an intrusion prevention system if the data link layer frames are not associated with the authorized transmitters.
The system of claim 4 , wherein the firewall module is further configured to disrupt communications of unauthorized transmitters.
The system of claim 1 , further comprising: an intrusion prevention system configured to perform inline packet inspection and anomaly detection.
an intrusion prevention system configured to perform inline packet inspection and anomaly detection.
The system of claim 1 , wherein the means for receiving comprises one or more antennas.
The system of claim 1 , wherein the means for identifying comprises: a standard processing module configured to extract a data link layer frame from a raw radio frequency signal associated with the communication; and a fingerprint processing module configured to produce the fingerprint.
a standard processing module configured to extract a data link layer frame from a raw radio frequency signal associated with the communication; and
a fingerprint processing module configured to produce the fingerprint.
The system of claim 10 , wherein the fingerprint processing module is further configured to extract a medium access control address contained in the communication.
The system of claim 10 , wherein the fingerprint processing module is further configured to demodulate and decode additional radio frequency signals not associated with the transmitter.
The system of claim 10 , wherein the fingerprint processing module comprises an expert reasoning engine for detecting location-fixed transmitter position violations.
A method for securing a wireless computing network, the method comprising: receiving a communication from an unidentified transmitter; identifying the transmitter in accordance with a first fingerprint generated from one or more radio frequency signal characteristics extracted from the communication; making one or more access control decisions in response to an identity of the transmitter; and storing one or more stored fingerprints representing one or more transmitters known to the wireless computing network in a fingerprint store, wherein the fingerprint store is an extension of an address resolution protocol cache.
receiving a communication from an unidentified transmitter;
identifying the transmitter in accordance with a first fingerprint generated from one or more radio frequency signal characteristics extracted from the communication;
making one or more access control decisions in response to an identity of the transmitter; and
storing one or more stored fingerprints representing one or more transmitters known to the wireless computing network in a fingerprint store, wherein the fingerprint store is an extension of an address resolution protocol cache.
The method of claim 14 , wherein the one or more radio frequency signal characteristics are extracted from a physical layer frame of the communication.
The method of claim 14 , wherein the identifying comprises: comparing the first fingerprint to at least one of the one or more stored fingerprints.
comparing the first fingerprint to at least one of the one or more stored fingerprints.
The method of claim 16 , wherein the comparing comprises: generating for each comparison performed in accordance with the comparing a similarity score indicative of a degree of similarity between the first fingerprint and a respective one of the one or more stored fingerprints.
generating for each comparison performed in accordance with the comparing a similarity score indicative of a degree of similarity between the first fingerprint and a respective one of the one or more stored fingerprints.
The method of claim 16 , wherein the comparing comprises: converting the first fingerprint to a first fingerprint model, the first fingerprint model comprising one or more categorical measurements for radio frequency signal characteristics corresponding to the first fingerprint; and comparing the first fingerprint model to a stored fingerprint model of one of the one or more stored fingerprints, the stored fingerprint model comprising one or more categorical measurements for radio frequency signal characteristics corresponding to the one of the one or more stored fingerprints.
converting the first fingerprint to a first fingerprint model, the first fingerprint model comprising one or more categorical measurements for radio frequency signal characteristics corresponding to the first fingerprint; and
comparing the first fingerprint model to a stored fingerprint model of one of the one or more stored fingerprints, the stored fingerprint model comprising one or more categorical measurements for radio frequency signal characteristics corresponding to the one of the one or more stored fingerprints.
The method of claim 18 , wherein the stored fingerprint model further comprises: a tolerance associated with each of the one or more categorical measurements, the tolerance specifying a degree of similarity that an associated one of the one or more categorical measurements must meet with regard to a corresponding one of the one or more categorical measurements of the first fingerprint model in order to be considered a match.
a tolerance associated with each of the one or more categorical measurements, the tolerance specifying a degree of similarity that an associated one of the one or more categorical measurements must meet with regard to a corresponding one of the one or more categorical measurements of the first fingerprint model in order to be considered a match.
The method of claim 14 , wherein the making one or more access control decisions comprises: registering the transmitter such that the transmitter is allowed to communicate with an infrastructure of the wireless computing network.
registering the transmitter such that the transmitter is allowed to communicate with an infrastructure of the wireless computing network.
The method of claim 14 , wherein the making one or more access control decisions comprises: authenticating the transmitter if the first fingerprint matches at least one of the one or more stored fingerprints that corresponds to an authorized user of the wireless computing network.
authenticating the transmitter if the first fingerprint matches at least one of the one or more stored fingerprints that corresponds to an authorized user of the wireless computing network.
The method of claim 14 , wherein the making one or more access control decisions comprises: authenticating the transmitter if the first fingerprint indicates that an estimated location of the transmitter is within a permissible range.
authenticating the transmitter if the first fingerprint indicates that an estimated location of the transmitter is within a permissible range.
The method of claim 14 , wherein the making one or more access control decisions comprises: generating an alert if the first fingerprint matches at least one of the one or more stored fingerprints that corresponds to a known source of malicious activity, the alert indicative of a possible intrusion in the wireless computing network; and forwarding the alert to an intrusion prevention system.
generating an al
[Truncated to input limit]