Professional Documents
Culture Documents
Drone Monitoring Whitepaper PDF
Drone Monitoring Whitepaper PDF
Whitepaper
This whitepaper provides insights into the use, specifications, and impact of Radio Controlled (RC) Unmanned Aerial
Vehicles (commonly referred to as “drones”). UAVs intended for recreational use are increasingly being used for other
(sometimes hostile) purposes. These include: observing/disturbing public events, spying in protected areas, smuggling
contraband into prisons, endangering/threatening commercial air traffic, and entering restricted airspace. A technical
approach for countering the threats posed by such drones is described, and includes: monitoring the spectrum for
relevant signals, identification of frequency-agile RC signals, direction finding, and possible defensive countermeasures.
Whitepaper
Signal Analysis 8GEP
10.2015 - V02.00
Whitepaper
Protecting the Sky
Table of Contents
1 Protecting the Sky .................................................................. 3
1.1 The Highlights .............................................................................................. 3
6 Summary................................................................................ 13
7 Reference............................................................................... 13
This paper provides an overview of the different types of UAV and their communications behavior. A
conceptual solution for both monitoring and countermeasures is also presented.
Fig 1. Illustration of a drone in the sky over Paris (SPIEGEL 4th Mar 2015)
Undeniably, surveillance technologies and applications have burgeoned during the last several decades.
The existence of drones adds a further dimension to surveillance, both in terms of capabilities and potential
threats. Beyond the well-known problems of data privacy, drone-based surveillance threatens another
vital human concern: behavioral privacy. As public concern continues to rise, policy and regulatory
responses become more necessary.
Clearly not all use of UAVs is threatening. Examples of the legal and beneficial use of drones include:
park ranger drones, drones for area mapping, search and rescue drones, drones for archaeological and
agriculture research, drones for detecting land mines, and ambulance drones. In addition, the use of
drones for recreational purposes has become extremely widespread.
2.1 Introduction
As the name suggests, Unmanned Aerial Vehicles (UAVs) are aircraft without a human pilot on board.
The flight is controlled remotely by a pilot on the ground or by means of an onboard navigation system
flying a predefined route. UAVs typically fall into one of six functional categories: Civilian and Commercial,
Target and Decoy, Reconnaissance, Combat, Logistics, and Research and Development.
Our focus here is aimed on radio controlled civilian (commercial) drones, where the UAVs specifically
designed for civil and commercial applications. The trend for the use of UAV technology in civilian and
commercial uses is expanding rapidly with increased development of automated object detection
approaches and the lowing of cost. The increasing amount of affordable civilian drones capable of carrying
payloads of some 100g up to a few kg leads to an emerging threat for critical infrastructures, VIPs and
public events. Threats may involve simple disturbances (privacies), spying or even incur severe harms
(terror attacks). Facing with the challenges and difficulties of intercepting radio controlled drones as well
as their operators, many authorities have been striving to achieve a solution in drones monitoring and
countermeasures.
Drone type Payload (g) Speed (km/h) Endurance (min) Altitude (m) Operating Radius (km)
Mini 600 - 3000 30 - 100 15 - 90 2000 - 3000 < 15
Micro 50 - 600 < 50 < 30 < 600 <2
Nano
V02.00 < 50 < 20 < 10 Protecting the Sky
Rohde & Schwarz < 300 < 0.1 5
*mini drone is corresponding to fixed-wing aircraft UAV with weight around 5-6kg
2.3 Specifications
The table below provides a summary of the typical characteristics and specifications of drones available
on the market today. The implicit low-weight requirement of a drone has the natural consequence that
transmission power is limited and combined with the high frequencies used, which makes detection and
monitoring difficult. The use of frequency hopping and spread spectrum transmission systems is intended
to reduce the impact of interference, which makes detection and monitoring a challenge.
Radio Controlled (RC) FHSS Systems (e.g. HOTT, FASST, M- Frequency-agile short-time communication, low
Transmission System Link, DSMX) probability of interception (LPI)
WLAN Standard wireless LAN technology
Typical max. 2.4 GHz ISM band FHSS: up to approx. The drones have to be in the visibility of the
communication 3 km controller. To see a typical drone with the naked
range between drone eye becomes difficult at approx. > 300m**
and control station WLAN: 500m The drones have to be in the visibility of the
controller. To see a typical drone with the naked
eye becomes difficult at approx. > 300m**
433 MHz: several km The drones have to be in the visibility of the
controller. To see a typical drone with the naked
eye becomes difficult at approx. > 300m**
27.12 MHz, 35 MHz, 40.68 MHz: several The drones have to be in the visibility of the
km controller. To see a typical drone with the naked
eye becomes difficult at approx. > 300m**
5.8 GHz: Line of Sight (LOS) Used often by video downlink purpose but not for
radio control
Control Route Direct user control (line of sight or Viewing through a mounted cameras’ output also
viewing through the mounted camera’s needs line of sight between drone and controller
output) to transfer a video stream (FPV)
Pre-defined GNSS route (waypoints) Using a space-based satellite navigation system,
e.g. GPS, GLONASS
Positioning GPS, Glonass Could be used for autonomous flight via pre-
programmed waypoints
Spreading Mode FHSS, DSSS
* The ISM (Industrial, Scientific and Medical) radio bands are the range of the radio spectrum reserved internationally for the use of RF (radio frequency)
energy for industrial, scientific and medical purposes other than telecommunications. The ISM band is the frequency band open for varied services,
which include Bluetooth, wireless LAN, IEEE 802.15.4-ZigBee, audio and video broadcasts, microwaves, remote controls and others. Most of the ISM
applications are operating between 2.4 and 2.485 GHz, which is commonly called “2.4GHz ISM band”.
**First Person View (FPV) is the function that provides the user with a true pilot’s eye view via video camera on the drones and video display on a head
mounted display while flying the drones. In the case of FPV, the eye contact to the drone is not a limiting issue anymore. It is not so applicable for
WLAN controlled drones and in the band of 27.12MHz, 35MHz and 40.68MHz.
Fig 2. Various field trials carried out by Rohde & Schwarz in monitoring, locating and jamming of radio controlled drones
The radio control connections to drones should be monitored in order to detect threats within an area of
interest. The target RC links are recognized by the monitoring operator in terms of modulation as well as
hop parameters (e.g. hop-length, hop-rate, modulation type, symbol rate). Monitoring of drones essentially
encompasses:
Detection of RC links in the surroundings
Separation of the targeted RC link from other signals within a dense signal scenario (WiFi, Bluetooth)
Measurement of the hop parameters
Identification of the specific type of RC link
A preliminary task is monitoring the relevant ISM bands with the aim of detecting all active RC in the
vicinity of the antenna. A wide bandwidth (i.e. planned performance up to 80 MHz) monitoring would be
beneficial in establishing a comprehensive list of all frequencies used by the RCs and ensuring a higher
probability of interception (POI). Detected signals can be analyzed online (e.g. if an immediate threat is
suspected) or recorded for later offline analysis in order to measure the hop parameters. This is a
prerequisite step if the profile for a new or unknown radio control transmission is to be determined.
The R&S multichannel Signal Analysis solution possesses a powerful short-time detector for automatic
detection and analysis of frequency-agile short-time signals in wideband signal scenarios. The detected
hops are automatically analyzed, sorted and matched to transmissions system profiles. A short-time signal
detector has been optimized to detect the hops in the 2.4GHz ISM band. The RC of the drone may be
immediately detected and identified as soon as it is switched on (even before take-off). Any required
countermeasures can therefore be deployed without delay. This unique capability offered by signal
analysis clearly superior to other solutions (i.e. radar, optical, acoustic).
User
defined
profile
Fig 3. Short time detection with histogram result of hop parameters (i.e. duration, symbol rate, modulation etc.). The
recognition of different radio control links by using profile separation or automatic separation.
For analysis of unknown/new drone communication signals, it is necessary to use our detailed technical
analysis specialized for frequency-agile transmissions. It provides time/frequency domain signal analysis,
timing analysis and modulation analysis for determining technical parameters. New profiles for the
separation/recognition and the countermeasures processes can be defined from the measured
parameters.
A wideband direction finder is used to take bearings of all relevant RC hopping signals in parallel.
Thanks to the fast DF scanning, it is possible to DF targets in several frequency ranges quasi-
simultaneously. Intelligent graphical user interfaces allow for a user-friendly operation and for connection
and transfer of measurement results to other systems. Compact DF antennas, for mobile and portable
operation, are available as well as stationary DF antennas.
Fig 4. Direction finding result of RC that shows a drone RC in the direction of 183°. The diagram in the center (RF-Azimuth)
shows the DF results for the individual hops coming from the same direction
1/3 2/3
The key to success of RC jamming is equipped with prior comprehensive reconnaissance. A list of RC
links (FHSS) with potential threats is known to the user of the jamming system including their main
modulation parameters (e.g. hop set/frequencies, timing, hop rate, channel bandwidth, modulation type,
symbol rate). The jammer is especially tailored and useful towards counter drone application, where each
of the hops contains the RC information of the drone and all must be jammed.
Instead of a barrage jamming, which needs much higher transmitting power, the unique solution provided
by R&S is based on a “follower” jamming mode, where each single burst of the RC signal is jammed but
not the other legal signals. This allows the jamming of the targeted RC with almost no disturbance of other
communication signals within the same frequency band (e.g. WLAN/ WiFi communications). Timing is a
very critical criterion in drone jamming. Once the targeted RC link is detected within the realtime
bandwidth, the exciter response has to be fast enough to hit the hop while it is still on air. The R&S jamming
solution is able to detect and respond to a single active burst. Once the next hop is active, the system
detects it immediately within the 80 MHz realtime bandwidth and responds to it accordingly. All detected
emissions and each jamming transmission are displayed in statistic diagrams and can additionally be
observed in a RF spectrum.
Fig 6. Statistic tab: display of detected emissions and exciters activities; Spectrum tab: RF Spectrum with active FHSS signal
After a WLAN radio control link had been identified, two further options are available:
a) The first option is to interrupt the WLAN link that will force the drone to enter into its “fail-safe” mode.
This may result in a “shut down” of the rotors.
b) The second option is to broadcast RC commands on the identified WLAN (the drone being the “access
point”) and to take over the control of the drone. It is necessary to know the type of drone in order to
pre-program the command set necessary for this take-over procedure.
7 Reference
[1] The drones military (2015) Available at: http://www.theguardian.com/world/drones (Accessed at 27th April 2015)
[2] Drones (2015) Available at: http://gizmodo.com/tag/drones (Accessed at 27th April 2015)
[4] Krueger, K (2015) 'World Cup of drones' offers $1m for innovative uses of unmanned aircraft. Available at:
http://www.theguardian.com/world/2015/ feb/06/world-cup-of-drones-dubai-unmanned-aircraft (Accessed at 27th
April 2015)
[5] Holenwinski, S. and Liz, L. (2012) ‘The civilains impacts of the drones’, Center for civilians in conflict, 83, pp. 1-
18. (Accessed at 27th April 2015)
[6] Drone threats (2014) Available at: http://loganbanner.com/news/opinion/ 150094270/Drones:-Pro-and-Con
(Accessed at 27th April 2015)
[7] Tests, Vergleiche, Technik of Drones (2015) Available at: http://www.drohnen.de/ (Accessed at 27th April 2015)
[8] Humphreys, T (2015) Research Team Demonstrates First Successful GPS Spoofing of UAV. Available at:
http://www.ae.utexas.edu/news/features/todd-humphreys-research-team-demonstrates-first-successful-gps-
spoofing-of-uav (Accessed at 27th April 2015)
[9] Wikipedia Unmanned aerial vehicle (2015) Available at: http://en.wikipedia.org/wiki/ Unmanned_aerial_vehicle
(Accessed at 27th April 2015)
[10] Wikipedia List of unmanned aerial vehicle (2015) Available at: http://en.wikipedia.
org/wiki/List_of_unmanned_aerial_vehicles (Accessed at 27th April 2015)
[11] UT Austin Researchers Successfully Spoof an $80 million Yacht at Sea (2013) Available at:
http://news.utexas.edu/2013/07/29/ut-austin-researchers-successfully-spoof-an-80-million-yacht-at-sea
(Accessed at 27th April 2015)
Asia Pacific
+65 65 13 04 88
customersupport.asia@rohde-schwarz.com
China
+86 800 810 82 28 |+86 400 650 58 96
customersupport.china@rohde-schwarz.com
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG;
Trade names are trademarks of the owners.
PAD-T-M: 3573.7380.02/02.04/EN/
www.rohde-schwarz.com