Abstract:This study reveals the vulnerabilities of Wireless Local Area Networks (WLAN) sensing, under the scope of joint communication and sensing (JCAS), focusing on target spoofing and deceptive jamming techniques. We use orthogonal frequency-division multiplexing (OFDM) to explore how adversaries can exploit WLAN's sensing capabilities to inject false targets and disrupt normal operations. Unlike traditional methods that require sophisticated digital radio-frequency memory hardware, we demonstrate that much simpler software-defined radios can effectively serve as deceptive jammers in WLAN settings. Through comprehensive modeling and practical experiments, we show how deceptive jammers can manipulate the range-Doppler map (RDM) by altering signal integrity, thereby posing significant security threats to OFDM-based JCAS systems. Our findings comprehensively evaluate jammer impact on RDMs and propose several jamming strategies that vary in complexity and detectability.
Abstract:We investigate an uplink MIMO-OFDM localization scenario where a legitimate base station (BS) aims to localize a user equipment (UE) using pilot signals transmitted by the UE, while an unauthorized BS attempts to localize the UE by eavesdropping on these pilots, posing a risk to the UE's location privacy. To enhance legitimate localization performance while protecting the UE's privacy, we formulate an optimization problem regarding the beamformers at the UE, aiming to minimize the Cram\'er-Rao bound (CRB) for legitimate localization while constraining the CRB for unauthorized localization above a threshold. A penalty dual decomposition optimization framework is employed to solve the problem, leading to a novel beamforming approach for location privacy preservation. Numerical results confirm the effectiveness of the proposed approach and demonstrate its superiority over existing benchmarks.
Abstract:Distributed massive multiple-input multiple-output networks utilize a large number of distributed access points (APs) to serve multiple user equipments (UEs), offering significant potential for both communication and localization. However, these networks require frequent phase and time calibration between distributed antennas due to oscillator phase drifts, crucial for reciprocity-based coherent beamforming and accurate localization. While this calibration is typically performed through bi-directional measurements between antennas, it can be simplified to unidirectional measurement under perfect knowledge of antenna locations. This paper extends a recent phase calibration narrowband line-of-sight (LoS) model to a phase and time calibration wideband orthogonal frequency division multiplexing model, including both LoS and reflection paths and allowing for joint phase and time calibrations. We explore different scenarios, considering whether or not prior knowledge of antenna locations and the map is available. For each case, we introduce a practical maximum likelihood estimator and conduct Cramer-Rao lower bound (CRLB) analyses to benchmark performance. Simulations validate our estimators against the CRLB in these scenarios.
Abstract:Cell-free massive multiple-input multiple-output (mMIMO) networks enhance coverage and spectral efficiency (SE) by distributing antennas across access points (APs) with phase coherence between APs. However, the use of cost-efficient local oscillators (LOs) introduces phase noise (PN) that compromises phase coherence, even with centralized processing. Sharing an LO across APs can reduce costs in specific configurations but cause correlated PN between APs, leading to correlated interference that affects centralized combining. This can be improved by exploiting the PN correlation in channel estimation. This paper presents an uplink orthogonal frequency division multiplexing (OFDM) signal model for PN-impaired cell-free mMIMO, addressing gaps in single-carrier signal models. We evaluate mismatches from applying single-carrier methods to OFDM systems, showing how they underestimate the impact of PN and produce over-optimistic achievable SE predictions. Based on our OFDM signal model, we propose two PN-aware channel and common phase error estimators: a distributed estimator for uncorrelated PN with separate LOs and a centralized estimator with shared LOs. We introduce a deep learning-based channel estimator to enhance the performance and reduce the number of iterations of the centralized estimator. The simulation results show that the distributed estimator outperforms mismatched estimators with separate LOs, whereas the centralized estimator enhances distributed estimators with shared LOs.
Abstract:6G networks aim to enable applications like autonomous driving by providing complementary localization services through key technologies such as non-terrestrial networks (NTNs) with low Earth orbit (LEO) satellites and reconfigurable intelligent surfaces (RIS). Prior research in 6G localization using single LEO, multi-LEO, and multi-LEO multi-RIS setups has limitations: single LEO lacks the required accuracy, while multi-LEO/RIS setups demand many visible satellites and RISs, which is not always feasible in practice. This paper explores the novel problem of localization with a single LEO satellite and a single RIS, bridging these research areas. We present a comprehensive signal model accounting for user carrier frequency offset (CFO), clock bias, and fast and slow Doppler effects. Additionally, we derive a low-complexity estimator that achieves theoretical bounds at high signal-to-noise ratios (SNR). Our results demonstrate the feasibility and accuracy of RIS-aided single-LEO localization in 6G networks and highlight potential research directions.
Abstract:Gain-phase impairments (GPIs) affect both communication and sensing in 6G integrated sensing and communication (ISAC). We study the effect of GPIs in a single-input, multiple-output orthogonal frequency-division multiplexing ISAC system and develop a model-based unsupervised learning approach to simultaneously (i) estimate the gain-phase errors and (ii) localize sensing targets. The proposed method is based on the optimal maximum a-posteriori ratio test for a single target. Results show that the proposed approach can effectively estimate the gain-phase errors and yield similar position estimation performance as the case when the impairments are fully known.
Abstract:Reconfigurable intelligent surfaces (RISs) are key enablers for integrated sensing and communication (ISAC) systems in the 6G communication era. With the capability of dynamically shaping the channel, RISs can enhance communication coverage. Additionally, RISs can serve as additional anchors with high angular resolution to improve localization and sensing services in extreme scenarios. However, knowledge of anchors' states such as position, orientation, and hardware impairments are crucial for localization and sensing applications, requiring dedicated calibration, including geometry and hardware calibration. This paper provides an overview of various types of RIS calibration, their impacts, and the challenges they pose in ISAC systems.
Abstract:In this paper, we investigate 3-D localization and frequency synchronization with multiple reconfigurable intelligent surfaces (RISs) in the presence of carrier frequency offset (CFO) for a stationary user equipment (UE). In line with the 6G goals of sustainability and efficiency, we focus on a frugal communication scenario with minimal spatial and spectral resources (i.e., narrowband single-input single-ouput system), considering both the presence and blockage of the line-of-sight (LoS) path between the base station (BS) and the UE. We design a generalized likelihood ratio test (GLRT)-based LoS detector, channel parameter estimation and localization algorithms, with varying complexity. To verify the efficiency of our estimators, we compare the root mean-squared error (RMSE) to the Cram\'er- Rao bound (CRB) of the unknown parameters. We also evaluate the sensitivity of our algorithms to the presence of uncontrolled multi-path components (MPC) and various levels of CFO. Simulation results showcase the effectiveness of the proposed algorithms under minimal hardware and spectral requirements, and a wide range of operating conditions, thereby confirming the viability of RIS-aided frugal localization in 6G scenarios.
Abstract:In this paper, we investigate a non-lineof-sight (NLOS) sensing problem at terahertz frequencies. To be able to observe the targets shadowed by a blockage, we propose a method using reconfigurable intelligent surfaces (RIS). We employ a bistatic radar system and scan the obstructed area with RIS using hierarchical codebooks (HCB). Moreover, we propose an iterative maximum likelihood estimation (MLE) scheme to yield the optimum sensing accuracy, converging to Cramer-Rao lower bound (CRLB). We take band-specific effects such as diffraction and beam squint into account and show that these effects are relevant factors affecting localization performance in RIS-employed radar setups. The results show that under NLOS conditions, the system can still localize all the targets with very good accuracy using the RIS. The initial estimates obtained by the HCBs can provide centimeter-level accuracy, and when the optimal performance is needed, at the cost of a few extra transmissions, the proposed iterative MLE method improves the accuracy to sub-millimeter accuracy, yielding the position error bound.
Abstract:This paper addresses the topic of integrated sensing and communications (ISAC) in 5G and emerging 6G wireless networks. ISAC systems operate within shared, congested or even contested spectrum, aiming to deliver high performance in both wireless communications and radio frequency (RF) sensing. The expected benefits include more efficient utilization of spectrum, power, hardware (HW) and antenna resources. Focusing on multicarrier (MC) systems, which represent the most widely used communication waveforms, it explores the co-design and optimization of waveforms alongside multiantenna transceiver signal processing for communications and both monostatic and bistatic sensing applications of ISAC. Moreover, techniques of high practical relevance for overcoming and even harnessing challenges posed by non-idealities in actual transceiver implementations are considered. To operate in highly dynamic radio environments and target scenarios, both model-based structured optimization and learning-based methodologies for ISAC systems are covered, assessing their adaptability and learning capabilities under real-world conditions. The paper presents trade-offs in communication-centric and radar-sensing-centric approaches, aiming for an optimized balance in densely used spectrum.