arXiv subjects

Zhi Sun

Publications and source records attributed to Zhi Sun.

At least 37 records · Page 2Linked to original sources

arXiv2023

Chirp-based Hierarchical Beam Training for Extremely Large-Scale Massive MIMO

XL-MIMO promises to provide ultrahigh data rates in Terahertz (THz) spectrum. However, the spherical-wavefront wireless transmission caused by large aperture array presents huge challenges for channel state information (CSI) acquisition. Two independent parameters (physical angles and transmission distance) should be simultaneously considered in XL-MIMO beamforming, which brings severe overhead consumption and beamforming degradation. To address this problem, we exploit the near-field channel characteristic and propose one low-overhead hierarchical beam training scheme for near-field XL-MIMO system. Firstly, we project near-field channel into spatial-angular domain and slope-intercept domain to capture detailed representations. Secondly, a novel spatial-chirp beam-aided codebook and corresponding hierarchical update policy are proposed. Theoretical analyses and numerical simulations are also displayed to verify the superior performances on beamforming and training overhead.

cs.IT↗

arXiv2022

A Small Leak Will Sink Many Ships: Vulnerabilities Related to Mini Programs Permissions

As a new format of mobile application, mini programs, which function within a larger app and are built with HTML, CSS, and JavaScript web technology, have become the way to do almost everything in China. This paper presents our research on the permissions of mini programs. We conducted a systematic study on 9 popular mobile app ecosystems, which host over 7 million mini programs, and tested over 2,580 APIs to understand these emerging systems better. We extracted a common abstracted model for mini programs permission control and revealed six categories of potential security vulnerabilities in the permission environments. It is alarming that the current popular mobile app ecosystems (host apps) under study have at least one security vulnerability. We present the corresponding attack methods to dissect these potential weaknesses further to exploit the discovered vulnerabilities. To prove that the revealed vulnerabilities may cause severe consequences in real-world use, we show three kinds of attacks related to the mini programs' permissions. We have responsibly disclosed the newly discovered vulnerabilities, officially confirmed and revised. Finally, we put forward systematic suggestions to strengthen the standardization of mini programs.

cs.CR↗

arXiv2021

Fast Beam Tracking for Reconfigurable Intelligent Surface Assisted Mobile mmWave Networks

Millimeter wave (mmWave) communications are vulnerable to blockages and node mobility due to the highly directional signal beams. The emerging Reconfigurable Intelligent Surfaces (RISs) technique can effectively mitigate the blockage problem by exploring the non-line-of-sight (NLOS) path, where the beam switching is realized by digitally configuring the phases of RIS elements. To date, most efforts have been made in the stationary scenario. However, when considering node mobility, beam tracking algorithms designed specifically for RIS are needed in order to maintain the NLOS link. In this paper, a fast RIS-based beam tracking algorithm is developed by partly transforming the large amount of signaling time into the calculation happens at base station in a mmWave system with mobile users. Specifically, the differential form of optimal RIS configuration is exploited as the updating beam tracking parameter to avoid complex channel estimation procedure. The RIS-based beam tracking problem is then transformed into an optimization problem whose solution is found by a calculation-based search. Finally, by training on a small set candidate, RIS-based beam tracking is realized. The effectiveness and efficiency of the proposed RIS-based beam tracking algorithm is evaluated by simulations. It shows that the proposed algorithm has near-optimal performance with dramatic savings in terms of signaling time.

eess.SP↗

arXiv2020

Injecting Reliable Radio Frequency Fingerprints Using Metasurface for The Internet of Things

In Internet of Things, where billions of devices with limited resources are communicating with each other, security has become a major stumbling block affecting the progress of this technology. Existing authentication schemes-based on digital signatures have overhead costs associated with them in terms of computation time, battery power, bandwidth, memory, and related hardware costs. Radio frequency fingerprint (RFF), utilizing the unique device-based information, can be a promising solution for IoT. However, traditional RFFs have become obsolete because of low reliability and reduced user capability. Our proposed solution, Metasurface RF-Fingerprinting Injection (MeRFFI), is to inject a carefully-designed radio frequency fingerprint into the wireless physical layer that can increase the security of a stationary IoT device with minimal overhead. The injection of fingerprint is implemented using a low cost metasurface developed and fabricated in our lab, which is designed to make small but detectable perturbations in the specific frequency band in which the IoT devices are communicating. We have conducted comprehensive system evaluations including distance, orientation, multiple channels where the feasibility, effectiveness, and reliability of these fingerprints are validated. The proposed MeRFFI system can be easily integrated into the existing authentication schemes. The security vulnerabilities are analyzed for some of the most threatening wireless physical layer-based attacks.

eess.SP↗

arXiv2020

Who is in Control? Practical Physical Layer Attack and Defense for mmWave based Sensing in Autonomous Vehicles

With the wide bandwidths in millimeter wave (mmWave) frequency band that results in unprecedented accuracy, mmWave sensing has become vital for many applications, especially in autonomous vehicles (AVs). In addition, mmWave sensing has superior reliability compared to other sensing counterparts such as camera and LiDAR, which is essential for safety-critical driving. Therefore, it is critical to understand the security vulnerabilities and improve the security and reliability of mmWave sensing in AVs. To this end, we perform the end-to-end security analysis of a mmWave-based sensing system in AVs, by designing and implementing practical physical layer attack and defense strategies in a state-of-the-art mmWave testbed and an AV testbed in real-world settings. Various strategies are developed to take control of the victim AV by spoofing its mmWave sensing module, including adding fake obstacles at arbitrary locations and faking the locations of existing obstacles. Five real-world attack scenarios are constructed to spoof the victim AV and force it to make dangerous driving decisions leading to a fatal crash. Field experiments are conducted to study the impact of the various attack scenarios using a Lincoln MKZ-based AV testbed, which validate that the attacker can indeed assume control of the victim AV to compromise its security and safety. To defend the attacks, we design and implement a challenge-response authentication scheme and a RF fingerprinting scheme to reliably detect aforementioned spoofing attacks.

cs.CR↗

arXiv2019

Underwater Cooperative MIMO Communications using Hybrid Acoustic and Magnetic Induction Technique

Future smart ocean applications require long distance and reliable communications to connect underwater sensors/robots with remote surface base stations. It is challenging to achieve such goal due to the harsh and dynamic underwater acoustic channel. While Multiple-Input and Multiple-Output (MIMO) technique can enhance reliability and transmission range, it is difficult to place multiple acoustic transducers on one single underwater device due to the large wavelength. Although the cooperative MIMO technique that let multiple underwater devices form a virtual MIMO system could solve the issue, it was impossible to synchronize the distributed underwater devices due to the extremely large and dynamic propagation delay of acoustic waves. To this end, this paper proposes an underwater cooperative MIMO communication mechanism, which is based on a hybrid acoustic and Magnetic Induction (MI) technique. The inter-node synchronization problem can be perfectly solved by using the MI technique so that the distributed acoustic transducers can cooperatively form narrow beams for long distance underwater communications. The synchronization time and errors are significantly reduced since MI has negligible signal propagation delays. To quantitatively analyze the improvement, the closed-form expressions of the synchronization error, signal-to-noise ratio (SNR), effective communication time, and throughput of the proposed system are rigorously derived. The proposed hybrid system is implemented in a software-defined testbed under the beamforming and space-time coding scheme. Through both numerical analysis and real-world experiments, the paper shows that the proposed hybrid cooperative MIMO mechanism achieves much lower bit error rate and synchronization error than the conventional acoustic systems.

eess.SP↗

arXiv2019

WRFRFT-based Coherent Detection and Parameter Estimation of Radar Moving Target With Unknown Entry/Departure Time

A moving target may enter a radar coverage area unannounced and leave after an unspecified period, which implies that the target's entry time and departure time are unknown. In the absence of these time information, target detection and parameter estimation (DAPE) will be severely impacted. In this paper, we consider the coherent detection and parameters estimation problem for a radar moving target with unknown entry time and departure time (that is, the time when the target appears-in/leaves the radar detection field is unknown), involving across range cell (ARC) and Doppler spread (DS) effects within the observation period. A new algorithm, known as window Radon Fractional Fourier transform (WRFRFT) is proposed to detect and estimate the target's time parameters (i.e., entry time and departure time) and motion parameters (i.e., range, velocity and acceleration). The observation values of a maneuvering target are first intercepted and extracted by the window function and searching along the motion trajectory. Then these values are fractional Fourier transformed and well accumulated in the WRFRFT domain, where the DAPE of target could be accomplished thereafter. Experiments with simulated and real radar data sets prove its effectiveness.

eess.SP↗

arXiv2019

Inter-Media Backscatter Communications with Magnetic Induction

Wireless sensors in extreme environments such as underground, concrete wall, and the human body, can enable a large number of important applications. However, deploying wireless sensors in such environments on a large scale is a great challenge due to the high cost and the large profile of wireless sensors. Backscatter communications can reduce the cost and size of wireless sensors by removing most of the typical wireless components. In this paper, we propose to leverage the RFID sensors for inter-media magnetic induction-based backscatter communications (MIBC). In this way, the complexity and cost of wireless sensors can be significantly reduced. The sensors leverage magnetic signals to backscatter information which demonstrate high penetration efficiency. We design a system with channel estimation and optimal signal transmission strategy, and an optimal receiver. The channel between the aboveground reader and underground sensors are modeled by using a stratified medium model. The bit-error-rate is evaluated with different configurations. The results suggest that MIBC can be utilized for most of the inter-media applications with low power consumption and high penetration efficiency.

eess.SP↗

arXiv2019

On Reliability of Underwater Magnetic Induction Communications with Tri-Axis Coils

Underwater magnetic induction communications (UWMICs) provide a low-power and high-throughput solution for autonomous underwater vehicles (AUVs), which are envisioned to explore and monitor the underwater environment. UWMIC with tri-axis coils increases the reliability of the wireless channel by exploring the coil orientation diversity. However, the UWMIC channel is different from typical fading channels and the mutual inductance information (MII) is not always available. It is not clear the performance of the tri-axis coil MIMO without MII. Also, its performances with multiple users have not been investigated. In this paper, we analyze the reliability and multiplexing gain of UWMICs with tri-axis coils by using coil selection. We optimally select the transmit and receive coils to reduce the computation complexity and power consumption and explore the diversity for multiple users. We find that without using all the coils and MII, we can still achieve reliability. Also, the multiplexing gain of UWMIC without MII is 5dB smaller than typical terrestrial fading channels. The results of this paper provide a more power-efficient way to use UWMICs with tri-axis coils.

eess.SP↗

arXiv2019

Physical Layer Identification based on Spatial-temporal Beam Features for Millimeter Wave Wireless Networks

With millimeter wave (mmWave) wireless communication envisioned to be the key enabler of next generation high data rate wireless networks, security is of paramount importance. While conventional security measures in wireless networks operate at a higher layer of the protocol stack, physical layer security utilizes unique device dependent hardware features to identify and authenticate legitimate devices. In this work, we identify that the manufacturing tolerances in the antenna arrays used in mmWave devices contribute to a beam pattern that is unique to each device, and to that end we propose a novel device fingerprinting scheme based on the unique beam patterns used by the mmWave devices. Specifically, we propose a fingerprinting scheme with multiple access points (APs) to take advantage of the rich spatial-temporal information of the beam pattern. We perform comprehensive experiments with commercial off-the-shelf mmWave devices to validate the reliability performance of our proposed method under various scenarios. We also compare our beam pattern feature with a conventional physical layer feature namely power spectral density feature (PSD). To that end, we implement PSD feature based fingerprinting for mmWave devices. We show that the proposed multiple APs scheme is able to achieve over 99% identification accuracy for stationary LOS and NLOS scenarios and significantly outperform the PSD based method. For mobility scenarios, the overall identification accuracy is 96%. In addition, we perform security analysis of our proposed beam pattern fingerprinting system and PSD fingerprinting system by studying the feasibility of performing impersonation attacks. We design and implement an impersonation attack mechanism for mmWave wireless networks using state-of-the-art 60 GHz software defined radios. We discuss our findings and their implications on the security of the mmWave wireless networks.

cs.CR↗

arXiv2019

Deep CSI Learning for Gait Biometric Sensing and Recognition

Gait is a person's natural walking style and a complex biological process that is unique to each person. Recently, the channel state information (CSI) of WiFi devices have been exploited to capture human gait biometrics for user identification. However, the performance of existing CSI-based gait identification systems is far from satisfactory. They can only achieve limited identification accuracy (maximum $93\%$) only for a very small group of people (i.e., between 2 to 10). To address such challenge, an end-to-end deep CSI learning system is developed, which exploits deep neural networks to automatically learn the salient gait features in CSI data that are discriminative enough to distinguish different people Firstly, the raw CSI data are sanitized through window-based denoising, mean centering and normalization. The sanitized data is then passed to a residual deep convolutional neural network (DCNN), which automatically extracts the hierarchical features of gait-signatures embedded in the CSI data. Finally, a softmax classifier utilizes the extracted features to make the final prediction about the identity of the user. In a typical indoor environment, a top-1 accuracy of $97.12 \pm 1.13\%$ is achieved for a dataset of 30 people.

cs.LG↗

arXiv2019

FID: Function Modeling-based Data-Independent and Channel-Robust Physical-Layer Identification

Trusted identification is critical to secure IoT devices. However, the limited memory and computation power of low-end IoT devices prevent the direct usage of conventional identification systems. RF fingerprinting is a promising technique to identify low-end IoT devices since it only requires the RF signals that most IoT devices can produce for communication. However, most existing RF fingerprinting systems are data-dependent and/or not robust to impacts from wireless channels. To address the above problems, we propose to exploit the mathematical expression of the physical-layer process, regarded as a function $\mathbf{\mathcal{F}(\cdot)}$, for device identification. $\mathbf{\mathcal{F}(\cdot)}$ is not directly derivable, so we further propose a model to learn it and employ this function model as the device fingerprint in our system, namely $\mathcal{F}$ID. Our proposed function model characterizes the unique physical-layer process of a device that is independent of the transmitted data, and hence, our system $\mathcal{F}$ID is data-independent and thus resilient against signal replay attacks. Modeling and further separating channel effects from the function model makes $\mathcal{F}$ID channel-robust. We evaluate $\mathcal{F}$ID on thousands of random signal packets from $33$ different devices in different environments and scenarios, and the overall identification accuracy is over $99\%$.

cs.CR↗

arXiv2018

An efficient Moving Morphable Component (MMC)-based approach for multi-resolution topology optimization

In the present work, a highly efficient Moving Morphable Component (MMC) based approach for multi-resolution topology optimization is proposed. In this approach, high-resolution optimization results can be obtained with much less number of degrees of freedoms (DOFs) and design variables since the finite element analysis model and the design optimization model are totally decoupled in the MMC-based problem formulation. This is achieved by introducing super-elements for structural response analysis and adopting a domain decomposition strategy to preserve the topology complexity of optimized structures. Both two-and three-dimensional numerical results demonstrate that substantial computational efforts can be saved with use of the proposed approach.

cs.CE↗

arXiv2017

Practical Design and Implementation of Metamaterial-Enhanced Magnetic Induction Communication

Although wireless communications in complex environments, such as underground, underwater, and indoor, can enable a large number of novel applications, their performances are constrained by lossy media and complicated structures. Magnetic Induction (MI) has been proved to be an efficient solution to achieve reliable communication in such environments. However, due to the small coil antenna's physical limitation, MI's communication range is still very limited if devices are required to be portable. To this end, Metamaterial-enhanced Magnetic Induction (M$^2$I) communication has been proposed and the theoretical results predict that it can significantly increase the communication performance, namely, data rate and communication range. Nevertheless, currently, the real implementation of M$^2$I is still a challenge and there is no guideline on design and fabrication of spherical metamaterials. In this paper, a practical design is proposed by leveraging a spherical coil array to realize M$^2$I. We prove that the effectively negative permeability can be achieved and there exists a resonance condition where the radiated magnetic field can be significantly amplified. The radiation and communication performances are evaluated and full-wave simulation is conducted to validate the design objectives. By using the spherical coil array-based M$^2$I, the communication range can be significantly extended, exactly as we predicted in the ideal M$^2$I model. Finally, the proposed M$^2$I antenna is implemented and tested in various environments.

physics.class-ph↗

arXiv2017

Cooperative Raman Spectroscopy for Real-time In Vivo Nano-biosensing

In the last few decades, the development of miniature biological sensors that can detect and measure different phenomena at the nanoscale has led to transformative disease diagnosis and treatment techniques. Among others, biofunctional Raman nanoparticles have been utilized in vitro and in vivo for multiplexed diagnosis and detection of different biological agents. However, existing solutions require the use of bulky lasers to excite the nanoparticles and similarly bulky and expensive spectrometers to measure the scattered Raman signals, which limit the practicality and applications of this nano-biosensing technique. In addition, due to the high path loss of the intra-body environment, the received signals are usually very weak, which hampers the accuracy of the measurements. In this paper, the concept of cooperative Raman spectrum reconstruction for real-time in vivo nano-biosensing is presented for the first time. The fundamental idea is to replace the single excitation and measurement points (i.e., the laser and the spectrometer, respectively) by a network of interconnected nano-devices that can simultaneously excite and measure nano-biosensing particles. More specifically, in the proposed system a large number of nanosensors jointly and distributively collect the Raman response of nano-biofunctional nanoparticles (NBPs) traveling through the blood vessels. This paper presents a detailed description of the sensing system and, more importantly, proves its feasibility, by utilizing accurate models of optical signal propagation in intra-body environment and low-complexity estimation algorithms. The numerical results show that with a certain density of NBPs, the reconstructed Raman spectrum can be recovered and utilized to accurately extract the targeting intra-body information.

eess.SY↗

arXiv2016

M$^2$I: Channel Modeling for Metamaterial-Enhanced Magnetic Induction Communications

Magnetic Induction (MI) communication technique has shown great potentials in complex and RF-challenging environments, such as underground and underwater, due to its advantage over EM wave-based techniques in penetrating lossy medium. However, the transmission distance of MI techniques is limited since magnetic field attenuates very fast in the near field. To this end, this paper proposes Metamaterial-enhanced Magnetic Induction (M$^2$I) communication mechanism, where a MI coil antenna is enclosed by a metamaterial shell that can enhance the magnetic fields around the MI transceivers. As a result, the M$^2$I communication system can achieve tens of meters communication range by using pocket-sized antennas. In this paper, an analytical channel model is developed to explore the fundamentals of the M$^2$I mechanism, in the aspects of communication range and channel capacity, and the susceptibility to various hostile and complex environments. The theoretical model is validated through the finite element simulation software, Comsol Multiphysics. Proof-of-concept experiments are also conducted to validate the feasibility of M$^2$I.

cs.OH↗

arXiv2016

Wireless Physical-Layer Identification: Modeling and Validation

The wireless physical-layer identification (WPLI) techniques utilize the unique features of the physical waveforms of wireless signals to identify and classify authorized devices. As the inherent physical layer features are difficult to forge, WPLI is deemed as a promising technique for wireless security solutions. However, as of today it still remains unclear whether existing WPLI techniques can be applied under real-world requirements and constraints. In this paper, through both theoretical modeling and experiment validation, the reliability and differentiability of WPLI techniques are rigorously evaluated, especially under the constraints of state-of-art wireless devices, real operation environments, as well as wireless protocols and regulations. Specifically, a theoretical model is first established to systematically describe the complete procedure of WPLI. More importantly, the proposed model is then implemented to thoroughly characterize various WPLI techniques that utilize the spectrum features coming from the non-linear RF-front-end, under the influences from different transmitters, receivers, and wireless channels. Subsequently, the limitations of existing WPLI techniques are revealed and evaluated in details using both the developed theoretical model and in-lab experiments. The real-world requirements and constraints are characterized along each step in WPLI, including i) the signal processing at the transmitter (device to be identified), ii) the various physical layer features that originate from circuits, antenna, and environments, iii) the signal propagation in various wireless channels, iv) the signal reception and processing at the receiver (the identifier), and v) the fingerprint extraction and classification at the receiver.

cs.CR↗

arXiv2016

User Capacity of Wireless Physical-layer Identification: An Information-theoretic Perspective

Wireless Physical Layer Identification (WPLI) system aims at identifying or classifying authorized devices based on the unique Radio Frequency Fingerprints (RFFs) extracted from their radio frequency signals at the physical layer. Current works of WPLI focus on demonstrating system feasibility based on experimental error performance of WPLI with a fixed number of users. While an important question remains to be answered: what's the user number that WPLI can accommodate using different RFFs and receiving equipment. The user capacity of the WPLI can be a major concern for practical system designers and can also be a key metric to evaluate the classification performance of WPLI. In this work, we establish a theoretical understanding on user capacity of WPLI in an information-theoretic perspective. We apply information-theoretic modeling on RFF features of WPLI. An information-theoretic approach is consequently proposed based on mutual information between RFF and user identity to characterize the user capacity of WPLI. Based on this theoretical tool, the achievable user capacity of WPLI is characterized under practical constrains of off-the-shelf receiving devices. Field experiments on classification error performance are conducted for the validation of the information-theoretic user capacity characterization.

cs.CR↗