Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEEE Globecom Workshops (GC Wkshps)

Secret Key Agreement for Massive MIMO Systems with Two-Way Training under Pilot Contamination Attack

Sanghun Im, Jinho Choi, Jeongseok Ha

Published Dec 1, 2015• 9 citations
Publisher

Abstract

This work presents a secret key agreement (SKA) protocol for a multiuser time-division duplex cellular system under an active eavesdropping called pilot contamination attack (PCA) when the base station (BS) is equipped with a large antenna array. In particular, we study how to incorporate twoway training, i.e. conducting training processes in both the uplink and down-link transmissions, into the SKA protocol for the purpose of strengthening the protocol against the PCA and/or improving secret key generation efficiency. It will be shown that the two-way training provides the SKA protocol with a considerable enhencement of estimation for eavesdropper's channel. Secrecy performances of the proposed SKA protocol is quantitatively analyzed in terms of secrecy outage probability and average secret key rate, which shows that the two-way training improves the security performances especially in fast fading environments.

DOI
10.1109/glocomw.2015.7414040

Related papers

Secret key agreement under an active attack in MU-TDD systems with large antenna arrays

Sanghun Im, Hyoungsuk Jeon, Jinho Choi +1 more

We consider secret key agreement (SKA) over time division duplex for a multi-user wireless system, in which a base station (BS) equipped with a large antenna array remotely generates different secret keys for multiple users in the system. The BS can have the SKA over downlink broadcast channels with precoding based on uplink training from the multiple users. In this case, unfortunately, an eavesdropper can effectively perform a pilot contamination attack (PCA) by transmitting a targeted user's training sequence for the purpose to steer beam direction toward the eavesdropper. As the beam direction becomes under the eavesdroppers control, this PCA can result in information leakage from the BS to the targeted user. In order to fend off this PCA, we derive PCA detectors based on generalized likelihood ratio test and propose a countermeasure. For the performance analysis, we consider the outage probability and show that it decreases exponentially with the number of antennas at the BS, which cannot be achieved by the conventional SKA.

Globecom•Dec 1, 2013•19 citations

Secret Key Agreement With Large Antenna Arrays Under the Pilot Contamination Attack

Sanghun Im, Hyoungsuk Jeon, Jinho Choi +1 more

We present a secret key agreement (SKA) protocol for a multi-user time-division duplex system where a base-station (BS) with a large antenna array (LAA) shares secret keys with users in the presence of non-colluding eavesdroppers. In the system, when the BS transmits random sequences to legitimate users for sharing common randomness, the eavesdroppers can attempt the pilot contamination attack (PCA) in which each of eavesdroppers transmits its target user's training sequence in hopes of acquiring possible information leak by steering beam towards the eavesdropper. We show that there exists a crucial complementary relation between the received signal strengths at the eavesdropper and its target user. This relation tells us that the eavesdropper inevitably leaves a trace that enables us to devise a way of measuring the amount of information leakage to the eavesdropper even if PCA parameters are unknown. To this end, we derive an estimator for the channel gain from the BS to the eavesdropper and propose a rate-adaptation scheme for adjusting the length of secret key under the PCA. Extensive analysis and evaluations are carried out under various setups, which show that the proposed scheme adequately takes advantage of the LAA to establish the secret keys under the PCA.

arXiv:1507.00095•IEEE Transactions on Wireless Communications•Jul 15, 2015•27 citations

Robustness of secret key agreement protocol with massive MIMO under pilot contamination attack

Sanghun Im, Hyoungsuk Jeon, Jinho Choi +1 more

We consider a secret key agreement (SKA) protocol over time division duplex for a massive Multiple-Input-Multiple-Output (MIMO) system. As a security threat, we assume that a pilot contamination attack (PCA) is attempted by an eavesdropper for the purpose to gain information about the secret key. The eavesdropper controls its transmit power for the PCA in a way to maximize the amount of eavesdropping information, while hiding her presence from legitimate users. To fend off this PCA, we consider a SKA protocol working with a PCA detector. Specifically, our SKA protocol suspends the key generation process to prevent information leakage to the eavesdropper if the PCA detector declares the presence of the PCA more than a certain number of times. Taking into account the best choice of the PCA power for the eavesdropper, we analyze an achievable length of generated secret key through our SKA protocol. Simulation results show that our SKA protocol effectively suppresses the eavesdropper's PCA power by adjusting a threshold determining the suspension of the PCA, and a positive length of secret key is achievable through our SKA protocol.

International Conference on Information and Communication Technology Convergence (ICTC)•Oct 1, 2013•9 citations

Data-Aided Secure Massive MIMO Transmission Under the Pilot Contamination Attack

Yongpeng Wu, Chao-Kai Wen, Wen Chen +3 more

In this paper, we study the design of secure communication for time-division duplex multi-cell multi-user massive multiple-input-multiple-output (MIMO) systems with active eavesdropping. We assume that the eavesdropper actively attacks the uplink pilot transmission and the uplink data transmission before eavesdropping the downlink data transmission of the users. We exploit both the received pilot's and the received data signals for uplink channel estimation. We show analytically that when both the number of transmit antennas and the length of the data vector tend to infinity, the signals of the desired user and the eavesdropper lie in different eigenspaces of the received signal matrix at the base station, provided their signal powers are different. This finding reveals that decreasing (instead of increasing) the desired user's signal power might be an effective approach to combat a strong active attack from an eavesdropper. Inspired by this observation, we propose a data-aided secure downlink transmission scheme and derive an asymptotic achievable secrecy sum-rate expression for the proposed design. For the special case of a single-cell single-user system with independent and identically distributed fading, the obtained expression reveals that the secrecy rate scales logarithmically with the number of transmit antennas. This is the same scaling law as for the achievable rate of a single-user massive MIMO system in the absence of eavesdroppers. The numerical results indicate that the proposed scheme achieves significant secrecy rate gains compared with alternative approaches based on matched filter precoding with artificial noise generation and null space transmission.

arXiv:1902.08532•IEEE Transactions on Communications•Mar 27, 2019•31 citations

Secure Massive MIMO transmission in the presence of an active eavesdropper

Yongpeng Wu, Robert Schober, Derrick Wing Kwan Ng +2 more

In this paper, we investigate secure and reliable transmission strategies for multi-cell multi-user massive multipleinput multiple-output (MIMO) systems in the presence of an active eavesdropper. We consider a time-division duplex system where uplink training is required and an active eavesdropper can attack the training phase to cause pilot contamination at the transmitter. This forces the precoder used in the subsequent downlink transmission phase to implicitly beamform towards the eavesdropper, thus increasing its received signal power. We derive an asymptotic achievable secrecy rate for matched filter precoding and artificial noise (AN) generation at the transmitter when the number of transmit antennas goes to infinity. For the achievability scheme at hand, we obtain the optimal power allocation policy for the transmit signal and the AN in closed form. For the case of correlated fading channels, we show that the impact of the active eavesdropper can be completely removed if the transmit correlation matrices of the users and the eavesdropper are orthogonal. Inspired by this result, we propose a precoder null space design exploiting the low rank property of the transmit correlation matrices of massive MIMO channels, which can significantly degrade the eavesdropping capabilities of the active eavesdropper.

arXiv:1505.01231•International Conference on Communications•Jun 1, 2015•30 citations

Secure Communication in Relay-Assisted Massive MIMO Downlink With Active Pilot Attacks

Dhanushka Priyankara Kudathanthirige, Santosh Timilsina, Gayan Amarasuriya Aruma Baduge

In this paper, the achievable secrecy rate of a relay-assisted massive multiple-input multiple-output (MIMO) downlink is investigated in the presence of a multi-antenna active/passive eavesdropper. The excess degrees-of-freedom offered by a massive MIMO base-station (BS) are exploited for sending artificial noise (AN) via random and null-space precoders. An active eavesdropper contaminates the uplink channel estimates by sending pilot sequences identical to those of the legitimate users/relay. This active pilot contamination makes the massive MIMO BS implicitly beamform the confidential signals toward the active eavesdropper during two-hop downlink transmissions. The achievable secrecy rates are derived by taking the detrimental effects of actively contaminated channel state information with estimation errors and spatially correlated fading at the multiple-antenna terminals into account. The secrecy rate loss incurred by active pilot attacks over passive eavesdropping is investigated, and the secrecy rate gap between random and null-space-based AN is compared. A novel transmit power control policy is designed to efficiently allocate transmit power at the BS/relay for payload data and AN sequences for maximizing the achievable secrecy rate. Our results reveal that active pilot contamination attacks significantly degrade the achievable secrecy rate in dual-hop transmissions, and the corresponding detrimental effects cannot be asymptotically mitigated in the infinite BS antenna regime.

IEEE Transactions on Information Forensics and Security•Feb 26, 2019•18 citations
This work presents a secret key agreement (SKA) protocol for a multiuser time-division duplex cellular system under an active eavesdropping called pilot contamination attack (PCA) when the base station (BS) is equipped with a large antenna array. In particular, we study how to incorporate twoway training, i.e. conducting training processes in both the uplink and down-link transmissions, into the SKA protocol for the purpose of strengthening the protocol against the PCA and/or improving secret key generation efficiency. It will be shown that the two-way training provides the SKA protocol with a considerable enhencement of estimation for eavesdropper's channel. Secrecy performances of the proposed SKA protocol is quantitatively analyzed in terms of secrecy outage probability and average secret key rate, which shows that the two-way training improves the security performances especially in fast fading environments.
We consider secret key agreement (SKA) over time division duplex for a multi-user wireless system, in which a base station (BS) equipped with a large antenna array remotely generates different secret keys for multiple users in the system. The BS can have the SKA over downlink broadcast channels with precoding based on uplink training from the multiple users. In this case, unfortunately, an eavesdropper can effectively perform a pilot contamination attack (PCA) by transmitting a targeted user's training sequence for the purpose to steer beam direction toward the eavesdropper. As the beam direction becomes under the eavesdroppers control, this PCA can result in information leakage from the BS to the targeted user. In order to fend off this PCA, we derive PCA detectors based on generalized likelihood ratio test and propose a countermeasure. For the performance analysis, we consider the outage probability and show that it decreases exponentially with the number of antennas at the BS, which cannot be achieved by the conventional SKA.
We present a secret key agreement (SKA) protocol for a multi-user time-division duplex system where a base-station (BS) with a large antenna array (LAA) shares secret keys with users in the presence of non-colluding eavesdroppers. In the system, when the BS transmits random sequences to legitimate users for sharing common randomness, the eavesdroppers can attempt the pilot contamination attack (PCA) in which each of eavesdroppers transmits its target user's training sequence in hopes of acquiring possible information leak by steering beam towards the eavesdropper. We show that there exists a crucial complementary relation between the received signal strengths at the eavesdropper and its target user. This relation tells us that the eavesdropper inevitably leaves a trace that enables us to devise a way of measuring the amount of information leakage to the eavesdropper even if PCA parameters are unknown. To this end, we derive an estimator for the channel gain from the BS to the eavesdropper and propose a rate-adaptation scheme for adjusting the length of secret key under the PCA. Extensive analysis and evaluations are carried out under various setups, which show that the proposed scheme adequately takes advantage of the LAA to establish the secret keys under the PCA.
We consider a secret key agreement (SKA) protocol over time division duplex for a massive Multiple-Input-Multiple-Output (MIMO) system. As a security threat, we assume that a pilot contamination attack (PCA) is attempted by an eavesdropper for the purpose to gain information about the secret key. The eavesdropper controls its transmit power for the PCA in a way to maximize the amount of eavesdropping information, while hiding her presence from legitimate users. To fend off this PCA, we consider a SKA protocol working with a PCA detector. Specifically, our SKA protocol suspends the key generation process to prevent information leakage to the eavesdropper if the PCA detector declares the presence of the PCA more than a certain number of times. Taking into account the best choice of the PCA power for the eavesdropper, we analyze an achievable length of generated secret key through our SKA protocol. Simulation results show that our SKA protocol effectively suppresses the eavesdropper's PCA power by adjusting a threshold determining the suspension of the PCA, and a positive length of secret key is achievable through our SKA protocol.
In this paper, we study the design of secure communication for time-division duplex multi-cell multi-user massive multiple-input-multiple-output (MIMO) systems with active eavesdropping. We assume that the eavesdropper actively attacks the uplink pilot transmission and the uplink data transmission before eavesdropping the downlink data transmission of the users. We exploit both the received pilot's and the received data signals for uplink channel estimation. We show analytically that when both the number of transmit antennas and the length of the data vector tend to infinity, the signals of the desired user and the eavesdropper lie in different eigenspaces of the received signal matrix at the base station, provided their signal powers are different. This finding reveals that decreasing (instead of increasing) the desired user's signal power might be an effective approach to combat a strong active attack from an eavesdropper. Inspired by this observation, we propose a data-aided secure downlink transmission scheme and derive an asymptotic achievable secrecy sum-rate expression for the proposed design. For the special case of a single-cell single-user system with independent and identically distributed fading, the obtained expression reveals that the secrecy rate scales logarithmically with the number of transmit antennas. This is the same scaling law as for the achievable rate of a single-user massive MIMO system in the absence of eavesdroppers. The numerical results indicate that the proposed scheme achieves significant secrecy rate gains compared with alternative approaches based on matched filter precoding with artificial noise generation and null space transmission.
In this paper, we investigate secure and reliable transmission strategies for multi-cell multi-user massive multipleinput multiple-output (MIMO) systems in the presence of an active eavesdropper. We consider a time-division duplex system where uplink training is required and an active eavesdropper can attack the training phase to cause pilot contamination at the transmitter. This forces the precoder used in the subsequent downlink transmission phase to implicitly beamform towards the eavesdropper, thus increasing its received signal power. We derive an asymptotic achievable secrecy rate for matched filter precoding and artificial noise (AN) generation at the transmitter when the number of transmit antennas goes to infinity. For the achievability scheme at hand, we obtain the optimal power allocation policy for the transmit signal and the AN in closed form. For the case of correlated fading channels, we show that the impact of the active eavesdropper can be completely removed if the transmit correlation matrices of the users and the eavesdropper are orthogonal. Inspired by this result, we propose a precoder null space design exploiting the low rank property of the transmit correlation matrices of massive MIMO channels, which can significantly degrade the eavesdropping capabilities of the active eavesdropper.
In this paper, the achievable secrecy rate of a relay-assisted massive multiple-input multiple-output (MIMO) downlink is investigated in the presence of a multi-antenna active/passive eavesdropper. The excess degrees-of-freedom offered by a massive MIMO base-station (BS) are exploited for sending artificial noise (AN) via random and null-space precoders. An active eavesdropper contaminates the uplink channel estimates by sending pilot sequences identical to those of the legitimate users/relay. This active pilot contamination makes the massive MIMO BS implicitly beamform the confidential signals toward the active eavesdropper during two-hop downlink transmissions. The achievable secrecy rates are derived by taking the detrimental effects of actively contaminated channel state information with estimation errors and spatially correlated fading at the multiple-antenna terminals into account. The secrecy rate loss incurred by active pilot attacks over passive eavesdropping is investigated, and the secrecy rate gap between random and null-space-based AN is compared. A novel transmit power control policy is designed to efficiently allocate transmit power at the BS/relay for payload data and AN sequences for maximizing the achievable secrecy rate. Our results reveal that active pilot contamination attacks significantly degrade the achievable secrecy rate in dual-hop transmissions, and the corresponding detrimental effects cannot be asymptotically mitigated in the infinite BS antenna regime.