{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T17:58:05Z","timestamp":1786039085895,"version":"3.56.0"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319667867","type":"print"},{"value":"9783319667874","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-66787-4_24","type":"book-chapter","created":{"date-parts":[[2017,8,24]],"date-time":"2017-08-24T13:06:02Z","timestamp":1503579962000},"page":"490-509","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["On the Security of Carrier Phase-Based Ranging"],"prefix":"10.1007","author":[{"given":"Hildur","family":"\u00d3lafsd\u00f3ttir","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aanjhan","family":"Ranganathan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Srdjan","family":"Capkun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2017,8,25]]},"reference":[{"key":"24_CR1","unstructured":"Rf ranging. http:\/\/www.rfranging.com\/ . Accessed 9 Apr 2016"},{"key":"24_CR2","unstructured":"Usrp n210. https:\/\/www.ettus.com\/ . Accessed 9 Apr 2016"},{"key":"24_CR3","unstructured":"ISO\/IEC 14443: Identification cards - Contactless integrated circuit cards - Proximity cards - Part 2: Radio frequency power and signal interface (2010)"},{"key":"24_CR4","doi-asserted-by":"publisher","first-page":"3276","DOI":"10.1109\/TIM.2013.2272840","volume":"62","author":"TE Abrudan","year":"2013","unstructured":"Abrudan, T.E., Haghparast, A., Koivunen, V.: Time synchronization and ranging in OFDM systems using time-reversal. IEEE Trans. Instrum. Meas. 62, 3276\u20133290 (2013)","journal-title":"IEEE Trans. Instrum. Meas."},{"key":"24_CR5","unstructured":"Alliance, Z.: Zigbee specification. ZigBee document 053474r13 (2006). http:\/\/www.zigbee.org"},{"key":"24_CR6","unstructured":"Atmel: Atmel avr2152: Rtb evaluation application software user\u2019s guide (2013)"},{"key":"24_CR7","unstructured":"Bahl, P., Padmanabhan, V.N.: RADAR: an in-building RF-based user location and tracking system (2000)"},{"key":"24_CR8","volume-title":"Wireless Positioning Technologies and Applications","author":"A Bensky","year":"2007","unstructured":"Bensky, A.: Wireless Positioning Technologies and Applications. Artech House, Norwood (2007)"},{"key":"24_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"344","DOI":"10.1007\/3-540-48285-7_30","volume-title":"Advances in Cryptology \u2014 EUROCRYPT 1993","author":"S Brands","year":"1994","unstructured":"Brands, S., Chaum, D.: Distance-bounding protocols. In: Helleseth, T. (ed.) EUROCRYPT 1993. LNCS, vol. 765, pp. 344\u2013359. Springer, Heidelberg (1994). doi: 10.1007\/3-540-48285-7_30"},{"key":"24_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1007\/11964254_9","volume-title":"Security and Privacy in Ad-Hoc and Sensor Networks","author":"J Clulow","year":"2006","unstructured":"Clulow, J., Hancke, G.P., Kuhn, M.G., Moore, T.: So near and yet so far: distance-bounding attacks in wireless networks. In: Butty\u00e1n, L., Gligor, V.D., Westhoff, D. (eds.) ESAS 2006. LNCS, vol. 4357, pp. 83\u201397. Springer, Heidelberg (2006). doi: 10.1007\/11964254_9"},{"key":"24_CR11","unstructured":"Datasheets, M.P.A.: Minicircuits products"},{"key":"24_CR12","doi-asserted-by":"crossref","unstructured":"Exel, R.: Carrier-based ranging in ieee 802.11 wireless local area networks. In: 2013 IEEE Wireless Communications and Networking Conference (WCNC). IEEE (2013)","DOI":"10.1109\/WCNC.2013.6554713"},{"key":"24_CR13","unstructured":"Farnsworth, B.D., Taylor, D.W.: High precision narrow-band RF ranging. In: Proceedings of the 2010 International Technical Meeting of The Institute of Navigation (2001)"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"Flury, M., Poturalski, M., Papadimitratos, P., Hubaux, J.P., Boudec, J.Y.L.: Effectiveness of distance-decreasing attacks against impulse radio ranging (2010)","DOI":"10.1145\/1741866.1741887"},{"key":"24_CR15","unstructured":"Francillon, A., Danev, B., Capkun, S.: Relay attacks on passive keyless entry and start systems in modern cars (2011)"},{"key":"24_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1007\/978-3-642-16822-2_4","volume-title":"Radio Frequency Identification: Security and Privacy Issues","author":"L Francis","year":"2010","unstructured":"Francis, L., Hancke, G., Mayes, K., Markantonakis, K.: Practical NFC peer-to-peer relay attack using mobile phones. In: Ors Yalcin, S.B. (ed.) RFIDSec 2010. LNCS, vol. 6370, pp. 35\u201349. Springer, Heidelberg (2010). doi: 10.1007\/978-3-642-16822-2_4"},{"key":"24_CR17","doi-asserted-by":"crossref","unstructured":"Gupta, S.K.S., Mukherjee, T., Venkatasubramanian, K., Taylor, T.B.: Proximity based access control in smart-emergency departments (2006)","DOI":"10.1109\/PERCOMW.2006.113"},{"key":"24_CR18","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1145\/1925861.1925870","volume":"41","author":"D Halperin","year":"2011","unstructured":"Halperin, D., Hu, W., Sheth, A., Wetherall, D.: Tool release: gathering 802.11 n traces with channel state information. ACM SIGCOMM Comput. Commun. Rev. 41, 53 (2011)","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"24_CR19","doi-asserted-by":"crossref","unstructured":"Hancke, G.P., Kuhn, M.G.: Attacks on time-of-flight distance bounding channels (2008)","DOI":"10.1145\/1352533.1352566"},{"key":"24_CR20","doi-asserted-by":"crossref","unstructured":"Hazas, M., Scott, J., Krumm, J.: Location-aware computing comes of age (2004)","DOI":"10.1109\/MC.2004.1266301"},{"key":"24_CR21","volume-title":"6LoWPAN: The Wireless Embedded Internet","author":"Z Shelby","year":"2011","unstructured":"Shelby, Z., Bormann, C.: 6LoWPAN: The Wireless Embedded Internet, vol. 43. Wiley, New York (2011)"},{"key":"24_CR22","unstructured":"The Institute of Electrical and Electronic Engineers: IEEE 802.15.4a-2007 Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications for Low-Rate Wireless Personal Area Networks (WPANs) (2007)"},{"key":"24_CR23","doi-asserted-by":"crossref","unstructured":"Liu, H., Darabi, H., Banerjee, P., Liu, J.: Survey of wireless indoor positioning techniques and systems (2007)","DOI":"10.1109\/TSMCC.2007.905750"},{"key":"24_CR24","doi-asserted-by":"crossref","unstructured":"Miesen, R., Kirsch, F., Groeschel, P., Vossiek, M.: Phase based multi carrier ranging for UHF RFID. In: 2012 IEEE International Conference on Wireless Information Technology and Systems (ICWITS) (2012)","DOI":"10.1109\/ICWITS.2012.6417821"},{"key":"24_CR25","doi-asserted-by":"crossref","unstructured":"Miesen, R., Parr, A., Schleu, J., Vossiek, M.: 360 degree carrier phase measurement for UHF RFID local positioning. In: 2013 IEEE International Conference on RFID-Technologies and Applications (RFID-TA). IEEE (2013)","DOI":"10.1109\/RFID-TA.2013.6694499"},{"key":"24_CR26","doi-asserted-by":"publisher","first-page":"377","DOI":"10.1109\/4.826820","volume":"35","author":"Y Moon","year":"2000","unstructured":"Moon, Y., Choi, J., Lee, K., Jeong, D.K., Kim, M.K.: An all-analog multiphase delay-locked loop using a replica delay line for wide-range operation and low-jitter performance. IEEE J. Solid-State Circuits 35, 377\u2013384 (2000)","journal-title":"IEEE J. Solid-State Circuits"},{"key":"24_CR27","doi-asserted-by":"crossref","unstructured":"Poturalski, M., Flury, M., Papadimitratos, P., Hubaux, J.P., Boudec, J.Y.L.: The cicada attack: degradation and denial of service in IR ranging (2010)","DOI":"10.1109\/ICUWB.2010.5616900"},{"key":"24_CR28","doi-asserted-by":"crossref","unstructured":"Poturalski, M., Flury, M., Papadimitratos, P., Hubaux, J.P., Boudec, J.Y.L.: Distance Bounding with IEEE 802.15.4a: Attacks and Countermeasures (2011)","DOI":"10.1109\/TWC.2011.020111.101219"},{"key":"24_CR29","doi-asserted-by":"crossref","unstructured":"Ranganathan, A., Danev, B., Capkun, S.: Proximity verification for contactless access control and authentication systems. In: Proceedings of the 31st Annual Computer Security Applications Conference. ACM (2015)","DOI":"10.1145\/2818000.2818004"},{"key":"24_CR30","doi-asserted-by":"crossref","unstructured":"Ranganathan, A., Danev, B., Francillon, A., Capkun, S.: Physical-layer attacks on chirp-based ranging systems. In: Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, WISEC 2012 (2012)","DOI":"10.1145\/2185448.2185453"},{"key":"24_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"415","DOI":"10.1007\/978-3-642-33167-1_24","volume-title":"Computer Security \u2013 ESORICS 2012","author":"A Ranganathan","year":"2012","unstructured":"Ranganathan, A., Tippenhauer, N.O., \u0160kori\u0107, B., Singel\u00e9e, D., \u010capkun, S.: Design and implementation of a terrorist fraud resilient distance bounding system. In: Foresti, S., Yung, M., Martinelli, F. (eds.) ESORICS 2012. LNCS, vol. 7459, pp. 415\u2013432. Springer, Heidelberg (2012). doi: 10.1007\/978-3-642-33167-1_24"},{"key":"24_CR32","doi-asserted-by":"publisher","first-page":"665","DOI":"10.1017\/S0373463315000028","volume":"68","author":"J Rapinski","year":"2015","unstructured":"Rapinski, J., Smieja, M.: Zigbee ranging using phase shift measurements. J. Navig. 68, 665\u2013677 (2015)","journal-title":"J. Navig."},{"key":"24_CR33","unstructured":"Rasmussen, K.B., Capkun, S.: Realization of RF distance bounding. In: USENIX Security Symposium (2010)"},{"key":"24_CR34","doi-asserted-by":"crossref","unstructured":"Rasmussen, K.B., Castelluccia, C., Heydt-Benjamin, T.S., Capkun, S.: Proximity-based access control for implantable medical devices (2009)","DOI":"10.1145\/1653662.1653712"},{"key":"24_CR35","unstructured":"Roland, M.: Applying recent secure element relay attack scenarios to the real world: Google wallet relay attack. Computing Research Repository (2012)"},{"key":"24_CR36","doi-asserted-by":"crossref","unstructured":"Sahinoglu, Z., Gezici, S.: Ranging in the IEEE 802.15.4a Standard (2006)","DOI":"10.1109\/WAMICON.2006.351897"},{"key":"24_CR37","doi-asserted-by":"crossref","unstructured":"Salido-Monz\u00fa, D., Martin-Gorostiza, E., Lazaro-Galilea, J., Domingo-Perez, F., Wieser, A.: Multipath mitigation for a phase-based infrared ranging system applied to indoor positioning. In: 2013 International Conference on Indoor Positioning and Indoor Navigation (IPIN). IEEE (2013)","DOI":"10.1109\/IPIN.2013.6817870"},{"key":"24_CR38","volume-title":"Location-Based Services","author":"J Schiller","year":"2004","unstructured":"Schiller, J., Voisard, A.: Location-Based Services. Elsevier, San Francisco (2004)"},{"key":"24_CR39","doi-asserted-by":"crossref","unstructured":"Sedighpour, S., Capkun, S., Ganeriwal, S., Srivastava, M.B.: Distance enlargement and reduction attacks on ultrasound ranging (2005)","DOI":"10.1145\/1098918.1098977"},{"key":"24_CR40","doi-asserted-by":"crossref","unstructured":"Springer, A., Gugler, W., Huemer, M., Koller, R., Weigel, R.: A wireless spread-spectrum communication system using saw chirped delay lines (2001)","DOI":"10.1109\/22.915460"},{"key":"24_CR41","unstructured":"Vasisht, D., Kumar, S., Katabi, D.: Decimeter-level localization with a single WiFi access point. In: 13th USENIX Symposium on Networked Systems Design and Implementation (NSDI 16) (2016)"},{"key":"24_CR42","doi-asserted-by":"publisher","first-page":"617","DOI":"10.1147\/rd.485.0617","volume":"48","author":"Z Xiang","year":"2004","unstructured":"Xiang, Z., Song, S., Chen, J., Wang, H., Huang, J., Gao, X.: A wireless LAN-based indoor positioning technology. IBM J. Res. Dev. 48, 617\u2013626 (2004)","journal-title":"IBM J. Res. Dev."},{"key":"24_CR43","doi-asserted-by":"crossref","unstructured":"Xiong, J., Sundaresan, K., Jamieson, K.: Tonetrack: leveraging frequency-agile radios for time-based indoor wireless localization. In: Proceedings of the 21st Annual International Conference on Mobile Computing and Networking. ACM (2015)","DOI":"10.1145\/2789168.2790125"},{"key":"24_CR44","unstructured":"Technologies, Z.: Sapphire Dart Ultra-Wideband (UWB) Real Time Locating System (2010)"},{"key":"24_CR45","unstructured":"Zhang, Y., Qi, W., Zhang, S.: The unambiguous distance in a phase-based ranging system with hopping frequencies. arXiv preprint arXiv:1403.1923 (2014)"}],"container-title":["Lecture Notes in Computer Science","Cryptographic Hardware and Embedded Systems \u2013 CHES 2017"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-66787-4_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,25]],"date-time":"2025-06-25T01:38:34Z","timestamp":1750815514000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-66787-4_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319667867","9783319667874"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-66787-4_24","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"25 August 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CHES","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Cryptographic Hardware and Embedded Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Taipei","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Taiwan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 September 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ches2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ches.iacr.org\/2017\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}