Cornell University Researchers Redux

Last year, I reported how scientists at Cornell University were working on ways to improve P2P systems. In case you didn’t know, P2P (peer to peer) are infamous as a major route for software, music, and movie piracy.

Anyway, they’re at it again, although this time researchers at Cornell have cracked the codes for Europe’s GPS (global positioning system) so that anyone could access its data for free.

Members of GPS Laboratory have cracked the so-called pseudo random number (PRN) codes despite efforts to keep the codes secret. It means anyone with a sat-nav device, including handheld receivers and in-car systems which need PRNs to listen to satellites, can get the info they need for free. The codes and the methods used to extract them were published in the June issue of GPS World.

The navigational satellite, GIOVE-A (Galileo In-Orbit Validation Element-A), is a prototype for 30 satellites that by 2010 will compose Galileo, a $4 billion joint venture of the European Union, European Space Agency and private investors. Galileo is Europe’s answer to the United States’ GPS.

In late January, Mark Psiaki, associate professor of mechanical and aerospace engineering at Cornell and co-leader of Cornell’s GPS Laboratory, requested the codes from Martin Unwin at Surrey Space Technologies Ltd., one of three privileged groups in the world with the PRN codes. “In a very polite way, he said, ‘Sorry, goodbye,'” recalled Psiaki. Next Psiaki contacted Oliver Montenbruck, a friend and colleague in Germany, and discovered that he also wanted the codes. “Even Europeans were being frustrated,” said Psiaki. “Then it dawned on me: Maybe we can pull these things off the air, just with an antenna and lots of signal processing.”

Within one week Psiaki’s team developed a basic algorithm to extract the codes. Two weeks later they had their first signal from the satellite, but were thrown off track because the signal’s repeat rate was twice that expected. By mid-March they derived their first estimates of the code, and — with clever detective work and an important tip from Montenbruck — published final versions on their Web site (http://gps.ece.cornell.edu/galileo) on April 1. The next day, NovAtel Inc., a Canadian-based major manufacturer of GPS receivers, downloaded the codes from the Web site and within 20 minutes began tracking GIOVE-A for the first time.

Galileo eventually published PRN codes in mid-April, but they weren’t the codes currently used by the GIOVE-A satellite. Furthermore, the same publication labeled the open source codes as intellectual property, claiming a license is required for any commercial receiver. “That caught my eye right away,” said Psiaki. “Apparently they were trying to make money on the open source code.”

Afraid that cracking the code might have been copyright infringement, Psiaki’s group consulted with Cornell’s university counsel. “We were told that cracking the encryption of creative content, like music or a movie, is illegal, but the encryption used by a navigation signal is fair game,” said Psiaki. The upshot: The Europeans cannot copyright basic data about the physical world, even if the data are coming from a satellite that they built.

“Imagine someone builds a lighthouse,” argued Psiaki. “And I’ve gone by and see how often the light flashes and measured where the coordinates are. Can the owner charge me a licensing fee for looking at the light? No. How is looking at the Galileo satellite any different?”

I’m fairly sure that things won’t be quite so clear cut once the lawyers get involved. After all there’s a whole world of difference between looking at a lighthouse to make sure your ship doesn’t hit the rocks and doing a full spectral analysis of the light source to determine the customer reference number for the lighthouse owner’s electricity bill!