Study on Estimation of Sensing Timing Based on Observation of EM Radiation from ToF Range Finder

Recently, various studies on instrumentation security which aim the spoofing sensing data or denial of service on sensors are reported. EM(electromagnetic) radiation from sensors must conform EMC standard, however even with the weakly radiated EM waves also have the change in a time domain caused by estimate internal operation. So there is a possibility of estimating internal operation timing from observed EM radiation. If the attacker can capture the internal operation timing such as the sensing timing of the sensor from the radiated EM waves, new security issues appear. For example, the spoofing attack on ToF (Time of Flight) rangefinder becomes easier because the EM waves may expand the attack range to an unreachable area of the sensing signal. In this paper, we investigate the possibility of estimating the sensing timing from the radiated EM waves for the spoofing attack on the ToF rangefinder.