From Pilot to Precoding Design: Blind Angular Spoofing For Location Privacy in MIMO Systems
Pith reviewed 2026-05-09 19:25 UTC · model grok-4.3
The pith
A blind analog precoder lets user equipment spoof its angular signature at the base station without channel-gain knowledge.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
The central claim is that a blind analog precoder can be designed to enforce consistency between the actual received signal and a desired spoofed angular subspace, thereby manipulating the perceived angle-of-arrival and angle-of-departure configuration observed by the base station. This is accomplished through an alternating optimization algorithm under amplitude constraints and without requiring knowledge of channel gains, yielding near-perfect angular spoofing performance in multipath scenarios that surpasses pilot-only blind spoofing.
What carries the argument
The blind analog precoder that enforces consistency with a desired spoofed angular subspace via alternating optimization under amplitude constraints.
If this is right
- Near-perfect angular spoofing becomes possible in realistic multipath environments using only precoding.
- The approach avoids the performance floor that limits pilot-only blind spoofing methods.
- Spoofing accuracy trades directly against achievable communication rate according to the selected virtual geometry.
- The design operates without channel-gain knowledge, relying solely on the enforced subspace consistency.
Where Pith is reading between the lines
- The same subspace-enforcement idea could be tested in multi-base-station settings to protect against joint localization.
- Combining the precoder with existing beamforming or power-control methods might further reduce the rate penalty.
- Hardware implementations would need to verify how well the alternating optimization converges under real amplifier nonlinearities.
Load-bearing premise
A chosen spoofed angular subspace can be made to appear consistently in the received signal by precoding alone, without any knowledge of the actual channel gains and while respecting amplitude limits in a multipath setting.
What would settle it
A measurement or simulation in which the post-precoding received signal fails to align with the target spoofed angles at the accuracy level claimed, or in which the pilot-only baseline no longer shows an error floor under the same multipath conditions.
Figures
read the original abstract
This paper studies location privacy in uplink MIMO systems, where a user equipment seeks to spoof the angular signature observed by a single base station performing localization. We propose a blind analog precoder design that manipulates the perceived angle-of-arrival and angle-of-departure configuration without requiring channel-gain knowledge. The method enforces consistency between the received signal and a desired spoofed angular subspace, and is solved using an alternating optimization algorithm under practical amplitude constraints. Simulations in a multipath scenario show that the proposed approach achieves near-perfect angular spoofing and clearly outperforms pilot-only blind spoofing, which exhibits an error floor. The results also show a trade-off between spoofing accuracy and communication rate, depending on the chosen virtual geometry.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes a blind analog precoding design for location privacy in uplink MIMO systems. A user equipment manipulates the angular signature (AoA/AoD) observed by a single base station without channel-gain knowledge by enforcing consistency between the received signal and a desired spoofed angular subspace. The design is obtained via an alternating optimization algorithm subject to per-antenna amplitude constraints. Simulations in a multipath scenario are reported to achieve near-perfect angular spoofing that outperforms a pilot-only blind baseline (which exhibits an error floor), at the cost of a rate-spoofing trade-off controlled by the choice of virtual geometry.
Significance. If the central claim holds, the work would provide a practical, channel-gain-free mechanism for angular spoofing that improves upon existing pilot-based privacy methods. The blind formulation and use of alternating optimization under realistic constraints are technically interesting contributions to MIMO signal processing for privacy applications. The reported simulation gains are plausible but require stronger validation to confirm generality beyond the tested geometries.
major comments (2)
- [Precoding Design and Optimization] The central claim that the alternating optimization can drive the effective uplink signal into an arbitrary desired angular subspace without channel-gain knowledge rests on the existence of a feasible precoder satisfying both the subspace consistency condition and the amplitude limits. No existence proof, convergence analysis, or condition on the multipath realization is supplied; the mapping from precoder to observed angles is many-to-one under constant-modulus constraints, so the reported near-perfect spoofing may be an artifact of the particular simulation geometry rather than a general property.
- [Simulation Results] Simulations section: the abstract and results claim near-perfect angular spoofing and clear superiority over pilot-only blind spoofing, yet no quantitative error metrics (e.g., mean angular error, distribution across channel realizations, or optimization convergence statistics) are provided. Without these, it is impossible to assess whether the performance advantage is robust or tied to post-hoc parameter choices and specific multipath configurations.
minor comments (2)
- [Abstract] The abstract introduces the term 'virtual geometry' without a brief definition or reference, which reduces readability for readers outside the immediate subfield.
- [System Model] Notation for the spoofed subspace and the consistency constraint should be introduced earlier and used consistently to avoid ambiguity when describing the optimization objective.
Simulated Author's Rebuttal
We thank the referee for the constructive comments and the recommendation for major revision. Below we provide point-by-point responses to the major comments, indicating where revisions will be made to strengthen the manuscript.
read point-by-point responses
-
Referee: [Precoding Design and Optimization] The central claim that the alternating optimization can drive the effective uplink signal into an arbitrary desired angular subspace without channel-gain knowledge rests on the existence of a feasible precoder satisfying both the subspace consistency condition and the amplitude limits. No existence proof, convergence analysis, or condition on the multipath realization is supplied; the mapping from precoder to observed angles is many-to-one under constant-modulus constraints, so the reported near-perfect spoofing may be an artifact of the particular simulation geometry rather than a general property.
Authors: We acknowledge that the manuscript lacks a formal existence proof or convergence analysis for the alternating optimization. The approach relies on iteratively solving for a precoder that satisfies the subspace consistency condition under per-antenna amplitude constraints, and empirical results in the considered multipath settings show consistent achievement of the spoofed angles. We agree this leaves open questions about generality. In revision we will add a dedicated subsection discussing feasibility conditions (e.g., when the number of paths and virtual geometry provide adequate degrees of freedom) and will report observed convergence statistics from the simulations. We will also clarify that the method is demonstrated for representative multipath scenarios rather than claimed for arbitrary geometries. revision: partial
-
Referee: [Simulation Results] Simulations section: the abstract and results claim near-perfect angular spoofing and clear superiority over pilot-only blind spoofing, yet no quantitative error metrics (e.g., mean angular error, distribution across channel realizations, or optimization convergence statistics) are provided. Without these, it is impossible to assess whether the performance advantage is robust or tied to post-hoc parameter choices and specific multipath configurations.
Authors: The referee correctly notes the absence of quantitative error metrics. The current results are conveyed through angular spectrum plots and rate-spoofing trade-off curves. We will revise the simulation section to include tables reporting mean angular error and standard deviation computed over multiple independent channel realizations, as well as histograms of the error distribution and iteration counts for algorithm convergence. These additions will allow direct assessment of robustness and will be referenced in the abstract and results discussion. revision: yes
- A formal existence proof and complete convergence analysis for the non-convex alternating optimization under constant-modulus constraints for arbitrary multipath realizations.
Circularity Check
No circularity: optimization enforces subspace consistency independently of inputs
full rationale
The paper formulates a blind analog precoder via alternating optimization to enforce consistency between the received uplink signal and a user-chosen spoofed angular subspace, subject only to per-antenna amplitude constraints. This construction is stated directly from the MIMO signal model and does not reduce any claimed result to a fitted parameter, self-citation, or tautological redefinition. Simulations are presented as empirical verification of the optimizer's behavior in multipath channels rather than as the source of the method itself. No load-bearing derivation step collapses to its own inputs by construction.
Axiom & Free-Parameter Ledger
Reference graph
Works this paper leans on
-
[1]
K. Witrisal et al., “High-accuracy localization for assisted living: 5G systems will turn multipath channels from foe to friend,” IEEE Signal Processing Magazine, vol. 33, no. 2, pp. 59–70, 2016
work page 2016
-
[2]
5G mmWave positioning for vehicular networks,
H. Wymeersch et al., “5G mmWave positioning for vehicular networks,” IEEE Wireless Communications, vol. 24, no. 6, pp. 80–86, 2018
work page 2018
-
[3]
L. Italiano et al., “A tutorial on 5G positioning,” IEEE Communications Surveys & Tutorials, vol. 27, no. 3, pp. 1488– 1535, 2025
work page 2025
-
[4]
Position and orientation estimation through millimeter-wave MIMO in 5G systems,
A. Shahmansoori et al., “Position and orientation estimation through millimeter-wave MIMO in 5G systems,” IEEE Transactions on Wireless Communications, vol. 17, no. 3, pp. 1822–1835, 2018
work page 2018
-
[5]
An indoor environment sensing and localization system via mmWave phased array,
Y. Sun et al., “An indoor environment sensing and localization system via mmWave phased array,” Journal of Communications and Information Networks, vol. 7, no. 4, pp. 383–393, 2022
work page 2022
-
[6]
3D wideband mmWave localization for 5G massive MIMO systems,
Z. Lin et al., “3D wideband mmWave localization for 5G massive MIMO systems,” in 2019 IEEE Global Communications Conference (GLOBECOM), 2019, pp. 1–6
work page 2019
-
[7]
Non-cooperative Wi-Fi localization & its privacy implications,
A. Abedi et al., “Non-cooperative Wi-Fi localization & its privacy implications,” in Proceedings of the 28th Annual International Conference On Mobile Computing And Networking, 2022, pp. 570–582
work page 2022
-
[8]
Location privacy protection through obfuscation-based techniques,
C. A. Ardagna et al., “Location privacy protection through obfuscation-based techniques,” in IFIP annual conference on data and applications security and privacy. Springer, 2007, pp. 47–60. 6
work page 2007
-
[9]
Location-privacy-preserving technique for 5G mmwave devices,
J. J. Checa et al., “Location-privacy-preserving technique for 5G mmwave devices,” IEEE Communications Letters, vol. 24, no. 12, pp. 2692–2695, 2020
work page 2020
-
[10]
Privacy preservation in delay-based localization systems: Artificial noise or artificial multipath?
Y. Zhang et al., “Privacy preservation in delay-based localization systems: Artificial noise or artificial multipath?” in GLOBECOM 2024-2024 IEEE Global Communications Conference. IEEE, 2024, pp. 2755–2760
work page 2024
-
[11]
Beamforming and artificial noise for cross-layer location privacy of e-health cellular devices,
S. Tomasin, “Beamforming and artificial noise for cross-layer location privacy of e-health cellular devices,” in 2022 IEEE International Conference on Communications Workshops (ICC Workshops). IEEE, 2022, pp. 568–573
work page 2022
-
[12]
Privacy preservation in MIMO-OFDM localization systems: A beamforming approach,
Y. Zhang et al., “Privacy preservation in MIMO-OFDM localization systems: A beamforming approach,” IEEE Wireless Communications Letters, vol. 14, no. 7, pp. 1979–1983, 2025
work page 1979
-
[13]
On beamforming for transmitter location privacy in MIMO systems,
U. A. Khan et al., “On beamforming for transmitter location privacy in MIMO systems,” arXiv preprint arXiv:2508.09882, 2025
-
[14]
Channel state information-free location-privacy enhancement: Fake path injection,
J. Li et al., “Channel state information-free location-privacy enhancement: Fake path injection,” IEEE Transactions on Signal Processing, vol. 72, pp. 3745 – 3760, 2024
work page 2024
-
[15]
Delay-angle information spoofing for channel state information-free location-privacy enhancement,
——, “Delay-angle information spoofing for channel state information-free location-privacy enhancement,” arXiv preprint arXiv:2504.14780, 2025
-
[16]
Holotrace: a location privacy preservation solution for mmWave MIMO-OFDM systems,
L. Italiano et al., “Holotrace: a location privacy preservation solution for mmWave MIMO-OFDM systems,” arXiv preprint arXiv:2509.23444, 2025
-
[17]
Beam training and tracking in mmwave communication: A survey,
W. Yi et al., “Beam training and tracking in mmwave communication: A survey,” China Communications, vol. 21, no. 6, pp. 1–22, 2024
work page 2024
-
[18]
Channel estimation and hybrid precoding for millimeter wave cellular systems,
A. Alkhateeb et al., “Channel estimation and hybrid precoding for millimeter wave cellular systems,” IEEE Journal of Selected Topics in Signal Processing, vol. 8, no. 5, pp. 831–846, 2014
work page 2014
-
[19]
Beamforming design for simplified analog antenna combining architectures,
F. Gholam et al., “Beamforming design for simplified analog antenna combining architectures,” IEEE Transactions on Vehicular Technology, vol. 60, no. 5, pp. 2373–2378, 2011
work page 2011
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.