Securing the Sensing Functionality in ISAC Networks: An Artificial Noise Design

Abstract

Integrated sensing and communications (ISAC) systems employ dual-functional signals to simultaneously accomplish radar sensing and wireless communication tasks. However, ISAC systems open up new sensing security vulnerabilities to malicious illegitimate eavesdroppers (Eves) that can also exploit the transmitted waveform to extract sensing information from the environment. In this paper, we investigate the beamforming design to enhance the sensing security of an ISAC system, where the communication user (CU) serves as a sensing Eve. Our objective is to maximize the mutual information (MI) for the legitimate radar sensing receiver while considering the constraint of the MI for the Eve and the quality of service to the CUs. Then, we consider the artificial noise (AN)-aided beamforming to further enhance the sensing security. Simulation results demonstrate that our proposed methods achieve MI improvement of the legitimate receiver while limiting the sensing MI of the Eve, compared with the baseline scheme, and that the utilization of AN further contributes to sensing security.

I Introduction

Integrated sensing and communications (ISAC) is identified as a key 6G technology that will support various futuristic applications through the co-design of sensing and communication functionalities. In particular, supported by the implementation of the dual-functional waveform and the base stations (BSs), ISAC provides a step change from the spectral coexistence of radar and communication systems to the shared utilization of costly hardware platforms. Inspired by these favorable characteristics, various designs have been proposed for the dual-functional waveforms to promote sensing and communication performance. For example, recent works in [1] minimized the beampattern matching error for radar sensing, and [2] considered the Cramér-Rao bound (CRB) minimization subject to the minimum signal-to-interference-plus-noise ratio (SINR) constraints for each communication user (CU). However, the aforementioned works have overlooked the consideration of security issues, which avail unique vulnerabilities in ISAC systems.

Due to the inherent broadcast nature of wireless signals, it is inevitable that wireless communication/sensing systems are susceptible to potential security threats. Compared with the communication-only systems, ISAC systems encounter more intricate security issues which can be generally categorized into the information security for communication and the sensing security for radar. The former arises from the fact that the probing ISAC waveform is modulated with information, which could potentially be leaked to the sensed targets that can act as eavesdroppers (Eves). To deal with this, physical layer security schemes have been proposed, such as [3] that maximized the secrecy rate by jointly optimizing the beamforming vector, the duration of snapshots, and the covariance matrix of the artificial noise (AN). Besides, the work in [4] optimizes the beamforming and AN design to minimize the signal-to-noise ratio (SNR) at the Eve. In contrast, the sensing security for radar has not been well investigated. In particular, the transmitted waveform could be exploited by the communication user serving as malicious passive sensing Eve s to extract sensing information about targets or their environment, which poses significant challenges and the need to secure the sensing functionality of ISAC networks.

Against this background, our work proposes to address the sensing security issue for ISAC systems, which to the best of our knowledge, has not been investigated in the literature. In particular, we consider a bi-static ISAC scenario, where the users that are granted access only to communication services, can exploit the ISAC signals for illegitimate sensing and therefore take the role of sensing Eves. In this scenario, the legitimate receiver and the Eve conduct sensing with the dual-functional ISAC waveforms. We formulate the problem to maximize the radar mutual information (MI) of the legitimate receiver, subject to MI of the Eve, the minimum SINR constraints for each CU and the maximum transmit power budget. Since the formulated problem is nonconvex, we propose a successive convex approximation (SCA) method combined with semidefinite relaxation (SDR) to deal with the non-convexity. Furthermore, we propose an AN-aided method where we firstly give the derivation of sensing MI with AN and then jointly optimize the beamforming and the covariance of AN. Simulation results demonstrate significant improvement in the sensing MI of our proposed methods compared with the baseline and also reveal that through adding AN to the transmit signals of the BS, the secure sensing performance can be effectively improved.

II System Model

Figure 1: System model.

We consider a bistatic multiple-input multiple-output (MIMO) ISAC system, which consists of a central BS transmitting dual-functional signals to a legitimate radar receiver and $K$ single-antenna CUs. Simultaneously, a CU serves as an unauthorized sensing Eve who perfectly knows/intercepts the transmitted signals and also wishes to sense the targets/environment. We assume that the transmitter is equipped with a uniform linear array (ULA) of $N_{t}$ antennas and that the legitimate receiver and the Eve are equipped with $N_{r}$ and $N_{e}$ antennas, respectively.

II-A Communication Signal Model and Metrics

Let ${\bf h}_{k}\in\mathbb{C}^{N_{t}\times 1}$ represent the communication channel vector for the $k$-th use. We assume that the channel follows a slow-fading block Rician fading channel, given as

$$\mathbf{h}_{k}=\sqrt{\frac{K_{k}}{K_{k}+1}}\mathbf{h}_{LoS,k}+\sqrt{\frac{1}{K_{k}+1}}\mathbf{h}_{NLoS,k},$$ (1)

where $K_{k}$ denotes the Rician factor of the channel between the $k$-th CU and the BS. $\mathbf{h}_{LoS,k}$ denotes the deterministic LoS channel component with $\mathbf{h}_{LoS,k}=\left[1,\cdots,e^{-j\pi(N_{t}-1)cos\theta_{k}}\right]$πぱい ( italic_N start_POSTSUBSCRIPT italic_t end_POSTSUBSCRIPT - 1 ) italic_c italic_o italic_s italic_θしーた start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT end_POSTSUPERSCRIPT ], where $\theta_{k}\in[0,\pi]$θしーた start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT ∈ [ 0 , italic_πぱい ] is the angle-of-arrival (AoA) of the line-of-sight (LoS) link from the $k$-th CU to the BS and we assume half-wavelength antenna spacing. $\mathbf{h}_{NLoS,k}$ represents the random scattered components whose elements follows $\mathcal{CN}(0,1)$.

Let us denote the beamforming matrix as $\mathbf{W}=[\mathbf{w}_{1},\mathbf{w}_{2},\cdots,\mathbf{w}_{k}]\in\mathcal{C}^{N_{t}\times K}$, where ${\bf w}_{k}\in\mathbb{C}^{N_{t}\times 1}$ stands for the beamforming vector of the $k$-th user. Then, the transmitted signal at the $l$-th time slot can be expressed as

$$\mathbf{x}[l]=\mathbf{Ws}[l],$$ (2)

where $\mathbf{s}[l]\in\mathcal{C}^{K\times 1}$ includes $K$ parallel communication symbol streams to be communicated to $K$ users. Without loss of generality, we assume the communication symbols have unit power, i.e., $\mathbb{E}[\mathbf{s}[l]\mathbf{s}[l]^{H}]=\mathbf{I}$, and the communication channel matrix is perfectly estimated and known at the BS side. Then, we have the SINR at the $k$-th CU as

$$\text{SINR}_{k}=\frac{\left|{\bf h}_{k}^{H}{\bf w}_{k}\right|^{2}}{\sigma_{c}^{2}+\sum_{j=1,j\neq k}^{K}\left|{\bf h}_{k}^{H}{\bf w}_{j}\right|^{2}},$$σしぐま start_POSTSUBSCRIPT italic_c end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT + ∑ start_POSTSUBSCRIPT italic_j = 1 , italic_j ≠ italic_k end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_K end_POSTSUPERSCRIPT | bold_h start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT bold_w start_POSTSUBSCRIPT italic_j end_POSTSUBSCRIPT | start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT end_ARG , (3)

where $\sigma_{c}^{2}$σしぐま start_POSTSUBSCRIPT italic_c end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT is the variance of additive white Gaussian noise (AWGN).

II-B Radar Signal Model

We consider a bistatic radar sensing scenario where the transmitted signals are shared between the transmitter and receiver through a control center. Denoting $\mathbf{X}=[\mathbf{x}[1],\mathbf{x}[2],\cdots,\mathbf{x}[L]]\in\mathcal{C}^{N_{t}\times L}$ as the transmitted waveform during $L$ time slots, the received signal matrix at the legitimate receiver and the Eve can be expressed, respectively, as

$$\mathbf{Y}_{r}=\mathbf{H}_{r}(\bm{\theta}_{r})\mathbf{X}+\mathbf{Z}_{r},\mathbf{Y}_{e}=\mathbf{H}_{e}(\bm{\theta}_{e})\mathbf{X}+\mathbf{Z}_{e},$$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ) bold_X + bold_Z start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT , bold_Y start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT = bold_H start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ( bold_italic_θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ) bold_X + bold_Z start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT , (4)

where $\mathbf{Z}_{r}$ and $\mathbf{Z}_{e}$ are the noise matrices at the legitimate receiver and the Eve, respectively and each columns of $\mathbf{Z}_{r}$ and $\mathbf{Z}_{e}$ follow $\mathcal{CN}(\mathbf{0},\sigma_{r}^{2}\mathbf{I})$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) and $\mathcal{CN}(\mathbf{0},\sigma_{e}^{2}\mathbf{I})$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ), respectively. $\mathbf{H}_{r}$ and $\mathbf{H}_{e}$ are the target response matrices from the transmitter to the legitimate receiver and the Eve, respectively, which are determined by the target parameters of interests $\bm{\theta}_{r}$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT and $\bm{\theta}_{e}$θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT. Note that $\bm{\theta}_{r}\neq\bm{\theta}_{e}$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ≠ bold_italic_θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT since the legitimate receiver and the Eve may have different sensing interests to estimate different angles and ranges, etc. Aside of $\mathbf{H}_{r}$, we note that $\mathbf{H}_{e}$ can also be known at the BS by exploiting the knowledge of the Eve’s location which is typical information exchanged with the BS, since the Eve is also a legitimate CU.

To measure the sensing performance at the receivers, we adopt the mutual information between the received radar signal and target response matrix as the performance metric for radar sensing, which has been extensively discussed in the literature [5]. It’s also implied in [6] that the MI characterizes the capability of radar to estimate the parameters describing the target. Following [7], the sensing MI of the legitimate receiver can be given as

$$I_{r}(\mathbf{Y}_{r};\bm{\theta}_{r}|\mathbf{X})=I_{r}(\mathbf{Y}_{r};\mathbf{H}_{r}|\mathbf{X}).$$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT | bold_X ) = italic_I start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ( bold_Y start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ; bold_H start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT | bold_X ) . (5)

Vectorizing $\mathbf{Y}$, we have

$$\mathrm{vec}(\mathbf{Y}_{r})=\tilde{\mathbf{X}}\mathbf{h}_{r}+\mathbf{z}_{r},$$ (6)

where $\tilde{\mathbf{X}}=\mathbf{X}^{T}\otimes\mathbf{I}_{N_{r}}$, $\mathbf{h}_{r}=\mathrm{vec}(\mathbf{H}_{r})$, and $\mathbf{z}_{r}=\mathrm{vec}(\mathbf{Z}_{r})$[8, Eq. 1.11.20]. Following the assumptions are also used in [5], we assume the target response vector $\mathbf{h}_{r}$ is zero-mean circular-symmetric Gaussian distributed with covariance $\mathbf{R}_{h}$. As the transmitted waveform is perfectly known, the MI between $\mathbf{Y}_{r}$ and $\mathbf{H}_{r}$ at the legitimate receiver can be expressed as

$$I_{r}(\mathbf{Y}_{r};\mathbf{H}_{r}|\mathbf{X}) =h(\mathbf{Y}_{r}|\mathbf{X})-h(\mathbf{Y}_{r}|\mathbf{H}_{r},\mathbf{X})$$ (7a)

$$=\log\det(\mathbf{I}+\sigma_{r}^{-2}\tilde{\mathbf{X}}\mathbf{R}_{h_{r}}\tilde{\mathbf{X}}^{H})$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT over~ start_ARG bold_X end_ARG bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT over~ start_ARG bold_X end_ARG start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) (7b)

$$=\log\det(\mathbf{I}+\sigma_{r}^{-2}\mathbf{R}_{h_{r}}(\mathbf{X}^{\ast}\mathbf{X}^{T}\otimes\mathbf{I}_{N_{r}})),$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT ( bold_X start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_X start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ⊗ bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT ) ) , (7c)

where we used the property of matrix determinant that $\mathrm{det}(\mathbf{I}+\mathbf{AB})=\mathrm{det}(\mathbf{I}+\mathbf{BA})$. Let $\mathbf{R}_{h_{r}}=\mathbf{U}_{r}\mathbf{\Lambda}_{r}\mathbf{U}_{r}^{H}$Λらむだ start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT bold_U start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT be the eigenvalue decomposition of $\mathbf{R}_{h_{r}}$, and $\mathbf{K}$ be a real commutation matrix satisfying $\mathbf{K}\mathbf{K}^{T}=\mathbf{I}$. We then have

$$I_{r} =\log\det(\mathbf{I}+\sigma_{r}^{-2}\mathbf{\Lambda}_{r}\mathbf{U}_{r}^{H}\mathbf{K}(\mathbf{I}_{N_{r}}\otimes\mathbf{X}^{\ast}\mathbf{X}^{T})\mathbf{K}^{T}\mathbf{U}_{r})$$ σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT bold_U start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT bold_K ( bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT ⊗ bold_X start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_X start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ) bold_K start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT bold_U start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT )

$$=\log\det(\mathbf{I}+\sigma_{r}^{-2}L\mathbf{\Lambda}_{r}\sum_{i=1}^{N_{r}}\mathbf{P}_{i}\mathbf{R}_{\mathbf{X}}^{\ast}\mathbf{P}_{i}^{H}),$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) , (8)

where $\mathbf{P}=\mathbf{U}_{r}^{H}\mathbf{K}=[\mathbf{P}_{1},\mathbf{P}_{2},\cdots,\mathbf{P}_{N_{r}}]$ and $\mathbf{R}_{\mathbf{X}}$ denotes the covariance matrix of the transmit signal, given as  [2]

$${\bf R}_{\mathbf{X}}=\frac{1}{L}{\bf X}{\bf X}^{H}\approx{\bf W}{\bf W}^{H}=\sum_{k=1}^{K}{\bf w}_{k}{\bf w}_{k}^{H},$$ (9)

where the approximation holds when $L$ is large enough. Similarly, the MI between $\mathbf{Y}_{r}$ and $\mathbf{H}_{r}$ at the Eve can be expressed as

$$I_{e}(\mathbf{Y}_{e};\mathbf{H}_{e}|\mathbf{X})\!\! =\log\det(\mathbf{I}+\sigma_{e}^{-2}\mathbf{R}_{h_{e}}(\mathbf{X}^{\ast}\mathbf{X}^{T}\otimes\mathbf{I}_{N_{e}}))$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUBSCRIPT ( bold_X start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_X start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ⊗ bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUBSCRIPT ) )

$$=\log\det(\mathbf{I}+\sigma_{e}^{-2}L\mathbf{\Lambda}_{e}\sum_{i=1}^{N_{e}}{\mathbf{Q}}_{i}\mathbf{R}_{\mathbf{X}}^{\ast}\mathbf{Q}_{i}^{H}),$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) , (10)

where $\mathbf{R}_{h_{e}}$ denotes the covariance of zero-mean circular-symmetric Gaussian distributed $\mathbf{h}_{e}=\mathrm{vec}(\mathbf{H}_{e})$, whose eigenvalue decomposition is given as $\mathbf{R}_{h_{e}}=\mathbf{U}_{e}\mathbf{\Lambda}_{e}\mathbf{U}_{e}^{H}$Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_U start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT. ${\mathbf{Q}}=\mathbf{U}_{e}^{H}\mathbf{K}=[{\mathbf{Q}}_{1},{\mathbf{Q}}_{2},\cdots,{\mathbf{Q}}_{N_{e}}]$.

III Beamforming Design for Sensing Security without AN

In this section, we first investigate the beamforming design without the aid of AN to guarantee secure sensing. Our objective is to maximize the MI of the legitimate receiver while keeping the MI of the Eve lower than the preset threshold, and satisfying multiple users’ required SINR and the power budget. The optimization problem can be formulated as follows

$$\max_{\left\{\mathbf{W}_{k}\right\}_{k=1}^{K}} I_{r}=\log\det\left(\mathbf{I}+\sigma_{r}^{-2}L\mathbf{\Lambda}_{r}\sum_{i=1}^{N_{r}}\mathbf{P}_{i}\mathbf{R}_{\mathbf{X}}^{\ast}\mathbf{P}_{i}^{H}\right)$$ σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) (11a)

$$\mathrm{s.t.}~{} I_{e}=\log\det\left(\mathbf{I}+\sigma_{e}^{-2}L\mathbf{\Lambda}_{e}\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}\mathbf{R}_{\mathbf{X}}^{\ast}\mathbf{Q}_{i}^{H}\right)\leq\epsilon,$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) ≤ italic_ϵ , (11b)

$$\text{tr}(\mathbf{R}_{\mathbf{X}})\leq P_{0},$$ (11c)

$$\frac{\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{k}\mathbf{h}_{k}^{H}\right)}{\sum\nolimits_{k=1,k\neq i}^{K}\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{i}\mathbf{h}_{k}^{H}\right)+\sigma_{c}^{2}}\geq\gamma_{k},\forall k,$$σしぐま start_POSTSUBSCRIPT italic_c end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT end_ARG ≥ italic_γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , ∀ italic_k , (11d)

$$\mathbf{R}_{\mathbf{X}}=\!\sum_{k=1}^{K}\mathbf{W}_{k},\mathbf{W}_{k}\!\succeq\!0,\text{rank}(\mathbf{W}_{k})=1,\forall k,$$ (11e)

where $\mathbf{W}_{k}=\mathbf{w}_{k}\mathbf{w}_{k}^{H}$. In general, it is challenging to solve problem (III) directly, due to the nonconvexity of the constraint (11b), (11d), and the rank-1 constraint in (11e). For addressing the nonconvex constraint (11b), we notice that $I_{e}$ is a concave function in $\mathbf{R}_{\mathbf{X}}$. Thus, we give the upper-bound of (11b) based on first-order Taylor expansion at a given transmit covariance matrix $\tilde{\mathbf{R}}_{\mathbf{X}}=\sum_{k=1}^{K}\tilde{\mathbf{W}}_{k}$ as

$$\tilde{I}_{e}\triangleq f(\tilde{\mathbf{R}}_{\mathbf{X}})+\mathrm{tr}\left(\mathrm{Re}\left(2\sigma_{e}^{-2}L\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{T}(\mathbf{M}^{-1})^{\ast}\mathbf{\Lambda}_{e}\mathbf{Q}_{i}^{\ast}\mathbf{R_{X}}\right)\right)$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ( bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT ) start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT ) )

$$-\mathrm{tr}\left(\mathrm{Re}\left(2\sigma_{e}^{-2}L\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{T}(\mathbf{M}^{-1})^{\ast}\mathbf{\Lambda}_{e}\mathbf{Q}_{i}^{\ast}\tilde{\mathbf{R}}_{\mathbf{X}}\right)\right).$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ( bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT ) start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT over~ start_ARG bold_R end_ARG start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT ) ) . (12)

where $\mathbf{M}=\mathbf{I}+\sigma_{e}^{-2}L\mathbf{\Lambda}_{e}\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}\tilde{\mathbf{R}}_{X}^{\ast}\mathbf{Q}_{i}^{H}$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT over~ start_ARG bold_R end_ARG start_POSTSUBSCRIPT italic_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT. The details are given in Appendix A. As such, it can be easily observed that the approximated function is convex on $\mathbf{R}_{\mathbf{X}}$. Thus, $\mathbf{R}_{\mathbf{X}}$ can be iteratively obtained by updating $\tilde{\mathbf{R}}_{\mathbf{X}}$.

Then, we focus on dealing with the rank-1 constraint in (11e), which can be equivalently transformed into an equivalent linear matrix inequality (LMI) as

$$\begin{bmatrix}\mathbf{W}_{k}&\mathbf{w}_{k}\\ \mathbf{w}_{k}^{H}&1\end{bmatrix}\succeq 0,$$ (13c)

$$\operatorname{tr}(\mathbf{W}_{k})-\mathbf{w}^{H}_{k}\mathbf{w}_{k}\leq 0,\forall k.$$ (13d)

Additionally, the non-convexity in (13d) can be handled by the first-order Taylor expansions at $\tilde{\mathbf{w}}_{k}$ as

$$\operatorname{tr}(\mathbf{W}_{k})-{\tilde{\mathbf{w}}_{k}}^{H}\tilde{\mathbf{w}}_{k}-2\operatorname{Re}\left(\tilde{\mathbf{w}}_{k}^{H}\mathbf{w}_{k}\right)\leq 0,$$ (14)

where $\operatorname{Re}(\cdot)$ denotes the real part of the argument and $\tilde{\mathbf{w}}_{k}$ can be updated at each iteration. Therefore, a convex approximation of problem (III) is reformulated as

$$\max_{\left\{\mathbf{w}_{k},\mathbf{W}_{k}\right\}_{k=1}^{K}}I_{r}$$ (15a)

$$s.t.~{} \tilde{I}_{e}\leq\epsilon,$$ (15b)

$$\text{tr}(\mathbf{R}_{\mathbf{X}})\leq P_{0},$$ (15c)

$${\bf W}_{k}\succeq 0,\mathbf{R}_{\mathbf{X}}=\!\sum_{k=1}^{K}\mathbf{W}_{k},$$ (15d)

$$\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{k}\mathbf{h}_{k}^{H}\right)-\gamma_{k}\!\!\!\!\!\sum_{k\neq i,k=1}^{K}\!\!\!\!\!\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{k}\mathbf{h}_{k}^{H}\right)\!\geq\!\gamma_{k}\sigma_{c}^{2},\forall k,$$γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_k ≠ italic_i , italic_k = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_K end_POSTSUPERSCRIPT tr ( bold_h start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT bold_W start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT bold_h start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) ≥ italic_γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT italic_σしぐま start_POSTSUBSCRIPT italic_c end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT , ∀ italic_k , (15e)

$$\eqref{eq:rank1a},\eqref{eq:rank1bconvex},$$

which is easily shown to be convex, and hence, $\mathbf{W}_{k}$ can be iteratively obtained by solving problem (III) based on updating $\tilde{\mathbf{w}}_{k}$ and $\tilde{\mathbf{W}}_{k}$ in an iterative manner. However, due to the stringent requirement introduced by (15b) and (13d), it is generally non-trivial to directly obtain a feasible solution as an initial point. Alternatively, we can adopt the penalty SCA [9] and introduce auxiliary variables $\bar{p},\rho_{k},\kappa$ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , italic_κかっぱ to transform problem (III) into

$$\max_{\left\{\mathbf{w}_{k},\mathbf{W}_{k},\rho_{k}\right\}_{k=1}^{K},\kappa}I_{r}-\bar{p}\kappa-\bar{p}\sum_{k=1}^{K}\rho_{k}$$ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT } start_POSTSUBSCRIPT italic_k = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_K end_POSTSUPERSCRIPT , italic_κかっぱ end_POSTSUBSCRIPT italic_I start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT - over¯ start_ARG italic_p end_ARG italic_κかっぱ - over¯ start_ARG italic_p end_ARG ∑ start_POSTSUBSCRIPT italic_k = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_K end_POSTSUPERSCRIPT italic_ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT (16a)

$$s.t.~{}~{} \tilde{I}_{e}\leq\epsilon+\kappa,$$ κかっぱ , (16b)

$$\operatorname{tr}(\mathbf{W}_{k})-{\tilde{\mathbf{w}}_{k}}^{H}\tilde{\mathbf{w}}_{k}-2\operatorname{Re}\left(\tilde{\mathbf{w}}_{k}^{H}\mathbf{w}_{k}\right)\leq\rho_{k},$$ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , (16c)

$$\eqref{eq:rank1a},\eqref{eq:p1-power},\eqref{eq:p1-2c},\eqref{eq:p1-2d},$$ (16d)

where $\bar{p}$ and $\rho_{k},\kappa$ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , italic_κかっぱ denote the weight coefficient and the penalty terms, respectively. We present the proposed iterative algorithm in Algorithm 1.

Algorithm 1 : Proposed Iterative Algorithm for Handling (III)

  Randomly set $\{\mathbf{w}_{k}^{(0)},\mathbf{W}_{k}^{(0)}\}$, $\bar{p}^{(0)}=10^{-3}$, $\lambda>1$λらむだ > 1, $i=0$;

  repeat

     $i\leftarrow i+1$ ;

     $\tilde{\mathbf{w}}_{k}^{(i)},\tilde{\mathbf{W}}_{k}^{(i)}\leftarrow\mathbf{w}_{k}^{(i-1)},\mathbf{W}_{k}^{(i-1)}$;

     Solve problem (III) to obtain the optimal $\mathbf{w}_{k}^{(i)},\mathbf{W}_{k}^{(i)}$;

     $\bar{p}^{(i)}\leftarrow\lambda\bar{p}^{(i-1)}$λらむだ over¯ start_ARG italic_p end_ARG start_POSTSUPERSCRIPT ( italic_i - 1 ) end_POSTSUPERSCRIPT

  until both $I_{r}^{(i)}-I_{r}^{(i-1)}$ and the penalty terms $\rho_{k},\kappa$ρろー start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , italic_κかっぱ are significantly small.

IV MI Gap Maximization with AN

In this section, we consider utilizing AN to assist secure sensing. We assume the instantaneous AN, $\mathbf{N}$, is shared with the legitimate receiver by the control center but remains unknown to the Eve. Firstly, we give the received signal at the legitimate receiver as

$$\mathbf{Y}_{r}=\mathbf{H}_{r}(\bm{\theta}_{r})\mathbf{X}+\mathbf{H}_{r}(\bm{\theta}_{r})\mathbf{N}+\mathbf{Z}_{r}.$$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ) bold_X + bold_H start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ( bold_italic_θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ) bold_N + bold_Z start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT . (17)

Then, the MI of the legitimate receiver can be expressed as

$$~{}I_{r}(\mathbf{Y}_{r};\bm{\theta}_{r}|\mathbf{X},\mathbf{N})=I_{r}(\mathbf{Y}_{r};\mathbf{H}_{r}|\mathbf{X},\mathbf{N})$$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT | bold_X , bold_N ) = italic_I start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ( bold_Y start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ; bold_H start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT | bold_X , bold_N )

$$=h(\mathbf{Y}_{r}|\mathbf{X},\mathbf{N})-h(\mathbf{Y}_{r}|\mathbf{H}_{r},\mathbf{X},\mathbf{N})$$

$$=\log\det(\mathbf{I}+\sigma_{r}^{-2}(\tilde{\mathbf{X}}+\tilde{\mathbf{N}})\mathbf{R}_{h_{r}}(\tilde{\mathbf{X}}+\tilde{\mathbf{N}})^{H})$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT ( over~ start_ARG bold_X end_ARG + over~ start_ARG bold_N end_ARG ) bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT ( over~ start_ARG bold_X end_ARG + over~ start_ARG bold_N end_ARG ) start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT )

$$=\log\det(\mathbf{I}+\sigma_{r}^{-2}(\tilde{\mathbf{X}}+\tilde{\mathbf{N}})^{H}(\tilde{\mathbf{X}}+\tilde{\mathbf{N}})\mathbf{R}_{h_{r}})$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT ( over~ start_ARG bold_X end_ARG + over~ start_ARG bold_N end_ARG ) start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ( over~ start_ARG bold_X end_ARG + over~ start_ARG bold_N end_ARG ) bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT )

$$\overset{(a)}{\approx}\log\det\left(\mathbf{I}+\sigma_{r}^{-2}L\mathbf{K}(\mathbf{I}_{N_{r}}\otimes\left({\mathbf{R}}^{*}_{\mathbf{X}}+{\mathbf{R}}^{*}_{\mathbf{N}}\right))\mathbf{K}^{T}\mathbf{R}_{h_{r}}\right)$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_K ( bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT ⊗ ( bold_R start_POSTSUPERSCRIPT * end_POSTSUPERSCRIPT start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT + bold_R start_POSTSUPERSCRIPT * end_POSTSUPERSCRIPT start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT ) ) bold_K start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT bold_R start_POSTSUBSCRIPT italic_h start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUBSCRIPT )

$$=\log\det\left(\mathbf{I}+\sigma_{r}^{-2}L\mathbf{\Lambda}_{r}\sum_{i=1}^{N_{r}}\mathbf{P}_{i}(\mathbf{R}_{\mathbf{X}}^{\ast}+\mathbf{R}_{\mathbf{N}}^{\ast})\mathbf{P}_{i}^{H}\right),$$σしぐま start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_L bold_Λらむだ start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT ( bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT + bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT ) bold_P start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) , (18)

where $\tilde{\mathbf{N}}=\mathbf{N}^{T}\otimes\mathbf{I}_{N_{r}}$ and ${\mathbf{R}}_{\mathbf{N}}=\frac{1}{L}\mathbf{N}\mathbf{N}^{H}$.

On the other hand, as the Eve has no prior knowledge of AN, the received signal and the MI at the Eve can be given as

$$\mathbf{Y}_{e}=\mathbf{H}_{e}(\bm{\theta}_{e})\mathbf{X}+\mathbf{H}_{e}(\bm{\theta}_{e})\mathbf{N}+\mathbf{Z}_{e},$$θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ) bold_X + bold_H start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ( bold_italic_θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ) bold_N + bold_Z start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT , (19)

and

$$~{}I_{e}(\mathbf{Y}_{e};\bm{\theta}_{e}|\mathbf{X})=I_{e}(\mathbf{Y}_{r};\mathbf{H}_{e}|\mathbf{X})=h(\mathbf{Y}_{e}|\mathbf{X})-h(\mathbf{Y}_{e}|\mathbf{H}_{e},\mathbf{X}),$$θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT | bold_X ) = italic_I start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ( bold_Y start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT ; bold_H start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT | bold_X ) = italic_h ( bold_Y start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT | bold_X ) - italic_h ( bold_Y start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT | bold_H start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT , bold_X ) , (20)

respectively. Then, we have

$$h(\mathbf{Y}_{e}|\mathbf{H}_{e},\mathbf{X})$$

$$= -\int_{\mathcal{X,Y,H}}f(\mathbf{X},\mathbf{Y},\mathbf{H})\log f(\mathbf{Y}|\mathbf{X},\mathbf{H})d\mathbf{X}d\mathbf{Y}d\mathbf{H}$$

$$= -\int_{\mathcal{X,H}}f(\mathbf{X},\mathbf{H})\int_{\mathcal{Y}}f(\mathbf{Y}|\mathbf{X},\mathbf{H})\log f(\mathbf{Y}|\mathbf{X},\mathbf{H})d\mathbf{Y}d\mathbf{X}d\mathbf{H}$$

$$= \!\!\int_{\mathcal{X,H}}\!\!\!\!\!\!\!\!f(\mathbf{X},\mathbf{H})\log\left(\left(2\pi e\right)^{n}\!\!\det\left(L(\mathbf{R}_{\mathbf{N}}^{\ast}\!\!\otimes\!\mathbf{I}_{N_{e}}\!\!)\mathbf{h}_{e}\mathbf{h}_{e}^{H}\!\!+\!\!\sigma_{e}^{2}\mathbf{I}\right)\right)\!\!d\mathbf{X}d\mathbf{H}$$ πぱい italic_e ) start_POSTSUPERSCRIPT italic_n end_POSTSUPERSCRIPT roman_det ( italic_L ( bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT ⊗ bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUBSCRIPT ) bold_h start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_h start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT + italic_σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) ) italic_d bold_X italic_d bold_H

$$\approx \frac{1}{J}\sum_{j=1}^{J}\log\det\left(2\pi eL(\mathbf{R}_{\mathbf{N}}^{\ast}\otimes\mathbf{I}_{N_{e}})\mathbf{h}_{e,j}\mathbf{h}_{e,j}^{H}+\sigma_{e}^{2}\mathbf{I}\right),$$ πぱい italic_e italic_L ( bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT ⊗ bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUBSCRIPT ) bold_h start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT bold_h start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT + italic_σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) ,

$$= \frac{1}{J}\sum_{j=1}^{J}\log\det\left(2\pi eL\mathbf{K}(\mathbf{I}_{N_{e}}\otimes\mathbf{R}_{\mathbf{N}}^{\ast})\mathbf{K}^{T}\mathbf{h}_{e,j}\mathbf{h}_{e,j}^{H}+\sigma_{e}^{2}\mathbf{I}\right)$$ πぱい italic_e italic_L bold_K ( bold_I start_POSTSUBSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUBSCRIPT ⊗ bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT ) bold_K start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT bold_h start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT bold_h start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT + italic_σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) (21)

where $\mathbf{h}_{e,j}(\bm{\theta})$θしーた ) is the $j$-th sample of the random variable $\mathbf{h}_{e}(\bm{\theta})$θしーた ). However, it’s still difficult to derive the exact expression of $h(\mathbf{Y}_{e}|\mathbf{X})$ due to the additive non-Gaussian noise of $\mathbf{H}_{e}(\bm{\theta}_{e})\mathbf{N}$θしーた start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ) bold_N. To deal with this, we can give the upper bound of $h(\mathbf{Y}_{e}|\mathbf{X})$ as

$$h(\mathbf{Y}_{e}|\mathbf{X})=\log\det\left(2\pi e\left(\sigma_{e}^{2}\mathbf{I}+\mathbf{R}_{HN}\right)\right),$$πぱい italic_e ( italic_σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I + bold_R start_POSTSUBSCRIPT italic_H italic_N end_POSTSUBSCRIPT ) ) , (22)

where $\mathbf{R}_{HN}$ denotes the covariance of $\mathrm{vec}(\mathbf{HN})$, given as

$$\mathbf{R}_{HN}\!\! =\mathbb{E}_{\mathbf{H},\mathbf{N}}\left[\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)\mathrm{vec}(\mathbf{N})\left(\mathrm{vec}(\mathbf{N})\right)^{H}\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)^{H}\right]$$

$$=\mathbb{E}_{\mathbf{H}}\!\!\left[\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)\mathbb{E}_{\mathbf{H}}\!\!\left[\mathrm{vec}(\mathbf{N})\left(\mathrm{vec}(\mathbf{N})\right)^{H}\right]\!\!\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)^{H}\right]$$

$$=\mathbb{E}_{\mathbf{H}}\left[\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)\left(\mathbf{I}_{L}\otimes\mathbf{R}_{\mathbf{N}}\right)\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e}\right)^{H}\right]$$

$$\approx\frac{1}{J}\sum_{j=1}^{J}\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)\left(\mathbf{I}_{L}\otimes\mathbf{R}_{\mathbf{N}}\right)\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)^{H}$$ (23)

Combining with (21), we give the approximate upper bound of $I_{e}$ as

$$\bar{I}_{e}= \log\!\det\!\!\left(\!\!\sigma_{e}^{2}\mathbf{I}\!\!+\!\!\frac{1}{J}\sum_{j=1}^{J}\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)\left(\mathbf{I}_{L}\otimes\mathbf{R}_{\mathbf{N}}\right)\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)^{H}\!\!\right)$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I + divide start_ARG 1 end_ARG start_ARG italic_J end_ARG ∑ start_POSTSUBSCRIPT italic_j = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_J end_POSTSUPERSCRIPT ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_H start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT ) ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT ) ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_H start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT ) start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT )

$$-\frac{1}{J}\sum_{j=1}^{J}\log\det\left(L\mathbf{K}(\mathbf{I}_{N_{e}}\otimes\mathbf{R}_{\mathbf{N}}^{\ast})\mathbf{K}^{T}\mathbf{h}_{e,j}\mathbf{h}_{e,j}^{H}+\sigma_{e}^{2}\mathbf{I}\right).$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) .

Then, the problem of sensing security with AN can be formulated as

$$\max_{\left\{\mathbf{W}_{k}\right\}_{k=1}^{K},\mathbf{R}_{\mathbf{N}}}I_{r}(\mathbf{Y}_{r};\bm{\theta}_{r}|\mathbf{X},\mathbf{N})$$θしーた start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT | bold_X , bold_N ) (24a)

$$\mathrm{s.t.}~{} \bar{I}_{e}\leq\epsilon,$$ (24b)

$$\frac{\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{k}\mathbf{h}_{k}^{H}\right)}{\sum\nolimits_{k=1,k\neq i}^{K}\text{tr}\left(\mathbf{h}_{k}\mathbf{W}_{i}\mathbf{h}_{k}^{H}\right)+\mathbf{h}_{k}\mathbf{R}_{\mathbf{N}}\mathbf{h}_{k}^{H}+\sigma_{c}^{2}}\geq\gamma_{k},\forall k,$$σしぐま start_POSTSUBSCRIPT italic_c end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT end_ARG ≥ italic_γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT , ∀ italic_k , (24c)

$$\text{tr}\left(\sum_{k=1}^{K}\mathbf{W}_{k}+\mathbf{R}_{\mathbf{N}}\right)\leq P_{0},$$ (24d)

$$\eqref{eq:p1e}.$$

As previously discussed, the formulated problem is not convex due to the nonconvexity of (24b). Hence, we introduce an auxiliary matrix $\mathbf{Q}$ and reformulate (24b) based on the Taylor expansion at $\tilde{\mathbf{Q}}$ as

$$\log\det(\tilde{\mathbf{Q}})+\mathrm{tr}(\tilde{\mathbf{Q}}(\mathbf{Q}-\tilde{\mathbf{Q}}))$$ (25a)

$$-\frac{1}{J}\sum_{j=1}^{J}\log\det\left(L\mathbf{K}(\mathbf{I}_{N_{e}}\otimes\mathbf{R}_{\mathbf{N}}^{\ast})\mathbf{K}^{T}\mathbf{h}_{e,j}\mathbf{h}_{e,j}^{H}+\sigma_{e}^{2}\mathbf{I}\right)\leq\epsilon,$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I ) ≤ italic_ϵ ,

$$\mathbf{Q}\!-\!\left(\!\sigma_{e}^{2}\mathbf{I}\!\!+\!\!\frac{1}{J}\sum_{j=1}^{J}\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)\left(\mathbf{I}_{L}\otimes\mathbf{R}_{\mathbf{N}}\right)\left(\mathbf{I}_{L}\otimes\mathbf{H}_{e,j}\right)^{H}\!\right)\!\succeq\!0.$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT 2 end_POSTSUPERSCRIPT bold_I + divide start_ARG 1 end_ARG start_ARG italic_J end_ARG ∑ start_POSTSUBSCRIPT italic_j = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_J end_POSTSUPERSCRIPT ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_H start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT ) ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_R start_POSTSUBSCRIPT bold_N end_POSTSUBSCRIPT ) ( bold_I start_POSTSUBSCRIPT italic_L end_POSTSUBSCRIPT ⊗ bold_H start_POSTSUBSCRIPT italic_e , italic_j end_POSTSUBSCRIPT ) start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) ⪰ 0 . (25b)

Therefore, a convex approximation of problem (IV) is reformulated as

$$\max_{\left\{\mathbf{w}_{k},\mathbf{W}_{k}\right\}_{k=1}^{K},\mathbf{R}_{\mathbf{N}}}I_{r}$$ (26a)

$$\mathrm{s.t.}~{} \eqref{eq:rank1a},\eqref{eq:rank1bconvex},\eqref{eq:p1-2c},\eqref{eq:p2sinr},\eqref{eq:p2d},\eqref{eq:ie1},\eqref{eq:ie2},$$ (26b)

which can be solved in a similar iterative manner as in Algorithm 1.

V Simulation Results

In this section, we provide numerical analysis to evaluate the performance of the proposed algorithms, including secure sensing de without AN and MI gap maximization with AN. We consider a dual-functional BS transceiver equipped with $N_{t}$ = 6 transmit antennas for MIMO radar sensing and multi-user communication, serving $K=3$ CUs where one of the CU serves as the sensing Eve. The legitimate radar receiver is equipped with $N_{r}=2$ receive antennas. Unless stated otherwise, the available power budget $P_{\text{max}}=30$ dBm and the frame length $L=30$. We adopt the widely-used multi-user broadcasting beamforming design [10, Sec. 7.6.1] as the baseline.

Fig. 2 firstly demonstrates the convergence behavior of the proposed method without the aid of AN, under different power budgets and numbers of users. It can be seen that all three cases converge after 3 iterations, which verifies the fast convergence rate and the efficiency of our proposed alternating algorithm. With increasing $P_{0}$, the MI increases, since more power budget can be utilized to sense the target and satisfy the SINR constraints of multiple users. Moreover, increasing the number of CUs leads to a slight reduction in the sensing performance.

Fig. 3 compares the MI performance with different transmitted power budgets, compared with the baseline scheme. It can be seen that the gap between $I_{r}$ and $I_{e}$ of the proposed algorithms is always larger than that of the baseline scheme, and over 2 times higher with the increase of transmit power budget. Moreover, it can be observed that the use of AN further improves the sensing MI of the legitimate receiver and enlarges the MI gap.

Figure 2: MI of the legitimate receiver versus the number of iterations. The limitation of Eve’s MI is $\epsilon=5$ nats and SINR threshold is $\gamma_{k}=20$γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT = 20 dB.

Figure 3: MI versus the transmit power budget, in both with and without AN-aided case, compared with the baseline. The limitation of the MI of the Eve is set as $\epsilon=5$ nats and the SINR threshold is $\gamma_{k}=28$dBでしべるitalic_γがんま start_POSTSUBSCRIPT italic_k end_POSTSUBSCRIPT = 28 italic_d italic_B.

VI Conclusion

This paper addressed the sensing security issue for ISAC systems by beamforming design. The MI of radar sensing between the legitimate receiver was maximized while taking into account the MI of the potential Eve, power budget, and SINR constraints. Additionally, we adopted AN to further guarantee secure sensing. Simulation results demonstrated the effectiveness of the proposed methods in achieving a superior MI compared to the baseline scheme, with the AN further contributing to sensing security.

Appendix A

Here, we provide the proof for the MI approximation for the Eve in (10) based on a Taylor series expansion. First, defining $f(\mathbf{R}_{\mathbf{X}})=\log\det(\mathbf{I}+\sigma_{e}^{-2}T\mathbf{\Lambda}_{e}\sum_{i=1}^{N_{r}}\mathbf{Q}_{i}\mathbf{R}_{\mathbf{X}}^{\ast}\mathbf{Q}_{i}^{H})$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_T bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_r end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT ) ,we have the Jacobian matrix of $f(\mathbf{R}_{\mathbf{X}})$ expressed as

$$\mathrm{D}_{\mathbf{R}_{\mathbf{X}}^{\ast}}f(\mathbf{R_{X}})=\sigma_{e}^{-2}T\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{H}\mathbf{M}^{-1}\mathbf{\Lambda}_{e}\mathbf{Q}_{i}.$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_T ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_H end_POSTSUPERSCRIPT bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT . (27)

Following [10, Sec. 1.1.11] and [8, Sec. 3.1], the gradient of $f(\mathbf{R_{X}})$ can be given as

$$\nabla_{\mathbf{R_{X}}}f(\mathbf{R_{X}}) =2\nabla_{\mathbf{R^{\ast}_{X}}}f(\mathbf{R_{X}})=2\sigma_{e}^{-2}T\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{T}\mathbf{\Lambda}_{e}(\mathbf{M}^{-1})^{T}\mathbf{Q}_{i}^{\ast},$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_T ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT ( bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT ) start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT , (28)

Then, an affine Taylor series approximation of $f(\mathbf{R_{X}})$ at $\mathbf{R_{X}}=\tilde{\mathbf{R}}_{\mathbf{X}}$ can be written as

$$f(\mathbf{R_{X}})\simeq f(\tilde{\mathbf{R}}_{\mathbf{X}})+\mathrm{tr}\left(\mathrm{Re}\left(\nabla f(\tilde{\mathbf{R}}_{\mathbf{X}})^{H}\left(\mathbf{R_{X}}-\tilde{\mathbf{R}}_{\mathbf{X}}\right)\right)\right)$$

$$= f(\tilde{\mathbf{R}}_{\mathbf{X}})+\mathrm{tr}\left(\mathrm{Re}\left(2\sigma_{e}^{-2}T\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{T}(\mathbf{M}^{-1})^{\ast}\mathbf{\Lambda}_{e}\mathbf{Q}_{i}^{\ast}\mathbf{R_{X}}\right)\right)$$ σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_T ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ( bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT ) start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_R start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT ) )

$$-\mathrm{tr}\left(\mathrm{Re}\left(2\sigma_{e}^{-2}T\sum_{i=1}^{N_{e}}\mathbf{Q}_{i}^{T}(\mathbf{M}^{-1})^{\ast}\mathbf{\Lambda}_{e}\mathbf{Q}_{i}^{\ast}\tilde{\mathbf{R}}_{\mathbf{X}}\right)\right)$$σしぐま start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT start_POSTSUPERSCRIPT - 2 end_POSTSUPERSCRIPT italic_T ∑ start_POSTSUBSCRIPT italic_i = 1 end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_N start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT end_POSTSUPERSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT italic_T end_POSTSUPERSCRIPT ( bold_M start_POSTSUPERSCRIPT - 1 end_POSTSUPERSCRIPT ) start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT bold_Λらむだ start_POSTSUBSCRIPT italic_e end_POSTSUBSCRIPT bold_Q start_POSTSUBSCRIPT italic_i end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ∗ end_POSTSUPERSCRIPT over~ start_ARG bold_R end_ARG start_POSTSUBSCRIPT bold_X end_POSTSUBSCRIPT ) ) (29)