Muzi Yuan, Honglei Lin, Chunjiang Ma, Pengcheng Ma, Meiting Yu, Xiaomei Tang
Low Earth orbit (LEO) satellite downlinks broadcast over wide ground footprints, exposing Earth-observation and remote-sensing sensor data to passive eavesdropping. Affine frequency division multiplexing (AFDM) is a candidate waveform for the doubly dispersive LEO channel and a natural integrated sensing and communication (ISAC) waveform whose delay-Doppler structure supports target parameter estimation; yet existing secure-AFDM schemes act only in the discrete affine Fourier transform (DAFT) parameter domain, leaving the transmitted waveform structurally recognizable. To address this gap, this paper applies time-domain waveform obfuscation to AFDM as physical layer encryption. Using a secret key, the transmitter permutes the inverse-DAFT samples and applies a phase rotation before chirp-periodic-prefix generation; the mask is unitary, so the peak-to-average power ratio is preserved exactly, and the key-holding receiver retains AFDM's full delay-Doppler sensing capability, while a no-key receiver obtains a dense composite response that destroys target localization (sensing concentration drops from 0 dB to -16.6 dB). Secret pilot phases enable channel estimation at the legitimate receiver while blocking a naive composite-channel attack. Simulations at N=64 and 128 show that a wrong-key eavesdropper achieves uncoded BER within 0.01 of 0.5 across 0-20 dB and that blind Viterbi-Viterbi phase recovery is no more effective under QPSK (BER 0.46-0.48), while the legitimate SNR penalty stays below 0.5 dB. The mask also suppresses AFDM's internal structure to the AWGN level under AFDM-aware processing. Time-domain obfuscation offers a complementary physical-layer security layer for confidential LEO remote-sensing data downlink and ISAC waveforms.