WO2013050409A1 - Solutions for relay attacks on passive keyless entry and go - Google Patents

Solutions for relay attacks on passive keyless entry and go Download PDF

Info

Publication number
WO2013050409A1
WO2013050409A1 PCT/EP2012/069520 EP2012069520W WO2013050409A1 WO 2013050409 A1 WO2013050409 A1 WO 2013050409A1 EP 2012069520 W EP2012069520 W EP 2012069520W WO 2013050409 A1 WO2013050409 A1 WO 2013050409A1
Authority
WO
WIPO (PCT)
Prior art keywords
mobile device
range
communication
frequency transceiver
meters
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/EP2012/069520
Other languages
French (fr)
Inventor
Carlo Secondo MUTTI
Davide SPEDALIERE
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Assa Abloy Opening Solutions CZ sro
Original Assignee
Assa Abloy Czech and Slovakia sro
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Assa Abloy Czech and Slovakia sro filed Critical Assa Abloy Czech and Slovakia sro
Priority to CN201280049363.3A priority Critical patent/CN103858149A/en
Priority to EP12781284.0A priority patent/EP2839442A1/en
Priority to US14/349,494 priority patent/US9349236B2/en
Publication of WO2013050409A1 publication Critical patent/WO2013050409A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R25/00—Fittings or systems for preventing or indicating unauthorised use or theft of vehicles
    • B60R25/20—Means to switch the anti-theft system on or off
    • B60R25/24—Means to switch the anti-theft system on or off using electronic identifiers containing a code not memorised by the user
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00—Registering or indicating the working of vehicles
    • G07C5/008—Registering or indicating the working of vehicles communicating information to a remotely located station

Definitions

  • the present invention relates to a system for preventing relay attacks against radio frequency based locking systems according to preamble of claim 1.
  • FIG. 1 there is shown a mobile device, such as a key which can be used in PKE-Systems.
  • the PKE-System usually comprises the following steps in order to open and to start a car:
  • the LF is a short range communication, usually not more than 1 -2m, meanwhile the UHF range is up to 100m. This is illustrated in figure 2.
  • the relay attack consists to extend the LF range X, so you can open and start the vehicle even if the key owner is far away but still in the range Z of the UHF as it is also described in the above mentioned publication.
  • the owner sits in a restaurant and the vehicle just parked outside the restaurant.
  • the thief with the relay within the range X, touches the door handle, the vehicle starts the communication procedure, the relay extends the LF range, the remote key is awake from the LF signal and answers via UHF signal.
  • the vehicle unlocks the door, the thief enters, push the start button, the LF starts again the communication, extended by the relay, the key answers, and the vehicle engine starts and the vehicle is gone!
  • a passive entry system in particular for a motor vehicle comprising:
  • a mobile device to be carried by a user, said mobile device comprising a low-frequency transceiver for short range communication, an ultra-high-frequency transceiver for long range communication and information concerning access, such as an access code, which is transmittable by said transceivers; and
  • a locking device which is to be unlocked by the mobile device, said locking device comprising a low-frequency transceiver for short-range communication and an ultra-high frequency transceiver for long range communication to receive said information concerning access, such as the access code.
  • the transceivers of the mobile device communicates with the transceivers of the locking device and exchange information concerning access, such as said access code, to the locking system via the respective transceivers.
  • the communication range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.
  • the Iimitation of the range has the advantage that communication of the ultra-high-frequency transceiver becomes limited to a restricted range. Therefore the signal from said transceiver will only be sent within this short range, which means that the mobile device has to be physically close to the locking device in order to send the information with which the locking device will be unlocked to the locking device.
  • the mobile device may send an answer, for example a code to unlock the locking device, to this signal, but the answer will not reach the locking device.
  • the term limitation is preferably to be understood as physical limitation which means that the mobile device is only able to send the access information only within a short physical range such as less than 10 meters or less than 2 meters for example.
  • the mobile device comprises means such as a button, to activate the transmission of the information concerning access, wherein upon a manual actuation of said means of the mobile device the condition of the mobile device is changeable from said normal operating mode to a manual mode, wherein in said manual mode the long range communication of the ultra-high-frequency transceiver of the mobile device is active such that access information is transmittable over the long range.
  • means such as a button
  • the mobile device can have two operating modes. In the normal operating mode the mobile device and the locking device are protected against relay attacks since the long range communication is deactivated. In the manual mode long range communication is activated and long range exchange of access information will take place upon manual and deliberate actuation of the mobile device by the user.
  • Typical values of low-frequency are usually 125 kHz and of high-frequency are usually 315 MHz or 433 MHz or 868 MHZ or 915 MHz.
  • Fig. 1 shows a schematic view of a mobile device, such as a key to access a car
  • Fig. 2 shows a schematic view of an overall system of a relay attack as described prior art chapter
  • Fig. 3 shows a schematic view of an overall system according to the present invention
  • Fig. 4 shows a first embodiment of a mobile device according to the present invention
  • Fig. 5 shows a second embodiment of a mobile device according to the present invention.
  • Fig. 6 shows a third embodiment of a mobile device according to the present invention.
  • the new approach is to limit the communication range Z as indicated in figure 2 from the key to vehicle via UHF in the PKE/GO system. Therefore the communication range of the ultra-high- frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.
  • the mobile unit preferably a key
  • the mobile unit comprises at least one button which can be activated by the user.
  • the normal operating mode of the mobile device will be changed into a manual mode, resulting in the normal use of the key, with UHF range Z.
  • the condition of the mobile device is changeable from said normal operating mode to a manual mode, wherein in said manual mode the long range communication of the ultra-high-frequency transceiver of the mobile device is activatable.
  • the transceiver of mobile unit communicates without a limitation of the range of the ultra-high-frequency channel. This is illustrated in the below.
  • the invention is valid for Passive Keyless Entry and/or Passive Keyless Go.
  • the invention can be implemented in the embodiments as described in the following.
  • the invention can be implemented in a purely hardware embodiment or in a purely software/firmware embodiment or an embodiment in which hardware as well as software/firmware are adapted to the invention.
  • the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of hardware components.
  • Figure 4 illustrates a possible embodiment, in particular said first embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.
  • o automatic switch (2c) either passive or functional RF path using one or more different antenna types inside (1);
  • o automatic switch (2c) either passive or functional RF path using one or more different antenna design inside (1);
  • o automatic switch (2c) either passive or functional RF path using one or more different antenna gain inside (f).
  • the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of software components, hence by means of a programmed software solution.
  • Figure 5 illustrates a possible embodiment, in particular said second embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.
  • control unit (3) uses passive software/firmware settings (3a), in order to have limited UHF range V;
  • control unit (3) uses functional software/firmware settings ⁇ 3b), in order to have functional UHF range Z;
  • This implementation could be applied on the existing mobile device (key), without any hardware modifications.
  • the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of software components and hardware components.
  • Figure 6 illustrates a possible embodiment, in particular said third embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Mechanical Engineering (AREA)
  • Lock And Its Accessories (AREA)

Abstract

A passive entry system, in particular for a motor vehicle, comprising: a mobile device to be carried by a user, said mobile device comprising a low-frequency transceiver for short range communication, an ultra-high-frequency transceiver for long range communication and information concerning access, such as an access code, which is transmittable by said transceivers; and a locking device which is to be unlocked by the mobile device, said locking device comprising a low-frequency transceiver for short-range communication and an ultra-high frequency transceiver for long range communication to receive said information concerning access, such the access code. The transceivers of the mobile device communicates with the transceiver of the locking device and exchange information concerning access, such as said access code,to the locking system via the respective transceivers, wherein the communication range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.

Description

Title
SOLUTIONS FOR RELAY ATTACKS ON PASSIVE KEYLESS ENTRY AND GO TECHNICAL FIELD OF THE INVENTION
The present invention relates to a system for preventing relay attacks against radio frequency based locking systems according to preamble of claim 1.
PRIOR ART
Nowadays the major issue regarding the Passive Keyless Entry and/or Passive Keyless Go (PKE/GO) system in modern vehicles is the "Relay Attack". Using the system characteristics, with very inexpensive tools, it is possible to open and to start all the new vehicles with PKE/GO system.
Only by amplifying and extend the range of the LF signal, generated by the vehicle and used to communicate with the key, it is possible to open and to start the vehicle even if the owner is far away the vehicle, all without any suspect from the key owner.
This problem has been described in detail in a publication by the authors Aurelien Francillon, Boris Danev, Srdjan Capkun of ETH Zurich having the title "Relay Attacks on Passive Keyless Entry and Start Systems in Modern Vehicles".
In Figure 1 there is shown a mobile device, such as a key which can be used in PKE-Systems. In summary the PKE-System usually comprises the following steps in order to open and to start a car:
- triggering the system (e.g. touching the door handles), the vehicle turn on the LF antenna and sends the commands to the Mobile Device (key); and
- the key is awake through LF signal (4,5) and answers (1,2,3) via UHF directly to the vehicle with the right command to unlock the door.
The same applies when the start/stop button inside the vehicle for the Passive Keyless Go is pushed.
The LF is a short range communication, usually not more than 1 -2m, meanwhile the UHF range is up to 100m. This is illustrated in figure 2. The relay attack consists to extend the LF range X, so you can open and start the vehicle even if the key owner is far away but still in the range Z of the UHF as it is also described in the above mentioned publication.
To make an illustrative example: the owner sits in a restaurant and the vehicle just parked outside the restaurant. The thief with the relay, within the range X, touches the door handle, the vehicle starts the communication procedure, the relay extends the LF range, the remote key is awake from the LF signal and answers via UHF signal. The vehicle unlocks the door, the thief enters, push the start button, the LF starts again the communication, extended by the relay, the key answers, and the vehicle engine starts and the vehicle is gone!
SUMMARY OF THE INVENTION
Starting from this prior art it is an object of the present invention to provide a locking system having a higher security against such relay attacks.
This object is solved by claim 1. Therefore a passive entry system, in particular for a motor vehicle comprising:
a mobile device to be carried by a user, said mobile device comprising a low-frequency transceiver for short range communication, an ultra-high-frequency transceiver for long range communication and information concerning access, such as an access code, which is transmittable by said transceivers; and
a locking device which is to be unlocked by the mobile device, said locking device comprising a low-frequency transceiver for short-range communication and an ultra-high frequency transceiver for long range communication to receive said information concerning access, such as the access code.
The transceivers of the mobile device communicates with the transceivers of the locking device and exchange information concerning access, such as said access code, to the locking system via the respective transceivers. The communication range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.
The Iimitation of the range has the advantage that communication of the ultra-high-frequency transceiver becomes limited to a restricted range. Therefore the signal from said transceiver will only be sent within this short range, which means that the mobile device has to be physically close to the locking device in order to send the information with which the locking device will be unlocked to the locking device. In case the mobile device is far away from the car and receives a fraud signal that originates from the car and has been amplified by a fraud relay, the mobile device may send an answer, for example a code to unlock the locking device, to this signal, but the answer will not reach the locking device. The term limitation is preferably to be understood as physical limitation which means that the mobile device is only able to send the access information only within a short physical range such as less than 10 meters or less than 2 meters for example.
Preferably the mobile device comprises means such as a button, to activate the transmission of the information concerning access, wherein upon a manual actuation of said means of the mobile device the condition of the mobile device is changeable from said normal operating mode to a manual mode, wherein in said manual mode the long range communication of the ultra-high-frequency transceiver of the mobile device is active such that access information is transmittable over the long range.
Hence the mobile device can have two operating modes. In the normal operating mode the mobile device and the locking device are protected against relay attacks since the long range communication is deactivated. In the manual mode long range communication is activated and long range exchange of access information will take place upon manual and deliberate actuation of the mobile device by the user.
Typical values of low-frequency are usually 125 kHz and of high-frequency are usually 315 MHz or 433 MHz or 868 MHZ or 915 MHz.
Further embodiments of the invention are laid down in the dependent claims.
BRIEF DESCRIPTION OF THE DRAWINGS
Preferred embodiments of the invention are described in the following with reference to the drawings 3 to 6, which are for the purpose of illustrating the present preferred embodiments of the invention and not for the purpose of limiting the same. In the drawings,
Fig. 1 shows a schematic view of a mobile device, such as a key to access a car,
Fig. 2 shows a schematic view of an overall system of a relay attack as described prior art chapter,
Fig. 3 shows a schematic view of an overall system according to the present invention;
Fig. 4 shows a first embodiment of a mobile device according to the present invention;
Fig. 5 shows a second embodiment of a mobile device according to the present invention; and
Fig. 6 shows a third embodiment of a mobile device according to the present invention.
DESCRIPTION OF PREFERRED EMBODIMENTS
Preferred embodiments of the invention are described in the following with reference to the drawings or figures, respectively, which are for the purpose of illustrating the present preferred embodiments of the invention and not for the purpose of limiting the same. The way to solve this kind of relay attacks on PKE/GO system, is putting some countermeasure on the communication between the key and the vehicle and not vice versa as attempted until now.
The new approach is to limit the communication range Z as indicated in figure 2 from the key to vehicle via UHF in the PKE/GO system. Therefore the communication range of the ultra-high- frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.
This limitation of the communication range could be obtained applying one of the following strategies: a) reducing key transmission power;
b) increasing the transmission power;
c) adapting key antenna matching network;
d) using different antenna type;
e) using different antenna design;
f) using different antenna gain;
g) any combinations of the above strategies;
h) or any other solution to reduce and limit the communication range.
In this manner, at any requests from the vehicle via LF signal, via relay or not, the key answers only adopting one or more of the above strategies, limiting the UHF range to less than Y = X+W meters.
The mobile unit, preferably a key, can also be operated in a manual mode which is applicable when the user intends to unlock the locking system (e.g. the car) manually. For that reason the mobile unit comprises at least one button which can be activated by the user. When the user presses said button, the above strategies are not applied. Hence the normal operating mode of the mobile device will be changed into a manual mode, resulting in the normal use of the key, with UHF range Z. With other words: Upon a manual actuation the mobile device the condition of the mobile device is changeable from said normal operating mode to a manual mode, wherein in said manual mode the long range communication of the ultra-high-frequency transceiver of the mobile device is activatable. Hence the user can manually unlock the car since the transceiver of mobile unit communicates without a limitation of the range of the ultra-high-frequency channel. This is illustrated in the below.
The invention is valid for Passive Keyless Entry and/or Passive Keyless Go.
According to preferred embodiments the invention can be implemented in the embodiments as described in the following. Preferably the invention can be implemented in a purely hardware embodiment or in a purely software/firmware embodiment or an embodiment in which hardware as well as software/firmware are adapted to the invention. These embodiments will be described in the following with reference to the drawings: First Embodiment:
In the first embodiment the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of hardware components.
Figure 4 illustrates a possible embodiment, in particular said first embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.
The solutions, using only hardware implementation to limit the communication range Z from the key to vehicle via UHF, are preferably obtained by:
a) reducing key transmission power;
o automatic switch (2c) on passive RF path with HW attenuator inside (2a) using the same antenna inside (f );
o automatic switch (2c) on passive RF path with HW attenuator inside (2a) using different antenna inside (1);
b) increasing the transmission power;
o automatic switch (2c) on functional RF path with HW amplifier inside (2b) using the same antenna inside (f );
o automatic switch (2c) on functional RF path with HW amplifier inside (2b) using different antenna inside (f);
c) adapting key antenna matching network;
o automatic switch (2c) on passive RF path with component (resistors, capacitors, inductors) inside (2a) with different values using the same antenna inside (7);
o automatic switch (2c) on passive RF path with component (resistors, capacitors, inductors) inside (2a) with different values using different antenna inside (f);
d) using different antenna type;
o automatic switch (2c) either passive or functional RF path using one or more different antenna types inside (1);
e) using different antenna design;
o automatic switch (2c) either passive or functional RF path using one or more different antenna design inside (1);
f) using different antenna gain;
o automatic switch (2c) either passive or functional RF path using one or more different antenna gain inside (f).
g) using any combinations of the above strategies.
Second Embodiment: In the second embodiment the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of software components, hence by means of a programmed software solution.
Figure 5 illustrates a possible embodiment, in particular said second embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.
Using the right software device settings (3a, 3b) in the control unit (3) is possible to adjust the UHF power transmission:
By LF request (4,5), the control unit (3) uses passive software/firmware settings (3a), in order to have limited UHF range V;
By pushing one of the key buttons (6,7), the control unit (3) uses functional software/firmware settings {3b), in order to have functional UHF range Z;
This implementation could be applied on the existing mobile device (key), without any hardware modifications.
Third Embodiment:
In the third embodiment the limitation the range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device is provided by means of software components and hardware components.
Figure 6 illustrates a possible embodiment, in particular said third embodiment, of a mobile device in which the range of the ultra-high-frequency transceiver is limited accordingly.
The "mixed" implementation is the most complete solution from optimization point of view, providing more flexibility in term of range Y selection.
This is achieved by combining strategies described in embodiments 1 and 2.

Claims

1. Passive entry system, in particular for a motor vehicle, comprising:
a mobile device to be carried by a user, said mobile device comprising a low-frequency transceiver for short range communication, an ultra-high-frequency transceiver for long range communication and information concerning access, such as an access code, which is transmittable by said transceivers; and
a locking device which is to be unlocked by the mobile device, said locking device comprising a low-frequency transceiver for short-range communication and an ultra-high frequency transceiver for long range communication to receive said information concerning access, such the access code, wherein the transceivers of the mobile device communicates with the transceiver of the locking device and exchange information concerning access, such as said access code, to the locking system via the respective transceivers, characterized in that
the communication range of the ultra-high-frequency transceiver of the mobile device is limited to a short range in a normal operating mode of the mobile device.
2. Passive entry system according to claim 1 , characterized in that the mobile device comprises means such as a button, to activate the transmission of the information concerning access, wherein upon a manual actuation of said means of the mobile device the condition of the mobile device is changeable from said normal operating mode to a manual mode, wherein in said manual mode the long range communication of the ultra-high-frequency transceiver of the mobile device is active such that access information is transmittable over the long range.
3. Passive entry system according to any of the preceding claims, characterized in that the communication range is limited to a short range in case communication will be initiated by the transceiver of the locking device in particular on the vehicle, wherein said communication is preferably a request of the locking device to the mobile device to send information concerning access.
4. Passive entry system according to any of the preceding claims, characterized in that said limitation of the range of the mobile device is provided by means of
reducing transmission power of the transceiver of the mobile device by changing value and/or number of electronic and/or software parameters in its normal operating mode and/or
increasing transmission power of the transceiver of the mobile device by changing value and/or number of electronic and/or software parameters in in its in manual mode and/or
adapting the antenna matching network of the mobile device by changing value and/or number of electronic components and/or
using different antenna types of the mobile device and/or using different antenna design of the mobile device and/or by using different gain.
5. Passive entry system according to any of the preceding claims, characterized in that said limitation of the range of the mobile device is provided by means of a programmed software solution.
6. Passive entry system according to any of the preceding claims, characterized in that the long range is between 10 meters and 200 meters and in that the short range is between 0 meters and 10 meters, preferably between 0 meters and 5 meters, most preferably between 0 meters and 2 meters.
PCT/EP2012/069520 2011-10-07 2012-10-03 Solutions for relay attacks on passive keyless entry and go Ceased WO2013050409A1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201280049363.3A CN103858149A (en) 2011-10-07 2012-10-03 Solutions for relay attacks on passive keyless entry and go
EP12781284.0A EP2839442A1 (en) 2011-10-07 2012-10-03 Solutions for relay attacks on passive keyless entry and go
US14/349,494 US9349236B2 (en) 2011-10-07 2012-10-03 Solutions for relay attacks on passive keyless entry and go

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CH16412011 2011-10-07
CH1641/11 2011-10-07

Publications (1)

Publication Number Publication Date
WO2013050409A1 true WO2013050409A1 (en) 2013-04-11

Family

ID=47143073

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2012/069520 Ceased WO2013050409A1 (en) 2011-10-07 2012-10-03 Solutions for relay attacks on passive keyless entry and go

Country Status (4)

Country Link
US (1) US9349236B2 (en)
EP (1) EP2839442A1 (en)
CN (1) CN103858149A (en)
WO (1) WO2013050409A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3064404A1 (en) 2015-03-02 2016-09-07 Volkswagen Aktiengesellschaft Function shutdown for an entry system for a vehicle
US20170303084A1 (en) 2016-04-19 2017-10-19 Volkswagen Ag Procedures for passive access control

Families Citing this family (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10400735B2 (en) * 2012-05-04 2019-09-03 Light Wave Technology Inc. System and method for remote starting a vehicle equipped with a smart start system
US9536365B2 (en) 2013-05-29 2017-01-03 Lightwave Technology Inc. System and method for keyless entry and remote starting vehicle with an OEM remote embedded in vehicle
US9484626B2 (en) 2013-06-10 2016-11-01 Magna Mirrors Of America, Inc. Vehicle door handle assembly with antenna circuit
FR3007875B1 (en) * 2013-06-28 2015-07-17 Continental Automotive France METHOD FOR PROTECTING A FREE ACCESS AND / OR START SYSTEM OF A VEHICLE BY MODIFYING THE SIGNAL RECEPTION SPEED
CN105459951B (en) * 2014-09-10 2019-09-10 富顶精密组件（深圳）有限公司 VATS Vehicle Anti-Theft System and anti-stealing method for vehicles
JP2016079600A (en) * 2014-10-14 2016-05-16 矢崎総業株式会社 Vehicle authentication system
DE102015107640A1 (en) * 2015-05-15 2016-11-17 Hella Kgaa Hueck & Co. Access and driving authorization system with increased security against relay attacks on the transponder interface Part II
JP6429169B2 (en) * 2015-12-10 2018-11-28 パナソニックＩｐマネジメント株式会社 On-vehicle device, portable device, and vehicle wireless communication system
EP3417663B1 (en) 2016-04-14 2025-08-27 Apple Inc. Methods and architectures for secure ranging
JP6253004B1 (en) * 2016-10-24 2017-12-27 マツダ株式会社 Electronic key system
JP6341472B2 (en) * 2016-10-24 2018-06-13 マツダ株式会社 Electronic key system
CN108068759B (en) * 2016-11-18 2020-07-03 上海海拉电子有限公司 System and method for preventing relay attack
FR3064572B1 (en) * 2017-04-04 2019-03-22 Continental Automotive France METHOD FOR TEMPORARILY INHIBITING REMOTE ACTIVATION OF A FUNCTION PRESENT IN A MOTOR VEHICLE
WO2018220987A1 (en) * 2017-06-02 2018-12-06 株式会社デンソー Variable reception range system, vehicle control device, and portable device
CN111386688B (en) * 2017-11-28 2022-04-22 维萨国际服务协会 System and method for protecting against relay attacks
US11368845B2 (en) * 2017-12-08 2022-06-21 Carrier Corporation Secure seamless access control
US10919493B2 (en) * 2018-02-08 2021-02-16 Ford Global Technologies, Llc Mobile device relay attack detection and power management for vehicles
US10622405B2 (en) * 2018-05-04 2020-04-14 Lumileds Llc Light fixture with dynamically controllable light distribution
US10821890B2 (en) 2018-05-04 2020-11-03 Lumileds Llc Light engines with dynamically controllable light distribution
US10872923B2 (en) 2018-05-04 2020-12-22 Lumileds Llc Light engines with dynamically controllable light distribution
US10943417B2 (en) * 2018-10-12 2021-03-09 Denso International America, Inc. Passive entry/passive start access systems including round trip time sniffing
US12179699B2 (en) 2019-04-18 2024-12-31 Toyota Motor North America, Inc. Systems and methods for countering security threats in a passive keyless entry system
US11443038B2 (en) * 2019-04-18 2022-09-13 Toyota Motor North America, Inc. Systems and methods for countering security threats in a passive keyless entry system
US11449691B2 (en) * 2020-08-20 2022-09-20 Assa Abloy Ab Relay attack detection for interfaces using command-response pair
CN116411746B (en) * 2021-12-30 2024-10-29 比亚迪股份有限公司 Vehicle door control method and device, vehicle and computer storage medium

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10149344A1 (en) * 2001-10-06 2003-04-10 Kiekert Ag Authorization interrogation device for motor vehicles sets control unit in vehicle inoperative using noise signal so only unit outside vehicle is evaluated for authorization for locking/unlocking
DE10301146A1 (en) * 2003-01-14 2004-07-22 Robert Bosch Gmbh Security system, especially passive security system for motor vehicle, has base station that monitors received natural high frequency signal level, detects disturbances for detection of relay position
DE10334625A1 (en) * 2003-07-29 2005-03-03 Siemens Ag Method for proving an authorization for locking and unlocking and / or the use of an object and security device
DE102004052904A1 (en) * 2004-11-02 2006-06-01 Siemens Ag Method for checking justification of access to vehicle, comprising second check performed closer to car
US20060255911A1 (en) * 2005-05-11 2006-11-16 Toyota Jidosha Kabushiki Kaisha Remote control apparatus
DE102010006149A1 (en) * 2010-01-29 2011-08-04 Webasto AG, 82131 Remote control system for a vehicle

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3181997B2 (en) 1991-12-06 2001-07-03 株式会社サーキットデザイン Wireless engine starter
DE10255880A1 (en) 2002-11-29 2004-06-09 Philips Intellectual Property & Standards Gmbh Electronic communication system and method for detecting a relay attack on the same
JP4556192B2 (en) * 2003-04-25 2010-10-06 コンティ テミック マイクロエレクトロニック ゲゼルシャフト ミット ベシュレンクテル ハフツング Method of operating a transmitter device and transmitter device operating according to this method
WO2004104915A1 (en) 2003-05-20 2004-12-02 Philips Intellectual Property & Standards Gmbh Electronic communications system
US7383056B2 (en) 2003-12-15 2008-06-03 Fujitsu Ten Limited Processing apparatus, portable transmitter, and remote operation system
US7466219B2 (en) 2004-10-19 2008-12-16 Sanyo Electric Co., Ltd. Communication device and distance calculation system
JP2006118886A (en) 2004-10-19 2006-05-11 Sanyo Electric Co Ltd Distance calculation system, and distance calculation method for the distance calculation system
US20070040649A1 (en) * 2005-08-17 2007-02-22 Alps Automotive, Inc. Multifunction keyless entry system
JP4690218B2 (en) 2006-02-17 2011-06-01 株式会社東海理化電機製作所 Portable device having wireless communication function
JP5003152B2 (en) 2006-12-28 2012-08-15 株式会社デンソー Electronic key system
US8319605B2 (en) * 2007-06-19 2012-11-27 Magna Electronics, Inc. Remote vehicle control system utilizing multiple antennas
US8203424B2 (en) * 2009-03-25 2012-06-19 Lear Corporation Automatic walk-away detection
US8907760B2 (en) * 2010-09-09 2014-12-09 Nxp B.V. Multiple-frequency solutions for remote access systems

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10149344A1 (en) * 2001-10-06 2003-04-10 Kiekert Ag Authorization interrogation device for motor vehicles sets control unit in vehicle inoperative using noise signal so only unit outside vehicle is evaluated for authorization for locking/unlocking
DE10301146A1 (en) * 2003-01-14 2004-07-22 Robert Bosch Gmbh Security system, especially passive security system for motor vehicle, has base station that monitors received natural high frequency signal level, detects disturbances for detection of relay position
DE10334625A1 (en) * 2003-07-29 2005-03-03 Siemens Ag Method for proving an authorization for locking and unlocking and / or the use of an object and security device
DE102004052904A1 (en) * 2004-11-02 2006-06-01 Siemens Ag Method for checking justification of access to vehicle, comprising second check performed closer to car
US20060255911A1 (en) * 2005-05-11 2006-11-16 Toyota Jidosha Kabushiki Kaisha Remote control apparatus
DE102010006149A1 (en) * 2010-01-29 2011-08-04 Webasto AG, 82131 Remote control system for a vehicle

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3064404A1 (en) 2015-03-02 2016-09-07 Volkswagen Aktiengesellschaft Function shutdown for an entry system for a vehicle
DE102015203661A1 (en) 2015-03-02 2016-09-08 Volkswagen Aktiengesellschaft Function shutdown for a vehicle access system
US20170303084A1 (en) 2016-04-19 2017-10-19 Volkswagen Ag Procedures for passive access control
DE102016206539A1 (en) 2016-04-19 2017-10-19 Volkswagen Aktiengesellschaft Method for passive access control
EP3236427A1 (en) 2016-04-19 2017-10-25 Volkswagen Aktiengesellschaft Method for passive access control
DE102016206539B4 (en) 2016-04-19 2019-05-16 Volkswagen Aktiengesellschaft Method for passive access control
US10477346B2 (en) 2016-04-19 2019-11-12 Volkswagen Ag Procedures for passive access control

Also Published As

Publication number Publication date
US20140240090A1 (en) 2014-08-28
US9349236B2 (en) 2016-05-24
EP2839442A1 (en) 2015-02-25
CN103858149A (en) 2014-06-11

Similar Documents

Publication Publication Date Title
US9349236B2 (en) Solutions for relay attacks on passive keyless entry and go
US10137859B2 (en) Automotive security apparatus and associated methods
US9845070B2 (en) Method for triggering a command in a motor vehicle by means of a data exchange between a control device and an identifier element
CN108016401B (en) Vehicle control system and vehicle control device
CN108327677B (en) Passive Entry Passive Start (PEPS) system with integrated authorization and ranging communications
US20220254207A1 (en) Method and means for remotely controlling a secure function of a motor vehicle by means of a mobile communication terminal
CN111674358A (en) Keyless entry system and control method thereof
US9786110B2 (en) On-vehicle apparatus control system and on-vehicle control device
US9965912B2 (en) On-vehicle apparatus control system, on-vehicle control device, and portable machine
DE102015223342A1 (en) A method of operating an authorization device for a vehicle, an authorization device for a vehicle, a method of operating a system for authorizing operation of a vehicle, and a system for authorizing operation of a vehicle
EP2492876A2 (en) Electronic key system
US20080178648A1 (en) Device for hands-free access to a vehicle, designed to unlock at least one door of said vehicle
CN103249605A (en) Lock system, in particular for a motor vehicle
KR102225967B1 (en) Defense of a relay attack
KR20190064520A (en) Method for controlling access to a vehicle as well as a system for controlling access to a vehicle
JP5343552B2 (en) Keyless entry system
CN108068759B (en) System and method for preventing relay attack
CN111163977A (en) Access systems and access verification methods
JP2012051421A (en) Control system
US20080231416A1 (en) Latency reduction in remote signal communication system
WO2016063717A1 (en) Keyless entry device
JP2005320708A (en) Electronic key system, electronic key and transmitter
US12351128B2 (en) Method for activating a vehicle function and associated activation device
US11479208B2 (en) Locking system, in particular for a motor vehicle
US20170161974A1 (en) Method of preventing hacking of wireless signals

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12781284

Country of ref document: EP

Kind code of ref document: A1

REEP Request for entry into the european phase

Ref document number: 2012781284

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2012781284

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 14349494

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE