WO2020002921A1

WO2020002921A1 - Remote keyless system security device

Info

Publication number: WO2020002921A1
Application number: PCT/GB2019/051818
Authority: WO
Inventors: Mark NEATH
Original assignee: Individual
Current assignee: Individual
Priority date: 2018-06-28
Filing date: 2019-06-27
Publication date: 2020-01-02
Anticipated expiration: 2020-12-28
Also published as: GB201810614D0; GB2576133A

Abstract

A device for interrupting the power to the remote authorisation system of a key (100).

Description

Remote keyless system security device

The present invention is concerned with a remote keyless system security device. More specifically, the present invention is concerned with a device for preventing unauthorised keyless unlocking and ignition of vehicles fitted with automatic remote keyless entry (ARKE) and remote keyless ignition (RKI).

Many new vehicles feature some form of "remote keyless system". Generally, these systems can be differentiated as "remote keyless entry" (RKE) and "remote keyless ignition" (RKI). Many new cars feature both systems, as will be discussed below.

With "remote keyless entry" (RKE), the vehicle has an electronic lock which secures the doors in a closed condition, preventing entry. The electronic lock can be unlocked by the user manually pressing a button on a user unit (known as "manual remote keyless entry" (MRKE) or "remote central locking"). Many new cars employ a system in which the user unit is detected by proximity to the vehicle (known as "smart key" or "automatic remote keyless entry" (ARKE)). The latter system offers convenience to the user, as they merely need to have the user unit about their person, and do not need to search for it in coats, bags etc to unlock the vehicle. The present invention is concerned with ARKE.

With "remote keyless ignition" (RKI), instead of having an ignition switch requiring insertion of a key, the vehicle ignition may be started with a button. The button is only effective if the vehicle is able to detect the presence of the user unit. Again, this offers convenience to the user as they do not need to locate the key about their person to start the engine and drive the vehicle.

Both of these systems operate by establishing communication between the user unit and the vehicle by an electromagnetic signal. This is typically carried in the radio spectrum, more specifically in the UHF band, and even more specifically in the 300 - 400 MHz band. The signals are often encrypted to prevent duplication by unauthorised sources.

The user unit discussed above is typically still referred to as a "smart key" (whether or not is comprises a physical key) and as such the term "smart key" used hereinafter will refer to an electronic user unit whether or not it comprises a physical key.

Referring to Figure 1, there is shown a vehicle 10 fitted with ARKE and RKI. A smart key 20 is provided which, when moved within a detection zone 12 surrounding the vehicle 10 will cause the vehicle doors to be unlocked. The vehicle 10 transmits a signal VS, and the smart key KS. There is a method of stealing cars fitted with the above remote keyless systems known as "scanning" or "relaying".

Referring to Figure 2, a large resonant pick-up coil (vehicle coil 14) is held adjacent to the car within the detection zone 12) which is connected by cable 16 to a similar coil (key coil 18) which is placed as close as possible to the position of the smart key 20. The signal broadcast by the vehicle 10 is picked up by the vehicle coil 14 and relayed to the key coil 18. The transponder in the smart key 20 is energised as if it was close to the car, car / key exchange takes place as normal and the response is "relayed" back to the car 10. The doors are therefore opened (ARKE) and the car will start (RKI).

The method is used to artificially close the physical gap between the car and the smart key. As many people keep their smart key close to the front door of the house it is often possible for the key coil to be positioned quite close to them. Such systems may also be used to close the gap between smart keys held in valet stands, or in a bag etc.

Various solutions have been proposed.

WO2004114227 discusses a device which provides a means of communication between the key or fob and car which includes a signal which is perceptible to humans. So, for example, sound or light can be used as a signal medium. In this way, the user will know if a relay attack is being carried out.

EP0908589 discusses the problem of relay attacks on keyless entry systems. The proposed solution allows the user to deactivate passive entry for a predetermined period of time. They system can also deactivate the passive mode after a predetermined time period, and also automatically disable passive mode for a predetermined period of time after locking the vehicle. A "porter" (better known as a "valet") mode is also disclosed in which certain areas of the car (e.g. the boot) are not accessible. As an additional measure against relay attack, the key is provided with an alert tone when it receives a signal from the car.

US7791457 discloses a system for identifying unauthorised access to a vehicle having a passive / keyless entry system. The device operates by having the car transmit two interrogation signals to the key- the second being at a high amplitude than the first. The key will only open the car when it detects this amplitude difference.

US20060044108 is concerned with passive keyless entry, and the threat of relay attack. The patent application discusses the detection of a relay attack by measuring transit time, given that the attack will "slow" the signal (compared to direct communication). It also acknowledges that transit time is not useful for high frequency relays. Instead, the system proposes that a deliberate delay time is built into the system to provide an "additional, adjustable signal propagation delay" which can be detected and verified.

It is an aim of the present invention to provide an improved apparatus for overcoming the above- mentioned problem. According to a first aspect of the invention there is provided a security device for a smart key comprising: an internal power interrupt portion configured to be positioned in the interior of a smart key, the internal power interrupt portion having: a first interior contact; and, a second interior contact; the first and second interior contacts being so configured as to interrupt the electrical current flowing from a smart key battery to a smart key battery contact; an external switch configured to be positioned on the exterior surface of a smart key; and, a body configured to extend from the internal power interrupt portion to the switch; the switch being configured to place the first and second interior contacts in electrical connection to enable electrical current to flow from the smart key battery to the smart key battery contact.

Advantageously, the invention allows the power signal to be interrupted and selectively restored to re-enable the remote authorisation signal. Therefore when the user knows the car will not be used (for example at night), the ARKE / RKI can be deactivated which mitigates a relay attack.

Preferably the body is constructed from a flexible material.

Preferably the body is constructed from laminated material.

Preferably the body comprises two layers of electrically conductive material either side of a layer of electrically insulating material. Preferably the external switch is bi-stable.

Preferably the external switch is configured to revert to a normally open condition a predetermined time after activation to a closed condition.

The invention also provides a smart key comprising: a battery; a remote keyless authorisation signal transmitter powered by the battery; and, a device according to the first aspect, wherein the internal power interrupt portion is positioned between the battery and an associated contact to selectively interrupt power to the remote keyless authorisation signal transmitter.

Preferably the body passes from an interior side of the smart key to an exterior side of the smart key, and is flexible so as to conform to an outer surface profile of the smart key.

According to a second aspect there is provided a security device for a vehicle, the vehicle being configured for remote keyless authorisation, the security device comprising: an power interrupt portion having: a first contact; and, a second contact; the first and second interior contacts being so configured as to interrupt the electrical current flowing from a car battery to a vehicle remote keyless authorisation transmitter / receiver; and, a remote controlled switch; the switch being configured to place the first and second contacts in electrical connection to enable electrical current to flow from the car battery to the remote keyless authorisation transmitter / receiver.

Preferably the switch is configured to be controlled by a remote wireless signal.

The invention also provides a vehicle comprising: a battery; a remote keyless authorisation signal transmitter / receiver powered by the battery; and, a device according to the second aspect, wherein the power interrupt portion is positioned between the battery and an associated contact to selectively interrupt power to the remote keyless authorisation signal transmitter.

The invention also provides a system comprising: a vehicle as described above; a computer configured to remotely activate the remote controlled switch; wherein the computer is configured to require a security verification before issuing a remote command to activate the switch.

Preferably: the computer is a mobile device; the remote command is issued by an app; and, wherein the mobile device and / or the app require the additional security verification. Preferably the additional security verification is biometric.

According to a third aspect of the invention there is provided a remote keyless security device comprising a transmitter configured to transmit a jamming signal to jam a remote keyless authorisation signal.

Advantageously, a relay attack would be defeated because the jamming signal would inhibit successful communication and authorisation between the vehicle and the smart key.

Preferably the jamming signal has a plurality of jamming signal frequencies. This allows the device to operate with a number of different vehicle types.

Preferably the device comprises a receiver configured to detect a remote keyless authorisation signal from a vehicle and / or a smart key, and to transmit the jamming signal in response to such detection. This avoids the need for the device to constantly transmit a jamming signal, which would be detrimental to battery life. Preferably the device is configured for use as a key fob. Therefore it is preferably less than 10cm in maximum dimension, more preferably less than 5cm. Preferably it is suitable for attachment to a keyring.

The device may have a control for selective deactivation of the jamming signal. This allows the user to activate keyless entry. Preferably the control is configured to deactivate the jamming signal for a predetermined period of time. Advantageously, the user will not leave the device in a state in which a relay attack is possible. The control may be a button.

The control may be a switch configured to place the transmitter into persistent "jamming on" and "jamming off" modes. The invention also provides an assembly of a smart key and a remote keyless security device according to the third aspect, in which the smart key is configured to transmit the remote keyless authorisation signal for providing remote keyless entry and / or ignition of a vehicle.

The invention also provides a smart key comprising an integrated remote keyless security device according to the third aspect, in which the smart key is configured to transmit the remote keyless authorisation signal for providing remote keyless entry and / or ignition of a vehicle.

Embodiments of the present invention will now be described with reference to the accompanying drawings, in which:

FIGURE 1 is a schematic of a known car fitted with a remote keyless system;

FIGURE 2 is a schematic of the car of Figure 1 being accessed by a relaying attack;

FIGURE 3 is a schematic view of a first embodiment of the present invention;

FIGURE 4 is a schematic view of a second embodiment of the present invention;

FIGURE 5a is a side view of a smart key;

FIGURE 5b is a plan view of a smart key;

FIGURE 5c is a side view of the smart key of Figures 5a and 5b fitted with a device according to the present invention;

FIGURE 5d is a section view through the device according to the present invention of Figure 5c; and,

FIGURE 6 is a section view through a further device according to the present invention.

Referring to Figure 3, there is shown the smart key 20, and attached thereto a jamming device 30 according to the present invention.

The jamming device 30 comprises a transponder 32 which is configured to detect communication between the vehicle 10 and smart key 20 and to transmit a jamming signal JS. The transponder 32 is powered by a battery. The jamming device 30 is configured to transmit the jamming signal JS upon detection of communication between the vehicle 10 and the smart key 20. The jamming signal JS is programmed to disrupt successful communication between the vehicle 10 and key 20 with a disruptive datastream.

The jamming signal JS is transmitted at a higher power (amplitude) than the key signal KS so as to ensure effective jamming. The jamming device 30 comprises a control in the form of a button 34. The button 34 is connected to the transponder 32, and upon depression will deactivate the transponder for a predetermined period of time. In the present example, the transponder is prevented from transmitting the jamming signal JS for 10 seconds (although it will be understood that other times are possible).

In this embodiment, the jamming signal is provided at all known frequencies for keyless entry systems. In this way, the device will work with all known systems without reprogramming.

Turning to Figure 4, a smart key 30' has the transponder 32' and button 34' integrated therewith. The key can therefore transmit the jamming signal JS at the same time as the key signal KS to disrupt the latter.

Referring to Figures 5a and 5b, there is shown a smart key 100. The smart key 100 comprises a casing 102 having a first half 104 and a second half 106. Controls 108 are positioned on the outside of the smart key 100. It will be understood that the smart key is ARKE and / or RKI enabled.

Referring to Figure 5c, the smart key 100 comprises a battery 110. A controller 112 is provided which is configured to control an antenna 114 which transmits and receives the necessary signals 116 for ARKE and / or RKI.

The controller 112 and antenna 114 are powered by the battery 110 via a first terminal 118 and a second terminal 120. The battery shown is a button cell battery (commonly used in such applications). As such, the terminals 118, 120 are on either side of the battery 110. Both terminals need to be in electrical contact with the battery for the smart key 100 to function and for the signals 116 to be transmitted and received.

A power interrupt device 122 according to the present invention is shown in Figure 5d. The device 122 comprises a body 124 and a switch 126. The body 124 is a generally flexible, elongate strip of laminated material. An internal, electrically insulating strip of Kapton tape 128 is between two opposing strips of conductive copper tape portions 130a, 130b. The body 124 has an internal end 132 and an external end 134. At the external end, the copper tape portions 130a, 130b are joined at an end portion 130c i.e. the tape is wrapped around the end of the Kapton).

Proximate the external end of the body 124, the copper tape portion 130a defines a gap 136. The gap 136 is bridged by the switch 126. The switch 126 is a normally open / normally off manual microswitch which upon activation allows current to cross the gap 136. Therefore activation of the switch can place the two portions of copper tape 130a, 130b into electrical contact proximate the internal end 132.

The body 124 is coated in an insulating material 138 for a portion of its length. The device 122 can be installed by opening the smart key 100 and placing the internal end 132 between the battery 110 and terminal 120. Because the body 124 is flat, it sits in this region without modification to the key 100.

The body 124 can then be passed between the casing portions 104, 106 to the exterior side of the key 100, and the switch 126 installed on an external surface of the key (Figure 5c).

When the switch 126 is not activated, the insulative layer 128 interrupts direct current flow from the battery 110 to the terminal 120. The gap 136 prevents flow through the body through the copper tape portions 130a, b,c. Therefore the key 100 is unable to transmit the signal 116.

When the user wants to use the key 100, they can activate the switch 126 to bridge the gap 136. This permits power to flow from the battery 110 to the terminal 120 and hence the key 100 can implement ARKE and / or RKI.

In a first embodiment, the switch 126 may only allow connection when held down (i.e. it resiles to an open / off condition). The user would need to keep the switch depressed to open the car and drive away.

In a second embodiment the switch may be bi-stable. In other words the user must select "on" or "off" and the switch will remain in this state. This is advantageous as the ARKE / RKI process will not be accidentally interrupted. The user would simply move the switch to "off" when the likelihood of a relay attack increases (e.g. overnight).

It will be noted that a break is shown in the body of Figure 5c to illustrate the indeterminate length.

In a third embodiment, the switch may revert to an "off" condition after a present time. This may be achieved electronically or mechanically (e.g. with friction) as known in the art.

Referring to Figure 6, a further embodiment is shown in which a power interrupt device 200 is installed within a vehicle having ARKE / RKI capability.

The device 200 is similar to the device 100, inasmuch as it comprises a body 202 and a switch 204. An internal, electrically insulating strip of Kapton tape 206 is between two opposing strips of conductive copper tape portions 208a, 208b. The body 202 has a first end 210 and a second end 212. At the second end, the copper tape portions 208a, 208b are joined at an end portion 208c (i.e. the tape is wrapped around the end of the Kapton).

Proximate the external end of the body 202, the copper tape portion 208a defines a gap 214. The gap 214 is bridged by the switch 204. The switch 204 is an electronic switch comprising its own internal power supply, processor and wireless antenna. The switch 204 is configured to communicate via wireless signal 216 with a remote computer 218 (for example a cellular phone, tablet, desktop, laptop etc) via a wireless protocol such a Bluetooth (RTM) or Wi-Fi and accept remote instructions for activation and deactivation via the signal 216.

The device 200 is positioned with the portions 208a, 208b between a vehicle battery 218 and associated terminal 220. The device 200 can therefore interrupt the power supply between the vehicle battery 218 and vehicle electronic systems 222, in particular the power feed to the ARKE / RKI components.

In use, the switch 204 is normally open to interrupt the power supply between the battery 218 and vehicle electronics 222. When a user wishes to activate the ARKE / RKI systems, they can access the device 218 and issue a command via the wireless signal 216 to close the switch 204. The ARKE / RKI systems are then active and the vehicle can be accessed.

The invention provides that the signal 216 may be transmitted from an application ("app") installed on the device 218. The device 218 and / or the app may provide an additional layer of security. For example the device 218 may require a passcode or equivalent to unlock, or biometric information such as a fingerprint or face scan. The app itself may require the same, or additional verification.

The switch 204 may be configured to remain closed until instructed otherwise, or alternatively may open after a predetermined period of time.

It will be noted that a break is shown in the body of Figure 6 to illustrate the indeterminate length.

Both devices 122 and 120 are retrofittable to existing keys and vehicles retrospectively. Variations fall within the scope of the present invention.

The control may be in the form of an on / off switch instead of a button 34. In this way, the user can choose to leave the device 30 in a persistent state of "jamming on" or "jamming off".

The jamming signal JS may only be transmitted at the frequency of the key signal KS.

Claims

1. A security device for a smart key comprising: an internal power interrupt portion configured to be positioned in the interior of a smart key, the internal power interrupt portion having: a first interior contact; and, a second interior contact; the first and second interior contacts being so configured as to interrupt the electrical current flowing from a smart key battery to a smart key battery contact; an external switch configured to be positioned on the exterior surface of a smart key; and, a body configured to extend from the internal power interrupt portion to the switch; the switch being configured to place the first and second interior contacts in electrical connection to enable electrical current to flow from the smart key battery to the smart key battery contact.

2. A security device according to claim 1, wherein the body is constructed from a flexible material.

3. A security device according to claim 1 or 2, wherein the body is constructed from laminated material.

4. A security device according to claim 3, wherein the body comprises two layers of electrically conductive material either side of a layer of electrically insulating material.

5. A security device according to any preceding claim, wherein the external switch is bi-stable.

6. A security device according to any of claims 1 to 4, wherein the external switch is configured to revert to a normally open condition a predetermined time after activation to a closed condition.

7. A smart key comprising: a battery; a remote keyless authorisation signal transmitter powered by the battery; and, a device according to any preceding claim, wherein the internal power interrupt portion is positioned between the battery and an associated contact to selectively interrupt power to the remote keyless authorisation signal transmitter.

8. A smart key according to claim 7, wherein the body passes from an interior side of the smart key to an exterior side of the smart key, and is flexible so as to conform to an outer surface profile of the smart key.

9. A security device for a vehicle, the vehicle being configured for remote keyless authorisation, the security device comprising: an power interrupt portion having: a first contact; and, a second contact; the first and second interior contacts being so configured as to interrupt the electrical current flowing from a car battery to a vehicle remote keyless authorisation transmitter / receiver; and, a remote controlled switch; the switch being configured to place the first and second contacts in electrical connection to enable electrical current to flow from the car battery to the remote keyless authorisation transmitter / receiver.

10. A security device according to claim 9, wherein the switch is configured to be controlled by a remote wireless signal.

11. A vehicle comprising: a battery; a remote keyless authorisation signal transmitter / receiver powered by the battery; and, a device according to any of claims 9 or 10, wherein the power interrupt portion is positioned between the battery and an associated contact to selectively interrupt power to the remote keyless authorisation signal transmitter.

12. A system comprising: a vehicle according to claim 11; a computer configured to remotely activate the remote controlled switch; wherein the computer is configured to require a security verification before issuing a remote command to activate the switch.

13. A system according to claim 12, wherein: the computer is a mobile device; the remote command is issued by an app; and, wherein the mobile device and / or the app require the additional security verification.

14. A system according to claim 13, wherein the additional security verification is biometric.

15. A remote keyless security device comprising a transmitter configured to transmit a jamming signal to jam a remote keyless authorisation signal.

16. A remote keyless security device according to claim 15, in which the jamming signal has a plurality of jamming signal frequencies.

17. A remote keyless security device according to any of claims 15 or 16, comprising a receiver configured to detect a remote keyless authorisation signal from a vehicle and / or a smart key, and to transmit the jamming signal in response to such detection.

18. A remote keyless security device according to any of claims 15 to 17, being less than 10cm in maximum dimension.

19. A remote keyless security device according to any of claims 15 to 18, being suitable for attachment to a keyring.

20. A remote keyless security device according to any of claims 15 to 19, comprising a control for selective deactivation of the jamming signal.

21. A remote keyless security device according to claim 20, in which the control is configured to deactivate the jamming signal for a predetermined period of time.

22. A remote keyless security device according to claim 21, in which the control is a button.

23. A remote keyless security device according to claim 22, in which the control is a switch configured to place the transmitter into persistent "jamming on" and "jamming off" modes.

24. An assembly of a smart key and a remote keyless security device according to any of claims 15 to 23, in which the smart key is configured to transmit the remote keyless authorisation signal for providing remote keyless entry and / or ignition of a vehicle.

25. A smart key comprising an integrated remote keyless security device according to any of claims 15 to 23, in which the smart key is configured to transmit the remote keyless authorisation signal for providing remote keyless entry and / or ignition of a vehicle.