Mobile device relay attack detection and power management for vehicles

Abstract

The present disclosure provides "Mobile device relay attack detection and power management for vehicles." A method and apparatus for mobile device relay attack detection and power management for vehicles is disclosed. An example vehicle includes a first module for first protocol communication, a second module for second protocol communication, and a controller. The controller is to determine a first distance to a mobile device using a signal strength of the first protocol communication, and upon receiving an entry request, determine a second distance to the mobile device using a time of flight of the second protocol communication. The controller is also to prevent entry when the second distance does not match the first distance.

Description

Technical Field

[0001] This disclosure relates generally to vehicles, and more specifically to mobile device relay attack detection and power management for vehicles. Background Technology

[0002] Typically, keys are used to unlock vehicle doors and start the engine. Traditionally, mechanical keys have been used to unlock and / or open vehicle doors and start the engine. For example, inserting a mechanical key into the ignition and turning it unlocks the door and / or starts the engine. More recently, mobile devices (e.g., key fobs, phones-as-keys) have been used to unlock vehicle doors and start the engine. For example, key fobs and phones-as-keys communicate wirelessly with the vehicle to unlock and / or open the doors and / or start the engine. Summary of the Invention

[0003] This application is defined by the appended claims. This disclosure summarizes various aspects of the embodiments and should not be construed as limiting the claims. Other implementations are conceived based on the technology described herein, as will be apparent to those skilled in the art upon studying the following drawings and detailed description, and these implementations are intended to fall within the scope of this application.

[0004] An exemplary embodiment of mobile device relay attack detection and power management for a vehicle is illustrated. The disclosed exemplary vehicle includes a first module for first protocol communication, a second module for second protocol communication, and a controller. The controller is configured to determine a first distance to a mobile device using the signal strength of the first protocol communication, and, upon receiving an access request, to determine a second distance to the mobile device using the time-of-flight of the second protocol communication. The controller is also configured to block access when the second distance does not match the first distance.

[0005] In some instances, in response to determining that the second distance does not match the first distance, the controller detects a relay attack on communication with the mobile device.

[0006] In some instances, the first protocol communication is Low-power communication, and the second protocol communication is Communication. In some instances, the first protocol communication is low-power 900MHz. (802.11ah) communication, and the second protocol communication is high frequency 60GHz. communication.

[0007] In some instances, the second distance determined based on the second protocol communication has a smaller error margin than the first distance determined based on the first protocol communication. In such instances, the first protocol communication consumes less energy than the second protocol communication. In some instances, the first distance corresponds to a first range determined based on the first distance and a first error margin, the second distance corresponds to a second range determined based on the second distance and a second error margin, and the controller determines that the second distance matches the first distance when the second range at least partially overlaps with the first range.

[0008] In some instances, the controller receives the entry request after the mobile device is within a threshold proximity distance of the vehicle. In such instances, the entry request includes at least one of a passive entry request and a passive activation request. Some instances also include a door handle and a handle sensor. In such instances, the controller receives the entry request from the handle sensor when the handle sensor detects that the door handle is occupied. Some instances also include a passenger compartment and doors. In such instances, the controller prevents entry into the passenger compartment by maintaining the doors in a locked state.

[0009] Some examples also include an engine and an ignition switch for receiving an ignition request for the engine. In such an example, the controller is configured to initiate second protocol communication between the second module and the mobile device in response to receiving the ignition request, determine the second distance using the flight time of the second protocol communication with the mobile device, and prevent engine ignition when the second distance does not match the first distance.

[0010] In some instances, the controller initiates the second protocol communication between the second module and the mobile device in response to receiving the access request.

[0011] In some instances, the flight time corresponds to the amount of time it takes for the second module to receive a first signal of the second protocol communication from the mobile device and for the mobile device to receive a return signal of the second protocol communication from the second module. In some instances, the controller is configured to send and receive a series of signals of the second protocol communication via the first module, identify a start pulse and an end pulse for each of the signals, and determine the flight time for the second protocol communication based on the start pulse and the end pulse. In some instances, to increase the temporal resolution of the flight time, the controller is configured to stitch together multiple round-trip signals between the second module and the mobile device.

[0012] Some examples also include a third module for low-frequency communication. In such an example, the controller is configured to determine a third distance from the mobile device based on the low-frequency communication, and further prevent entry when the second distance does not match the third distance.

[0013] The disclosed exemplary method includes determining a first distance between a vehicle and a mobile device via a processor based on the signal strength of a first protocol communication, and determining a second distance between the vehicle and the mobile device based on the time-of-flight of a second protocol communication upon receiving an entry request. The disclosed exemplary method also includes preventing entry into the vehicle compartment via the processor when the second distance does not match the first distance.

[0014] Some examples also include initiating the second protocol communication between the vehicle's communication module and the mobile device in response to receiving the access request.

[0015] The disclosed exemplary system includes a mobile device and a vehicle including a controller. The controller is configured to determine a first distance between the vehicle and the mobile device using the signal strength of a first protocol communication, and, upon receiving an entry request, to determine a second distance between the vehicle and the mobile device using the time-of-flight of a second protocol communication. The controller is also configured to prevent entry when the second distance does not match the first distance.

[0016] In some instances, the mobile device is a keychain or a mobile phone, i.e., a key. In some instances, the mobile device is configured to determine, in response to the access request, whether to initiate the second protocol communication for the mobile device, and to initiate the second protocol communication in response to determining that the second protocol communication has not been initiated. Attached Figure Description

[0017] To better understand the present invention, reference can be made to the embodiments shown in the following figures. Components in the figures are not necessarily drawn to scale and related elements may be omitted, or in some cases may be enlarged to emphasize and clearly illustrate the novel features described herein. Furthermore, as is known in the art, system components may be arranged differently. Additionally, in the figures, the same reference numerals denote corresponding components in several views.

[0018] Figure 1 Exemplary vehicles and exemplary mobile devices are shown in accordance with the teachings of this document.

[0019] Figure 2 Showing Figure 1 Vehicles and mobile devices that are attempting to relay attacks.

[0020] Figure 3 Showing Figure 1Vehicles and mobile devices when no relay attack is attempted.

[0021] Figure 4 Depicting Figure 1 Wi-Fi communication between mobile devices and vehicles.

[0022] Figure 5 yes Figure 1 A block diagram of the electronic components of a mobile device.

[0023] Figure 6 yes Figure 1 A block diagram of the vehicle's electronic components.

[0024] Figure 7 This is a flowchart of a method for detecting relay attacks on mobile devices in vehicles, based on the teachings of this article.

[0025] Figure 8 This is a flowchart of a remote parking assistance method for starting a vehicle, based on the teachings of this article. Detailed Implementation

[0026] While the invention may be embodied in various forms, some exemplary and non-limiting embodiments are shown in the accompanying drawings and will be described below. It should be understood that this disclosure is to be considered as illustrative of the invention and is not intended to limit the invention to the specific embodiments shown.

[0027] Typically, keys are used to unlock vehicle doors and start the vehicle's engine. Traditionally, mechanical keys have been used to unlock and / or open vehicle doors and ignite the vehicle's engine. For example, inserting a mechanical key into the keyhole and turning it unlocks the door and / or starts the engine. Mobile devices (e.g., key fobs, mobile phones as keys) have also been used to unlock vehicle doors and start the vehicle's engine. For example, key fobs and mobile phones as keys wirelessly communicate with the vehicle to unlock and / or open the vehicle doors and / or ignite the engine. In this case, the vehicle performs vehicle functions (e.g., unlocking and / or opening the door, starting the engine) in response to (i) receiving a request from the user and (ii) detecting the mobile device's proximity to the vehicle. Recently, criminals have discovered methods for performing relay attacks on communications between mobile devices and vehicles, which potentially trick the vehicle into performing vehicle functions by making the mobile device appear closer to the vehicle than it actually is. For example, a relay attack can be performed by a device that: (1) intercepts certain types of communication signals sent from the mobile device to the vehicle (e.g., (1) Low-power communication signals, low-frequency communication signals), and (2) amplify the intercepted communication signals to make the mobile device appear closer to the vehicle than it actually is.

[0028] The exemplary methods and apparatus disclosed herein include systems for detecting attempted relay attacks on communication between a mobile device (e.g., a key fob, a mobile phone as a key) and a vehicle, and for preventing entry into the vehicle compartment and / or preventing the ignition of the vehicle engine when such an attempted relay attack is detected. Examples disclosed herein utilize... Low-power (BLE) communication and Communication is used to detect the distance between the vehicle and a mobile device communicatively coupled to the vehicle. The controller determines a first calculated distance based on the signal strength of the BLE communication between the mobile device and the vehicle (e.g., a received signal strength indicator). Furthermore, the controller bases the distance between the mobile device and the vehicle on... The flight time of the communication determines the second calculated distance.

[0029] In some instances, the controller initiates operation in response to receiving a passenger compartment entry request (e.g., via a passive entry signal, door handle sensor, lift-up door sensor, threshold crossing a proximity detection zone, etc.) and / or an engine ignition request (e.g., via a passive start signal, etc.). Communication. The controller initiates communication upon receiving a request to enter the vehicle compartment, an engine ignition request, and / or a remote parking assistance request. Communication, because of its connection to... Compared to calculating distance based on communication signal strength, it is based on The time-of-flight time for communication allows for more accurate distance calculations. Furthermore, communication ratio Communication consumes more energy. Therefore, to conserve energy, it is only activated when a request to enter the carriage and / or an engine ignition request is received. Communication. Furthermore, low-frequency (LF) communication can be used to predict the distance between the mobile device and the vehicle. If the calculated distances match, the controller does not detect a relay attack and therefore enables a vehicle entry request and / or engine ignition request. If the calculated distances do not match, the controller detects a relay attack and therefore prevents vehicle entry and / or engine ignition.

[0030] Furthermore, in some instances, the controller activates in response to detecting that a user's mobile device is approaching the vehicle. Communication. For example, Wi-Fi communication is initiated after the key fob detects an LF signal pulse (ping) from the vehicle. In some instances, the LF signal pulse typically occurs when the key fob is approximately 3 meters from the vehicle. Initiating Wi-Fi communication before the user requests entry into the vehicle reduces the latency of passive entry actions (e.g., the user does not need to wait for Wi-Fi communication to activate upon approaching the door to complete the action, as Wi-Fi communication is already initiated). In other instances, Wi-Fi communication is initiated when the vehicle detects the phone / key is approaching the vehicle via a BLE-based Received Signal Strength Indicator (RSSI). In this instance, initiating Wi-Fi communication before the user requests entry at the vehicle door reduces the latency of passive entry actions. Furthermore, initiating Wi-Fi communication to determine the location of the user's phone / key allows the vehicle to determine whether and when to activate the user's welcome lighting, as distance determination based on Wi-Fi communication's time-of-flight is more accurate than distance determination based on BLE-based RSSI.

[0031] Furthermore, in some of the examples disclosed herein, the controller initiates the action in response to receiving a remote parking assistance request from the user's mobile device. Communication. In this example, Wi-Fi communication is initiated to determine the location of the user's mobile device for remote parking assistance, because time-of-flight (TOF) based on Wi-Fi communication is more accurate than RSSI based on BLE communication for distance determination.

[0032] As used herein, a "keychain" refers to a dedicated electronic mobile device that wirelessly communicates with a vehicle to unlock and / or lock one or more vehicle doors, open and / or close one or more vehicle doors, start the vehicle's engine, and / or initiate other vehicle functions. In some instances, the vehicle's user utilizes a mobile device that functions as a mobile phone-as-a-key for wireless communication with the vehicle. As used herein, a "mobile phone-as-a-key" refers to a mobile device (e.g., a smartphone, wearable device, smartwatch, tablet computer, etc.) that includes hardware and / or software used as a keychain.

[0033] As used herein, “passive entry” and “passive access” refer to a vehicle system that unlocks and / or opens one or more doors of a vehicle when it detects a key fob and / or a mobile phone, i.e., a key, approaching and / or nearing the vehicle door. For example, some passive entry systems trigger door opening in response to the detection of a key fob and / or a mobile phone, i.e., a key, such that the door unlocks when a user has touched the door handle. As used herein, “passive start” and “passive activation” refer to a vehicle system that initiates the ignition of the vehicle engine (e.g., to enable driving away) when it detects a key fob and / or a mobile phone, i.e., a key, inside the vehicle's passenger compartment. For example, some passive start systems trigger engine ignition in response to the detection of a key fob and / or a mobile phone, i.e., a key, such that the engine is started when the ignition button inside the vehicle's passenger compartment is pressed. As used herein, “passive entry passive start,” “passive entry passive start,” and “PEPS” refer to a vehicle system configured to perform passive entry and / or passive start of the vehicle.

[0034] As used herein, “remote parking,” “vehicle remote parking assist,” “remote parking assist,” and “RePA” refer to the remote initiation of a vehicle’s motion function without direct steering or speed input from the driver, enabling the vehicle to autonomously park itself in a parking location while the driver is outside the vehicle. For example, an autonomous unit’s remote parking assist system activates the vehicle’s motion function via a remote device when initiated by the driver to remotely park the vehicle in a parking location.

[0035] Turn to the attached diagram. Figure 1 An exemplary vehicle 100 and an exemplary mobility device 102 for a user 104 are illustrated according to the teachings of this document. For example, the mobility device 102 for the user 104 includes a key fob and / or a mobile phone as a key, the mobility device being configured to communicate with the vehicle 100 and / or start the vehicle. The vehicle 100 may be a standard gasoline-powered vehicle, a hybrid vehicle, an electric vehicle, a fuel cell vehicle, and / or any other type of vehicle with mobility realization. The vehicle 100 includes mobility-related components such as a powertrain with an engine, a transmission, suspension, drive axles, and / or wheels. The vehicle 100 may be non-autonomous, semi-autonomous (e.g., some conventional motion functions are controlled by the vehicle 100), or autonomous (e.g., motion functions are controlled by the vehicle 100 without direct driver input).

[0036] like Figure 1As shown, vehicle 100 includes engine 106 and ignition switch 108. For example, engine 106 includes an internal combustion engine, an electric motor, a hybrid engine, and / or any other power source that propels vehicle 100. Furthermore, ignition switch 108 enables user 104 and / or another driver of vehicle 100 to operate engine 106, battery, and / or electronic accessories of vehicle 100. For example, ignition switch 108 includes an on position, a start position, and a off position. In some instances, ignition switch 108 is a rotary switch and / or button that toggles between ignition switch positions (e.g., on position, start position, off position, accessory position). Additionally, in some instances, vehicle 100 includes an ignition switch sensor that detects the position of the ignition switch (e.g., on position, start position, off position).

[0037] Furthermore, the vehicle 100 shown in the example includes one or more doors 110, door handles 112 (also referred to as handles), and handle sensors 114 (also referred to as door handle sensors). For example, door 110 allows user 104 to enter and / or exit the passenger compartment of vehicle 100. Door handle 112 allows user 104 to open and / or close a corresponding door 110. For example, user 104 grasps and / or otherwise occupies a door 110 to open and / or close a door 110. Additionally, handle sensor 114 detects when door handle 112 is occupied (e.g., by user 104). For example, handle sensor 114 is a capacitive sensor and / or any other sensor configured to detect when door handle 112 is occupied. In some instances, vehicle 100 includes a passive entry system in which one or more doors 110 are unlocked when handle sensor 114 detects (e.g., by user 104) that a door handle 112 has been grasped and / or otherwise occupied and determines that user 104’s mobile device 104 is near vehicle 100.

[0038] In the illustrated example, vehicle 100 also includes a lift-up door 116 and a lift-up door sensor 118. For example, the lift-up door 116 is a door or panel that opens upwards to provide access to a cargo compartment located at the rear of vehicle 100. The lift-up door sensor 118 is configured to detect a request from user 104 to open the lift-up door 116 via a hands-free lift-up door system. For example, the lift-up door sensor 118 (e.g., a capacitive sensor, a kick sensor, etc.) is positioned on and / or beside the lift-up door 116 to monitor an activation area near the lift-up door 116. When user 104 extends a portion of their leg (e.g., a foot) into the activation area, the lift-up door sensor 118 detects a request to open the lift-up door 116 via the hands-free lift-up door system.

[0039] Vehicle 100 also includes a communication module 120. In some instances, the communication module 120 includes a wired or wireless network interface for communication with other devices and / or external networks. The external network may be a public network, such as the Internet; a private network, such as an intranet; or a combination thereof, and may utilize various networking protocols available now or developed in the future, including but not limited to TCP / IP-based networking protocols. In such instances, the communication module 120 also includes hardware (e.g., a processor, memory, storage device, antenna, etc.) and software for controlling the wired or wireless network interface. For example, the communication module 120 includes one or more communication controllers for cellular networks such as Global System for Mobile Communications (GSM), Universal Mobile Telecommunications System (UMTS), Long Term Evolution (LTE), and Code Division Multiple Access (CDMA).

[0040] In the illustrated example, communication module 120 includes hardware and firmware for establishing a wireless connection with mobile device 102 of user 104. For example, communication module 120 includes a communication module capable of wirelessly communicating with mobile device 102 when mobile device 102 is near vehicle 100. For example, communication module 120 includes an LF communication module 122 (also referred to as a low-frequency communication module, LF module, or low-frequency module) and a BLE communication module 124 (also referred to as... Low-power communication module, BLE module The system includes a low-power module and a Wi-Fi communication module 126 (also referred to as a Wi-Fi module). The LF communication module 122 is configured for low-frequency communication. For example, when the mobile device 102 is a key fob, the LF communication module 122 communicates with the mobile device 102 via low-frequency signals. The BLE communication module 124 is configured for... It communicates via the BLE protocol. In other words, the BLE communication module 124 implements... and / or Low-power (BLE) protocol. and the BLE protocol in Special interest group maintained This is described in Volume 6 of Specification 4.0 (and later versions). Furthermore, Wi-Fi communication module 126 is configured for... Protocol communication. For example, Wi-Fi communication module 126 implements a communication protocol according to IEEE 802.11a / b / g / n / ac and / or other local wireless network communication protocols. Alternatively or additionally, communication module 120 is configured to communicate wirelessly via near field communication (NFC), UWB (ultra-wideband), and / or any other short-range and / or local wireless communication protocol that enables communication module 120 to be communicatively coupled to the mobile device 102 of user 104.

[0041] like Figure 1 As shown, vehicle 100 also includes a signal controller 128. For example, signal controller 128 determines whether a relay attack is being attempted against vehicle 100 based on a request signal received by communication module 120 of vehicle 100. If signal controller 128 detects an attempted relay attack, then signal controller 128 prevents the execution of the requested vehicle function (e.g., entering the passenger compartment of vehicle 100, starting engine 106, etc.).

[0042] In operation, signal controller 128 is configured to receive signals from mobile device 102 when mobile device 102 is authenticated and / or paired with vehicle 100. For example, communication module 120 may authenticate mobile device 102 for communication before communicating with mobile device 102. That is, communication module 120 may pair mobile device 102 with communication module 120 of vehicle 100. To authenticate communication between communication module 120 and mobile device 102, communication module 120 intermittently broadcasts beacons (e.g., BLE beacons). When mobile device 102 is within the broadcast range of communication module 120, mobile device 102 receives the beacon and subsequently sends an authentication key code transmission. Communication module 120 authenticates mobile device 102 for communication upon receiving the authentication key from mobile device 102. In other instances, mobile device 102 broadcasts beacons, and communication module 120 subsequently receives the beacons to authenticate communication between mobile device 102 and communication module 120.

[0043] During pairing, mobile device 102 communicates with communication module 120 when mobile device 102 is within a threshold range (e.g., broadcast range) of vehicle 100 via a first communication protocol. That is, when mobile device 102 is within range of vehicle 100, communication module 120 receives first protocol communication from mobile device 102. For example, the first communication protocol is a BLE communication protocol, and the first protocol communication is BLE communication. In other instances, the first communication protocol is a low-power 900MHz Wi-Fi (802.11ah) communication protocol, and the first protocol communication is low-power 900MHz Wi-Fi (802.11ah) communication.

[0044] The signal controller 128 of the illustrated example determines a first distance between the mobile device 102 and the vehicle 100 based on BLE communication between the mobile device 102 and the BLE communication module 124 of the vehicle 100. For example, the signal controller 128 uses the signal strength of the BLE communication (e.g., Received Signal Strength Indicator (RSSI)) to calculate the first distance between the vehicle 100 and the mobile device 102. Alternatively, the signal controller 128 determines the first distance from the mobile device 102 and / or locates the mobile device 102 (i.e., identifies the position of the mobile device 102 relative to the vehicle 100) based on the RSSI of the BLE communication between the mobile device 102 and multiple communication modules (e.g., including communication module 120) of the vehicle 100. For example, the signal controller 128 uses triangulation and / or trilateration to locate the mobile device 102 based on the RSSI of the BLE communication between the mobile device 102 and the multiple communication modules. When the signal controller 128 identifies the distance to and / or locates the mobile device 102 based on the RSSI of BLE communication, the identified distance to and / or location of the mobile device 102 may have an error margin of approximately 1 to 2 meters when the mobile device 102 is approximately 3.0 meters away from the vehicle 100.

[0045] In the illustrated example, signal controller 128 is configured to determine that user 104 is approaching vehicle 100 in response to RSSI detection via BLE and / or LF communication that the mobile device 102 is within a threshold range 130 of vehicle 100. Furthermore, signal controller 128 is configured to determine that user 104 is approaching vehicle 100 when handle sensor 114 detects that door handle 112 is occupied (e.g., by user 104) and / or liftgate sensor 118 detects a request to open liftgate 116 (e.g., via…). Figure 6 The vehicle body control module 612 receives a passive entry request. In this example, the signal controller 128 attempts to verify the position of the user 104 relative to the vehicle 100 by locating the mobile device 102 via BLE and / or LF communication.

[0046] In the illustrated example, signal controller 128 is also configured to receive a passive start request when RSSI, which is used to locate mobile device 102 via BLE and / or LF communication, determines that mobile device 102 is inside the passenger compartment of vehicle 100. Signal controller 128 is also configured to receive the passive start request in response to ignition switch 108 receiving an ignition request (e.g., from user 104). Upon receiving the ignition request, signal controller 128 attempts to verify that user 104 is inside the passenger compartment of vehicle 100 by locating mobile device 102 via RSSI, which is used to locate mobile device 102 via BLE and / or LF communication.

[0047] Furthermore, upon detecting that user 104 has entered threshold range 130, signal controller 128 initiates second protocol communication (e.g., Wi-Fi communication) between vehicle 100's communication module 120 and the mobile device. That is, in response to detecting that user 104 is approaching vehicle 100, signal controller 128 initiates Wi-Fi communication between vehicle 100's communication modules 120. In some instances, mobile device 102 is configured to determine whether to initiate Wi-Fi communication for mobile device 102 when user 104 enters threshold range 130. In response to determining that Wi-Fi communication is not initiated, mobile device 102 initiates Wi-Fi communication.

[0048] The signal controller 128 also determines a second distance between the mobile device 102 and the vehicle 100 based on Wi-Fi communication between the mobile device 102 and the Wi-Fi communication module 126 of the vehicle 100. For example, the signal controller 128 uses the time-of-flight of the Wi-Fi communication to calculate the second distance between the vehicle 100 and the mobile device 102. Alternatively, the signal controller 128 may determine the second distance to the mobile device 102 and / or locate the mobile device 102 based on the time-of-flight of the Wi-Fi communication between the mobile device 102 and multiple communication modules of the vehicle 100. When the signal controller 128 identifies the distance to the mobile device 102 and / or locates the mobile device based on the time-of-flight of the Wi-Fi communication, the identified distance to the mobile device 102 and / or the location of the mobile device may have a significantly smaller error margin than the error margin associated with the RSSI of BLE communication. That is, although BLE communication consumes less energy than Wi-Fi communication, the distance determined based on the time-of-flight of Wi-Fi communication has a smaller error margin than the distance determined based on the RSSI of BLE communication. Furthermore, by initiating Wi-Fi communication only when a request signal is received, vehicle 100 is able to reduce the amount of energy required to determine the distance to mobile device 102 with a smaller margin of error.

[0049] Furthermore, in some instances (e.g., where the mobile device 102 is a key fob), the signal controller 128 determines a third distance between the mobile device 102 and the vehicle 100 based on the RSSI of the LF communication between the mobile device 102 and the LF communication module 122 of the vehicle 100. Alternatively, the signal controller 128 may determine the third distance from the mobile device 102 and / or locate the mobile device 102 based on the RSSI of the LF communication between the mobile device 102 and multiple communication modules of the vehicle 100 (e.g., using triangulation and / or trilateration). When the signal controller 128 identifies the distance from the mobile device 102 and / or locates the mobile device based on the RSSI of the LF communication, the identified distance from the mobile device 102 and / or the position of the mobile device may have an error margin of approximately 0.5 meters when the mobile device 102 is approximately 3.0 meters from the vehicle 100.

[0050] The signal controller 128 in the example shown determines whether a relay attack is being attempted on communication with the mobile device 102 by comparing distances calculated based on different communication protocols. Figure 2 The image shows a vehicle 100 and a mobile device 102 attempting a relay attack. Figure 3 The diagram illustrates a vehicle 100 and a mobile device 102 when no relay attack is attempted. For example, a relay attack is performed by a device 202 of an attacker 204, which: (1) intercepts BLE and / or LF communication signals transmitted from the vehicle 100, and (2) amplifies the intercepted BLE and / or LF communication signals such that the RSSI of the BLE and / or LF communication signals increases when received by the mobile device 102. Furthermore, when the mobile device 102 sends a return signal with the RSSI back to the vehicle 100, the vehicle 100 perceives the mobile device 102 as being closer to the vehicle 100 than it actually is due to the amplified RSSI of the intercepted BLE and / or LF communication signals.

[0051] The time-of-flight of a signal is identified based on the time spent sending and receiving the signal. In other words, this amplification of the signal does not manipulate the time-of-flight of the signal. Furthermore, the signal controller 128 in the illustrated example determines the presence of a relay attack by comparing a second distance calculated based on the time-of-flight of Wi-Fi communication with a first distance calculated based on RSSI of BLE communication and / or a third distance calculated based on RSSI of LF communication.

[0052] For example, if the second distance does not match the first distance (and the third distance, if calculated), then the signal controller 128 detects that a relay attack is occurring (e.g., Figure 2 (As depicted). Furthermore, if the second distance matches the first distance (and the third distance, if calculated), then the signal controller 128 detects that no relay attack has occurred (e.g., as...). Figure 3 (As depicted). In some instances, to account for error margins in different methods used to determine the distance between mobile device 102 and vehicle 100, the signal controller 128 determines that a relay attack is being attempted if the first range does not at least partially overlap with the second range. In such an instance, the first range is determined based on a first distance and a first error margin corresponding to the RSSI for BLE communication, and the second range is determined based on a second distance and a second error margin corresponding to the time of flight for Wi-Fi communication. Alternatively, if a third range is determined based on a third distance and a third error margin corresponding to the RSSI for LF communication, the signal controller 128 determines that a relay attack is being attempted if the third range does not at least partially overlap with the second range. Furthermore, the signal controller 128 determines that no relay attack is being attempted in response to the second range at least partially overlapping with the first range (or the third range, if calculated).

[0053] In response to detecting an attempted relay attack, signal controller 128 prevents the execution of vehicle functions corresponding to the request. For example, if a relay attack is being carried out on communications including an entry request, signal controller 128 prevents entry into the passenger compartment of vehicle 100 by maintaining the locked states of door 110 and liftgate 116. If a relay attack is being carried out on communications including a passive start request, signal controller 128 prevents the ignition of engine 106.

[0054] Furthermore, the signal controller 128 in the illustrated example is also configured to receive requests from user 104. For example, signal controller 128 is configured to receive remote parking assistance requests from mobile device 102 via BLE communication. Upon receiving a request, signal controller 128 initiates Wi-Fi communication between communication module 120 of vehicle 100 and mobile device 102. In some instances, mobile device 102 is configured to determine whether to initiate Wi-Fi communication for mobile device 102 when sending a request. In response to determining that Wi-Fi communication is not initiated, mobile device 102 initiates Wi-Fi communication. When Wi-Fi communication is initiated, signal controller 128 determines the distance between mobile device 102 and vehicle 100 based on the time-of-flight of the Wi-Fi communication. Subsequently, signal controller 128 compares the distance with a threshold distance (e.g., threshold range 130) corresponding to the performance of remote parking assistance. In response to determining that the calculated distance is within the threshold range, signal controller 128 enables vehicle 100 to perform the remote parking assistance function. Otherwise, in response to determining that the calculated distance is not within the threshold range, the signal controller 128 prevents the vehicle 100 from performing the remote parking assistance function.

[0055] Figure 4Wi-Fi communication between mobile device 102 and vehicle 100 is depicted via a Wi-Fi communication module 126 that enables the determination of the time-of-flight of the Wi-Fi communication. For example... Figure 4 As shown, the signal controller 128 sends and receives a series of Wi-Fi communication signals via the Wi-Fi communication module 126. The signal controller 128 identifies the start and end pulses of each signal. Subsequently, the signal controller 128 determines the time-of-flight of the Wi-Fi communication based on the start and end pulses. That is, the time-of-flight corresponds to the amount of time it takes for the Wi-Fi communication module 126 to travel to and from the mobile device 102 to send or receive the first Wi-Fi communication signal and for the mobile device 102 to travel to and from the Wi-Fi communication module 126 to receive or send the return signal of the Wi-Fi communication. The signal controller 128 determines the distance to the mobile device 102 by determining the time spent sending and receiving signals to and from the mobile device 102 via Wi-Fi communication.

[0056] In the illustrated example, mobile device 102 sends a first signal 402 to Wi-Fi communication module 126. For example, mobile device 102 identifies the start pulse of the first signal 402, and Wi-Fi communication module 126 identifies the end pulse of the first signal 402 to determine the duration of the first signal. Subsequently, Wi-Fi communication module 126 sends a return signal 404 to mobile device 102. For example, Wi-Fi communication module 126 identifies the start pulse of the return signal 404, and mobile device 102 identifies the end pulse of the return signal 404 to determine the duration of a second signal. Mobile device 102 determines the time-of-flight of the Wi-Fi communication by averaging the durations of the first and second signals together. Furthermore, mobile device 102 sends another signal 406 to Wi-Fi communication module 126 so that signal controller 128 of vehicle 100 can receive the time-of-flight of the Wi-Fi communication. In other instances, the Wi-Fi communication module 126 sends a first signal 402 to the mobile device 102, and the mobile device 102 sends a return signal 404 to the Wi-Fi communication module 126, enabling the signal controller 128 to identify the time-of-flight of the Wi-Fi communication. Furthermore, in some instances, the signal controller 128 increases the temporal resolution of the time-of-flight by stitching together multiple round-trip signals between the Wi-Fi communication module 126 and the mobile device 102.

[0057] Figure 5 This is a block diagram of the electronic components 500 of the mobile device 102. (Example) Figure 5As shown, the electronic component 500 includes a processor 502, a memory 504, one or more input devices 506, an LF communication module 508 (e.g., when the mobile device 102 is a key fob), a BLE communication module 510, and a Wi-Fi communication module 512.

[0058] Processor 502 may be any suitable processing device or collection of processing devices, such as, but not limited to: a microprocessor; a microcontroller-based platform; an integrated circuit; one or more field-programmable gate arrays (FPGAs); and / or one or more application-specific integrated circuits (ASICs). Memory 504 may be volatile memory (e.g., RAM, including non-volatile RAM, magnetic RAM, ferroelectric RAM, etc.); non-volatile memory (e.g., disk storage, flash memory, electrically programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), memristor-based non-volatile solid-state memory, etc.); immutable memory (e.g., EPROM), read-only memory, and / or mass storage devices (e.g., hard disk drives, solid-state drives, etc.). In some instances, memory 504 includes a variety of memories, particularly volatile and non-volatile memories.

[0059] Memory 504 is a computer-readable medium on which one or more sets of instructions, such as software for operating the methods of this disclosure, may be embedded. The instructions may embody one or more of the methods or logic described herein. For example, during instruction execution, the instructions reside wholly or at least partially within any one or more of memory 504, the computer-readable medium, and / or processor 502.

[0060] The terms "non-transitory computer-readable medium" and "computer-readable medium" include single or multiple media, such as centralized or distributed databases, and / or associated caches and servers storing one or more sets of instructions. Furthermore, the terms "non-transitory computer-readable medium" and "computer-readable medium" include any tangible medium capable of storing, encoding, or carrying a set of instructions for execution by a processor or to cause a system to perform any one or more of the methods or operations disclosed herein. As used herein, the term "computer-readable medium" is explicitly defined to include any type of computer-readable storage device and / or storage disk and excludes propagating signals.

[0061] Input device 506 enables user 104 to provide instructions, commands, and / or data. In an example where mobile device 102 is a key fob, input device 506 includes buttons for unlocking vehicle door 110, locking vehicle door 110, opening vehicle liftgate 116, emergency alarm, and remotely starting vehicle engine 106. In an example where mobile device 102 is a mobile phone as a key, input device 506 includes a touchscreen and / or one or more buttons for operating door 110, liftgate 116, engine 106, etc., and / or activating remote parking assistance.

[0062] The LF communication module 508 (also known as a low-frequency communication module, LF module, or low-frequency module) is configured for low-frequency communication. For example, the LF communication module 508 includes hardware and firmware to establish a wireless connection with the LF communication module 122 of the vehicle 100 via a low-frequency signal when the mobile device 102 approaches the vehicle 100.

[0063] BLE communication module 510 (also known as Low-power communication module, BLE module The low-power module is configured for use And / or BLE protocol communication. For example, BLE communication module 510 includes hardware and firmware to communicate via... And / or BLE establishes a wireless connection with the BLE communication module 124 of the vehicle 100. That is, the BLE communication module 510 implements... and / or Low-power (BLE) protocol.

[0064] The Wi-Fi communication module 512 (also known as the Wi-Fi module) is configured for use Protocol communication. For example, Wi-Fi communication module 512 includes hardware and firmware for establishing a wireless connection with Wi-Fi communication module 126 of vehicle 100 via the IEEE 802.11a / b / g / n / ac protocol and / or other local wireless network communication protocols when mobile device 102 approaches vehicle 100.

[0065] Alternatively, the electronic components 500 of the mobile device 102 may include other communication modules configured to communicate wirelessly via near-field communication (NFC), UWB (ultra-wideband), and / or any other short-range and / or local wireless communication protocols that enable the mobile device 102 to be communicatively coupled to the communication module 120 of the vehicle 100.

[0066] Figure 6 This is a block diagram of electronic component 600 in vehicle 100. (For example...) Figure 6 As shown, the electronic components 600 include an on-board computing platform 601, an ignition switch 108, a communication module 120, a sensor 602, an electronic control unit (ECU) 604, and a vehicle data bus 606.

[0067] The in-vehicle computing platform 601 includes a microcontroller unit, a controller or processor 608, and a memory 610. In some instances, the processor 608 of the in-vehicle computing platform 601 is configured to include a signal controller 128. Alternatively, in some instances, the signal controller 128 is integrated into another electronic control unit (ECU) having its own processor 608 and memory 610. The processor 608 can be any suitable processing device or collection of processing devices, such as, but not limited to: a microprocessor, a microcontroller-based platform, an integrated circuit, one or more field-programmable gate arrays (FPGAs) and / or one or more application-specific integrated circuits (ASICs). The memory 610 can be volatile memory (e.g., RAM, including non-volatile RAM, magnetic RAM, ferroelectric RAM, etc.); non-volatile memory (e.g., disk storage, flash memory, EPROM, EEPROM, memristor-based non-volatile solid-state memory, etc.); immutable memory (e.g., EPROM), read-only memory, and / or mass storage devices (e.g., hard disk drives, solid-state drives, etc.). In some instances, memory 610 includes multiple types of memory, particularly volatile and non-volatile memory.

[0068] Memory 610 is a computer-readable medium on which one or more sets of instructions, such as software for operating the methods of this disclosure, may be embedded. The instructions may embody one or more of the methods or logic described herein. For example, during instruction execution, the instructions reside wholly or at least partially within any one or more of memory 610, the computer-readable medium, and / or processor 608.

[0069] The ignition switch 108 in the illustrated example is an input device that enables the user to start the engine 106. Furthermore, the communication module 120 in the illustrated example includes: an LF communication module 122 configured for wireless communication via low-frequency signals; a BLE communication module 124 configured for wireless communication according to the BLE protocol; and a Wi-Fi communication module 126 configured for wireless communication according to the Wi-Fi protocol (e.g., IEEE 802.11a / b / g / n / ac).

[0070] Sensors 602 are arranged in and around vehicle 100 to monitor characteristics of vehicle 100 and / or the environment in which vehicle 100 is located. One or more sensors 602 may be installed to measure characteristics of the external surroundings of vehicle 100. Alternatively or additionally, one or more sensors 602 may be installed inside the passenger compartment or body of vehicle 100 (e.g., engine compartment, wheel wells, etc.) to measure characteristics of the interior of vehicle 100. For example, sensors 602 include accelerometers, odometers, tachometers, pitch and yaw sensors, wheel speed sensors, microphones, tire pressure sensors, biometric sensors, and / or any other suitable type of sensor. In the illustrated example, sensors 602 include a handle sensor 114 that monitors occupancy of door handle 112 (e.g., by user 104) and a liftgate sensor 118 that monitors a request to open liftgate 116.

[0071] ECU 604 monitors and controls the subsystems of vehicle 100. For example, ECU 604 is a discrete collection of electronic devices, including its own circuitry (e.g., integrated circuits, microprocessors, memory, storage devices, etc.) and firmware, sensors, actuators, and / or mounting hardware. ECU 604 communicates and exchanges information via a vehicle data bus (e.g., vehicle data bus 606). Furthermore, ECU 604 can transmit characteristics (e.g., ECU 604 status, sensor readings, control status, error and diagnostic codes, etc.) to each other and / or receive requests from each other. For example, vehicle 100 may have seventy or more ECUs 604, located in various positions around vehicle 100 and communicatively coupled by vehicle data bus 606.

[0072] In the illustrated example, ECU 604 includes a body control module 612 and an engine control unit 614. The body control module 612 controls one or more subsystems throughout the vehicle 100, such as power windows, power locks, an anti-theft control system, power mirrors, etc. For example, the body control module 612 includes circuitry for one or more of the following: drive relays (e.g., to control wiper fluid, etc.), brushed DC motors (e.g., to control power seats, power locks, power windows, wipers, etc.), stepper motors, LEDs, etc. Furthermore, the engine control unit 614 controls the operation of the engine 106 of the vehicle 100 (e.g., ignition, remote start, passive start, etc.).

[0073] The vehicle data bus 606 communicatively couples the ignition switch 108, communication module 120, on-board computing platform 601, sensor 602, and ECU 604. In some instances, the vehicle data bus 606 includes one or more data buses. The vehicle data bus 606 can comply with the Controller Area Network (CAN) bus protocol, the System Transmission to Media (MOST) bus protocol, the Controller Area Network Flexible Data (CAN-FD) bus protocol (ISO 11898-7), and / or the K-line bus protocol (ISO 9141 and ISO 14230-1) and / or Ethernet as defined by the International Organization for Standardization (ISO) 11898-1. TM It is implemented using bus protocols such as IEEE 802.3 (since 2002).

[0074] Figure 7 This is a flowchart of an exemplary method 700 for detecting mobile device relay attacks and managing the power of mobile device interactions in a vehicle. Figure 7 The flowchart represents the storage in memory (such as...) Figure 6 The machine-readable instructions in the memory 610, and the machine-readable instructions include one or more programs, which, when dictated by a processor (such as...) Figure 6 When the processor 608 executes, it enables vehicle 100 to achieve Figure 1 and Figure 6 An exemplary signal controller 128. Although referenced Figure 7 The flowchart shown illustrates an exemplary procedure, but many other methods for implementing the exemplary signal controller 128 can be used alternatively. For example, the execution order of the blocks can be rearranged, changed, eliminated, and / or combined to perform method 700. Furthermore, because of the combination... Figures 1 to 6 The components disclose method 700, so some functions of these components will not be described in detail below.

[0075] Initially, at block 702, signal controller 128 determines whether proximity detection is valid for vehicle 100. That is, signal controller 128 identifies whether it is monitoring user 104 crossing threshold range 130 of vehicle 100 via RSSI monitoring using BLE and / or LF communication. In response to signal controller 128 determining proximity detection is invalid, method 700 proceeds to block 714. Otherwise, in response to signal controller 128 determining proximity detection is valid, method 700 proceeds to block 704.

[0076] At box 704, signal controller 128 determines a distance (e.g., a first distance and / or a third distance) calculated based on the signal strength of BLE and / or LF communication between vehicle 100 and mobile device 102.

[0077] At block 706, signal controller 128 determines whether user 104 is approaching and / or nearing vehicle 100 by determining whether the distance determined based on BLE communication and / or LF communication is less than a threshold range 130 for vehicle 100. In response to signal controller 128 determining that user 104 is not within the threshold range 130, method 700 returns to block 702. Otherwise, in response to signal controller 128 determining that user 104 is within the threshold range 130 for proximity detection, method 700 proceeds to block 708.

[0078] At block 708, signal controller 128 activates Wi-Fi communication module 126 of vehicle 100 to initiate Wi-Fi communication between Wi-Fi communication module 126 of vehicle 100 and Wi-Fi communication module 512 of mobile device 102. At block 710, signal controller 128 determines distance (e.g., a second distance) based on the time-of-flight of the Wi-Fi communication between vehicle 100 and mobile device 102.

[0079] In some instances, when determining distance based on time-of-flight using Wi-Fi communication, the signal controller 128 determines whether the calculated distances match each other. That is, the signal controller 128 compares a first distance calculated based on BLE communication and / or a third distance calculated based on LF communication with a second distance calculated based on Wi-Fi communication. In some such instances, if the calculated distances match each other and are less than a threshold distance, then the signal controller 128 activates the welcome lighting of vehicle 100. Otherwise, if the calculated distances do not match each other, then the signal controller 128 does not activate the welcome lighting.

[0080] At block 712, signal controller 128 determines whether a passive entry request and / or passive start request has been received. For example, signal controller 128 may receive a passive entry request from the handle sensor 114, liftgate sensor 118, ignition switch 108, etc., via body control module 612. In response to signal controller 128 determining that a passive entry request and / or passive start request has been received, the method proceeds to block 722. Otherwise, in response to signal controller 128 determining that no passive entry request or passive start request has been received, the method returns to block 702.

[0081] Returning to block 714, the signal controller 128 further determines whether a passive entry request and / or passive start request has been received if it identifies an invalid proximity detection for vehicle 100. In response to the signal controller 128 determining that a passive entry request and / or passive start request has been received, the method proceeds to block 716. Otherwise, in response to the signal controller 128 determining that no passive entry request or passive start request has been received, the method returns to block 702.

[0082] At box 716, signal controller 128 determines a distance (e.g., a first distance and / or a third distance) calculated based on the signal strength of BLE and / or LF communication between vehicle 100 and mobile device 102, the distance being used to initiate remote parking assistance.

[0083] At block 718, signal controller 128 activates Wi-Fi communication module 126 of vehicle 100 to initiate Wi-Fi communication between Wi-Fi communication module 126 of vehicle 100 and Wi-Fi communication module 512 of mobile device 102. At block 720, signal controller 128 determines distance (e.g., a second distance) based on the time-of-flight of the Wi-Fi communication between vehicle 100 and mobile device 102.

[0084] At box 722, signal controller 128 determines whether the calculated distances to mobile device 102 match each other. That is, signal controller 128 compares a first distance calculated based on BLE communication and / or a third distance calculated based on LF communication with a second distance calculated based on Wi-Fi communication. For example, the first distance corresponds to a range (e.g., a first range) determined based on the first distance and an error margin (e.g., a first error margin), which corresponds to the distance determined by RSSI based on BLE communication; the second distance corresponds to a range (e.g., a second range) determined based on the second distance and an error margin (e.g., a second error margin), which corresponds to the distance determined based on time of flight and Wi-Fi communication; and the third distance corresponds to a range (e.g., a third range) determined based on the third distance and an error margin (e.g., a third error margin), which corresponds to the distance determined by RSSI based on LF communication. In this example, if the second range overlaps with the first range and / or the third range, then signal controller 128 determines that the calculated distances match.

[0085] In response to the signal controller 128 determining that the distances match, the signal controller 128 determines that no relay attack is being performed on communication with vehicle 100. Then, method 700 proceeds to block 724, where the signal controller 128 enables access to the passenger compartment and / or enables ignition of engine 106, corresponding to a request to trigger Wi-Fi communication. Otherwise, in response to the signal controller 128 determining that the distances do not match, the signal controller 128 determines that a relay attack is being performed on communication with vehicle 100. Then, method 700 proceeds to block 726, where the signal controller 128 prevents access to the passenger compartment and / or prevents ignition of engine 106, corresponding to a request to trigger Wi-Fi communication.

[0086] Figure 8This is a flowchart of an exemplary method 800 for remote parking assistance for vehicle startup. Figure 8 The flowchart represents the storage in memory (such as...) Figure 6 The machine-readable instructions in the memory 610, and the machine-readable instructions include one or more programs, which, when dictated by a processor (such as...) Figure 6 When the processor 608 executes, it enables vehicle 100 to achieve Figure 1 and Figure 6 An exemplary signal controller 128. Although referenced Figure 8 The flowchart shown describes an exemplary procedure, but many other methods for implementing the exemplary signal controller 128 can be used alternatively. For example, the execution order of the blocks can be rearranged, changed, eliminated, and / or combined to execute method 800. Furthermore, because of the combination... Figures 1 to 6 The components disclose method 800, so some functions of these components will not be described in detail below.

[0087] At block 802, signal controller 128 determines whether remote parking assistance has been activated. In response to signal controller 128 determining that remote parking assistance has not been activated, method 800 returns to block 802. Otherwise, in response to signal controller 128 determining that remote parking assistance has been activated, method 800 proceeds to block 804.

[0088] At block 804, signal controller 128 activates Wi-Fi communication module 126 of vehicle 100 to initiate Wi-Fi communication between Wi-Fi communication module 126 of vehicle 100 and Wi-Fi communication module 512 of mobile device 102. At block 806, signal controller 128 determines distance (e.g., a second distance) based on the time-of-flight of the Wi-Fi communication between vehicle 100 and mobile device 102.

[0089] At block 808, signal controller 128 determines whether the distance determined by the time-of-flight based on Wi-Fi communication is less than a threshold distance for performing remote parking assistance. In response to signal controller 128 determining that the calculated distance is less than the threshold distance, method 800 proceeds to block 810, where signal controller 128 enables vehicle 100 to perform remote parking assistance. Otherwise, in response to signal controller 128 determining that the calculated distance is greater than the threshold distance, method 800 proceeds to block 812, where signal controller 128 prevents vehicle 100 from performing remote parking assistance.

[0090] In this application, the use of contrastive conjunctions is intended to include the conjunction. The use of definite or indefinite articles is not intended to indicate cardinality. Specifically, references to “the” object or “an” and “a” object are intended to also indicate one of a possible plurality of such objects. Furthermore, the conjunction “or” can be used to convey concurrent features rather than mutually exclusive alternatives. In other words, the conjunction “or” should be understood as including “and / or”. The term “comprising” is inclusive and has the same scope as “including” and “containing”. In addition, as used herein, the terms “module,” “unit,” and “node” refer to hardware having circuitry typically combined with sensors to provide communication, control, and / or monitoring capabilities. “Module,” “unit,” and “node” may also include firmware executed on the circuitry.

[0091] The above embodiments, and especially any "preferred" embodiments, are possible examples of implementations and are presented merely for the purpose of clearly understanding the principles of the invention. Many variations and modifications can be made to the above embodiments without substantially departing from the spirit and principles of the technology described herein. All modifications are intended to be included within the scope of this disclosure and are protected by the appended claims.

[0092] According to the present invention, a vehicle is provided, the vehicle comprising: a first module for first protocol communication; a second module for second protocol communication; and a controller configured to: determine a first distance from a mobile device using the signal strength of the first protocol communication; determine a second distance from the mobile device using the time-of-flight of the second protocol communication upon receiving an entry request; and prevent entry when the second distance does not match the first distance.

[0093] According to one embodiment, in response to determining that the second distance does not match the first distance, the controller detects a relay attack on communication with the mobile device.

[0094] According to one embodiment, the first protocol communication is Low-power communication, and the second protocol communication is communication.

[0095] According to one embodiment, the first protocol communication is a low-power 900MHz protocol. (802.11ah) communication, and the second protocol communication is high frequency 60GHz. communication.

[0096] According to one embodiment, the second distance determined based on the second protocol communication has a smaller error margin than the first distance determined based on the first protocol communication, and wherein the first protocol communication consumes less energy than the second protocol communication.

[0097] According to one embodiment, the first distance corresponds to a first range, which is determined based on the first distance and a first error margin, the second distance corresponds to a second range, which is determined based on the second distance and a second error margin, and the controller determines that the second distance matches the first distance when the second range at least partially overlaps with the first range.

[0098] According to one embodiment, the controller receives the entry request after the mobile device is within a threshold proximity distance of the vehicle, the entry request including at least one of a passive entry request and a passive start request.

[0099] According to one embodiment, the invention is further characterized by a door handle and a handle sensor, wherein the controller is configured to receive the entry request from the handle sensor when the handle sensor detects that the door handle is occupied.

[0100] According to one embodiment, the invention is further characterized by a carriage and a door, wherein the controller prevents entry into the carriage by maintaining the door in a locked state.

[0101] According to one embodiment, the invention is further characterized by an engine and an ignition switch for receiving an ignition request for the engine, wherein the controller is configured to: initiate second protocol communication between the second module and the mobile device in response to receiving the ignition request, determine the second distance using the flight time of the second protocol communication with the mobile device, and prevent the engine from igniting when the second distance does not match the first distance.

[0102] According to one embodiment, the controller initiates the second protocol communication between the second module and the mobile device in response to receiving the access request.

[0103] According to one embodiment, the flight time corresponds to the amount of time it takes for the second module to receive a first signal of the second protocol communication from the mobile device and for the mobile device to receive a return signal of the second protocol communication from the second module.

[0104] According to one embodiment, the controller is configured to: send and receive a series of signals for the second protocol communication via the first module; identify a start pulse and an end pulse for each of the signals; and determine the flight time for the second protocol communication based on the start pulse and the end pulse.

[0105] According to one embodiment, in order to increase the temporal resolution of the flight time, the controller is configured to stitch together multiple round-trip signals between the second module and the mobile device.

[0106] According to one embodiment, the invention is further characterized by a third module for low-frequency communication, wherein the controller is configured to determine a third distance from the mobile device based on the low-frequency communication, and to further prevent entry when the second distance does not match the third distance.

[0107] According to the present invention, a method includes: determining a first distance between a vehicle and a mobile device via a processor based on the signal strength of a first protocol communication; determining a second distance between the vehicle and the mobile device based on the time of flight of a second protocol communication upon receiving an entry request; and preventing entry into the vehicle compartment via the processor when the second distance does not match the first distance.

[0108] According to one embodiment, the invention is further characterized by initiating the second protocol communication between the vehicle's communication module and the mobile device in response to receiving the access request.

[0109] According to the present invention, a system is provided having a mobile device; and a vehicle including a controller configured to: determine a first distance between the vehicle and the mobile device using the signal strength of a first protocol communication; determine a second distance between the vehicle and the mobile device using the time-of-flight of a second protocol communication upon receiving an entry request; and prevent entry when the second distance does not match the first distance.

[0110] According to one embodiment, the mobile device is a keychain or a mobile phone, i.e., a key.

[0111] According to one embodiment, the mobile device is configured to: determine whether to initiate the second protocol communication for the mobile device in response to the access request, and initiate the second protocol communication in response to determining that the second protocol communication has not been initiated.

Claims

1. A vehicle comprising: A first module, the first module being used for first protocol communication; The second module is used for second protocol communication; as well as Controller, the controller is used for: The first distance to the mobile device is determined by using the signal strength of the first protocol communication. Upon receiving an entry request, the second distance from the mobile device is determined using the time-of-flight of the second protocol communication; as well as Entry is blocked when the second distance does not match the first distance; Wherein the first distance corresponds to a first range, the second distance corresponds to a second range, and the controller determines that the second distance matches the first distance when the second range at least partially overlaps with the first range; The first range is determined based on the first distance and the first error margin, and the second range is determined based on the second distance and the second error margin.

2. The vehicle of claim 1, wherein in response to determining that the second distance does not match the first distance, the controller detects a relay attack on communication with the mobile device.

3. The vehicle of claim 1, wherein the first protocol communication is Bluetooth Low Energy communication, and the second protocol communication is Wi-Fi communication.

4. The vehicle of claim 1, wherein the second distance determined based on the second protocol communication has a smaller error margin than the first distance determined based on the first protocol communication, and wherein the first protocol communication consumes less energy than the second protocol communication.

5. The vehicle of claim 1, wherein the controller receives the entry request after the mobile device is within a threshold proximity distance of the vehicle, the entry request including at least one of a passive entry request and a passive start request.

6. The vehicle of claim 1, further comprising a door handle and a handle sensor, the controller being configured to receive the entry request from the handle sensor when the handle sensor detects that the door handle is occupied.

7. The vehicle of claim 1, further comprising a passenger compartment and doors, wherein the controller prevents entry into the passenger compartment by maintaining the doors in a locked state.

8. The vehicle of claim 1, further comprising an engine and an ignition switch for receiving an ignition request for the engine, wherein the controller is configured to: In response to receiving the ignition request, initiate the second protocol communication between the second module and the mobile device; The second distance is determined using the flight time of communication with the mobile device using the second protocol. as well as When the second distance does not match the first distance, the engine ignition is prevented.

9. The vehicle of claim 1, wherein the controller is configured to: A series of signals are sent and received via the first module in accordance with the second protocol communication. Identify the start pulse and end pulse for each of the signals; and The flight time for the second protocol communication is determined based on the start pulse and the end pulse.

10. The vehicle of claim 1, wherein, in order to increase the temporal resolution of the flight time, the controller is configured to stitch together multiple round-trip signals between the second module and the mobile device.

11. The vehicle of claim 1, further comprising a third module for low-frequency communication, wherein the controller is configured to determine a third distance from the mobile device based on the low-frequency communication, and to further prevent entry when the second distance does not match the third distance.

12. A method for detecting and managing power in mobile device relay attacks on vehicles, comprising: The processor determines the first distance between the vehicle and the mobile device based on the signal strength of the first protocol communication. Upon receiving an entry request, a second distance between the vehicle and the mobile device is determined based on the flight time of the second protocol communication; as well as When the second distance does not match the first distance, entry into the carriage is prevented via the processor. Wherein the first distance corresponds to a first range, the second distance corresponds to a second range, and when the second range at least partially overlaps with the first range, it is determined that the second distance matches the first distance; The first range is determined based on the first distance and the first error margin, and the second range is determined based on the second distance and the second error margin.

13. A system comprising: Mobile devices; as well as The vehicle includes a controller, the controller being configured to: The first distance between the vehicle and the mobile device is determined by using the signal strength of the first protocol communication. Upon receiving an entry request, the second distance between the vehicle and the mobile device is determined using the time-of-flight of the second protocol communication; as well as Entry is blocked when the second distance does not match the first distance; Wherein the first distance corresponds to a first range, the second distance corresponds to a second range, and the controller determines that the second distance matches the first distance when the second range at least partially overlaps with the first range; The first range is determined based on the first distance and the first error margin, and the second range is determined based on the second distance and the second error margin.

14. The system of claim 13, wherein the mobile device is configured to: In response to the access request, determine whether to initiate the second protocol communication for the mobile device; and In response to determining that the second protocol communication has not been initiated, the second protocol communication is initiated.

Images