BLE Passive Vehicle Access Control Defending Against Relay Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Standard Passive Entry Systems (PES) are vulnerable to relay attacks, which allow attackers to deceive the key fob into believing the driver is in proximity, leading to unauthorized vehicle access, as current systems rely on radio frequency signals that are difficult to secure and can be manipulated by relay apparatuses.

Innovation Solution

A BLE passive vehicle access control system that uses a location receiver assembly, including GPS and a magnetometer, to determine the coordinates and magnetic field intensity of the vehicle and external device, comparing these to ensure proximity and authenticity, and encrypting the magnetic field data with a secret key to prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If radio frequency signals are used for passive entry systems, then communication range and ease of operation are improved, but vulnerability to relay attacks increases

Engineering Contradiction:
Improvepassive entry operationVSAvoidsecurity against relay attacks
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces location receiver assemblies (GPS) and magnetometers as intermediary verification mechanisms. These components act as mediators that independently verify the physical proximity and location of the key fob relative to the vehicle, providing an additional layer of authentication beyond radio frequency signals. The magnetometer specifically serves as an intermediary that detects the magnetic field signature of the key fob, creating a physical verification layer that relay attacks cannot replicate.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the verification parameters from solely radio frequency signal presence to include geographic coordinates (latitude, longitude, altitude) and magnetic field intensity. By transforming the authentication criteria into multiple physical parameters that must simultaneously match, the system makes relay attacks ineffective because attackers cannot replicate the precise spatial and magnetic field conditions required for authentication.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If multiple verification components are added to defend against relay attacks, then security is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity against relay attacksVSAvoidsystem structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the vehicle's existing communication system multi-functional by enabling it to perform both radio frequency communication and location verification through integrated location receiver assemblies. The magnetometer is incorporated into the existing key fob and vehicle communication architecture, allowing a single device to perform multiple functions: RF communication, location tracking, and magnetic field verification. This reduces the need for entirely separate verification systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines multiple verification functions (GPS location tracking and magnetometer detection) into a unified authentication process that operates through the existing passive entry communication channel. Rather than adding separate independent systems, the patent merges location and magnetic field verification with the RF communication system, processing all verification data through a single authentication protocol between the key fob and vehicle.

Inventive Principle:
Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Effectively defends against relay attacks by ensuring that only the genuine device in close proximity can communicate with the vehicle, thereby enhancing security and preventing unauthorized access.

Implementation Method 1

a magnetometer configured to measure an intensity of magnetic field generated by the vehicle

Methodology Applied
Scientific EffectMagnetic field measurement: Magnetometer

Implementation Method 2

a location receiver assembly, the location receiver assembly is configured to determine a coordinate of at least one of the vehicle or the external device

Methodology Applied
Scientific EffectGPS satellite positioning:

Data Source

PatentUS20180326946A1Bluetooth low energy (BLE) passive vehicle access control system for defending the system against relay attacks and method thereof
Publication Date: 2018.11.15 ROBERT BOSCH GMBH
  • US20180326946A1 patent drawing
  • US20180326946A1 patent drawing
  • US20180326946A1 patent drawing

AI summary

A Bluetooth Low-Energy (BLE) passive vehicle access control system integrated into a vehicle and an external device to defend the system against relay attacks is provided. The system includes a location received configured to determine a current location of the system. The location of the system may be in the form of latitude and longitude, altitude, or combination thereof. The system further includes a vehicle and an external device. The location receiver may be integrated into the vehicle, the external device, or both. A processor is communicatively coupled the location receiver to any number of wireless transceivers. A comparator configured to compare the current location of both the vehicle and the external device may be optionally coupled to the location receiver and the processor. Any number of electromagnets for generating a magnetic field may be installed in the vehicle and located adjacent to the transceivers. A magnetometer of the external device measures the intensity of the magnetic field, encrypts the magnetic field with a secret magnetic key, and returns the encrypted magnetic field back to the vehicle.