Concentric RF Zones for Relay Attack Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Remote keyless entry systems for vehicles are vulnerable to relay attacks, where malicious hackers use devices to intercept and duplicate communication signals, gaining unauthorized access to vehicle functions.

Innovation Solution

Implementing a vehicle remote keyless entry system with a processor-based controller that defines concentric radio frequency authorization zones, transmitting polling signals at different intervals and using verification signals to authenticate the remote device's location and access code, thereby selectively enabling vehicle functions only when the device is within a specific zone closest to the vehicle.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the system uses a single polling interval for remote devices, then the system operation is simple, but the system becomes vulnerable to relay attacks

Engineering Contradiction:
Improvesecurity against relay attacksVSAvoidpolling signal transmission control
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies dynamics by making the polling interval variable rather than fixed. The controller dynamically adjusts the polling interval based on the determined location of the remote device - using a first polling interval when the device is in a first location and a second polling interval when in a second location. This dynamic adjustment prevents relay attacks while maintaining manageable system complexity through location-based automation.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the parameter of polling interval based on the remote device's location. By determining the device's location and selecting different polling intervals accordingly, the system transforms a static security vulnerability into a dynamic security feature that adapts to spatial conditions, thereby enhancing security without requiring overly complex manual control mechanisms.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If the system enables all vehicle functions whenever a remote device is detected, then ease of operation is maximized, but security control is reduced

Engineering Contradiction:
Improvevehicle security controlVSAvoidvehicle function access
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies local quality by differentiating vehicle function access based on the remote device's specific location. Instead of uniform access control, the system determines the device's location and selectively enables vehicle functions only when the device is in authorized locations. This creates location-specific access rights that enhance security while maintaining ease of operation for legitimate users in proper locations.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the operational space into different locations with different access permissions. By dividing the environment into authorized and unauthorized zones and applying different function enablement rules to each segment, the system achieves fine-grained security control without overly complicating the user experience for authorized operations.

Inventive Principle:
Principle #1Segmentation

3Reliability

If the system uses constant signal transmission power, then energy consumption is reduced and system complexity is minimized, but the ability to impede relay attacks is weakened

Engineering Contradiction:
Improverelay attack preventionVSAvoidsignal transmission control
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes signal transmission power dynamic by adjusting it based on the remote device's determined location. The controller varies the output power of polling signals when transmitting to devices in different locations, creating a dynamic transmission strategy that impedes relay attacks. This dynamic approach is managed through automated location-based control rather than complex manual intervention.

Inventive Principle:
Principle #15Dynamics

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This solution effectively impedes relay attacks by varying signal intervals and power, making it difficult for attackers to intercept and duplicate signals, thereby enhancing vehicle security and preventing unauthorized access.

Implementation Method 1

The controller is configured to instruct a transceiver to transmit a polling signal, which can be received by a remote device within the one or more substantially concentric authorization zones

Methodology Applied
Scientific EffectRadio frequency electromagnetic wave transmission: Electromagnetic Induction

Data Source

PatentUS9988014B2Methods and apparatus for impeding a vehicle entry system relay attack
Publication Date: 2018.06.05 HONDA MOTOR CO LTD
  • US9988014B2 patent drawing
  • US9988014B2 patent drawing
  • US9988014B2 patent drawing

AI summary

Some embodiments are directed to a vehicle remote keyless entry system that can control functions of a vehicle can include a transceiver, a processor based controller, and a remote device. The controller is configured to predefine one or more substantially concentric radio frequency authorization zones around the controller that includes at least a first zone and a second zone, a boundary of the second zone being predefined as closer around the controller than a boundary of the first zone. The controller is configured to instruct the transceiver to transmit a polling signal, which can be received by the remote device within the one or more concentric authorization zones, with different polling intervals for each of the first zone and the second zone. The controller selectively enables one or more of the vehicle functions when the controller determines the remote device is located outside of the second zone.