Vehicle Keyless Entry Relay Attack Prevention via Inertial Correlation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Keyless entry systems for vehicles are vulnerable to relay station attacks, where the signal between the vehicle and the authentication device is extended, allowing unauthorized access or starting of the vehicle even when the authentication device is outside the usual distance.

Innovation Solution

Incorporating an inertial sensor element in the authentication element and a device on the vehicle to verify the correlation between location data and inertial data, such as movement and acceleration, to ensure that the authentication element is within the vehicle's vicinity and moving accordingly, thereby preventing relay station attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If relay station attacks are prevented by verifying correlation between location data and inertial data, then security against relay station attacks is improved, but device complexity increases due to additional inertial sensors and data processing requirements

Engineering Contradiction:
Improvesecurity against relay station attacksVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The inertial sensor element continuously records movement and acceleration data before the authentication process occurs. This preliminary recording of inertial data allows the system to have verification-ready data already available when location data is received, enabling security verification without adding complex real-time processing requirements during authentication.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The inertial sensor element acts as an intermediary that provides independent verification data about the authentication element's physical movement. This intermediary data source (inertial measurements) corroborates or refutes the location data, creating a security mechanism that doesn't require complex direct verification of location data itself.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If inertial sensor elements are added to the authentication element, then security verification capability is improved, but manufacturing complexity and cost increase

Engineering Contradiction:
Improvesecurity verification capabilityVSAvoidease of manufacture
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent employs inexpensive inertial sensor elements (such as accelerometers) that can be easily integrated into the authentication element. These relatively simple, low-cost sensors provide the necessary verification capability without requiring complex or expensive manufacturing processes, making the security enhancement economically viable.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Measurement precision

If the authentication system processes both location data and inertial data, then accuracy of authorization verification is improved, but processing time and energy consumption increase

Engineering Contradiction:
Improveaccuracy of authorization verificationVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

Inertial data is recorded continuously in advance before authentication is needed. When authentication occurs, the system only needs to compare recently accumulated inertial data with location data, rather than processing long historical records, thus maintaining high accuracy while minimizing processing time and energy consumption.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system processes only the portion of inertial data that is relevant to the current authentication event - specifically the inertial measurements taken during the time window leading up to the authentication attempt. This partial processing approach provides sufficient verification accuracy without the computational burden of analyzing all available inertial data.

Inventive Principle:
Principle #16Partial or excessive action

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Effectively prevents relay station attacks by ensuring that the authentication process only grants access or start authorization when the inertial and location data correlate, enhancing security without requiring significant technical effort or user interaction changes.

Implementation Method 1

at least one inertial sensor element for the detection of inertial data in connection with at least one movement and/or at least one acceleration of the authentication element

Methodology Applied
Scientific EffectInertial sensing: Accelerometer

Implementation Method 2

at least one wireless interface for the sending and/or receiving of at least one location data signal

Methodology Applied
Scientific EffectElectromagnetic transmission: Electromagnetic Induction

Data Source

PatentUS10800380B2Access and drive authorization system with increased safety against relay station attacks by verification of location
Publication Date: 2020.10.13 HELLA GMBH & CO KGAA
  • US10800380B2 patent drawing
  • US10800380B2 patent drawing
  • US10800380B2 patent drawing

AI summary

An authorization system for vehicles, comprising at least one authentication element, at least one device for the location of the authentication element, and at least one compare unit. The authentication element, comprises: at least one wireless interface for the sending and/or receiving of at least one location data signal generated on the vehicle; at least one inertial sensor element for the detection of inertial data; at least one inertial data interface for the sending and/or receiving of inertial data; and at least one location data signal exchange interface for the exchange of location data signals with the compare unit. The compare unit comprises at least one reception device for the reception of the location signal data and the inertial data, and at least one processing unit for the generation of compare data based on the location signal data and the inertial data.