Passive Remote Keyless Entry Security Against Relay Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Passive remote keyless entry systems are vulnerable to relay attacks, which allow unauthorized access by extending the maximum distance between the mobile device and base station, compromising security despite encryption.

Innovation Solution

Implementing a method that measures the air travel time of messages between the base station and mobile device using separate processor and transceiver units with a timing device, refusing access if the distance exceeds a predetermined limit, and utilizing a Phase-Locked-Loop oscillator to reduce energy consumption and enhance accuracy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the maximum distance between mobile device and base station is increased to allow greater flexibility in key placement, then ease of operation is improved, but security is worsened due to vulnerability to relay attacks

Engineering Contradiction:
Improveflexibility in key placementVSAvoidsecurity against relay attacks
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent changes the parameter of distance verification by measuring air travel time of radio waves between base station and mobile device. This allows the system to enforce a maximum distance constraint (improving security) while still permitting reasonable flexibility in key placement within that distance limit (maintaining ease of operation). The air travel time measurement creates a physical boundary that relay attacks cannot bypass.

Inventive Principle:
Principle #35Parameter changes

2Measurement precision

If separate processor and transceiver units are used with a timing device to measure air travel time, then measurement precision is improved, but device complexity is worsened

Engineering Contradiction:
Improveair travel time measurementVSAvoidseparate processor and transceiver units
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the system into separate processor units and transceiver units, with the timing function assigned to the transceiver unit. This segmentation allows the processor to focus on authorization logic while the transceiver handles radio communication and precise timing measurements. The separation enables specialized hardware for time measurement without burdening the main processor, achieving high measurement precision while managing complexity through functional division.

Inventive Principle:
Principle #1Segmentation

3Ease of manufacture

If standard type processors are used, then cost is reduced, but measurement precision and transmission rate are worsened

Engineering Contradiction:
Improvecost-effectivenessVSAvoidair travel time measurement
Core Design Contradiction:
Ease of manufactureVSMeasurement precision

Solution Approach 1:

The patent replaces the requirement for high-speed processors with a hardware-based timing measurement approach in the transceiver unit. Instead of using expensive high-speed processors to achieve precise timing, the system uses dedicated timing circuits and counters in the transceiver that can measure air travel time with sufficient precision. This substitution allows standard processors to be used in the main unit, reducing cost while maintaining measurement precision through specialized hardware in the transceiver.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Effectively prevents security breaches by ensuring the mobile device is within a secure vicinity of the base station during authorization, maintaining high security and cost-effectiveness while accurately determining distances with high precision.

Implementation Method 1

an air travel time T of a single message sent back and forth from the base station to the mobile device is measured

Methodology Applied
Scientific EffectTime of Flight: Time of Flight

Implementation Method 2

utilizing a Phase-Locked-Loop oscillator to reduce energy consumption and enhance accuracy

Methodology Applied
Scientific EffectPhase-Locked-Loop:

Data Source

PatentEP3594911B1Method for preventing security breaches of a passive remote keyless entry system
Publication Date: 2023.04.19 APTIV TECHNOLOGIES LTD
  • EP3594911B1 patent drawingFigure 1
  • EP3594911B1 patent drawingFigure 2
  • EP3594911B1 patent drawingFigure 3

AI summary

The present invention relates to a method for preventing security breaches of a passive remote keyless entry system for authorizing access to a vehicle. The passive remote keyless entry system comprises a base station located at the vehicle and a mobile device, in particular a remote key, wherein the base station comprises a first processor unit and a first transceiver unit, the first transceiver unit comprises a timing device, the mobile device comprises a second processor unit and a second transceiver unit, an air travel time T of a single message sent back and forth from the base station to the mobile device is measured, and access to the vehicle is granted depending on the measured air travel time T.