PEPS Mobile De-whitening for Secure Long-Range BLE Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional passive entry/passive start (PEPS) systems using low-frequency signals face limitations in range and are vulnerable to wireless attacks, such as eavesdropping and replay attacks, making it difficult to securely authenticate and communicate with portable devices beyond a few meters.

Innovation Solution

Implementing a PEPS system using a consumer-grade wireless protocol like Bluetooth Low Energy (BLE) for communication between vehicles and portable devices, which includes cryptographic operations to prevent unauthorized access and includes a cryptographic verification module to authenticate messages and prevent replay attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If low frequency signals are used for PEPS communication, then location estimation accuracy is improved, but communication range is limited to a few meters

Engineering Contradiction:
Improvelocation estimation accuracyVSAvoidcommunication range
Core Design Contradiction:
Measurement precisionVSLength of moving object

Solution Approach 1:

The patent combines low frequency signals (for accurate location estimation) with ultrawideband signals (for extended communication range) in a hybrid PEPS system. The low frequency component provides precise location estimation within 2 meters, while the ultrawideband component extends the communication range beyond a few meters, allowing the system to benefit from both signal types simultaneously.

Inventive Principle:
Principle #5Merging (Combining)

2Ease of operation

If traditional PEPS systems are used, then keyless entry functionality is provided, but the system is vulnerable to wireless attacks such as eavesdropping and replay attacks

Engineering Contradiction:
Improvekeyless entry functionalityVSAvoidsecurity against wireless attacks
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements preliminary anti-action by incorporating cryptographic verification mechanisms before authentication. The system uses message authentication codes (MACs) and nonces to prevent replay attacks, and employs encryption to protect against eavesdropping. These security measures are built into the authentication protocol beforehand, preventing malicious attacks before they can compromise the keyless entry functionality.

Inventive Principle:
Principle #9Preliminary anti-action

3Length of moving object

If smart devices are used as key fobs, then communication range is extended, but wireless vulnerabilities increase

Engineering Contradiction:
Improvecommunication rangeVSAvoidwireless vulnerabilities
Core Design Contradiction:
Length of moving objectVSObject-affected harmful factors

Solution Approach 1:

The patent introduces cryptographic protocols as an intermediary layer between the smart device and the vehicle's PEPS system. This intermediary layer provides security functions including message authentication, encryption, and replay attack prevention, thereby protecting the extended-range communication from wireless vulnerabilities while maintaining the benefits of long-range communication capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11379386B2Mobile de-whitening
Publication Date: 2022.07.05 DENSO INTERNATIONAL AMERICA INC
  • US11379386B2 patent drawing
  • US11379386B2 patent drawing
  • US11379386B2 patent drawing

AI summary

Systems and methods are disclosed and include receiving, with a peripheral device, a message packet from a portable device, the message packet including an authenticated packet with a de-whitened tone byte inserted therein. The portable device generates first message authentication code (MAC) bytes based on a shared secret key and generates the authenticated packet based on the first MAC bytes, first nonce bytes, and a message byte. The peripheral device validates the message packet in response to determining that the first MAC bytes match second MAC bytes and that the first nonce bytes match second nonce bytes. The peripheral device generates a reconstructed message packet in response to validating the message packet by removing the de-whitened tone byte from the authenticated packet. The communication gateway establishes a communication link between the portable device and the communication gateway in response to receiving the reconstructed message packet.