Phone-as-a-key Password Creation via Device Presence Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Password entry systems in phone-as-a-key vehicle systems are vulnerable to hacking and malicious misuse, necessitating secure creation and use of passwords or keypad codes for keyless vehicle operations.
Innovation Solution
A method where a vehicle computer determines the presence of authorized PaaK devices and PEPS key fobs to prompt occupants for entering a password, ensuring it is not already in use, and links it for valid keyless starting, incorporating security measures like encrypted communication and trilateration for device localization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password entry systems are implemented for keyless vehicle operations, then ease of operation is improved, but security against hacking and malicious misuse deteriorates
Solution Approach 1:
The system performs preliminary verification by detecting the presence of authorized PaaK devices and PEPS key fobs within the vehicle before allowing password creation. This preliminary action ensures that only authorized users can establish new passwords, preventing unauthorized password creation while maintaining convenient keyless operation for authenticated users.
Solution Approach 2:
The vehicle computer acts as an intermediary between the password entry interface and the authentication system. It mediates the password creation process by verifying device presence, checking for duplicate passwords, and coordinating with authorized devices before finalizing password association. This intermediary role adds security layers without significantly impacting user convenience.
2Object-affected harmful factors
If multiple security verification steps are implemented, then security is improved, but device complexity increases
Solution Approach 1:
The vehicle computer leverages existing multi-functional components already present in modern vehicles, including wireless communication systems for detecting PaaK devices, display systems for presenting password interfaces, and existing PEPS key fob infrastructure. By repurposing these existing components for password creation verification, the system achieves enhanced security without adding significant new hardware or complexity.
Solution Approach 2:
The system merges multiple security verification functions into a unified password creation process. The detection of authorized devices, the verification of password uniqueness, and the association of passwords with specific devices are combined into a single integrated workflow managed by the vehicle computer. This consolidation achieves comprehensive security while maintaining manageable system complexity through unified control logic.
Data Source
AI summary
Exemplary embodiments described in this disclosure are generally directed to systems and methods for securely creating passwords for performing various keyless operations upon a vehicle. In an exemplary method, a computer receives a request for creating a password for a phone-as-a-key (PaaK) device. The computer determines that the PaaK device is present inside the vehicle and that the vehicle engine has been placed in an accessory state or a run state by an authorized PaaK device located in the vehicle. The computer further determines that a passive entry passive start (PEPS) key fob is present inside the vehicle. A prompt is provided for entry of a password. The computer checks to determine if an entered password has been already assigned to another PaaK device. If unassigned, the computer links the password to the PaaK device and authorizes the entered password as a valid keyless starting password for the vehicle.