Probability-Based Vehicle Access System for Relay Attack Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Keyless entry systems for vehicles are vulnerable to relay attacks, allowing unauthorized access as they rely solely on signal recognition without verifying the user's intent or proximity.
Innovation Solution
The system broadcasts an additional request for a 'probability of use' value to the key, which is determined based on various factors such as location, movement, and usage patterns, and only unlocks the vehicle if the value exceeds a predefined threshold, enhancing security against unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If keyless entry systems use only signal recognition for access, then user convenience is improved, but security against relay attacks deteriorates
Solution Approach 1:
The system changes the access decision parameter from simple signal recognition to a probability-based assessment. The communication unit determines a probability value indicating the likelihood that the key is held by an authorized user, and the control unit uses this probability threshold to make access decisions, thereby resolving the contradiction between convenience and security
Solution Approach 2:
The system implements feedback by having the communication unit continuously monitor the situation and determine probability values based on current conditions. This feedback loop allows the system to adapt its access control decisions based on real-time assessment of authorization probability, balancing convenience and security
2Reliability
If the system introduces probability value determination to enhance security, then security against relay attacks is improved, but device complexity increases
Solution Approach 1:
The communication unit performs multiple functions: it communicates with the control unit, determines probability values based on various situations, and facilitates access decisions. By making the communication unit multi-functional, the system avoids adding separate dedicated components, thereby limiting the increase in device complexity while achieving enhanced security
Data Source
AI summary
An access system has a first communication unit arranged in an object and a second communication unit arranged in a key associated with the object, wherein the first communication unit is configured to broadcast a first request signal, the second communication unit is configured to receive the first request signal and, after receiving the first request signal, to send a first response signal to the first communication unit, wherein the first communication unit is further configured to send a request for a value to the second communication unit, and the second communication unit is configured to determine the value upon receipt of the request and to send the value to the first communication unit, wherein the value is an indicator of how high the probability is that the object is to be used by an authorized us.