RF Signal Transient Analysis for Relay Attack Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless RF communication systems are vulnerable to relay and replay attacks, which compromise the security of devices by intercepting and retransmitting signals, making it difficult to authenticate the origin of transmissions.

Innovation Solution

A system and method that analyze signal transients, specifically the rise and fall transients, to detect the presence of a second transceiver in the communication path, using techniques such as Automatic Gain Control (AGC) distortion analysis and statistical parameter comparison, to identify relay or replay attacks without requiring additional hardware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If additional hardware is added to detect relay attacks, then security reliability is improved, but device complexity, size, and cost increase

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses its existing transceiver to detect relay attacks by analyzing signal characteristics. The transceiver serves both its primary communication function and the secondary security detection function, eliminating the need for additional dedicated hardware components.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system detects relay attacks by analyzing changes in signal parameters such as rise transient characteristics, fall transient characteristics, and regions between transients. By monitoring parameter distortions caused by relay transceivers, the system achieves security detection without adding hardware.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If signal analysis techniques are used to detect relay attacks, then security is improved, but processing complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts specific signal characteristics (rise transient, fall transient, and intermediate regions) from the RF transmission for analysis. By focusing only on these critical portions of the signal rather than processing the entire signal, the processing complexity is reduced while maintaining effective attack detection.

Inventive Principle:
Principle #2Taking out (Extraction)

3Device complexity

If existing transceiver is used for attack detection, then device size and cost are maintained, but detection capability must be achieved through software processing

Engineering Contradiction:
Improvedevice sizeVSAvoiddetection capability
Core Design Contradiction:
Device complexityVSDifficulty of detecting and measuring

Solution Approach 1:

The system replaces physical hardware additions with software-based signal analysis. By using digital processing to extract and analyze signal characteristics from the existing transceiver output, the system achieves detection capability without increasing device size through additional physical components.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10749898B2Relay attack prevention
Publication Date: 2020.08.18 LEVL PARENT LLC
  • US10749898B2 patent drawing
  • US10749898B2 patent drawing
  • US10749898B2 patent drawing

AI summary

A system including at least one hardware processor; and a non-transitory computer-readable storage medium having stored thereon program instructions, the program instructions executable by the at least one hardware processor to: receive, using a first transceiver, a radio-frequency (RF) transmission from an RF device; extract, from said RF transmission, at least one of: (i) noise samples from one or more segments of said RF transmission, and (ii) signal samples from one or more segments of said RF transmission; and determine the presence of a second transceiver in the path of said RF transmission, based, at least in part, on processing said extracted noise samples and signal samples.