Vehicle Control System Relay Attack Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle control systems are vulnerable to relay attacks, where criminals intercept and relay request signals to gain unauthorized access to vehicles, highlighting the need for effective countermeasures to prevent such attacks.

Innovation Solution

Implementing a vehicle control system where the vehicle-mounted device and mobile device communicate using a different protocol than the request signal, ensuring that operations are only permitted when both devices are within a specific communication range, thereby preventing relay attacks by restricting responses outside this range.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If the vehicle-mounted device uses the same communication protocol for request signals and authentication, then the communication process is simple, but the system becomes vulnerable to relay attacks

Engineering Contradiction:
Improvecommunication protocolVSAvoidsecurity against relay attacks
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent divides the communication process into two distinct phases using different protocols: (1) initial communication and request signal transmission using the first protocol, and (2) authentication and response signal transmission using the second protocol. This segmentation prevents relay attacks because the authentication phase requires a different communication method that cannot be easily intercepted and relayed

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a protocol conversion mechanism as an intermediary layer between the request signal transmission and authentication processes. The vehicle-mounted device receives request signals via the first protocol, converts them to the second protocol for authentication, and then uses the second protocol for secure response transmission. This intermediary conversion process blocks relay attacks by requiring protocol translation that criminals cannot perform

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the vehicle permits operations based on response signals from any location, then the ease of operation is high, but the security against unauthorized access is reduced

Engineering Contradiction:
Improvevehicle operation accessibilityVSAvoidunauthorized access
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary anti-action by requiring location verification through the second communication protocol before permitting vehicle operations. The system proactively checks whether the mobile device is within the predetermined communication range of the vehicle-mounted device using the second protocol, and only then allows authentication to proceed. This preliminary location check prevents unauthorized access from distant locations while maintaining ease of operation for legitimate users in proximity

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentUS10632969B2Vehicle control system
Publication Date: 2020.04.28 DENSO CORP
  • US10632969B2 patent drawing
  • US10632969B2 patent drawing
  • US10632969B2 patent drawing

AI summary

A vehicle control system includes a vehicle-mounted device and a mobile device portable by a user. The vehicle-mounted device permits a predetermined operation on a vehicle based on a response signal transmitted from the mobile device in response to a request signal from the vehicle-mounted device. The vehicle-mounted device includes a first communication device performing a wireless communication with the mobile device under a predetermined communication protocol different from that of the request signal. The mobile device includes: a second communication device performing the wireless communication with the first communication device; and a response control unit that responds to the request signal under a condition that the mobile device is located in a communication range of the first communication device and the wireless communication between the first communication device and the second communication device is established.