Vehicle Communication Gateway Security via BLE Link Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional passive entry/passive start (PEPS) systems are vulnerable to malicious attacks through physical and wireless vulnerabilities, allowing unauthorized devices to manipulate or inject signals into vehicle communication bus systems, such as CAN and LIN, leading to potential unauthorized access and control of vehicle functions.
Innovation Solution
A system utilizing a sensor and control module that generates and authenticates link key data packets using cryptographic operations and a hardwire link, specifically employing Bluetooth Low Energy (BLE) communication, to securely communicate with user devices and prevent unauthorized access by verifying the authenticity of communication signals and devices connected to the vehicle's communication gateway.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional PEPS systems use wireless communication for key fob authentication, then ease of operation is improved, but security against malicious attacks deteriorates
Solution Approach 1:
The patent introduces a communication gateway as an intermediary component between wireless communication modules and the vehicle's CAN/LIN bus systems. This gateway authenticates and monitors all communication signals, filtering out malicious attempts while allowing legitimate operations. The gateway acts as a mediator that protects the internal bus system from direct exposure to wireless attacks, thus maintaining ease of wireless operation while improving security.
Solution Approach 2:
The system implements continuous monitoring and feedback mechanisms where the communication gateway analyzes communication patterns, signal characteristics, and authentication responses in real-time. When anomalies are detected (such as unauthorized access attempts or signal manipulation), the system provides feedback to block the offending device while allowing normal operations to continue uninterrupted.
2Ease of operation
If PEPS systems allow direct access to OBD-II port and communication bus, then ease of operation is improved, but vulnerability to signal manipulation attacks increases
Solution Approach 1:
The communication gateway serves as a mandatory intermediary between any external device (including OBD-II interfaces) and the vehicle's internal communication bus. All signals passing through the gateway are authenticated and monitored, preventing direct signal manipulation attacks while maintaining ease of operation through standardized diagnostic interfaces.
Solution Approach 2:
The system performs preliminary authentication and monitoring of all communication signals before they enter the internal bus system. By detecting and blocking malicious signals in advance (such as unauthorized access attempts or signal injection), the system prevents harmful effects before they can impact vehicle functions.
3Adaptability or versatility
If PEPS systems use multiple communication protocols (CAN, LIN, wireless), then adaptability is improved, but complexity of security authentication increases
Solution Approach 1:
The communication gateway is designed as a universal security module that handles multiple communication protocols (CAN, LIN, Bluetooth, WiFi) through a single integrated authentication mechanism. Rather than requiring separate security systems for each protocol, the gateway provides unified authentication and monitoring functions, reducing overall system complexity while maintaining adaptability across different communication standards.
Data Source
AI summary
Systems and methods are provided and include a sensor that is configured to generate a first link key data packet. A control module of a vehicle is configured to generate a second link key data packet. In response to (i) a first authenticated response of the first link key data packet matching a second authenticated response of the second link key data packet and (ii) a user device being connected to a communication gateway of the control module by a Bluetooth low energy (BLE) communication link, the sensor is configured to communicate signal information to the control module using a hardwire link that electrically couples the control module and the sensor. The signal information includes information corresponding to physical characteristics of the BLE communication link.