Vehicle Identifier Spoofing Detection via Location Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of head unit-to-smartphone connections poses a risk of unauthorized access as aftermarket vendors can clone vehicle identifiers, compromising user privacy and security.
Innovation Solution
A verification system that monitors and compares vehicle identifiers with their corresponding locations over time to detect potential falsification, using a database to determine if a reported identifier is likely spoofed by assessing geographic proximity and timing of connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sequential identifier allocation is used to simplify device management, then ease of operation is improved, but security is worsened due to vulnerability to cloning and spoofing
Solution Approach 1:
A verification server acts as an intermediary between portable devices and vehicles. The server receives identifier verification requests from portable devices, checks the reported vehicle identifier against stored location and time data, and returns verification results. This intermediary layer prevents unauthorized access while maintaining the simplicity of sequential identifier allocation.
Solution Approach 2:
The system implements feedback by continuously monitoring vehicle identifier reports from multiple portable devices, comparing current reports with historical data, and using this information to detect spoofing attempts. The verification server provides feedback to portable devices about whether a vehicle identifier is valid, enabling dynamic security responses.
2Loss of time
If identifier verification is performed locally without external validation, then response time is improved, but measurement precision is worsened due to inability to detect cloned identifiers
Solution Approach 1:
The verification server pre-stores vehicle identifier data including location and time information before verification is needed. When a portable device needs verification, the server quickly compares the reported identifier against pre-prepared validation data, enabling fast verification without compromising accuracy. The preliminary preparation of verification data reduces response time while maintaining precision.
3Reliability
If geographic location monitoring is implemented to detect spoofing, then security is improved, but device complexity is worsened due to additional tracking infrastructure
Solution Approach 1:
The verification server performs multiple functions: storing vehicle identifier data, validating identifiers, detecting spoofing attempts, and providing verification responses. By consolidating these functions into a single multi-functional system, the patent improves spoofing detection capability without proportionally increasing overall system complexity.
Solution Approach 2:
Portable devices automatically perform location determination and send verification requests without requiring additional user intervention. The verification server automatically processes requests and compares data, enabling the system to maintain high security while keeping operational complexity low through automated self-service mechanisms.
Data Source
AI summary
To automatically identify an attempt at presenting falsified vehicle identifiers to portable devices, (i) a vehicle identifier reported by a vehicle with which the portable device is establishing a short-range communication link, and (ii) an indication of a current location of the portable device, are received from a portable device at a first time. An indication of a recent location at which the vehicle identifier was reported at a second time is obtained. The current location of the portable device is compared to the recent location of the vehicle, in view of the first time and the second time. In response to determining that the current location is not proximate to the recent reported location of the vehicle, an indication that the reported identifier is likely falsified is generated.