Vehicle Keyless Go Authentication Element Relay Attack Prevention

Solution Overview

Problem

Existing keyless entry systems for vehicles are vulnerable to relay attacks, which allow unauthorized access and starting of vehicles by extending the radio link between the key and the vehicle, and do not adequately address the emergency start function to prevent such attacks.

Innovation Solution

An authentication element with a transponding interface for energy and data transmission, a button device for user input detection, and a signal processing and forwarding device that only transmits authentication signals when a valid user input is detected, ensuring that the emergency start function can only be initiated by the authorized owner.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the transponding interface continuously transmits authentication signals for emergency start functionality, then the availability of emergency start is improved, but the system becomes vulnerable to relay attacks

Engineering Contradiction:

Improveavailability of emergency startVSAvoidvulnerability to relay attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary verification by detecting user input through the button device before transmitting authentication signals. This preliminary action ensures that the authentication element is physically present and actively controlled by the authorized user, preventing relay attacks that attempt to intercept and forward signals without physical access to the authentication element.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by requiring continuous user input detection through the button device during the authentication process. The transmission of authentication signals is contingent upon ongoing verification of user presence and intent, creating a feedback loop that prevents unauthorized relay attacks while maintaining emergency start functionality.

Inventive Principle:

Principle #23Feedback

2Object-affected harmful factors

If the system requires user input detection via button device for authentication, then security against relay attacks is improved, but the ease of operation is reduced

Engineering Contradiction:

Improvesecurity against relay attacksVSAvoidease of emergency start

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The authentication element serves itself by automatically detecting user input through its own button device and controlling the transmission of authentication signals based on this detection. This self-service mechanism eliminates the need for external verification systems while maintaining security, as the element itself verifies the presence and intent of the authorized user.

Inventive Principle:

Principle #25Self-service

3Object-affected harmful factors

If the authentication element only transmits signals when user input is detected, then protection against unauthorized access is improved, but the response time for legitimate emergency start is increased

Engineering Contradiction:

Improveprotection against unauthorized accessVSAvoidresponse time for emergency start

Core Design Contradiction:

Object-affected harmful factorsVSLoss of time

Solution Approach 1:

The system performs preliminary verification by detecting user input through the button device before transmitting authentication signals. This preliminary action ensures that the authentication element is physically present and actively controlled by the authorized user, preventing relay attacks that attempt to intercept and forward signals without physical access to the authentication element.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by requiring continuous user input detection through the button device during the authentication process. The transmission of authentication signals is contingent upon ongoing verification of user presence and intent, creating a feedback loop that prevents unauthorized relay attacks while maintaining emergency start functionality.

Inventive Principle:

Principle #23Feedback

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Prevents relay attacks on the emergency start function by requiring user input verification, thereby ensuring that only the authorized owner can initiate the emergency start, enhancing security and preventing unauthorized vehicle access and operation.

Implementation Method 1

the authentication element can be supplied with energy by means of transformer coupling

Methodology Applied

Scientific EffectElectromagnetic coupling: Electromagnetic Induction

Implementation Method 2

a button device for detecting a user input

Methodology Applied

Scientific EffectMechanical actuation detection:

Data Source

PatentEP3294594B1Access and driving authorization system with improved security against relay attacks directed to the transponder interface

Publication Date: 2020.10.21 HELLA GMBH & CO KGAA

Figure 1
Figure 2

AI summary

The invention relates to an authentication element (1), in particular keyless go element for a vehicle (20), comprising a transponder interface (2) for transmitting an authentication signal and for receiving power and data, and a key device (4) for detecting a user input, the authentication element (1) being designed such that authentication signals are transmitted via the transponder interface (2) when the key device (4) detects a user input. The invention further relates to an authorization system (30) for vehicles, comprising at least one authentication element (1) and a device (10), and to a method for verifying an authorization request in an authentication element (1) of a vehicle having said authorization system (30).