Vehicle Start Function Security Against Relay Station Attacks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing keyless remote start systems for vehicles are vulnerable to relay station attacks, allowing unauthorized individuals to unlock and start vehicles without proper authorization, compromising security and safety.

Innovation Solution

Implementing a secure method to lock, unlock, and start vehicles using a radio key that blocks passive start functionality when the vehicle is locked and requires a dedicated unlocking command from an authorized person, using rolling codes for secure radio communication, and allowing conventional mechanical key unlocking to release the start function.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If passive vehicle unlocking and starting is enabled for convenience, then ease of operation is improved, but vehicle security deteriorates due to vulnerability to relay station attacks

Engineering Contradiction:
Improvepassive vehicle unlocking and startingVSAvoidvehicle security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary verification by checking whether the vehicle is in a locked state before enabling the passive start function. This preliminary action prevents unauthorized starting even if relay station attacks successfully unlock the vehicle, as the start function remains blocked until proper unlocking conditions are met

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary control mechanism that mediates between the unlocking function and the start function. This intermediary layer ensures that even if relay station attacks compromise the unlocking process, the start function cannot be activated without proper authorization, thus maintaining security while preserving convenience

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If relay station attacks are prevented by securing unlocking, then vehicle security is improved, but ease of operation deteriorates due to loss of keyless convenience

Engineering Contradiction:
Improvesecurity against relay station attacksVSAvoidkeyless convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the vehicle access control into two independent functions: unlocking and starting. By separating these functions and applying different security measures to each, the system maintains keyless convenience for unlocking while implementing enhanced security for the start function, thus resolving the contradiction between security and ease of operation

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If passive start function is always available, then ease of operation is improved, but manipulation safety deteriorates due to unauthorized starting

Engineering Contradiction:
Improvepassive start availabilityVSAvoidunauthorized vehicle starting
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary anti-action by blocking the passive start function when the vehicle is in a locked state. This preventive measure counteracts potential unauthorized starting attempts before they can occur, ensuring that even if attackers gain access through relay station attacks, the vehicle cannot be started without proper authorization

Inventive Principle:
Principle #9Preliminary anti-action

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enhances vehicle security by preventing relay station attacks and ensuring only authorized individuals can unlock and start the vehicle, maintaining comfort features while improving manipulation safety.

Implementation Method 1

sends a radio signal to the radio key with a first frequency in the range of between 30 and 300 kHz

Methodology Applied
Scientific EffectRadio signal transmission: Electromagnetic Induction

Implementation Method 2

provides it with new coding and sends it out again as a response signal at a second frequency located in the UHF range

Methodology Applied
Scientific EffectFrequency conversion: Heterodyne

Data Source

PatentUS10596995B2Method to lock, unlock and start a vehicle
Publication Date: 2020.03.24 FORD GLOBAL TECH LLC
  • US10596995B2 patent drawing

AI summary

The disclosure relates to a method to lock, unlock and start a vehicle without using a radio key or electronic vehicle key. According to the disclosure, the function of starting the vehicle without actively using the key is blocked when the vehicle is locked. When the vehicle is unlocked in a manner secured against relay station attacks, the possibility exists of starting the vehicle without actively using the key.