METHOD AND SYSTEM OF DETERMINING AND PREVENTING RELAY ATTACK FOR PASSIVE ENTRY SYSTEM

• US 20100321154A1
• Filed: 12/21/2009
• Published: 12/23/2010
• Est. Priority Date: 06/18/2009
• Status: Active Grant

• Current Assignee: Lear Corporation
• Original Assignee: Lear Corporation
• Inventors: Girard, Hilton W., Ghabra, Riad, Yakovenko, Nikolay
• Granted Patent: US 8,587,403 B2
• Time in Patent Office: Days
• US Class Current: 340/5.61
• CPC Class Codes: B60R 25/00 Fittings or systems for preventing or indicating unauthorised use or theft of vehicles locks for vehicles E05B77/00-E05B85/00
• CPC Class Codes: G07C 2009/00555 comprising means to detect or avoid relay attacks
• CPC Class Codes: G07C 2009/00984 fob
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks

Abstract

A system and method for preventing relay attack on a passive entry system (PES) or other passive system (PS) included within a vehicle or other entity. The relay attack prevention may be based in part on an assessment of whether the fob is able to distinguish signal strength relative to messages communicated form different antennas within the vehicle and/or amongst different signal amplitude communicated from the same antenna.

Claims

1. A method of preventing relay attack of a passive entry system (PES) used within a vehicle to provide passive access to one or more vehicle systems, the method comprising:

upon detecting a PES triggering event, transmitting a query message from one or more PES antennas included within the vehicle, each of the query messages including a continuous wave (CW) portion having an amplitude that decreases as the query message travels farther from the transmitting PES antenna;

receiving a first response of a fob receiving one or more of the query messages, the response indicating the amplitude of each CW portion included within the one or more query messages being responded to by the fob;

determining whether the fob is one of near field and far field from the vehicle based on the amplitude included in the response indicating a distance of the fob from the vehicle to correspond with one of the near field and the far field;

transmitting a challenge query to the fob that is dependent on whether the fob is near field or far field, the challenge query providing a first test if the fob is near field and a second test if the fob is far field; and

granting access to the one or more vehicle systems to be passively controlled according to the PES triggering event depending at least in part on a second response of the fob to the one of the first test and the second test provided by the challenge query.

2. The method of claim 1 further comprising transmitting the challenge query to include a first CW portion and a second CW portion wherein an amplitude of the second CW portion is selected to be less than the first CW portion in the event the first test is provided and greater than the first CW portion in the event the second test is provided.

3. The method of claim 2 further comprising granting access to the one or more vehicle systems in the event the second response of the fob indicates the amplitude difference between the first CW portion and the second CW portion to match with the amplitude difference dictated by the challenge query providing the first test or the second test.

4. The method of claim 3 further comprising issuing a perpendicularity test to the fob before granting access to the one or more vehicle systems in the event the fob properly indicates the difference between the first CW portion and the second CW portion.

5. The method of claim 4 further comprising issuing the perpendicularity test by transmitting a perpendicular query message to the fob from one of the PES antennas determined to be perpendicular based on the first response of the fob;

and determining the fob to pass the perpendicularity test in the event a third response of the fob to the perpendicular query message indicates a current pattern consistent with the fob being perpendicular to the vehicle.

6. The method of claim 3 further comprising issuing a saturation test to the fob before granting access to the one or more vehicle systems in the event the fob properly indicates the difference between the first CW portion and the second CW portion.

7. The method of claim 6 further comprising determining the fob passes the saturation test in the event the first response of the fob indicates proper amplitudes for the query messages transmitted from the one or more antennas query messages other than the antenna used to transmit the challenge query.

8. The method of claim 7 further comprising determining the amplitudes to be proper if the amplitudes are within a specified amplitude range.

9. A method of preventing relay attack of a passive entry system (PES) used within a vehicle to provide passive access to one or more vehicle systems, the method comprising:

executing an amplitude differentiation test, a perpendicularity test, and a saturation test in response to detection of a passive entry event, each of the tests evaluating a response of a fob to one or more messages wirelessly issued from a controller within the vehicle; and

granting passive control of one or more vehicle systems upon successful completion of each of the tests.

10. The method of claim 9 further comprising determining successful completion of the amplitude differentiation test in the event the fob is able to distinguish between portion of a message having signals of a first amplitude and signal of a second amplitude.

11. The method of claim 10 further comprising selecting the second amplitude to be greater than first amplitude if a prior response from the fob indicates the fob to be far field and selecting the second amplitude to be less than the first amplitude if the prior response from the fob indicates the fob to be near field.

12. The method of claim 11 further comprising determining the prior response from one or more messages communicated from the fob in response to receipt of one or more query messages sent from the vehicle upon detection of the PES trigger event.

13. The method of claim 12 further comprising transmitting no more than three query messages to the fob in response to the PES triggering event, wherein one query message is transmitted form three different PES antennas selected from a greater number of PES antennas included with the vehicle depending on a type of the trigger event.

14. The method of claim 9 further comprising determining successful completion of the perpendicularity test if a current pattern detected is consistent with the fob being perpendicular to the vehicle.

15. The method of claim 9 further comprising determining successful completion of the saturation test if a response from the fob to messages communicated from different PES antennas included within the vehicle indicate different signal amplitudes being detected by the fob for messages communicated from two or more of the different PES antennas.

16. A method of preventing relay attack of a passive system (PS) used within a vehicle to provide passive access to one or more vehicle systems, the method comprising:

upon detecting a PES triggering event, transmitting a PS query message from one or more PS antennas included within the vehicle;

receiving a first response of a fob receiving one or more of the PS query messages, the response indicating a strength of signals used to convey the one or more query messages;

determining whether the fob is one of near field and far field from the vehicle based on the strength of the signals;

creating a challenge query for the fob that is dependent on whether the fob is near field or far field, the challenge query requesting the fob to differentiate between signals having a first amplitude and signal having second amplitude;

transmitting a challenge query message to the fob to request to fob to differentiation between signals wherein the second amplitude is greater than the first amplitude in the event the fob is far field and wherein the second amplitude is less than the first amplitude in the event the fob is near field; and

granting access to the one or more vehicle systems to be passively controlled according to the PES triggering event depending at least in part on a second response indicting the fob differentiated between the signal having the first and second amplitudes.

17. The method of claim 16 further comprising transmitting three PS query messages from three PS antennas and requiring the fob to identifying different signal strengths for at least two of the three PS query signals before granting access to the one or more vehicle systems.

18. The method of claim 16 further comprising transmitting a perpendicularity query message from one of the PS antennas and requiring the fob to identify a current pattern consistent with the fob being perpendicular to the vehicle before granting access to the one or more vehicle systems.

19. The method of claim 16 further comprising transmitting the challenge query from the one of the PS antennas determined to be closest to the fob.

20. The method of claim 19 further comprising determine the PS antenna closest to the fob based on triangulating three response messages transmitted from the fob in response to receipt of three PS query messages.