KR101783151B1 - Method and apparatus for controlling remote vehicle entry based on movement - Google Patents

Abstract

The present invention discloses a method and device to control locking of a vehicle capable of preventing relay attack. According to the present invention, the method and device to control locking of a vehicle is able to prevent relay attack by determining whether to transmit a signal to the vehicle based on a movement of a key. To achieve this, the present invention comprises: receiving a first signal; activating a motion sensor; determining whether an identifier of the received identifier of a vehicle matches an identifier of the vehicle stored in a key; deactivating the motion sensor; detecting a movement by the motion sensor; transmitting a response signal for the first signal to the vehicle; and deactivating the key until there is an input to a physical button.

Description

TECHNICAL FIELD [0001] The present invention relates to a remote vehicle access control method and apparatus based on motion,

The present invention relates to a remote vehicle entry control method and apparatus, and more particularly, to a method and apparatus for controlling remote vehicle entry based on user movement.

As the number of electronic devices provided in a vehicle increases, security problems for electronic devices in the vehicle are increasing. For example, there has been a case in which a hacking attack through a mobile phone cellular network has been successful for a vehicle traveling at a high speed. There are also cases where large-scale recalls have occurred due to such security problems. Due to the attacks on these vehicles' electronic devices, there is a growing demand for security of vehicles.

As one example of convenience features due to the electronic devices of vehicles, smart-keys are widely used. Based on the proximity of the smart-key, the door or trunk of the vehicle can be unlocked. Thus, the lock of the vehicle can be released without the insertion of a mechanical key. In such smart-key unlocking systems, security vulnerabilities have been found.

1 is a conceptual diagram of a relay attack.

In FIG. 1, the vehicle 110 periodically transmits a signal for detecting the key 120. Generally, the transmission signal of the vehicle 110 has only a narrow range of coverage. Thus, in order to receive a signal from the vehicle 110, the key 120 must be within a certain distance from the vehicle 110.

As described above, the vehicle 110 can transmit a signal irrespective of whether the key 120 is adjacent or not, since the vehicle 110 can periodically transmit a signal to detect the key 120. The key 120, which received the signal from the vehicle 110, may transmit a response to the signal. The response signal of the key 120 is generally very short in transmission distance. Therefore, when the key 120 is moved away from the vehicle 110 by a certain distance, the transmission / reception of signals between the vehicle 110 and the key 120 is not performed.

However, the repeater 130 may be located between the vehicle 110 and the key 120. [ The repeater 130 may amplify the signal from the vehicle 110 and relay it to the key 120 and relay the response signal from the key 120 to the vehicle 110. [ In this case, even if the distance between the vehicle 110 and the key 120 is long, the signal can be exchanged by the repeater 130.

Thus, for example, the vehicle 110 may be in the garage and the key 120 may be located in a living room located adjacent to the garage. In a general case, a signal for the periodic key search of the vehicle 110 is not received by the key 120. However, when an attacker mediates the signal using the repeater 130, a signal of the vehicle 110 may be transmitted to the key 120, and the vehicle 110 may also receive signals from the key 120 . Therefore, the vehicle 110 can release the lock based on the response signal from the key 120. [

As such, attacking the vehicle's locking system using a repeater may be referred to as a relay attack. That is, the relay attack is to trick the transmitter / receiver that the short range communication is performed by relaying the short range communication at a long distance. Such a relay attack is more likely to succeed if the distance between the vehicle and the key is shorter. If the relay attack is successful, the attacker can unlock the vehicle unintentionally even if the owner of the vehicle has the key. Therefore, a countermeasure against such relay attack is required.

It is an object of the present invention, which is created in this background, to provide a vehicle access control method for preventing relay attack and an apparatus therefor.

According to another aspect of the present invention, there is provided a method of controlling a remote vehicle lock by a key for achieving the above object, the method comprising: activating the key for a predetermined time when movement of the key is detected; Receiving a first signal including an identifier of the vehicle from the vehicle; Determining whether the identifier of the received vehicle matches the identifier of the vehicle stored in the key when the first signal is received within the predetermined time; And transmitting a response signal for the first signal to the vehicle if the identifier of the received vehicle matches the identifier of the vehicle stored in the key.

Preferably, the remote vehicle lock control method may further include deactivating the key if the identifier of the received vehicle and the identifier of the vehicle stored in the key do not match.

Preferably, the response signal may comprise a key identifier for identification of the key.

Preferably, the first signal is a low frequency signal of 120 kHz to 135 kHz, and the response signal may be a high frequency signal of 315 MHz to 433 MHz.

In order to achieve the above object, a key for controlling remote vehicle lock includes a transceiver for transmitting and receiving signals to / from a vehicle; A motion sensor for sensing movement of the key; And a controller for controlling the transceiver and the motion sensor, wherein the controller activates the key for a preset time when the movement of the key is detected by the motion sensor, Determining whether or not the identifier of the received vehicle matches the identifier of the vehicle stored in the key when the first signal including the identifier of the vehicle is received from the vehicle, And transmit the response signal for the first signal to the vehicle through the transceiver if the identifiers of the first signal match.

According to another aspect of the present invention, there is provided a remote vehicle lock control method using a key, the method comprising: receiving a first signal from a vehicle; Responsive to the first signal, transmitting a first response signal to the vehicle, the first response signal including a positive acknowledgment for the first signal; Receiving a second signal including an identifier of the vehicle from the vehicle; Determining whether the identifier of the received vehicle matches the identifier of the vehicle stored in the key; And transmitting the second response signal for the second signal to the vehicle when the identifier of the received vehicle matches the identifier of the vehicle stored in the key and the movement of the key is detected.

Preferably, the remote vehicle lock control method further includes the step of activating the key.

The remote vehicle lock control method may further include deactivating the key if the identifier of the received vehicle and the identifier of the vehicle stored in the key do not match.

In order to achieve the above object, a key for controlling remote vehicle lock includes a transceiver for transmitting and receiving signals to / from a vehicle; A motion sensor for sensing movement of the key; And a control unit for controlling the transceiver and the motion sensor, wherein the control unit receives a first signal from the vehicle through the transceiver, and responsive to the first signal, for receiving A first response signal including an affirmative acknowledgment is transmitted through the transceiver, a second signal including the identifier of the vehicle is received from the vehicle through the transceiver, and the identifier of the received vehicle and the vehicle stored in the key And a second response signal for the second signal is transmitted through the transceiver when the identifier of the received vehicle matches the identifier of the vehicle stored in the key and the movement of the key is detected, To the vehicle.

INDUSTRIAL APPLICABILITY As described above, according to the present invention, it is possible to protect a vehicle from an attack such as a relay attack.

Further, according to the present invention, there is an effect that relay attack can be prevented by changing only the configuration of the key without changing the system of the vehicle.

1 is a conceptual diagram of a relay attack.
2 is a flow chart of the unlocking method according to the prior art.
3 is a conceptual diagram of an unlocking method according to an embodiment.
4A is a flowchart of a remote lock control method according to one embodiment.
4B is a flowchart of a remote lock control method according to another embodiment.
5 is a flowchart of a remote lock control method according to another embodiment.
6 is a block diagram of a key according to an embodiment.

Hereinafter, some embodiments of the present invention will be described in detail with reference to exemplary drawings. It should be noted that, in adding reference numerals to the constituent elements of the drawings, the same constituent elements are denoted by the same reference numerals whenever possible, even if they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In describing the components of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are intended to distinguish the constituent elements from other constituent elements, and the terms do not limit the nature, order or order of the constituent elements. When a component is described as being "connected", "coupled", or "connected" to another component, the component may be directly connected to or connected to the other component, It should be understood that an element may be "connected," "coupled," or "connected."

As an unlocking method that does not use a mechanical key, a Passive Keyless Entry and Start (PKES) system can be used. Vehicle 210 and key 220 may exchange signals as shown in FIG.

First, the vehicle 210 may periodically search for the key 220. For the search of the key 220, the vehicle 210 may send a wake-up signal (S200). The wake-up signal may be repeatedly transmitted according to a predetermined period. In addition, the wake-up signal is transmitted at a low frequency of 120 kHz to 135 kHz.

The key 220 that received the wake-up signal may receive an acknowledgment (ACK) signal for the wake-up signal when the key 220 is within the coverage of the low frequency signal of the vehicle 210 To the vehicle 210 (S202). The ACK signal is transmitted as a 315 MHz to 433 MHz Ultra High Frequency signal.

The vehicle 210 receiving the ACK signal may transmit (S204) the challenge including the vehicle identifier (ID) to the key 220 (S204). The challenge may be transmitted as a low-frequency signal.

The key 220 may compare the vehicle ID in the received challenge with the vehicle ID stored in the key 220 and send the key response to the vehicle 210 (S206) if the vehicle IDs match. The key response may be transmitted as a very high frequency signal. The key response may include a key value stored in the key 220. Also, if the key response is correct, the vehicle 210 can unlock the vehicle. For example, the vehicle 210 can determine the validity of the key response by comparing the key response with the stored key value of the vehicle 210. [

Also, a plurality of coverage corresponding to each part of the vehicle 210 may be created around the vehicle. By allowing coverage by different low-frequency signals to cover different areas, the vehicle 210 can determine the area where the key 220 is located adjacent. Also, in one embodiment, steps S200 and S202 may be omitted.

However, the above-described unlocking method is vulnerable to relay attack, as described above in connection with Fig. Therefore, in order to prevent such relay attack, it is recommended to remove the battery from the auxiliary key. This is because there is a probability that a relay attack due to a signal from the secondary key will succeed, considering that the secondary key is usually stored in the home. However, even if the user has a key other than the auxiliary key, there is still a risk of relay attack. It may also be advisable to keep the key in a location where signal transmission and reception are blocked. For example, a key can be stored in a Faraday bag. However, this increases the space for storage of the key and inconveniences the user.

Further, in order to prevent relay attack, a method of judging a relay attack based on a noise of a signal from a vehicle and a key has been proposed. The vehicle and / or key can regard the signal as a signal due to relay attack when there is noise above a predetermined level in the received signal. However, if the relay uses a Low Pass Filter and / or interference cancellation technique, then relay attack can not be detected.

Also, in order to prevent relay attack, a Distance Bounding Protocol has been proposed. The distance limited protocol includes a process of measuring and / or verifying the distance between the transmitting end and the receiving end. For example, the distance between the transmitting end and the receiving end can be measured by measuring the transmission of the signal and the reception time of the response signal thereto. Even if a repeater is used, the delay of the signal increases according to the distance between the transmitting end and the receiving end. Therefore, when the response delay of the signal is longer than the preset time, relay attack can be considered. However, it is difficult to accurately measure the distance using the very high frequency of the vehicle and the key or the low frequency signal. Therefore, there is a probability that the relay attack will succeed even with the distance limitation protocol.

Therefore, a method capable of preventing relay attack will be described below.

As described above, the relay attack on the smart key is generally highly likely to be successful if the smart key is located in a fixed position. For example, if the smart key is located in the user's home, the attacker may attempt to attack the relay while the user is at home.

On the other hand, when the user actually unlocks the vehicle using the smart key, the user moves to the vehicle and opens the door of the vehicle. Therefore, movement of the smart key occurs even if the user carries the smart key in his hand or in his pocket. Thus, relay attack can be prevented by unlocking the vehicle based on the movement of the smart key.

3 is a conceptual diagram of an unlocking method according to an embodiment.

In Figure 3, the vehicle 310 may periodically transmit a wake-up signal or challenge. The wake-up signal or challenge may be for the search of the key 320. In Fig. 3, the user is moving toward the vehicle 310 with the key 320 being held. As the key 320 enters the coverage of the signal transmitted by the vehicle 310, the key 320 may receive a periodic signal from the vehicle.

As described above with respect to FIG. 1, when key 320 receives a wake-up signal or challenge, key 320 transmits a response signal thereto. In this case, the key 320 may identify the vehicle identifier contained in the signal received from the vehicle 310.

In this embodiment, the key 320 may further confirm the movement of the key 320. For example, the key 320 may include a motion sensor for sensing the movement of the key. When a signal is received from the vehicle 310, the key 320 may determine whether there is movement of the key 320 based on the motion sensor. If movement of the key 320 is detected, the key 320 may transmit a response signal.

For example, the key 320 may include one or more sensors for sensing movement. For example, the key 320 may include at least one of a vibration sensor, a tilt sensor, a gyro sensor, and an acceleration sensor.

For example, if motion is detected during a predetermined time interval before a signal from vehicle 310 is received, key 320 may transmit a response signal. Also, when motion is detected over a predetermined time period before the signal from vehicle 310 is received, key 320 may transmit a response signal. In addition, when the signal from vehicle 310 includes a vehicle identifier, key 320 may send a response signal based on the vehicle identifier and movement.

Also, for example, when a signal is received from vehicle 310, key 320 may be set to detect motion for a period of time. By detecting movement of the key 320 based on reception of a signal from the vehicle 310, the power consumption of the key 320 can be reduced. Thus, when the key 320 receives a signal from the vehicle 310, the key 320 may detect movement of the key 320 for a predetermined time period. Also, if motion is detected during a preset time interval, or if a motion above a threshold is detected during a predetermined time interval, the key 320 may transmit a response signal. In this case, the key 320 may transmit a response signal only when the vehicle identifier included in the signal received from the vehicle 310 is matched.

Also, for example, key 320 may be activated based on motion. For example, the key 320 may be activated for a predetermined time when motion is detected. For example, the key 320 may be activated for 10 seconds if motion is detected. Also, during activation, when a signal is received from vehicle 310, key 320 may transmit a response signal to the received signal. Further, if a signal is received from the vehicle 310 after a predetermined time, the key 320 does not respond to the received signal.

If the key 320 is not activated or movement of the key 320 is not detected, the key 320 may ignore the signal from the vehicle 310, as described above. Also, for example, if the key 320 is not activated or motion of the key 320 is not detected, and if a signal from the vehicle 310 over a predetermined number of times is repeatedly received, ) May be deactivated. And may be a signal from vehicle 310 due to relay attack. In this case, the key 320 is deactivated for a predetermined time, and may not be activated even if motion is detected. Also, in this case, the key 320 may be deactivated until there is an input to the physical button of the key 320. [

4A is a flowchart of a remote lock control method according to one embodiment.

In this embodiment, for example, the signal transmitted from the vehicle is a low frequency signal, and the signal transmitted from the key may be a very high frequency (UHF) signal.

First, the key can detect the movement of the key (S400). As described above, the key can detect movement using a motion sensor. If motion is detected, the key can set a timer and activate the key (S402). The timer can be set to activate the key for a predetermined time. For example, the preset time may be 10 seconds.

The key may receive a signal from the vehicle (S404). The signal from the vehicle may include an identifier of the vehicle. Further, the signal from the vehicle may be a signal transmitted in accordance with a predetermined period. The signal from the vehicle may be a challenge signal. The key may compare the vehicle identifier stored in the key with the received vehicle identifier to determine whether the identifier matches (S406).

Also, the key can determine whether a signal has been received from the vehicle within a predetermined time (S408). That is, the key may determine whether a signal from the vehicle has been received within a predetermined time set by the timer. It may also mean to determine whether a signal has been received from the vehicle while the key is active.

When a signal is received within a predetermined time - that is, when a signal is received during activation (before timer expiration) - the key can send a response signal (S410). The response signal may include a unique identifier for identification of the key.

In Fig. 4A, the order of steps S406 and S408 may be reversed. Also, if the identifiers do not match, the timer can be terminated. In this case, the key may be deactivated.

4B is a flowchart of a remote lock control method according to another embodiment.

In this embodiment, for example, the signal transmitted from the vehicle is a low frequency signal, and the signal transmitted from the key may be a very high frequency (UHF) signal.

The key may receive a signal from the vehicle (S420). The signal from the vehicle may include an identifier of the vehicle. Further, the signal from the vehicle may be a signal transmitted in accordance with a predetermined period. The signal from the vehicle may be a challenge signal.

Upon receiving a signal from the vehicle, the key can detect the movement of the key (S422). As described above, the key can detect movement using a motion sensor. For example, the key may detect movement for a predetermined time. For example, upon receiving a signal, the key may set a timer for motion detection and may also activate the key. Further, the timer can be set to activate the key for a predetermined time.

 The key may compare the vehicle identifier stored in the key with the received vehicle identifier to determine whether the identifier is matched (S424).

Also, the key may determine whether motion has been detected since receipt of a signal from the vehicle (S426). For example, the key may determine that motion has been detected only if motion above a threshold value is detected within a predetermined time.

If the identifiers match and motion is detected, the key may send a response signal (S428). The response signal may include a unique identifier for identification of the key.

In Fig. 4B, the order of steps S424 and S426 may be reversed. Also, if the identifiers do not match, the timer can be terminated. In this case, the key may be deactivated.

5 is a flowchart of a remote lock control method according to another embodiment.

In this embodiment, for example, the signal transmitted from the vehicle is a low frequency signal, and the signal transmitted from the key may be a very high frequency (UHF) signal. In order to avoid redundant description, the redundant description described above with reference to Figs. 1 to 4 may be omitted.

The key may receive the first signal from the vehicle (S500). The first signal may be a wake-up signal periodically transmitted from the vehicle. The terminal receiving the wake-up signal can activate the key and transmit the first response signal corresponding to the first signal to the vehicle (S502). The first response signal may comprise a receive acknowledgment (ACK) for the first signal.

As a response to the first response signal, the key may receive the second signal from the vehicle (S504). The second signal may be a challenge signal comprising an identifier of the vehicle. The key may match the vehicle identifier stored in the key in the second signal (S506) and transmit the second response signal (S510) if the key motion is detected (S508). The second response signal may include an identifier of the key. 5, the order of steps S506 and S508 may be reversed.

6 is a block diagram of a key according to an embodiment.

The key 600 of FIG. 6 may be a smart key. 6, the controller 610 may control the remaining configurations of the key 600, determine whether the vehicle identifier is the same, and whether the key 600 is moving.

The motion sensor 615 may include at least one of a vibration sensor, a tilt sensor, a gyro sensor, and an acceleration sensor as a sensor for sensing movement of a key. The sensitivity of the motion sensor 615 may be controlled by the control unit 610.

The timer 620 may be used to activate the key 600 for a predetermined time when motion is detected from the motion sensor.

The receiver 625 may be configured to receive a signal (e.g., a low frequency signal) from the vehicle. In addition, the transmitter 630 may be configured to transmit a very high frequency (UHF) signal to the vehicle. The power supply unit 635 can supply power to the key 600. For example, the power supply 635 may be a battery.

The configuration of the key 600 of FIG. 6 may be implemented on one or a plurality of chips as a logical division. Also, for example, one or more configurations may be implemented as a single chip. For example, the timer 620 may be a timer implemented inside the control unit 610. [ Also, the transmitter 630 and the receiver 625 may be referred to as a transceiver.

It is to be understood that the terms "comprises", "comprising", or "having" as used in the foregoing description mean that the constituent element can be implanted unless specifically stated to the contrary, But should be construed as further including other elements. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used terms, such as predefined terms, should be interpreted to be consistent with the contextual meanings of the related art, and are not to be construed as ideal or overly formal, unless expressly defined to the contrary.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

110, 210, 310: vehicle 120, 220, 320, 600: key
130: Relay
610: control unit 615: motion sensor
620: Timer 625: Receiver
630: Transmitter 635: Power supply

Claims (14)

A remote vehicle lock control method using a key,
Receiving a first signal including an identifier of the vehicle from the vehicle;
Activating a motion sensor for a predetermined time via a timer when the first signal is received;
Determining whether the identifier of the received vehicle matches the identifier of the vehicle stored in the key;
Disabling the motion sensor by terminating the timer to reduce power consumption of the motion sensor if the identifier of the received vehicle and the identifier of the vehicle stored in the key do not match;
Detecting movement by the motion sensor before termination of the timer;
If the identifier of the received vehicle matches the identifier of the vehicle stored in the key and the movement by the motion sensor is detected above a threshold value within the predetermined time, a response signal for the first signal is transmitted to the vehicle step; And
Deactivating the key until there is an input to the physical button when motion by the motion sensor is not detected and the first signal is repeatedly received from the vehicle over a predetermined number of times;
Lt; / RTI >
The response signal including a key identifier for identifying the key,
Wherein the first signal is a low frequency signal of 120 kHz to 135 kHz and the response signal is a high frequency signal of 315 MHz to 433 MHz,
Remote vehicle lock control method. delete delete delete As a key for controlling remote vehicle lock,
A transceiver for transmitting and receiving signals to and from the vehicle;
A motion sensor for sensing movement of the key; And
And a controller for controlling the transceiver and the motion sensor,
Wherein,
The control unit activates the motion sensor for a preset time period through a timer and determines whether the identifier of the received vehicle matches the identifier of the vehicle stored in the key when receiving the first signal including the identifier of the vehicle through the transceiver and,
If the received vehicle identifier and the vehicle identifier stored in the key do not match, deactivating the motion sensor by terminating the timer to reduce power consumption of the motion sensor, and storing the identifier of the received vehicle and the identifier And transmits a response signal for the first signal to the vehicle if the identifier of the vehicle is matched and the movement by the motion sensor is detected above the threshold within the predetermined time,
And to deactivate the key until there is an input to the physical button when motion by the motion sensor is not detected and the first signal is repeatedly received from the vehicle more than a predetermined number of times,
The response signal including a key identifier for identifying the key,
Wherein the first signal is a low frequency signal of 120 kHz to 135 kHz and the response signal is a very high frequency signal of 315 MHz to 433 MHz. delete delete delete delete delete delete delete delete delete

Images