tailieunhanh - Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars

We believe that the findings of this report are highly significant in addressing that challenge. A move across the global fleet towards far better fuel economy at a scale which is already technically achievable, could save over six billion barrels of oil per year by 2050, and cut close to half of CO2 emissions from cars, as well as generate significant local air pollution benefits - and all using existing, cost-effective technologies. This is simply too good to ignore. We have been working in partnership over the past six months to develop the Global Fuel Economy Initia- tive, and are now. | Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars Aurelien Francillon Boris Danev Srdjan Capkun Department of Computer Science ETH Zurich 8092 Zurich Switzerland Abstract We demonstrate relay attacks on Passive Keyless Entry and Start PKES systems used in modern cars. We build two efficient and inexpensive attack realizations wired and wireless physical-layer relays that allow the attacker to enter and start a car by relaying messages between the car and the smart key. Our relays are completely independent of the modulation protocol or presence of strong authentication and encryption. We perform an extensive evaluation on 10 car models from 8 manufacturers. Our results show that relaying the signal in one direction only from the car to the key is sufficient to perform the attack while the true distance between the key and car remains large tested up to 50 meters non line-of-sight . We also show that with our setup the smart key can be excited from up to 8 meters. This removes the need for the attacker to get close to the key in order to establish the relay. We further analyze and discuss critical system characteristics. Given the generality of the relay attack and the number of evaluated systems it is likely that all PKES systems based on similar designs are also vulnerable to the same attack. Finally we propose immediate mitigation measures that minimize the risk of relay attacks as well as recent solutions that may prevent relay attacks while preserving the convenience of use for which PKES systems were initially introduced. 1 Introduction Modern cars embed complex electronic systems in order to improve driver safety and convenience. Areas of significant public and manufacturer interest include access to the car . entry in the car and authorization to drive . start the car . Traditionally access and authorization have been achieved using physical key and lock systems where by .