Remote keyless system

Last updated

A remote control for a keyless entry system built into an ignition key: pressing a button on the key unlocks the car doors, while another button locks the car and activates its alarm system Remote central locking.jpg
A remote control for a keyless entry system built into an ignition key: pressing a button on the key unlocks the car doors, while another button locks the car and activates its alarm system

A remote keyless system (RKS), also known as remote keyless entry (RKE) or remote central locking, is an electronic lock that controls access to a building or vehicle by using an electronic remote control (activated by a handheld device or automatically by proximity). [1] RKS largely and quickly superseded keyless entry, a budding technology that restrictively bound locking and unlocking functions to vehicle-mounted keypads.

Contents

Widely used in automobiles, an RKS performs the functions of a standard car key without physical contact. When within a few yards of the car, pressing a button on the remote can lock or unlock the doors, and may perform other functions.

A remote keyless system can include both remote keyless entry (RKE), which unlocks the doors, and remote keyless ignition (RKI), which starts the engine.

History

Remote keyless entry was patented in 1981 by Paul Lipschultz, who worked for Niemans (a supplier of security components to the car industry) and had developed a number of automotive security devices. His electrically actuated lock system could be controlled by using a handheld fob to stream infrared data. Patented in 1981 after successful submission in 1979, it worked using a "coded pulse signal generator and battery-powered infra-red radiation emitter." In some geographic areas, the system is called a PLIP system, or Plipper, after Lipschultz. Infrared technology was superseded in 1995 when a European frequency was standardised. [2] [3]

The remote keyless systems using a handheld transmitter first appeared on the French made Renault Fuego in 1982, [4] and as an option on several American Motors vehicles in 1983, including the Renault Alliance. The feature gained its first widespread availability in the U.S. on several General Motors vehicles in 1989.[ citation needed ]

Prior to Remote Keyless Entry, a number of systems were introduced featuring Keyless Entry (i.e., not remote), including Ford's 1980 system introduced on the Ford Thunderbird, Mercury Cougar, Lincoln Continental Mark VI, and Lincoln Town Car, which Ford called Keyless Entry System (later marketed SecuriCode). The system used a five-button keypad on the driver-side with that could unlock the driver's door when the code was entered, with subsequent code entries to unlock all doors or trunk — or lock the vehicle from the outside.

The sixth generation Buick Electra (1985-1991) featured a sill-mounted keypad for model years 1985-1988, superseded in 1989 by a remote keyless entry system.

Nissan offered the same door keypad technology on the 1984 Maxima, Fairlady, Gloria and Cedric, essentially using the same approach as Ford, with the addition of being able to roll the windows down and open the optional moonroof from outside the vehicle on the door handle installed keypad on both the driver's and front passengers door as well as roll the windows up, close the optional sunroof and lock the vehicle.

As of 2024, Ford continued to offer a fob-operated remote keyless system or completely keyless system, augmented by its Securicode five-button keypad. [5] The combination enabled tiered or time-restricted permissions, i.e., the code giving access to the vehicle but not its operation — and the code being easily changed to prevent subsequent vehicle access.

Function

Keyless remotes contain a short-range radio transmitter, and must be within a certain range, usually 5–20 meters, of the car to work. When a button is pushed, it sends a coded signal by radio waves to a receiver unit in the car, which locks or unlocks the door. Most RKEs operate at a frequency of 315 MHz for North America-made cars and at 433.92 MHz for European, Japanese and Asian cars. Modern systems since the mid-1990s implement encryption as well as rotating entry codes to prevent car thieves from intercepting and spoofing the signal. [6] Earlier systems used infrared instead of radio signals to unlock the vehicle, such as systems found on Mercedes-Benz, [7] BMW [8] and other manufacturers.

The system signals that it has either locked or unlocked the car usually through some fairly discreet combination of flashing vehicle lamps, a distinctive sound other than the horn, or some usage of the horn itself. A typical setup on cars is to have the horn or other sound chirp twice to signify that the car has been unlocked, and chirp once to indicate the car has been locked. For example, Toyota, Scion, and Lexus use a chirp system to signify the car being locked/unlocked. While two beeps means that driver's door is unlocked, four beeps means all doors are unlocked. One long beep is for the trunk or power tailgate. One short beep signifies that the car is locked and alarm is set.

The functions of a remote keyless entry system are contained on a key fob or built into the ignition key handle itself. Buttons are dedicated to locking or unlocking the doors and opening the trunk or tailgate. On some minivans, the power sliding doors can be opened/closed remotely. Some cars will also close any open windows and roof when remotely locking the car. Some remote keyless fobs also feature a red panic button which activates the car alarm as a standard feature. Further adding to the convenience, some cars' engines with remote keyless ignition systems can be started by the push of a button on the key fob (useful in cold weather), and convertible tops can be raised and lowered from outside the vehicle while it's parked.

On cars where the trunk release is electronically operated, it can be triggered to open by a button on the remote. Conventionally, the trunk springs open with the help of hydraulic struts or torsion springs, and thereafter must be lowered manually. Premium models, such as SUVs and estates with tailgates, may have a motorized assist that can both open and close the tailgate for easy access and remote operation.

For offices, or residences, the system can also be coupled with the security system, garage door opener or remotely activated lighting devices.

Programming

Remote keyless entry fobs emit a radio frequency with a designated, distinct digital identity code. Inasmuch as "programming" fobs is a proprietary technical process, it is typically performed by the automobile manufacturer. In general, the procedure is to put the car computer in 'programming mode'. This usually entails engaging the power in the car several times while holding a button or lever. It may also include opening doors, or removing fuses. The procedure varies amongst various makes, models, and years. Once in 'programming mode' one or more of the fob buttons is depressed to send the digital identity code to the car's onboard computer. The computer saves the code and the car is then taken out of programming mode.

As RKS fobs have become more prevalent in the automobile industry a secondary market of unprogrammed devices has sprung up. Some websites sell steps to program fobs for individual models of cars as well as accessory kits to remotely activate other car devices.

On early (1998–2012) keyless entry remotes, the remotes can be individually programmed by the user, by pressing a button on the remote, and starting the vehicle. However, newer (2013+) keyless entry remotes require dealership or locksmith programming via a computer with special software . The Infrared keyless entry systems offered user programming, though radio frequency keyless entry systems mostly require dealer programming.

Passive systems

Some cars feature a passive keyless entry system. Their primary distinction is the ability to lock/unlock (and later iterations allow starting) the vehicle without any input from the user.

General Motors pioneered this technology with the Passive Keyless Entry (PKE) system in the 1993 Chevrolet Corvette. It featured passive locking/unlocking, but traditional keyed starting of the vehicle.

Today, passive systems are commonly found on a variety of vehicles, and although the exact method of operation differs between makes and models, their operation is generally similar: a vehicle can be unlocked without the driver needing to physically push a button on the key fob to lock or unlock the car. Additionally, some are able to start or stop the vehicle without physically having to insert a key.

Security

Keyless ignition does not by default provide better security. In October 2014, it was found that some insurers in the United Kingdom would not insure certain vehicles with keyless ignition unless there were additional mechanical locks in place due to weaknesses in the keyless system. [9]

A security concern with any remote entry system is a spoofing technique called a replay attack, in which a thief records the signal sent by the key fob using a specialized receiver called a code grabber, and later replays it to open the door. To prevent this, the key fob does not use the same unlock code each time but a rolling code system; it contains a pseudorandom number generator which transmits a different code each use. [10] The car's receiver has another pseudorandom number generator synchronized to the fob to recognise the code. To prevent a thief from simulating the pseudorandom number generator the fob encrypts the code.

News media have reported cases where it is suspected that criminals managed to open cars by using radio repeaters to trick vehicles into thinking that their keyless entry fobs were close by even when they were far away (relay attack), [11] though they have not reported that any such devices have been found. The articles speculate that keeping fobs in aluminum foil or a freezer when not in use can prevent criminals from exploiting this vulnerability. [12]

In 2015, it was reported that Samy Kamkar had built an inexpensive electronic device about the size of a wallet that could be concealed on or near a locked vehicle to capture a single keyless entry code to be used at a later time to unlock the vehicle. The device transmits a jamming signal to block the vehicle's reception of rolling code signals from the owner's fob, while recording these signals from both of his two attempts needed to unlock the vehicle. The recorded first code is sent to the vehicle only when the owner makes the second attempt, while the recorded second code is retained for future use. Kamkar stated that this vulnerability had been widely known for years to be present in many vehicle types but was previously undemonstrated. [13] A demonstration was done during DEF CON 23. [14]

Actual thefts targeting luxury cars based on the above exploit have been reported when the key fob is near the front of the home. Several workaround can prevent such exploits, including placing the key fob in a tin box. [15] [16] A criminal ring stole about 100 vehicles using this technique in Southern and Eastern Ontario. [17]

See also

Related Research Articles

<span class="mw-page-title-main">Remote control</span> Device used to control other device remotely

In electronics, a remote control is an electronic device used to operate another device from a distance, usually wirelessly. In consumer electronics, a remote control can be used to operate devices such as a television set, DVD player or other digital home media appliance. A remote control can allow operation of devices that are out of convenient reach for direct operation of controls. They function best when used from a short distance. This is primarily a convenience feature for the user. In some cases, remote controls allow a person to operate a device that they otherwise would not be able to reach, as when a garage door opener is triggered from outside.

<span class="mw-page-title-main">Motor vehicle theft</span> Theft of vehicles

Motor vehicle theft or car theft is the criminal act of stealing or attempting to steal a motor vehicle.

<span class="mw-page-title-main">Car alarm</span> Device installed in a vehicle to discourage theft

A car alarm is an electronic device installed in a vehicle in an attempt to discourage theft of the vehicle itself, its contents, or both. Car alarms work by emitting high-volume sound when the conditions necessary for triggering it are met. Such alarms may also cause the vehicle's headlights to flash, may notify the car's owner of the incident via a paging system, and may interrupt one or more electrical circuits necessary for the car to start. Although inexpensive to acquire and install, the effectiveness of such devices in deterring vehicle burglary or theft when their only effect is to emit sound appears to be negligible.

<span class="mw-page-title-main">Keychain</span> Device for carrying several keys together, functional or decorative

A keychain is a small ring or chain of metal to which several keys, or fobs can be attached. The terms keyring & keychain are often used interchangeably to mean both the individual ring, or a combined unit of a ring and fob.

<span class="mw-page-title-main">Garage door opener</span> Motorized device that opens and closes garage doors

A garage door opener is a motorized device that opens and closes a garage door controlled by switches on the garage wall. Most also include a handheld radio remote control carried by the owner, which can be used to open and close the door from a short distance.

<span class="mw-page-title-main">Smart key</span> Electronic access and authorization system

A smart key is an electronic access and authorization system that is available either as standard equipment or an option in several car designs. It was developed by Siemens in 1995 and introduced by Mercedes-Benz under the name "Keyless-Go" in 1998 on the W220 S-Class, after the design patent was filed by Daimler-Benz on May 17, 1997.

<span class="mw-page-title-main">Power door locks</span> Security feature of a motor vehicle

Power door locks allow the driver or front passenger to simultaneously lock or unlock all the doors of an automobile or truck, by pressing a button or flipping a switch.

<span class="mw-page-title-main">Car key</span> Key used to open and/or start an automobile

A car key or an automobile key is a key used to open and/or start an automobile. Modern key designs are usually symmetrical, and some use grooves on both sides, rather than a cut edge, to actuate the lock. It has multiple uses for the automobile with which it was sold. A car key can open the doors, as well as start the ignition, open the glove compartment and also open the trunk (boot) of the car. Some cars come with an additional key known as a valet key that starts the ignition and opens the driver's side door, but prevents the valet from gaining access to valuables that are located in the trunk or the glove box. Some valet keys, particularly those to high-performance vehicles, go so far as to restrict the engine's power output to prevent joyriding. Recently, features such as coded immobilizers have been implemented in newer vehicles. More sophisticated systems make ignition dependent on electronic devices, rather than the mechanical keyswitch. A number of these systems, such as KeeLoq and Megamos Crypto have been demonstrated to be weak and vulnerable to cryptanalytic attacks.

<span class="mw-page-title-main">Interlock (engineering)</span> Feature that makes two mechanisms mutually interdependent

An interlock is a feature that makes the state of two mechanisms or functions mutually dependent. It may consist of any electrical or mechanical devices, or systems. In most applications, an interlock is used to help prevent any damage to the machine or to the operator handling the machine. For example, elevators are equipped with an interlock that prevents the moving elevator from opening its doors and prevents the stationary elevator from moving.

A rolling code is used in keyless entry systems to prevent a simple form of replay attack, where an eavesdropper records the transmission and replays it at a later time to cause the receiver to 'unlock'. Such systems are typical in garage door openers and keyless car entry systems.

<span class="mw-page-title-main">Immobiliser</span> Motor vehicle anti-theft device

An immobiliser or immobilizer is an electronic security device fitted to a motor vehicle that prevents the engine from being started unless the correct key is present. This prevents the vehicle from being "hot wired" after entry has been achieved and thus reduces motor vehicle theft. Research shows that the uniform application of immobilisers reduced the rate of car theft by 40%.

<span class="mw-page-title-main">Ignition switch</span> Switch in motor vehicles

An ignition switch, starter switch or start switch is a switch in the control system of a motor vehicle that activates the main electrical systems for the vehicle, including "accessories". In vehicles powered by internal combustion engines, the switch provides power to the starter solenoid and the ignition system components, and is frequently combined with the starter switch which activates the starter motor.

KeeLoq is a proprietary hardware-dedicated block cipher that uses a non-linear feedback shift register (NLFSR). The uni-directional command transfer protocol was designed by Frederick Bruwer of Nanoteq (Pty) Ltd., the cryptographic algorithm was created by Gideon Kuhn at the University of Pretoria, and the silicon implementation was by Willem Smit at Nanoteq (Pty) Ltd in the mid-1980s. KeeLoq was sold to Microchip Technology Inc in 1995 for $10 million. It is used in 'hopping code' encoders and decoders such as NTQ105/106/115/125D/129D, HCS101/2XX/3XX/4XX/5XX and MCS31X2. KeeLoq has been used in many remote keyless entry systems by such companies like Chrysler, Daewoo, Fiat, Ford, GM, Honda, Mercedes-Benz, Toyota, Volvo, Volkswagen Group, Clifford, Shurlok, and Jaguar.

<span class="mw-page-title-main">Samy Kamkar</span> American businessman

Samy Kamkar is an American privacy and security researcher, computer hacker and entrepreneur. At the age of 16, he dropped out of high school. One year later, he co-founded Fonality, a unified communications company based on open-source software, which raised over $46 million in private funding. In 2005, he created and released the fastest spreading virus of all time, the MySpace worm Samy, and was subsequently raided by the United States Secret Service under the Patriot Act. He also created SkyJack, a custom drone which hacks into any nearby Parrot drones allowing them to be controlled by its operator and created the Evercookie, which appeared in a top-secret NSA document revealed by Edward Snowden and on the front page of The New York Times. He has also worked with The Wall Street Journal, and discovered the illicit mobile phone tracking where the Apple iPhone, Google Android and Microsoft Windows Phone mobile devices transmit GPS and Wi-Fi information to their parent companies. His mobile research led to a series of class-action lawsuits against the companies and a privacy hearing on Capitol Hill. Kamkar has a chapter giving advice in Tim Ferriss' book Tools of Titans.

<span class="mw-page-title-main">Vandal-resistant switch</span> Type of switch meant to be durable

Vandal-resistant switches are electrical switches designed to be installed in a location and application where they may be subject to abuse and attempts to damage them, as in the case of pedestrian crossing switches. Vandal-resistant switches located on devices that are outdoors must be able to withstand extreme temperatures, dust, rain, snow, and ice. Many vandal-resistant switches are intended to be operated by the general public, and must withstand heavy use and even abuse, such as attempts to damage the switch with metal tools. These switches must also resist dirt and moisture.

<span class="mw-page-title-main">Subaru Legacy (second generation)</span> Second generation of Subaru Legacy

The second-generation Subaru Legacy was marketed in Japan from October 1993, and July 1994 marked the second generation in North America with a full body and chassis revision. The exterior was designed by Olivier Boulay in 1991, during his tenure at Subaru. The tail light appearance on both the sedan and wagon was influenced by the taillights on the SVX.

A remote starter is a radio controlled device, which is installed in a vehicle by the factory or an aftermarket installer to preheat or cool the vehicle before the owner gets into it. Once activated, by pushing a button on a special key chain remote, it starts the vehicle automatically for a predetermined time. Different models have keyless entry as well. Most newer vehicles need some kind of bypass module to bypass the factory anti-theft system, so the vehicle can be started without the ignition key in the ignition, this is bypassed only to start the vehicle, which after it is running returns to its original state. For cars with manual transmission additional safety features may need to be added to prevent the car from starting while it's parked in gear. Having a remote starter installed in a vehicle will usually not void the factory warranty when installed properly.

<span class="mw-page-title-main">Smart lock</span> Electromechanical lock

A smart lock is an electromechanical lock that is designed to perform locking and unlocking operations on a door when it receives a prompt via an electronic keypad, biometric sensor, access card, Bluetooth, or Wi-FI from a registered mobile device. These locks are called smart locks because they use advanced technology and Internet communication to enable easier access for users and enhanced security from intruders. The main components of the smart lock include the physical lock, the key, a secure Bluetooth or Wi-Fi connection, and a management mobile app. Smart locks may also monitor access and send alerts in response to the different events it monitors, as well as other critical events related to the status of the device. Smart locks can be considered part of a smart home.

<span class="mw-page-title-main">UniKey</span> Security technologies company

UniKey Technologies is an alternative access control company based in the United States that designs and licenses keyless entry technology worldwide. Its first product in partnership with Kwikset was Kēvo, a Bluetooth-enabled deadbolt door lock.

Automotive hacking is the exploitation of vulnerabilities within the software, hardware, and communication systems of automobiles.

References

  1. ↑ Job, Ann. "Driving Without Car Keys". MSN Autos. Archived from the original on 9 May 2012. Retrieved 27 February 2012.
  2. ↑ Mills, James (8 November 2014). "Keyless wonder: how did we end up with 'smart' wireless keys for our cars?". Sunday Times.
  3. ↑ Torchinsky, Jason (23 February 2021). "I Had No Idea The Renault Fuego Was The Car With This Huge Automotive First". Jalopnik.
  4. ↑ "1980–1985 RENAULT Fuego Turbo". Octane. Archived from the original on 27 October 2012. Retrieved 27 February 2012.
  5. ↑ Ryan McManus (2 December 2004). "The Persistence of SecuriCode:". Medium.com.
  6. ↑ Lake, Matt (7 June 2001). "HOW IT WORKS; Remote Keyless Entry: Staying a Step Ahead of Car Thieves". The New York Times. ISSN   0362-4331 . Retrieved 10 February 2017.
  7. ↑ infrared-keyless-entry, benzworld.org.
  8. ↑ "Archived copy of post to BMW forum". Archived from the original on 9 November 2013. Retrieved 29 June 2012.
  9. ↑ "Thieves target luxury Range Rovers with keyless locking systems". TheGuardian.com . 27 October 2014.
  10. ↑ Brain, Marshall (15 August 2001). "How remote entry works". How Stuff Works website. Retrieved 19 August 2022.
  11. ↑ "CCTV video shows suspects using electronic method to steal cars in northeast Toronto – CityNews Toronto".
  12. ↑ Steinberg, Joseph (12 May 2015). "Vulnerability In Car Keyless Entry Systems Allows Anyone To Open And Steal Your Vehicle". Forbes.
  13. ↑ Thompson, Cadie (6 August 2015). "A hacker made a $30 gadget that can unlock many cars that have keyless entry". Tech Insider . Retrieved 11 August 2015.
  14. ↑ Kamkar, Samy (7 August 2015). "Drive It Like You Hacked It: New Attacks and Tools to Wirelessly Steal Cars". DEF CON 23. Retrieved 11 August 2015.
  15. ↑ "3 solutions to electronic car theft, a continuing threat to high-end Toronto automobiles". CBC.
  16. ↑ "Toyota, Lexus owners warned about thefts that use 'relay attacks'". CBC.
  17. ↑ "20 charged in high-end vehicle thefts in Ontario". CBC.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.