Keyless Entry is Nice, but is it Safe?

Digital keys are not a new technology in the automotive industry. There are multiple ways of implementing such keyless entry solutions, with a fob, card, or a phone, over NFC or Bluetooth. Michael Leitner, president of communications at Car Connectivity Consortium, pointed out “it’s a very mature technology, so there is no way to get to the keys unless you are a government agency like the CIA.” Others disagree, however, and point to demonstrable evidence that some do get around the security of keyless entry. For example, Jason Kent, a ‘hacker in residence’ at a cybersecurity firm in California, pointed to a spate of car thefts in the UK using a relay attack to gain entrance to the vehicle and turn it on.

Other ways of bypassing the system require gaining access to the CAN system of the vehicle, a so called ‘CAN injection’. Such a method was evidently used by thieves to take Ian Tabor’s RAV4 in the UK, which is a bit ironic considering that he is a cybersecurity researcher and automotive engineering consultant. The article points out that at the end of the day no system is unhackable, it is more a question of a continual arms race between OEMs and thieves.

The situation becomes a bit more challenging, and riskier for people, when a third-party is involved. This is what Uber appears to be doing with the launch of its car-sharing service in North America. This peer-to-peer sharing platform will use the Uber app as a keyless entry to a vehicle that is put on the platform. Uber argues this is a good idea from a business and environmental angle, but there is a significant question whether Uber’s system of entry will be secure enough, especially given the current concern that OEM keyless entry systems are not up to scratch.

Personal Comment:

Security is a concern that never goes away, and there shift toward more highly digital systems makes cybersecurity, rather than more directly physical security, ever more important. But there is something else interesting here. Part of the reason often given for digitalization is that it opens up new possibilities, and Uber represents that in this case. They argue that car-sharing, facilitated by their app, will unleash new ways of saving emissions, reducing congestion, and saving people money. That is possible, of course, but only if the security issue is addressed. The ability to share vehicles more effectively will go hand-in-hand with secure digital systems. Hopefully Uber, or a competitor, along with the OEMs will stay one step ahead of thieves.

The Written by  Joshua Bronson,
RISE Mobility & Systems