Remote keyless entry message authentication

Patent metadata

Field	Value
Publication number	US-10137860-B2
Application number	US-201615354631-A
Country	US
Kind code	B2
Filing date	Nov 17, 2016
Priority date	Nov 17, 2016
Publication date	Nov 27, 2018
Grant date	Nov 27, 2018

Abstract

Method and apparatus are disclosed for remote keyless entry authentication. An example remote keyless entry system includes a key fob and a vehicle. The key fob generates a secured message with a plaintext space and a ciphertext space. The vehicle (i) determines whether the key fob may be authorized based on first information in the plaintext space, (ii) decrypts an encrypted value in the ciphertext space based on a predicted full counter value, and (iii) determines whether the key fob is authorized based on second information in the encrypted value.

First claim

What is claimed is:

1. A remote keyless entry system, comprising:
a key fob to:
pad a fob count;
generate an encrypted counter value by encrypting the padded fob count value based on an encryption key;
generate an encrypted value by performing a bitwise XOR on the encrypted counter value with an action code, a first portion of the fob count, and a first portion of an identifier code;
generate a plaintext including a second portion of the fob count and a second portion of the identifier code;
generate a ciphertext including the encrypted value; and

a vehicle to:
generate a predicted full counter value based on the second portion of the fob count and a vehicle count;
generate an encrypted prediction using the predicted full counter value using the encryption key;
generate the first portion of the fob count, the first portion of the identifier code, and the action code by performing the bitwise XOR on the encrypted value with the encrypted prediction; and
when the first portion of the fob count and the second portion of the fob count reconstructed together match the predicted full counter value, authorize the key fob.

2. The system of claim 1 , wherein the vehicle is to:
decrypt the action code from the encrypted value using a selected portion of the encrypted prediction; and
perform an action identified by the action code when the key fob is authorized.

3. The system of claim 1 , wherein the vehicle stores a plurality of authorized identifier codes, and wherein the first portion of the identifier code and the second portion of the identifier code are reconstructed together to be compared to the plurality of authorized identifier codes.

4. The system of claim 1 , wherein the first portion of the identifier code is a half of the identifier code that includes most significant bytes of the identifier code, and the second portion of the identifier code is the other half of the identifier code that includes least significant bytes of the identifier code.

5. The system of claim 1 , wherein the vehicle is to compare the second portion of the identifier code to a corresponding portion of an authorized identifier code to determine whether the key fob is to be authorized.

6. The system of claim 1 , wherein the vehicle is to:
reconstruct the identifier code based on the second portion of the identifier code from the plaintext and the first portion of the identifier code from the encrypted value.

7. A key fob comprising:
a processor to:
pad a counter value;
generate a first value by encrypting the padded counter value based on an encryption key;
generate a second value by performing a bitwise XOR on the first value with an action code and portions of the counter value and an identifier code;
generate a plaintext including remaining portions of the counter value and the identifier code; and
generate a ciphertext including the second value.

8. The key fob of claim 7 , wherein the encryption key is stored in secure memory.

9. The key fob of claim 7 , wherein the processor is to select a portion of the first value from predetermined byte positions.

10. The key fob of claim 9 , wherein the selected portion of the first value is a number of most significant bytes of the first value.

11. The key fob of claim 10 , wherein a number of the most significant bytes equals half of a length of the counter value, half of a length of the identifier code, and a length of the action code.

12. The key fob of claim 9 , wherein the portions of the counter value and the identifier code include a first portion of the counter value and a first portion of the identifier code, and the remaining portions of the counter value and the identifier code include a second portion of the counter value and a second portion of the identifier code.

13. The key fob of claim 12 , wherein the first portion of the identifier code is a half of the identifier code that includes most significant bytes of the identifier code, and the second portion of the identifier code is the other half of the identifier code that includes most significant bytes of the identifier code.

14. The key fob of claim 12 , wherein the first portion of the counter value is a half of the counter value that includes most significant bytes of the counter value, and the second portion of the counter value is the other half of the counter value that includes least significant bytes of the counter value.

15. A remote keyless entry system of a vehicle comprising:
memory to store a plurality of authorized key fob identifiers and a vehicle counter value; and
a processor to, in response to receiving a secured message from a key fob that includes a plaintext space and a ciphertext space:
make a first determination of whether the key fob that sent the secured message is authorized based on a first portion of a key fob identifier included in the plaintext space and corresponding portions of the plurality of authorized key fob identifiers;
generate a predicted full counter value based on the vehicle counter value and a first portion of a key fob counter value included in the plaintext space;
pad the predicted full counter value;
encrypt the padded predicted full counter value using a stored encryption key associated with the first portion of the key fob identifier;
select a portion of the encrypted padded predicted full counter value;
decrypt a second portion of the key fob counter value, a second portion of the key fob identifier, and an action code from an encrypted value of the ciphertext using the selected portion of the encrypted padded predicted full counter value;
make a second determination based on the plurality of authorized key fob identifiers, the first and second portions of the key fob identifier, the first and second portions of the key fob counter values, and the vehicle counter value; and
perform an action identified by the action code when the key fob is authorized.

Assignees

• Ford Global Tech Llc

Inventors

• Zielinski Mark Andre
• Hille Kevin Thomas
• Ye Xin

Classifications

• B60R25/24 Primary

  using electronic identifiers containing a code not memorised by the user · CPC title

• H04L9/06

  the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} · CPC title

• G07C9/00

  Individual registration on entry or exit · CPC title

• G07C2009/00507

  keyless data carrier having more than one function · CPC title

• B60R2325/108

  Encryption · CPC title