Surveillance-based relay attack prevention

1. An apparatus for providing a proximity-based access portal, comprising:

an antenna; and

a processor to:

receive, via the antenna, an access request for the proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;

obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on one or more radio signals received by the antenna;

obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;

determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;

detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and

deny the access request based on detecting the relay attack.

2. The apparatus of claim 1 , wherein:

the processor to obtain the first motion history representing movement detected near the proximity-based access portal during the particular timeframe is further to:

generate the first motion history based at least in part on analyzing the one or more radio signals received by the antenna; and

the processor to obtain the second motion history representing movement of the authorized device during the particular timeframe is further to:

receive, via the antenna, the second motion history, wherein the second motion history is generated by the authorized device based at least in part on data captured by one or more sensors associated with the authorized device.

3. The apparatus of claim 1 , wherein the processor is further to:

obtain first biometric data associated with a first user detected near the proximity-based access portal; and

determine, based on the first biometric data, whether the first user is an authorized user of the authorized device.

4. The apparatus of claim 3 , wherein the processor to determine, based on the first biometric data, whether the first user is the authorized user of the authorized device is further to:

obtain second biometric data associated with the authorized user; and

determine, based on the first biometric data and the second biometric data, whether the first user and the authorized user are a same user.

5. The apparatus of claim 3 , wherein the processor to determine, based on the first biometric data, whether the first user is the authorized user of the authorized device is further to:

send the first biometric data associated with the first user to the authorized device; and

receive an indication from the authorized device of whether the first user is the authorized user.

6. The apparatus of claim 3 , wherein the processor to detect the relay attack associated with the access request is further to:

detect the relay attack associated with the access request based at least in part on determining that the first user is not the authorized user of the authorized device.

7. The apparatus of claim 3 , wherein the processor is further to:

determine, based on the second motion history, that the movement of the authorized device is below a threshold level of movement; and

obtain the first biometric data based at least in part on determining that the movement of the authorized device is below the threshold level of movement.

8. The apparatus of claim 3 , wherein the first biometric data comprises a visual representation of the first user.

9. At least one non-transitory machine accessible storage medium having instructions stored thereon, wherein the instructions, when executed on a machine, cause the machine to:

receive, via an antenna, an access request for a proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;

obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on one or more radio signals received by the antenna;

obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;

determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;

detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and

deny the access request based on detecting the relay attack.

10. The storage medium of claim 9 , wherein the instructions further cause the machine to:

obtain first biometric data associated with a first user detected near the proximity-based access portal; and

determine, based on the first biometric data, whether the first user is an authorized user of the authorized device.

11. The storage medium of claim 10 , wherein the instructions that cause the machine to detect the relay attack associated with the access request further cause the machine to:

detect the relay attack associated with the access request based at least in part on determining that the first user is not the authorized user of the authorized device.

12. A system for providing a proximity-based access portal, comprising:

an antenna;

one or more sensors to capture sensor data associated with an environment near the proximity-based access portal; and

a processor to:

receive, via the antenna, an access request for the proximity-based access portal, wherein the access request comprises an access token associated with an authorized device;

obtain a first motion history representing movement detected near the proximity-based access portal during a particular timeframe, wherein the first motion history is generated based at least in part on the sensor data captured by the one or more sensors;

obtain a second motion history representing movement of the authorized device during the particular timeframe, wherein the second motion history is generated by the authorized device;

determine, based on comparing the first motion history and the second motion history, whether the movement detected near the proximity-based access portal matches the movement of the authorized device;

detect a relay attack associated with the access request, wherein the relay attack is detected based at least in part on determining that the movement detected near the proximity-based access portal does not match the movement of the authorized device; and

deny the access request based on detecting the relay attack.

13. The system of claim 12 , wherein the one or more sensors comprise a camera.

14. The system of claim 13 , wherein the processor to obtain the first motion history representing movement detected near the proximity-based access portal during the particular timeframe is further to:

obtain visual data associated with the environment near the proximity-based access portal, wherein the visual data is captured by the camera;

detect movement near the proximity-based access portal based on the visual data; and

generate the first motion history based on the movement detected near the proximity-based access portal.

15. The system of claim 13 , wherein the processor is further to:

obtain first biometric data associated with a first user detected near the proximity-based access portal; and

determine, based on the first biometric data, whether the first user is an authorized user of the authorized device.

16. The system of claim 15 , wherein the processor to obtain first biometric data associated with the first user detected near the proximity-based access portal is further to:

obtain visual data associated with the environment near the proximity-based access portal, wherein the visual data is captured by the camera;

detect the first user near the proximity-based access portal based on the visual data; and

generate the first biometric data based on the visual data associated with the first user.

17. The system of claim 15 , wherein the processor to detect the relay attack associated with the access request is further to:

detect the relay attack associated with the access request based at least in part on determining that the first user is not the authorized user of the authorized device.