Secure wireless lock-actuation exchange
System and techniques for a secure wireless lock-actuation exchange are described herein. After receiving a request to actuate a lock from a device, a controller can calculate a challenge counter and then perform verification iterations until an end condition is met—which is a failure of a verification iterations or the number of iterations reaches the challenge count. If the verification iterations reach the challenge count (e.g., there are no failed iterations), then the controller actuates the lock. Each iteration includes an exchange between the device and the controller that the device validates by signing a message with a private key shared by the device and the controller. The exchange also includes a freshness value integrated into the device validation to prevent replay attacks.
1. A controller for secure wireless lock-actuation exchange, the controller comprising:
a lock actuator to switch a state of a lock between a first state and a second state, wherein the first state is locked and the second state is unlocked; and
processing circuitry to:
receive a request to actuate a lock from a device;
calculate a challenge count for the request;
perform verification iterations until an end condition is met, for each verification iteration, the processing circuitry:
creates a vehicle signature from a freshness value and a portion of the request;
transmits the vehicle signature to the device;
computes a local-remote vehicle signature from the vehicle signature; and
compares the local-remote vehicle signature to a verification signature transmitted from the device, the verification signature derived from the vehicle signature, wherein the end condition is at least one of a number of verification iterations reaching the challenge count or the comparing determining that the local-remote vehicle signature does not match the verification signature; and
activate the lock actuator, to switch the state of the lock, in response to the number of verification iterations being equal to or greater than the challenge count.
2. The controller of claim 1 , wherein the freshness value is generated by a monotonic counter.
3. The controller of claim 1 , wherein the challenge count is above a threshold.
4. The controller of claim 3 , wherein the challenge count is a random number.
5. The controller of claim 4 , wherein, to calculate the challenge count, the processing circuitry selects a portion of a message authentication code (MAC) generated using a key, the portion of the request, and a second freshness value.
6. The controller of claim 1 , wherein the vehicle signature is a message authentication code (MAC) generated using a key, the portion of the request, and the freshness value that changes upon each verification iteration.
7. The controller of claim 6 , wherein, to compute the local-remote vehicle signature, the processing circuitry computes a second MAC using the key and the vehicle signature.
8. A method for secure wireless lock-actuation exchange, the method comprising:
receiving a request to actuate a lock from a device;
calculating a challenge count for the request;
performing verification iterations until an end condition is met, a verification iteration comprising:
creating a vehicle signature from a freshness value and a portion of the request;
transmitting the vehicle signature to the device;
computing a local-remote vehicle signature from the vehicle signature; and
comparing the local-remote vehicle signature to a verification signature transmitted from the device, the verification signature derived from the vehicle signature, wherein the end condition is at least one of a number of verification iterations reaching the challenge count or the comparing determining that the local-remote vehicle signature does not match the verification signature; and
actuating the lock, to switch a state of the lock, in response to the number of verification iterations being equal to or greater than the challenge count, wherein the state of the lock is either a first state or a second state, and wherein the first state is locked and the second state is unlocked.
9. The method of claim 8 , wherein the freshness value is generated by a monotonic counter.
10. The method of claim 8 , wherein the challenge count is above a threshold.
11. The method of claim 10 , wherein the challenge count is a random number.
12. The method of claim 11 , wherein calculating the challenge count includes selecting a portion of a message authentication code (MAC) generated using a key, the portion of the request, and a second freshness value.
13. The method of claim 8 , wherein the vehicle signature is a message authentication code (MAC) generated using a key, the portion of the request, and the freshness value that changes upon each verification iteration.
14. The method of claim 13 , wherein computing the local-remote vehicle signature includes computing a second MAC using the key and the vehicle signature.
15. A non-transitory machine readable medium including instructions for secure wireless lock-actuation exchange, the instructions, when executed by a machine, cause the machine to perform operations comprising:
receiving a request to actuate a lock from a device;
calculating a challenge count for the request;
performing verification iterations until an end condition is met, a verification iteration comprising:
creating a vehicle signature from a freshness value and a portion of the request;
transmitting the vehicle signature to the device;
computing a local-remote vehicle signature from the vehicle signature; and
comparing the local-remote vehicle signature to a verification signature transmitted from the device, the verification signature derived from the vehicle signature, wherein the end condition is at least one of a number of verification iterations reaching the challenge count or the comparing determining that the local-remote vehicle signature does not match the verification signature; and
actuating the lock, to switch a state of the lock, in response to the number of verification iterations being equal to or greater than the challenge count, wherein the state of the lock is either a first state or a second state, and wherein the first state is locked and the second state is unlocked.
16. The non-transitory machine readable medium of claim 15 , wherein the freshness value is generated by a monotonic counter.
17. The non-transitory machine readable medium of claim 15 , wherein the challenge count is above a threshold.
18. The non-transitory machine readable medium of claim 17 , wherein the challenge count is a random number.
19. The non-transitory machine readable medium of claim 18 , wherein calculating the challenge count includes selecting a portion of a message authentication code (MAC) generated using a key, the portion of the request, and a second freshness value.
20. The non-transitory machine readable medium of claim 15 , wherein the vehicle signature is a message authentication code (MAC) generated using a key, the portion of the request, and the freshness value that changes upon each verification iteration.
21. The non-transitory machine readable medium of claim 20 , wherein computing the local-remote vehicle signature includes computing a second MAC using the key and the vehicle signature.