Theft protection for an automobile by means of context modelling of an authorised user
The present invention is directed to a method for preventing a relay attack between a mobile phone and a starting device of an automobile, which allows to prevent stealing a vehicle. According to the invention, very specific movement profiles of an authorized driver or user are recognized and thereby it is prevented that an unauthorized user starts the vehicle and then steals it, in various application scenarios. This is based, among other things, on the underlying hardware components' sensor technology used. Further, the invention relates to an analogously arranged system arrangement and to a computer program product with control commands which implement the method or operate the system arrangement.
1. A method for preventing a relay attack between a mobile phone and a starting device of an automobile, comprising:
capturing a reference movement profile using the mobile phone, in which an authorized driver approaches the automobile, takes up a driver position and actuates a starting device;
determining a current movement profile which is suitable for comparison with the captured reference movement profile;
comparing the captured reference movement profile with the determined current movement profile; and
requesting a confirmation by means of the mobile phone if the starting device is actuated and the comparing does not result in a match between the captured reference movement profile and the determined current movement profile;
wherein a time course of a distance between the mobile phone and the automobile is captured as part of the reference movement profile and of the current movement profile.
2. The method according to claim 1 , wherein the reference movement profile and the current movement profile are captured using acceleration sensors.
3. The method according to claim 2 , wherein the acceleration sensors capture both horizontal and vertical movements as part of the reference movement profile and of the current movement profile.
4. The method according to claim 1 , wherein it is checked whether the mobile phone is the same when capturing the reference movement profile, determining the current movement profile and requesting the confirmation.
5. The method according to claim 4 , wherein the checking comprises a readout of at least one identifier from the mobile phone.
6. The method according to claim 4 , wherein the checking comprises a readout of a security element of the mobile phone.
7. The method according to claim 1 , wherein the starting device can only be actuated if the current movement profile does not indicate any movement of the mobile phone at the time of actuation.
8. The method according to claim 1 , wherein in the event of a negative request of the confirmation the starting device is locked for a predeterminable period of time or until a positive request.
9. The method according to claim 1 , wherein the comparing indicates a match if the reference movement profile and the current movement profile are equal at least to a predetermined threshold value.
10. The method according to claim 1 , wherein a mobile radio link is arranged between the automobile and the mobile phone for requesting the confirmation.
11. The method according to claim 1 , wherein the reference movement profile and the current movement profile are captured using geographical coordinates.
12. The method according to claim 1 , wherein the reference movement profile and the current movement profile are captured using respectively at least one GPS coordinate and/or message transmission durations of at least one mobile radio mast.
13. A system arrangement for preventing a relay attack between a mobile phone and a starting device of an automobile, comprising:
the mobile phone arranged for capturing a reference movement profile using the mobile phone, in which an authorized driver approaches the automobile, takes up a driver position and actuates the starting device, wherein the same mobile phone is further arranged for
determining a current movement profile which is suitable for comparison with the captured reference movement profile; and
an authorization unit arranged for comparing the captured reference movement profile with the determined current movement profile; and the mobile phone being arranged for requesting a confirmation if the starting device is actuated and the comparing does not result in a match between the captured reference movement profile and the determined current movement profile;
wherein a time course of a distance between the mobile phone and the automobile is captured as part of the reference movement profile and of the current movement profile.