Apparatus and method for detecting location of wireless device to prevent relay attack
A passive entry passive start (PEPS) method for preventing relay attack includes detecting a distance of a wireless device to a vehicle based on a time of flight of an ultra-wideband (UWB) signal between the wireless device and a base station at the vehicle. The method further includes enabling by the base station a function of the vehicle only when the distance of the wireless device to the vehicle is within a zone of the vehicle.
1. A method for preventing relay attack on a passive entry passive start (PEPS) system of a vehicle, the PEPS system having a base station at the vehicle, the method comprising:
transmitting, by a fob, a polling signal to the base station;
in response to the base station receiving the polling signal from the fob, transmitting, by the base station, a first ultra-wideband (UWB) signal to the fob;
transmitting, by the fob, a second ultra-wideband (UWB) signal to the base station in response to the first UWB signal, wherein an operating frequency of each UWB signal is between 3 GHz and 10 GHz and each UWB signal has a bandwidth of at least 500 MHz;
determining, by the base station, a distance of the fob to the vehicle based on a round trip time of flight of the UWB signals between the fob and the base station; and
detecting, by the base station, a relay attack of the PEPS system depending on the determined distance of the fob to the vehicle.
2. The method of claim 1 further comprising:
transmitting the first UWB signal from the base station to the fob with a first time stamp;
transmitting the second UWB signal from the fob to the base station with a second time stamp corresponding to the time the fob received the first UWB signal from the base station; and
detecting the distance of the fob to the vehicle based on the round trip time of flight of the UWB signals as measured from the first time stamp and the second time stamp.
3. A passive entry passive start (PEPS) vehicle system configured to prevent relay attack, the system comprising:
a fob; and
a base station at a vehicle;
wherein the fob is further configured to transmit a polling signal to the base station;
wherein the base station is configured to transmit a first ultra-wideband (UWB) signal to the fob in response receiving the polling signal;
wherein the fob is further configured to transmit a second UWB signal to the base station in response to receiving the first UWB signal;
wherein an operating frequency of each UWB signal is between 3 GHz and 10 GHz and each UWB signal has a bandwidth of at least 500 MHz;
wherein the base station is further configured to determine a distance of the fob to the vehicle based on a round trip time of flight of the UWB signals between the fob and the base station and detect a relay attack of the PEPS system depending on the determined distance of the fob to the vehicle.
4. The system of claim 3 wherein:
the base station is further configured to transmit the first UWB signal to the fob with a first time stamp;
the fob is configured to transmit the second UWB signal to the base station with a second time stamp corresponding to the time the fob received the first UWB signal from the base station; and
the base station is further configured to detect the distance of the fob to the target device based on the round trip time of flight of the UWB signals as measured from the first time stamp and the second time stamp.