# US 10,369,964 B2 · Keyless entry system security enhancement > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,369,964 B2 - Document ID: US10369964B2 - Status: Granted - Kind: B2 - Application number: 15/867,421 - Filed: 2018-01-10 - Published: 2018-07-12 - Granted: 2019-08-06 - Earliest claimed: 2017-01-10 - Assignees: The MITRE Corporation - Applicants: The MITRE Corporation - Inventors: John Robert Woodill, Jr.; Alberto Rolla Papaleo; Robert Perry Engle; Richard Joseph Pietravalle - Web page: https://patentgrep.com/patent/US10369964B2 ## CPC - B60R 25/24: using electronic identifiers containing a code not memorised by the user - G07C 9/00: Individual registration on entry or exit - G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/069: using certificates or pre-shared keys - G07C 2009/00793: {by Hertzian waves} - G07C 2209/14: With a sequence of inputs of different identification information - H04L 2463/082: applying multi-factor authentication - H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P] - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The keyless entry system (KES) controls access to a vehicle's doors, trunk, hood, etc., through a keyless entry device (e.g., a key fob) using wireless communication with the vehicle. The technology described here mitigates vulnerabilities in the KES implementation by employing a device configured to suppress a keyless entry command until an additional means of authentication is verified, at which point the keyless entry command is unsuppressed. ## Claims ### Claim 1 A method for enhancing security of a keyless entry system of a vehicle, comprising: monitoring, at a first device, a vehicle bus of the keyless entry system to determine that a keyless entry command is being transmitted, the keyless entry command executable by the keyless entry system; upon determining that the keyless entry command is being transmitted on the vehicle bus, suppressing the keyless entry command on the vehicle bus to prevent the keyless entry system from executing the keyless entry command; receiving authentication information from a second device; and upon verifying the authentication information against stored information, permitting the keyless entry system to execute the keyless entry command. ### Claim 2 (depends on 1) The method of claim 1, further comprising: querying the second device to provide the authentication information. ### Claim 3 (depends on 1) The method of claim 1, wherein suppressing the keyless entry command comprises: transmitting a message on the vehicle bus to prevent the keyless entry system from successfully processing the keyless entry command, wherein the message conforms to a communication protocol of the vehicle bus. ### Claim 4 (depends on 1) The method of claim 1, wherein suppressing the keyless entry command comprises: transmitting a message on the vehicle bus to trigger an error in the keyless entry system to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 5 (depends on 1) The method of claim 1, wherein the keyless entry system is configured to control one or more doors, and wherein the keyless entry command comprises a command to unlock the one or more doors. ### Claim 6 (depends on 5) The method of claim 5, wherein suppressing the keyless entry command comprises: transmitting a message on the vehicle bus to lock the one or more doors to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 7 (depends on 5) The method of claim 5, wherein suppressing the keyless entry command comprises: controlling an electronic switch to disconnect the one or more doors from the keyless entry system to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 8 (depends on 1) The method of claim 1, wherein the first device comprises an Electronic Control Unit (ECU) in the keyless entry system. ### Claim 9 (depends on 1) The method of claim 1, wherein the first device is configured to be connected to an on-board diagnostic (OBD) port of a vehicle. ### Claim 10 (depends on 1) The method of claim 1, wherein the authentication information is received over a Bluetooth wireless communications channel. ### Claim 11 (depends on 1) The method of claim 1, wherein the authentication information is received over a WiFi communications channel. ### Claim 12 (depends on 1) The method of claim 1, wherein the authentication information is received over a cellular communications channel. ### Claim 13 (depends on 1) The method of claim 1, wherein the authentication information provides a notification that the second device is located proximally to the vehicle configured with the keyless entry system. ### Claim 14 (depends on 1) The method of claim 1, wherein the authentication information comprises first authentication information received from the second device, further comprising receiving second authentication information from a third device; verifying the first authentication and the second authentication against stored authentication information; and upon verifying the first and the second authentication information, permitting the keyless entry system to execute the keyless entry command. ### Claim 15 A system for enhancing security of a keyless entry system of a vehicle, comprising: a first device comprising one or more processors; and memory storing instructions executable by the one or more processors to cause: monitoring, at the first device, a vehicle bus of the keyless entry system to determine that a keyless entry command is being transmitted, the keyless entry command executable by the keyless entry system; upon determining that the keyless entry command is being transmitted on the vehicle bus, suppressing the keyless entry command on the vehicle bus to prevent the keyless entry system from executing the keyless entry command; receiving authentication information from a second device; and upon verifying the authentication information against stored information, permitting the keyless entry system to execute the keyless entry command. ### Claim 16 (depends on 15) The system of claim 15, wherein the instructions are further executable by the one or more processors to cause: querying the second device to provide the authentication information. ### Claim 17 (depends on 15) The system of claim 15, wherein the instructions are further executable by the one or more processors to cause suppressing the keyless entry command by: transmitting a message on the vehicle bus to prevent the keyless entry system from successfully processing the keyless entry command, wherein the message conforms to a communication protocol of the vehicle bus. ### Claim 18 (depends on 15) The system of claim 15, wherein the instructions are further executable by the one or more processors to cause suppressing the keyless entry command by: transmitting a message on the vehicle bus to trigger an error in the keyless entry system to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 19 (depends on 15) The system of claim 15, wherein the keyless entry system is configured to control one or more doors, and wherein the keyless entry command comprises a command to unlock the one or more doors. ### Claim 20 (depends on 19) The system of claim 19, wherein the instructions are further executable by the one or more processors to cause suppressing the keyless entry command by: transmitting a message on the vehicle bus to lock the one or more doors to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 21 (depends on 19) The system of claim 19, wherein the instructions are further executable by the one or more processors to cause suppressing the keyless entry command by: controlling an electronic switch to disconnect the one or more doors from the keyless entry system to prevent the keyless entry system from successfully processing the keyless entry command. ### Claim 22 (depends on 15) The system of claim 15, wherein the first device comprises an Electronic Control Unit (ECU) in the keyless entry system. ### Claim 23 (depends on 15) The system of claim 15, wherein the first device is configured to be connected to an on-board diagnostic (OBD) port of a vehicle. ### Claim 24 (depends on 15) The system of claim 15, wherein the authentication information is received over a Bluetooth wireless communications channel. ### Claim 25 (depends on 15) The system of claim 15, wherein the authentication information is received over a WiFi communications channel. ### Claim 26 (depends on 15) The system of claim 15, wherein the authentication information is received over a cellular communications channel. ### Claim 27 (depends on 15) The system of claim 15, wherein the authentication information provides a notification that the second device is located proximally to the vehicle configured with the keyless entry system. ### Claim 28 (depends on 15) The system of claim 15, wherein the authentication information comprises first authentication information received from the second device, and wherein the instructions are further executable by the one or more processors to cause: receiving second authentication information from a third device; verifying the first authentication and the second authentication against stored authentication information; and upon verifying the first and the second authentication information, permitting the keyless entry system to execute the keyless entry command. ### Claim 29 A non-transitory computer-readable storage medium comprising instructions for enhancing security of a keyless entry system of a vehicle, wherein the instructions, when executed by a first device having one or more processors, cause the one or more processors to perform instructions comprising: monitoring, at a first device, a vehicle bus of the keyless entry system to determine that a keyless entry command is being transmitted, the keyless entry command executable by the keyless entry system; upon determining that the keyless entry command is being transmitted on the vehicle bus, suppressing the keyless entry command on the vehicle bus to prevent the keyless entry system from executing the keyless entry command; receiving authentication information from a second device; and upon verifying the authentication information against stored information, permitting the keyless entry system to execute the keyless entry command.