# US 11,443,038 B2 · Systems and methods for countering security threats in a passive keyless entry system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,443,038 B2 - Document ID: US11443038B2 - Status: Granted - Kind: B2 - Application number: 16/529,210 - Filed: 2019-08-01 - Published: 2020-10-22 - Granted: 2022-09-13 - Earliest claimed: 2019-04-18 - Assignees: Toyota Motor North America, Inc. - Applicants: Toyota Motor North America, Inc. - Inventors: Satyajit Patne; Edward Allen Cain, Jr.; Gabriel Lawrence; Joshua Davis - Web page: https://patentgrep.com/patent/US11443038B2 ## CPC - G06F 21/42: using separate channels for security data - G06F 21/56: Computer malware detection or handling, e.g. anti-virus arrangements - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G07C 9/00182: {operated with unidirectional data transmission between data carrier and locks} - G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks} - G07C 9/28: the pass enabling tracking or indicating presence - G06F 2221/032: Protect output to user by software means - G07C 2009/00793: {by Hertzian waves} - G07C 2209/61: Signal comprising different frequencies, e.g. frequency hopping - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE ## Abstract System, methods, and other embodiments described herein relate to securing wireless communications for passive keyless entry (PKE) to an asset. In one embodiment, a method includes monitoring operating conditions associated with the asset. The operating conditions identify security characteristics of the asset and interactions of wireless devices with the asset. The method includes selectively activating at least one countermeasure from an available group of countermeasures according to at least the operating conditions. The method includes wirelessly communicating, by the asset with an accessing device, according to the at least one countermeasure. ## Claims ### Claim 1 An access system for securing wireless communications for passive keyless entry (PKE) to an asset, comprising: one or more processors; a memory communicably coupled to the one or more processors and storing: a monitoring module including instructions that, when executed by the one or more processors, cause the one or more processors to monitor operating conditions associated with the asset, the operating conditions identifying security characteristics of the asset and interactions of wireless devices with the asset, and selectively activate at least one countermeasure from an available group of countermeasures according to at least the operating conditions, including instructions to selectively activate additional countermeasures beyond the at least one countermeasure according to the operating conditions and responsive to detecting a malicious attacker, and to monitor the operating conditions including monitoring by: i) detecting nearby wireless communications having a substantially similar transmission frequency, ii) receiving a response at or beyond a timing constraint, iii) identifying a tracked trajectory for a source of a communication that does not correlate with a location proximate to the asset, and iv) identifying a communication that fails to satisfy an active one of the available group of countermeasures; and a communication module including instructions that when executed by the one or more processors cause the one or more processors to wirelessly communicate with an accessing device according to the at least one countermeasure. ### Claim 2 (depends on 1) The access system of claim 1, wherein the asset is a vehicle that includes a PKE system, wherein the available group of countermeasures include separate modifications to a communication protocol that define how the asset wirelessly communicates for the PKE, wherein the monitoring module includes instructions to monitor the operating conditions that execute in parallel with at least the communication module wirelessly communicating, and wherein the available group of countermeasures function to thwart malicious attacks to access the asset by one or more of: modifying a format of communications between the asset and the accessing device, and modifying routines for providing and receiving the communications. ### Claim 3 (depends on 1) The access system of claim 1, wherein the communication module includes instructions to wirelessly communicate including instructions to: transmit, at a first frequency, a challenge message as a function of the at least one countermeasure, and in response to receiving, on a second frequency, a response message to the challenge message, provide access to the asset according to whether the response message satisfies at least one security criteria and the at least one countermeasure. ### Claim 4 (depends on 1) The access system of claim 1, wherein the monitoring module includes instructions to monitor the operating conditions including instructions to sniff the wireless communications present at the asset to identify nearby devices, and wherein the monitoring module includes instructions to selectively activate the at least one countermeasure including instructions to activate one or more additional countermeasures from the available group in response to detecting that at least one of the wireless communications correlate with a malicious attacker. ### Claim 5 (depends on 1) The access system of claim 1, wherein the communication module includes instructions to wirelessly communicate including instructions to: responsive to a challenge countermeasure being activated, wirelessly communicate by transmitting and receiving a series of several communications as defined by the challenge countermeasure, the series of several communications including at least a set of wakeup communications prior to a challenge message. ### Claim 6 (depends on 1) The access system of claim 1, wherein the monitoring module includes instructions to selectively activate including instructions to activate timing constraints for a challenge message that the asset wirelessly communicates that cause the communication module to vary instance timing between transmitting successive iterations of the challenge message and vary response timing for receiving a response to the successive iterations of the challenge message. ### Claim 7 (depends on 1) The access system of claim 1, wherein the security characteristics define a base security level of the asset, wherein the monitoring module includes instructions to selectively activate the at least one countermeasure including instructions to activate a base group that is a subset from the available group according to the base security level, wherein the base group includes countermeasures defining: timing constraints for a challenge message that the asset wirelessly communicates, content constraints defining unique content of the challenge message for separate iterations, the timing constraints defining instance timing between transmitting successive iterations of the challenge message and response timing for receiving a response to the challenge message. ### Claim 8 (depends on 1) The access system of claim 1, wherein the communication module includes instructions to wirelessly communicate including instructions to: responsive to a frequency hopping countermeasure being activated, wirelessly communicate by transmitting and receiving at least two sets of communications provided on disparate frequencies, the asset specifying a second frequency on which a wireless device is to respond in a wakeup communication provided on a first frequency by the asset. ### Claim 9 (depends on 1) The access system of claim 1, wherein the communication module includes instructions to wirelessly communicate including instructions to: responsive to a location countermeasure being activated, wirelessly communicate by transmitting and receiving at least a challenge message and a response message, and verifying that the accessing device providing the response message is proximate to the asset, wherein verifying the accessing device is proximate to the asset includes localizing the wireless device using one or more sensors of the asset. ### Claim 10 A non-transitory computer-readable medium for securing wireless communications for passive keyless entry (PKE) to an asset and including instructions that, when executed by one or more processors, cause the one or more processors to: monitor operating conditions associated with the asset, the operating conditions identifying security characteristics of the asset and interactions of wireless devices with the asset, and selectively activate at least one countermeasure from an available group of countermeasures according to at least the operating conditions, including instructions to selectively activate additional countermeasures beyond the at least one countermeasure from the available group according to the operating conditions and responsive to detecting a malicious attacker, and to monitor the operating conditions including: i) detecting nearby wireless communications having a substantially similar transmission frequency, ii) receiving a response at or beyond a timing constraint, iii) identifying a tracked trajectory for a source of a communication that does not correlate with a location proximate to the asset, and iv) identifying a communication that fails to satisfy an active one of the available group of countermeasures; and wirelessly communicate with an accessing device according to the at least one countermeasure. ### Claim 11 (depends on 10) The non-transitory computer-readable medium of claim 10, wherein the available group of countermeasures include separate modifications to a communication protocol that define how the asset wirelessly communicates for the PKE, wherein the available group of countermeasures function to thwart malicious attacks to access the asset by one or more of: modifying a format of communications between the asset and the accessing device, and modifying routines for providing and receiving the communications, wherein the instructions to selectively activate the at least one countermeasure including instructions to activate a base group that is a subset from the available group according to a base security level, wherein the base group includes countermeasures defining: timing constraints for a challenge message that the asset wirelessly communicates, and content constraints defining unique content of the challenge message for separate iterations, the timing constraints defining instance timing between transmitting successive iterations of the challenge message and response timing for receiving a response to the challenge message. ### Claim 12 A method, comprising: monitoring operating conditions associated with an asset, the operating conditions identifying security characteristics of the asset and interactions of wireless devices with the asset, including selectively activating additional countermeasures beyond an at least one countermeasure from an available group according to the operating conditions and responsive to detecting a malicious attacker, and to monitor the operating conditions including: i) detecting nearby wireless communications having a substantially similar transmission frequency, ii) receiving a response at or beyond a timing constraint, iii) identifying a tracked trajectory for a source of a communication that does not correlate with a location proximate to the asset, and iv) identifying a communication that fails to satisfy an active one of the available group of countermeasures; and selectively activating at least one countermeasure from the available group of countermeasures according to at least the operating conditions; and wirelessly communicating, by the asset with an accessing device, according to the at least one countermeasure. ### Claim 13 (depends on 12) The method of claim 12, wherein the available group of countermeasures include separate modifications to a communication protocol that define how the asset wirelessly communicates for passive keyless entry (PKE), wherein monitoring occurs in parallel with at least wirelessly communicating, and wherein the available group of countermeasures function to thwart malicious attacks to access the asset by one or more of: modifying a format of communications between the asset and the accessing device, and modifying routines for providing and receiving the communications. ### Claim 14 (depends on 12) The method of claim 12, wherein wirelessly communicating includes: transmitting, at a first frequency, a challenge message as a function of the at least one countermeasure, and in response to receiving, on a second frequency, a response message to the challenge message, providing access to the asset according to whether the response message satisfies at least one security criteria and the at least one countermeasure. ### Claim 15 (depends on 12) The method of claim 12, wherein monitoring the operating conditions include, sniffing wireless communications present at the asset to identify nearby devices, wherein selectively activating the at least one countermeasure includes activating one or more additional countermeasures from the available group in response to detecting that at least one of the wireless communications correlate with a malicious attacker. ### Claim 16 (depends on 12) The method of claim 12, wherein wirelessly communicating includes: responsive to a challenge countermeasure being activated, wirelessly communicating by transmitting and receiving a series of several communications as defined by the challenge countermeasure, the series of several communications including at least a set of wakeup communications prior to a challenge message. ### Claim 17 (depends on 12) The method of claim 12, wherein selectively activating includes activating timing constraints for a challenge message that the asset wirelessly communicates that cause the asset to vary instance timing between transmitting successive iterations of the challenge message and vary response timing for receiving a response to the successive iterations of the challenge message. ### Claim 18 (depends on 12) The method of claim 12, wherein the security characteristics define a base security level of the asset, wherein selectively activating the at least one countermeasure includes activating a base group that is a subset from the available group according to the base security level, wherein the base group includes countermeasures defining: timing constraints for a challenge message that the asset wirelessly communicates, content constraints defining unique content of the challenge message for separate iterations, the timing constraints defining instance timing between transmitting successive iterations of the challenge message and response timing for receiving a response to the challenge message. ### Claim 19 (depends on 12) The method of claim 12, wherein wirelessly communicating includes: responsive to a frequency hopping countermeasure being activated, wirelessly communicating by transmitting and receiving at least two sets of communications provided on disparate frequencies, the asset specifying a second frequency on which a wireless device is to respond in a wakeup communication provided on a first frequency by the asset. ### Claim 20 (depends on 12) The method of claim 12, wherein wirelessly communicating includes: responsive to a location countermeasure being activated, wirelessly communicating by transmitting and receiving at least a challenge message and a response message, and verifying that the accessing device providing the response message is proximate to the asset, wherein verifying the accessing device is proximate to the asset includes localizing the accessing device according to one or more sensors of the asset.