A large number of modern vehicles are relatively easy to steal. They include vehicles that contain keyless entry, a functionality that allows the vehicle to be unlocked and started without having to insert the key into the lock to do so.
Virtually every car manufacturer offers keyless entry on certain models. This functionality is intended to increase the ease of use for owners, as they no longer need to take the key out of, say, their jacket pocket or bag to access the vehicle. This is useful, for example, when the owner has his or her hands full or the key is at the bottom of an overstuffed bag. In addition, the owner can start the vehicle by pressing the start button, without having to insert the key into the ignition to do so.
Keyless entry systems communicate with a vehicle's key via radio signals. The key is accepted by the vehicle only if it is successfully authenticated. This prevents third parties from unlocking the vehicle using another key.
Trial and error
In practice, however, this security does not guarantee that this functionality cannot be abused to steal the vehicle. ADAC took the test in March 2016 and scrutinised around 20 vehicles with keyless entry. Here, the organisation did not so much try to bypass the authentication of the key, but rather to amplify the signal from the legitimate key to the vehicle.
Such an attack can be used in, for example, a situation where a vehicle is parked in front of a home and the owner has the key on his bedside table. An attacker in this case can use special equipment to capture the signal from this key, amplify this signal and transmit it to the vehicle. This makes the vehicle think that the key is in the vicinity of the car, authenticates it and unlocks the vehicle. ADAC therefore called on car manufacturers back in March 2016 to better secure keyless entry systems to prevent vehicle theft.
Situation has not improved
A year has now passed. ADAC has therefore again put the test to the test, this time examining 100 new car models with keyless entry. This showed that the situation had not improved. Without exception, once again every model could be opened and started by amplifying the key's signal. The organisation points out the dangers involved. For instance, a vehicle started in this way can continue to run until the vehicle is switched off. This means thieves can drive off with the vehicle without any problem. It is also possible to refuel the vehicle with the engine running, allowing longer distances to be covered with the stolen vehicle.
In addition, ADAC warns that this form of theft does not leave any traces of burglary, causing problems for the rightful owner of a stolen vehicle. For instance, the organisation points out that if a stolen car is recovered without any burglary marks, this may lead to suspicions that the legitimate owner has tried to defraud the insurance company by declaring his vehicle as stolen. ADAC is therefore again calling on car manufacturers to take action and make keyless entry systems more secure.
Overview
An overview of all car models investigated by ADAC can be found here.
By: Wouter Hoeffnagel
Photos: Shutterstock
