 |
| New methods of car theft that make even keyless vehicles unsecured |
It would not be wrong to call the modern vehicles of the present day a computer on the go. These vehicles can contain over 100 computers and millions of lines of software code. These computers are connected through a network that can control almost all aspects of any vehicle.
It is no wonder that car theft is also taking place with the help of modern technology.
There are four types of computers installed in vehicles. Many computers are limited to aspects of the vehicle's driving or drivetrain, such as fuel or battery economy, monitoring emissions, and using the cruise control option on the highway.
Another type of computer looks after the safety aspect of the vehicle. They collect information about the environment inside and outside the vehicle and come with features like lane keeping, automatic braking, and backup monitoring.
A third type of computer runs infotainment systems, such as showing videos or playing music. This system can be connected to your smartphone with the help of Bluetooth and enables wireless communication. Many vehicles are equipped with mobile phone services and can also run Wi-Fi.
The latter types are installed for the vehicle's computer navigation system. With the help of these computers, the GPS system runs in the car which keeps us aware of the routes.
One type of computer often has to be connected to another computer. For example, safety systems retain control of the drivetrain and infotainment system due to safety concerns.
But the difference between a car network and a normal computer network is that all the devices in the car trust each other, so if a hacker attacks one computer, he can also access any other computer in the car. gets
For some thieves, new technology in cars makes it harder, while for others, it makes it easier. Now new methods of car theft are emerging.
Breakdown of wireless keys and 'keyless' entry
Some newer vehicles have the advanced features of keyless entry and remote start. It has become common in cars and has become easier.
In this case, a fob or device is installed in the car key. A specific code, known to the fob and the car, allows you to enter and start your vehicle. But this code prevents you from starting other vehicles.
The difference between keyless entry and vehicle unlocking remotes is that keyless entry fobs are always transmitting a signal.
The car unlocks when you are near or touch the car. In the old remote, you had to press a button to unlock the car and only then you could insert the key and start the car.
But now the keyless fob first transmits a digital code signal to the vehicle and then unlocks the vehicle.
Thieves have figured out that they can listen to this radio signal and record it. They can then 'replay' the recording of this signal and unlock the car.
Keeping in mind the security requirements, the new keyless fobs now use a one-time code (ie a different code each time) to open the car door.
Another method of car theft uses two devices that create an electronic bridge between the fob and the car. A thief approaches a car and uses a device that sends a signal asking for a digital code to authenticate the car's owner.
The thief gives this signal to his accomplice who is located near the car owner's house. This person forwards a copy of the vehicle's signal. When the keyless fob receives a response signal, the second device records it and transmits it to the first device near the car. This unlocks the car.
Thieves get away with the car, but whenever they turn off the engine, they can't start it again.
Car companies are trying to solve this problem by making it mandatory to have a keyless fob inside the car to drive it.
Network Hacking
The network through which all the computers installed in the car communicate with each other is called the Controller Area Network (CAN) bus. It is designed in such a way that all computers can send commands or information to each other.
CanBus was not designed with security requirements in mind, as it was assumed that all devices are limited to their functions. But due to this, Kane Bus came under the attack of hackers.
Car thieves often try to hack into the Canbus and access the computer that controls the vehicle's engine. A copy of the keyless code is stored in the vehicle's engine control unit. Thieves can duplicate this and insert it into a blank key fob to steal the vehicle.
One way to do this is to access the vehicle's onboard diagnostics. This is a wired location or wireless connection from which mechanics repair the car. By gaining access to it, thieves can use the bus.
Another method of network hacking is to break into the car's headlight and gain access to the CAN bus where there is a direct wire connection to it.
USB hack
Modern-day car thieves also use the 'USB hack' method, which exploits design flaws in Hyundai and Kia vehicles.
In this, a thief enters your car and then finds a specific place near the steering wheel where a USB connector can be inserted to start the car hence the method is called a 'USB hack'. So one just has to break the car window and get inside and plug in the USB cable to start the car?
A group of thieves called 'Kya Boys' has gained popularity on Tik Tok, who used to steal cars in the same way in the American city of Milwaukee. So people have come to know about this method of car theft.
To overcome this flaw, Hyundai and Kia have made it imperative that the key fob remains in the car, otherwise, you will not be able to start the car's engine without it.
How can we prevent our vehicles from being stolen?
There are many different models of vehicles and their complexity is increasing, but car thieves will likely continue to steal our vehicles in new ways.
So what can we do in such a situation?
Some things always remain the same: Always lock your car and never leave your keys or key fob inside.
The new thing is to always keep your car software updated, just like you do with your phone and computer.
- Doug Jacobson is a professor of electrical and computer engineering at Iowa State University. This article was previously published on The Conversation.