Sunday, October 12, 2008

Security and Keyless Entry

I recently saw a commercial for a new Lincoln sedan (MKS) which markets an keyless invisible touchpad called SECURICODE KEYLESS ENTRY. In addition to the touchpad, the car also includes an option for keyless engine starting.

I'm aware of earlier models of cars (particularly on Ford vehicles) that provide an entry touchpad similar to that found on garage doors. Thus, I don't imagine the concept provides any new security risk. I am, however, curious about any new possible risks in light of the design change. The new design houses touch-sensitive controls under a weatherproof acrylic panel. A five digit code is entered into the panel. It seems to me that consistent use of the particular buttons would lead to excessive smudging or weathering on a given section of the cover. Would this theoretically make it easier for would-be thieves to figure out the entry code? Furthermore, does the use of keyless-start make it even easier to steal the car after gaining entry?

Security concerns regarding keyless entry have been documented for many years now. I am curious to see if the combination of these technologies (keypad-entry and keyless start) will have any detrimental effects.

If anyone has experience using keypad-entry, I'd enjoy hearing how reliable the system is, how easy it is to change the code, and how often the code is changed.

7 comments:

  1. This article was pretty interesting. I have one question as to how this works. Does it sense a correct finger print to light the five buttons, or just anyone's finger print? I agree about the concern of wear giving away the code, or even causing it to break, although in the article it seems like they put this through an extensive test. My question is what is wrong with the security of a plain old key? I think this technology might make it easier for someone to steal your car, because as we saw on mythbusters... it's easy to clone a finger print. I think this technology will cause more problems than help but I guess we will have to wait until actual data comes out.

    ReplyDelete
  2. This comment has been removed by the author.

    ReplyDelete
  3. When I first heard about these technologies I was taken aback - last year, my friend's dad bought a 2007 Lexus IS - which features keyless entry. Essentially the lock can detect the proximity of the car key and a simple touch on the door handle unlocks it. If you think about it, this is really neat technology - the car senses when you are a foot or so from it, a light beneath the handle goes on, you get in the car, press a button and the ignition starts. I don't see how this is any less secure than a standard key. Sure, if your key was stolen, the crook would have a somewhat easier time identifying which car the key belongs to, but overall the convenience level is admittedly worth it. The thought of never having to remove the key from your pocket is pretty nice - and could greatly reduce the chance of one losing the key this way.

    As far as keypads go, the manufacturers must have taken the wear down factor into account - I remember when I was in grade school and a friend's mom had a Buick with a keypad feature so this idea has been around for a while. This is an instance where a brute force attack might be a little more conspicuous, just make sure you wipe the Cheeto remnants off your fingers before entering the code.

    ReplyDelete
  4. I agree with Dorian that it seems the keyless entry that unlocks when the key is close by doesn't really decrease security. Even if a normal set of keys was stolen, people could find the car using the unlock/lock beeper (if you have one). In terms of the keypad with a code, my roommate owns one and has limited problems with it (though she does drive a somewhat-undesirable stationwagon). There is no wear on the buttons that she presses (though they are rubber, not under a keyless panel). The old-style types of keyless entry, however, still require keys to start the car (another layer of security). These types, with keyless-starts, seem like they could be easy to be broken into. Aside from the physical wear and tear, which I don't think would be a big threat, there is the possibility of "cracking the code" like people are able to do with home security alarms. This could become a huge security risk, though it might be expensive to attain a device to break the codes. This is probably why home security alarms are still used, even though there is technically a way around them.

    ReplyDelete
  5. These new "smart keys" are a pretty cool feature, but my family has found a couple ways to expose their inconvenience.

    My parents have two cars that have the "smart key" technology (a Toyota Highlander and a Toyota Prius) that enable you to unlock, start, and drive the car without removing the key from your pocket or purse. However, there are some downsides:

    Both my mom and my dad have been in situations that because of the fact that there is no actual key-triggered ignition (it's just an On-Off button), they've forgotten to turn the car off and they've left it running for long periods of time. This is in part because the cars are quiet and it's sometimes hard to tell if they are running, but also, the keyless technology creates a habit of not directly using a key but needing it indirectly so the user doesn't safeguard it or use it in quite the same way they would a normal key.

    This leads to the other problem my family has encountered: lost keys. Each of these keys, depending on the model of the car are incredibly expensive to replace and they can only be copied or replaced by dealerships. So for our family of 5, we only have 2 keys per car making it a minor inconvenience to switch keys around and usually that means digging around in someone's bag or purse to find the key.

    I personally don't care for the "smart key" feature seeing as how I'm accustomed to the old ignition key, but I suppose with time it could be improved and be a real security feature on cars.

    ReplyDelete
  6. In his original post, Jonathan wondered what new security risks keyless entry systems posed. Two subsequent posts seem to indicate that some people don't think keyless entry systems poses greater security risks than traiditional lost keys, carjackers, and lockpicking. However, I'm not so sure.

    One article that Jonathan referenced clearly showed that with only a little bit of technical expertise and a few hundred dollars, keyless entry systems could be surreptitiously hacked.The owners of the car would never know that you were breaking into the car, and you could probably get away easily. And, to me, it seems it would be much simpler to locate a nice-looking car, hack the wireless entry system (assuming the car had a wireless entry system), and break into the car undetected than it would be to somehow pick the lock on the car and disable the car's security system before you were noticed. Especially if you were a professional hacker whose sole source of income might be hacking computers/cars/et cetera. Furthermore, the process of stealing car keys without being noticed (and allowing the victim of the theft to notify police), or the process of creating duplicate traditional keys seems much more involved.

    I just know that, if I was good at it, it would be much easier to hack a keyless entry system surreptitiously than it would be to break into a car with no keyless entry system surreptitiously.

    ReplyDelete
  7. Although this new features which is optional for these new upscale cars are great features to have with a car. What benifits does this new feature bring. And why is the need for this so popular?

    ReplyDelete