An Android-Based Multifactor Authentication for Securing Passive Keyless Access System

Passive Keyless Entry System is a security system that allows a user to lock or unlock the vehicle without having to press any buttons on the keyfob. This PKE system is derived from existing remote keyless entry systems that utilise a remote key to lock or unlock the vehicle. Intrusion analysis and securing of this system are in line with defence monitoring in modern days. In this vein, securing the system against relay and replay attacks is addressed by this paper. Also, the keyfob used by the current system is computationally constrained to use stronger keys to effectively secure the system. To address this issue, an Android-based multi-factor authentication system is proposed that considers user activity, GPS based distancing and timestamp methods to validate the user over a secure Bluetooth channel before unlocking. Through a series of experiments, it is shown that the proposed system with the above-mentioned combination of factors is proven to be effective against relay and replay attacks.