{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,17]],"date-time":"2026-04-17T17:49:21Z","timestamp":1776448161557,"version":"3.51.2"},"reference-count":47,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2023,2,20]],"date-time":"2023-02-20T00:00:00Z","timestamp":1676851200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100002555","name":"Seoul Women\u2019s University","doi-asserted-by":"publisher","award":["2021-0385"],"award-info":[{"award-number":["2021-0385"]}],"id":[{"id":"10.13039\/501100002555","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Yeungnam University","award":["2021-0385"],"award-info":[{"award-number":["2021-0385"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>A passive keyless entry and start (PKES) system is an electronic lock for an automobile that provides the great convenience of opening the door when the user is in proximity. However, the system suffers from relay attacks. Recent studies revealed that relayed signals result in valid packets that are sufficient to unlock doors. In particular, the adversary causes proximity errors by injecting a certain time delay before relaying to manipulate the phase rotation in the response signal. To this end, we present a novel relay-resilient proximity detection solution, BackProx, which uses pseudo-random frequency hopping with the assistance of a reference backscattering device. Since the relay adversary transmits the relayed signals from the key fob at long distances, the signals should propagate over longer distances, resulting in inevitable significant phase rotation with different frequencies. Inspired by this finding, BackProx uses an additional backscattering device to ensure the proximity of the key fob using the invariant characteristics of radio frequency signals in the physical layer (i.e., phase rotation). Our evaluation demonstrates the effectiveness of BackProx in resisting three types of relay attacks. The results show that it achieved a 98% true positive rate at close range and a 0.3% false positive rate at long range.<\/jats:p>","DOI":"10.3390\/s23042330","type":"journal-article","created":{"date-parts":[[2023,2,20]],"date-time":"2023-02-20T03:29:06Z","timestamp":1676863746000},"page":"2330","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["BackProx: Secure Backscatter-Assisted Proximity Detection for Passive Keyless Entry and Start Systems"],"prefix":"10.3390","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6382-3683","authenticated-orcid":false,"given":"Hoorin","family":"Park","sequence":"first","affiliation":[{"name":"Department of Information Security, Seoul Women\u2019s University, Seoul 01797, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4541-2255","authenticated-orcid":false,"given":"Jeongkyu","family":"Hong","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Yeungnam University, Gyeongsan 38541, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2023,2,20]]},"reference":[{"key":"ref_1","unstructured":"Gurulian, I., Markantonakis, K., Akram, R.N., and Mayes, K. (September, January 29). Artificial Ambient Environments for Proximity Critical Applications. Proceedings of the 12th International Conference on Availability, Reliability and Security (ARES \u201917), Reggio Calabria, Italy."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Shubina, V., Holcer, S., Gould, M., and Lohan, E.S. (2020). Survey of Decentralized Solutions with Mobile Devices for User Location Tracking, Proximity Detection, and Contact Tracing in the COVID-19 Era. Data, 5.","DOI":"10.3390\/data5040087"},{"key":"ref_3","unstructured":"Francillon, A., Danev, B., and Capkun, S. (2011, January 6\u20139). Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars. Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, USA."},{"key":"ref_4","unstructured":"Garcia, F.D., Oswald, D., Kasper, T., and Pavlid\u00e8s, P. (2016, January 10\u201312). Lock It and Still Lose It\u2014On the (In)Security of Automotive Remote Keyless Entry Systems. Proceedings of the 25th USENIX Security Symposium (USENIX Security 16), Austin, TX, USA."},{"key":"ref_5","unstructured":"Leu, P., Camurati, G., Heinrich, A., Roeschlin, M., Anliker, C., Hollick, M., Capkun, S., and Classen, J. (2022, January 10\u201312). Ghost Peak: Practical Distance Reduction Attacks against HRP UWB Ranging. Proceedings of the 31st USENIX Security Symposium (USENIX Security 22), Boston, MA, USA."},{"key":"ref_6","unstructured":"Trustonic (2023, February 12). Top 10 Security Challenges in the Automotive Industry for Connected Cars. Available online: https:\/\/www.trustonic.com\/opinion\/top-10-security-challenges-for-connected-cars."},{"key":"ref_7","unstructured":"He, L., and Shin, K.G. (July, January 27). Battery-Enabled Anti-Theft Vehicle Immobilizer. Proceedings of the 20th Annual International Conference on Mobile Systems, Applications and Services (MobiSys 22), Portland, OR, USA."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1109\/JSAC.2005.861395","article-title":"RFID Security and Privacy: A Research Survey","volume":"24","author":"Juels","year":"2006","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"ref_9","unstructured":"Police, W.M. (2023, February 12). Relay Attack Soihull. Available online: https:\/\/www.youtube.com\/watch?v=8pffcngJJq0&ab_channel=WestMidlandsPolice."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1109\/MPRV.2015.39","article-title":"Proximity Detection with RFID: A Step Toward the Internet of Things","volume":"14","author":"Bolic","year":"2015","journal-title":"IEEE Pervasive Comput."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"113194","DOI":"10.1016\/j.dss.2019.113194","article-title":"On addressing RFID\/NFC-based relay attacks: An overview","volume":"129","author":"Tu","year":"2020","journal-title":"Decis. Support Syst."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1197","DOI":"10.1109\/JIOT.2020.3012580","article-title":"You Foot the Bill! Attacking NFC with Passive Relays","volume":"8","author":"Sun","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Leu, P., Kotuliak, M., Roeschlin, M., and Capkun, S. (2021, January 6\u201310). Security of Multicarrier Time-of-Flight Ranging. Proceedings of the Annual Computer Security Applications Conference (ACSAC), Virtual Event.","DOI":"10.1145\/3485832.3485898"},{"key":"ref_14","unstructured":"Singh, M., Roeschlin, M., Zalzala, E., Leu, P., and \u010capkun, S. (July, January 28). Security Analysis of IEEE 802.15.4z\/HRP UWB Time-of-Flight Distance Measurement. Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec \u201921), Abu Dhabi, United Arab Emirates."},{"key":"ref_15","unstructured":"Drimer, S., and Murdoch, S.J. (2007, January 6\u201310). Keep Your Enemies Close: Distance Bounding Against Smartcard Relay Attacks. Proceedings of the USENIX Security Symposium, Boston, MA, USA."},{"key":"ref_16","unstructured":"Hancke, G., and Kuhn, M. (2005, January 5\u20139). An RFID Distance Bounding Protocol. Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks (SECURECOMM\u201905), Athens, Greece."},{"key":"ref_17","unstructured":"Brands, S., and Chaum, D. (1993, January 23\u201327). Distance-Bounding Protocols. Proceedings of the Advances in Cryptology\u2014EUROCRYPT \u201993, Lofthus, Norway."},{"key":"ref_18","unstructured":"Celiano, D. (2018). Overclocking Proximity Checks in Contactless Smartcards. [Master\u2019s Thesis, University of Cambridge]."},{"key":"ref_19","unstructured":"Wetzels, J. (2014). Broken keys to the kingdom: Security and privacy aspects of RFID-based car keys. arXiv."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Roland, M., Langer, J., and Scharinger, J. (2013, January 5). Applying relay attacks to Google Wallet. Proceedings of the 2013 5th International Workshop on Near Field Communication (NFC), Zurich, Switzerland.","DOI":"10.1109\/NFC.2013.6482441"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Ors Yalcin, S.B. (2010). Proceedings of the Radio Frequency Identification: Security and Privacy Issues, Springer.","DOI":"10.1007\/978-3-642-16822-2"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"444","DOI":"10.1109\/TMC.2018.2839604","article-title":"Sensor-Based Proximity Detection in the Face of Active Adversaries","volume":"18","author":"Shrestha","year":"2019","journal-title":"IEEE Trans. Mob. Comput."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Li, J., Dong, Y., Fang, S., Zhang, H., and Xu, D. (2020). User Context Detection for Relay Attack Resistance in Passive Keyless Entry and Start System. Sensors, 20.","DOI":"10.3390\/s20164446"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"\u00d3lafsd\u00f3ttir, H., Ranganathan, A., and Capkun, S. (2017, January 25\u201328). On the Security of Carrier Phase-Based Ranging. Proceedings of the Cryptographic Hardware and Embedded Systems (CHES), Taipei, Taiwan.","DOI":"10.1007\/978-3-319-66787-4_24"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"2047","DOI":"10.1109\/LCOMM.2020.2998526","article-title":"Zero-Effort Proximity Detection with ZigBee","volume":"24","author":"Shao","year":"2020","journal-title":"IEEE Commun. Lett."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Joo, K., Choi, W., and Lee, D.H. (2020, January 23\u201326). Hold the Door! Fingerprinting Your Car Key to Prevent Keyless Entry Car Theft. Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, USA.","DOI":"10.14722\/ndss.2020.23107"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"2665","DOI":"10.1007\/s11227-019-03049-4","article-title":"Securing smart vehicles from relay attacks using machine learning","volume":"76","author":"Ahmad","year":"2020","journal-title":"J. Supercomput."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Ahmad, U., Song, H., Bilal, A., Alazab, M., and Jolfaei, A. (2018, January 11\u201313). Secure Passive Keyless Entry and Start System Using Machine Learning. Proceedings of the Security, Privacy, and Anonymity in Computation, Communication, and Storage, Melbourne, Australia.","DOI":"10.1007\/978-3-030-05345-1_26"},{"key":"ref_29","unstructured":"Pierson, T.J., Peters, T., Peterson, R., and Kotz, D. (November, January 29). Proximity Detection with Single-Antenna IoT Devices. Proceedings of the Annual International Conference on Mobile Computing and Networking (ACM MobiCom), New Delhi, India."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Zhang, J., Wang, Z., Yang, Z., and Zhang, Q. (2017, January 1\u20134). Proximity based IoT device authentication. Proceedings of the IEEE Conference on Computer Communications (INFOCOM), Atlanta, GA, USA.","DOI":"10.1109\/INFOCOM.2017.8057145"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Li, J., Wang, C., Li, A., Han, D., Zhang, Y., Zuo, J., Zhang, R., Xie, L., and Zhang, Y. (2020, January 6\u20139). RF-Rhythm: Secure and Usable Two-Factor RFID Authentication. Proceedings of the IEEE Conference on Computer Communications (INFOCOM), Toronto, ON, Canada.","DOI":"10.1109\/INFOCOM41043.2020.9155427"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1145\/3287044","article-title":"Butterfly: Environment-Independent Physical-Layer Authentication for Passive RFID","volume":"2","author":"Han","year":"2018","journal-title":"Proc. ACM Interact. Mob. Wearable Ubiquit. Technol."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"1413","DOI":"10.1109\/LCOMM.2017.2676773","article-title":"SCBF: Exploiting a Collision for Authentication in Backscatter Networks","volume":"21","author":"Park","year":"2017","journal-title":"IEEE Commun. Lett."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"3571","DOI":"10.1109\/JIOT.2020.2972915","article-title":"Tagora: A Collision-Exploitative RFID Authentication Protocol Based on Cross-Layer Approach","volume":"7","author":"Park","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"547","DOI":"10.1109\/TNET.2020.2964290","article-title":"Hu-Fu: Replay-Resilient RFID Authentication","volume":"28","author":"Wang","year":"2020","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Yang, S., Jin, M., He, Y., and Liu, Y. (2021, January 7\u201310). RF-Prism: Versatile RFID-based Sensing through Phase Disentangling. Proceedings of the IEEE 41st International Conference on Distributed Computing Systems (ICDCS), Washington, DC, USA.","DOI":"10.1109\/ICDCS51616.2021.00104"},{"key":"ref_37","unstructured":"Xie, B., Xiong, J., Chen, X., Chai, E., Li, L., Tang, Z., and Fang, D. (2019, January 10\u201313). Tagtag: Material Sensing with Commodity RFID. Proceedings of the 17th Conference on Embedded Networked Sensor Systems (SenSys \u201919), New York, NY, USA."},{"key":"ref_38","unstructured":"Impinj Inc (2013). Speedway Revolution Reader Application Note: Low Level User Data Support, Impinj Inc."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Yang, L., Chen, Y., Li, X.Y., Xiao, C., Li, M., and Liu, Y. (2014, January 7\u201311). Tagoram: Real-Time Tracking of Mobile RFID Tags to High Precision Using COTS Devices. Proceedings of the Annual International Conference on Mobile Computing and Networking (ACM MobiCom), Maui, HI, USA.","DOI":"10.1145\/2639108.2639111"},{"key":"ref_40","unstructured":"Conway, J. (1976). On Numbers and Games, Academic Press."},{"key":"ref_41","unstructured":"EPCglobal Inc (2015). EPC Radio-Frequency Identity Protocols Generation-2 UHF RFID, EPCglobal Inc."},{"key":"ref_42","unstructured":"FCC (2021). FCC Part 15 Radio Frequency Devices."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"671","DOI":"10.1109\/TCSI.2014.2374852","article-title":"A Comparative Analysis of Phase-Domain ADC and Amplitude-Domain IQ ADC","volume":"62","author":"Liu","year":"2015","journal-title":"IEEE Trans. Circuits Syst. I Regul. Pap."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"1227","DOI":"10.1002\/wcm.590","article-title":"Distance Bounding Protocols for RFID Enhanced by Using Void-Challenges and Analysis in Noisy Channels","volume":"8","author":"Munilla","year":"2008","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Zanetti, D., Danev, B., and Capkun, S. (2010, January 6\u201311). Physical-layer Identification of UHF RFID Tags. Proceedings of the Annual International Conference on Mobile Computing and Networking (ACM MobiCom), Boston, MA, USA.","DOI":"10.1145\/1859995.1860035"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"330","DOI":"10.1109\/TNET.2018.2890109","article-title":"FlipTracer: Practical Parallel Decoding for Backscatter Communication","volume":"27","author":"Jin","year":"2019","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"1569","DOI":"10.1109\/TNET.2016.2645232","article-title":"Come and Be Served: Parallel Decoding for COTS RFID Tags","volume":"25","author":"Ou","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/4\/2330\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:36:57Z","timestamp":1760121417000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/4\/2330"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,20]]},"references-count":47,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2023,2]]}},"alternative-id":["s23042330"],"URL":"https:\/\/doi.org\/10.3390\/s23042330","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,2,20]]}}}