Featured Research

from universities, journals, and other organizations

Wireless tire pressure monitoring systems in cars may compromise privacy, pose security threat

Date:
August 13, 2010
Source:
Rutgers University
Summary:
New wireless technologies in cars may compromise a driver's privacy and pose a security threat, warn researchers. Modern automobiles are increasingly equipped with wireless sensors and devices, such as systems that monitor air pressure inside tires and trigger dashboard warnings if a tire's pressure drops. These wireless signals can be intercepted 120 feet away from the car using a simple receiver despite the shielding provided by the metal car body.

New wireless technologies in cars may compromise a driver's privacy and pose a security threat, warn researchers at Rutgers University.

Modern automobiles are increasingly equipped with wireless sensors and devices, such as systems that monitor air pressure inside tires and trigger dashboard warnings if a tire's pressure drops. The Rutgers researchers have shown that these wireless signals can be intercepted 120 feet away from the car using a simple receiver despite the shielding provided by the metal car body.

Since signals in tire pressure monitoring systems (TPMS) include unique codes from each wheel sensor, this raises concerns that drivers' locations could be tracked more easily than through other means, such as capturing images of license plates.

The Rutgers researchers and their collaborators at the University of South Carolina are presenting results of their work this week at the USENIX Security Symposium, one of the premiere academic computer security conferences. The researchers are experts in wireless communication and computer networking security.

TPMS wireless transmissions also lack security protections common in basic computer networking, such as input validation, data encryption or authentication. The researchers demonstrated how a transmitter that mimics, or "spoofs," the sensor signal can easily send false readings and trigger a car's dashboard warning display. This could prompt a driver into stopping his or her car when there is actually nothing wrong with the tires.

"We have not heard of any security compromises to-date, but it's our mission as privacy and security researchers to identify potential problems before they become widespread and serious," said Marco Gruteser, associate professor of electrical and computer engineering and a member of the university's Wireless Information Network Laboratory (WINLAB).

He notes that tire pressure monitoring is the first widespread use of in-car wireless networking, and because of the increasing cost and complexity of wired electronic systems, it's reasonable to expect other aspects of automobile operation to come under wireless control.

"A spoofed signal could potentially cause serious safety concerns if stability control or anti-lock braking systems relied on the data," he said. "So we are sounding the alarm right now."

Gruteser acknowledged that intercepting and spoofing signals is not a casual effort. But the fact that people with college-level engineering expertise could carry out those actions using publicly available radio and computer equipment costing a few thousand dollars shows that systems are vulnerable.

Tire pressure monitoring was widely implemented starting around 2000 using systems that measure and compare wheel rotation speeds. A mismatch infers that a tire is underinflated. This method wasn't accurate enough to meet U.S. regulatory requirements that took effect later in the decade, so automakers started installing systems that directly monitor air pressure inside the tires and transmit that information to a control unit. The two systems that Rutgers examined are commonly used in vehicles manufactured during the past three years.

"While we agree this technology is essential for driver safety, more can be done to improve security, such as using input validation or encryption," said Wade Trappe, a collaborator on the project who is an associate professor of electrical and computer engineering and associate director of WINLAB.

The researchers' South Carolina collaborators, led by Wenyuan Xu, a former doctoral student at WINLAB and now an assistant professor at the University of South Carolina, were able to intercept a signal more than 30 feet from the car using a simple antenna and more than 120 feet away by adding an amplifier. They were able to analyze the radio signal and reverse-engineer the code using common laboratory instruments. With that knowledge, they built a transmitter that spoofed a sensor's wireless message.

In tests using their own cars, the researchers were able to send false signals from one car and trigger a "low tire pressure" light in another while driving next to each other at 35 miles per hour. They were also able to trigger the dashboard "check tire pressure" light while driving next to each other at 65 miles per hour.

The researchers also found that at least one tire pressure system could be damaged through spoofed wireless signals.

Other student and staff researchers from Rutgers and South Carolina that contributed to the research were Ishtiaq Rouf, Rob Miller, Hossen Mustafa, Travis Taylor, Sangho Oh, and Ivan Seskar.


Story Source:

The above story is based on materials provided by Rutgers University. Note: Materials may be edited for content and length.


Cite This Page:

Rutgers University. "Wireless tire pressure monitoring systems in cars may compromise privacy, pose security threat." ScienceDaily. ScienceDaily, 13 August 2010. <www.sciencedaily.com/releases/2010/08/100812093422.htm>.
Rutgers University. (2010, August 13). Wireless tire pressure monitoring systems in cars may compromise privacy, pose security threat. ScienceDaily. Retrieved October 1, 2014 from www.sciencedaily.com/releases/2010/08/100812093422.htm
Rutgers University. "Wireless tire pressure monitoring systems in cars may compromise privacy, pose security threat." ScienceDaily. www.sciencedaily.com/releases/2010/08/100812093422.htm (accessed October 1, 2014).

Share This



More Science & Society News

Wednesday, October 1, 2014

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

Some Positive Ebola News: Outbreak 'Contained' In Nigeria

Some Positive Ebola News: Outbreak 'Contained' In Nigeria

Newsy (Sep. 30, 2014) The CDC says a new case of Ebola has not been reported in Nigeria for more than 21 days, leading to hopes the outbreak might be nearing its end. Video provided by Newsy
Powered by NewsLook.com
UN Ebola Mission Head: Immediate Action Is Crucial

UN Ebola Mission Head: Immediate Action Is Crucial

AFP (Sep. 30, 2014) The newly appointed head of the United Nations Mission for Ebola Emergency Response (UNMEER), Anthony Banbury, outlines operations to tackle the virus. Duration: 00:39 Video provided by AFP
Powered by NewsLook.com
CDC Confirms First Case of Ebola in US

CDC Confirms First Case of Ebola in US

AP (Sep. 30, 2014) The CDC has confirmed the first diagnosed case of Ebola in the United States. The patient is being treated at a Dallas hospital after traveling earlier this month from Liberia. (Sept. 30) Video provided by AP
Powered by NewsLook.com
Argentina's Tax Evaders Detected, Hunted Down by Drones

Argentina's Tax Evaders Detected, Hunted Down by Drones

AFP (Sep. 30, 2014) Argentina doesn't only have Lionel Messi the footballer, it has now also acquired "Mesi" the drone system which monitors undeclared mansions, swimming pools and soy fields to curb tax evasion in the country. Duration: 01:18 Video provided by AFP
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:

Breaking News:

Strange & Offbeat Stories


Science & Society

Business & Industry

Education & Learning

In Other News

... from NewsDaily.com

Science News

Health News

Environment News

Technology News



Save/Print:
Share:

Free Subscriptions


Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

Get Social & Mobile


Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

Have Feedback?


Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
Mobile: iPhone Android Web
Follow: Facebook Twitter Google+
Subscribe: RSS Feeds Email Newsletters
Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins