Remote Passive Entry

Remote Passive Entry (RPE), also known as a passive keyless entry system, is an evolution of Remote Keyless Entry (RKE). Unlike RKE, which requires a button press, RPE allows a driver to unlock and start the vehicle simply by touching the door handle or pressing the start button while the key fob is within a specified proximity (typically 1-2 meters). It works by the vehicle emitting a low-frequency (LF) challenge signal, which wakes the nearby fob to respond with a cryptographically secured code via an ultra-high-frequency (UHF) signal. While RPE is not explicitly defined in ISO/SAE 21434 "Road vehicles — Cybersecurity engineering," the standard mandates that manufacturers conduct a Threat Analysis and Risk Assessment (TARA) for such systems to mitigate threats like relay attacks.

In automotive risk management, securing RPE systems is a core requirement for ISO/SAE 21434 compliance. The practical application involves three key steps. First, conduct a Threat Analysis and Risk Assessment (TARA) to systematically identify attack vectors like signal jamming and relay attacks, assessing their likelihood and impact. Second, design and implement security controls based on the TARA findings, such as incorporating Ultra-Wideband (UWB) for precise distance measurement or adding motion sensors to key fobs to deactivate them when idle. Third, perform rigorous penetration testing and validation to confirm control effectiveness. For example, a major OEM's adoption of UWB technology led to a significant reduction in theft rates and ensured compliance with UNECE R155 regulations, securing market access.

Taiwanese enterprises, often part of the global automotive supply chain, face three main challenges with RPE. First, complex supply chain integration: cascading cybersecurity requirements from OEMs down to Tier 2 and Tier 3 component suppliers is difficult. Second, cost-security trade-offs: implementing robust but expensive technologies like UWB is challenging for suppliers focused on cost-sensitive vehicle segments. Third, limited local testing capacity: a lack of domestic facilities for validating against advanced threats and international standards like UNECE R155 can lead to high costs and delays. To overcome these, companies should establish a Cybersecurity Management System (CSMS) per ISO/SAE 21434, use risk-based approaches to apply proportionate controls, and collaborate to build local testing capabilities.

Winners Consulting specializes in Remote Passive Entry for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact