IT Forensics · Car

Forensic investigation of keyless relay attacks – Forensic analysis of signal amplification attacks on keyless systems

In a relay attack, the radio signal from a car key is technically amplified and relayed over a greater distance in order to trick a keyless entry system and gain unauthorised access to the vehicle.

Enquire without obligation

Technical anomalies in the keyless system’s access logs may provide clues as to such an attack.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We examine the available access logs for the keyless entry system for any technical anomalies that may indicate a relay attack, and document our findings in a manner that is forensically verifiable.

Typical areas of application

•Investigation into suspected keyless relay attacks
•Assistance with theft investigations where there are no visible signs of forced entry
•Supplement to analyses of keyless entry and immobiliser systems
•Investigation into technically unusual vehicle break-ins
•Judicial and non-judicial expert reports
•Cooperation with law enforcement agencies

This is how a keyless relay attack analysis is carried out

Once the keyless system has been secured, available access logs are checked for unusual patterns that might indicate signal tampering rather than normal key usage.

Why is the analysis of keyless relay attacks relevant from a forensic perspective?

In cases of vehicle theft where there are no visible signs of forced entry, this analysis can provide important clues as to how the crime was actually committed.

As a relay attack is technically complex and cannot always be clearly distinguished from normal usage, the limitations of the investigation are communicated transparently.

Frequently Asked Questions

Can a relay attack always be conclusively proven?+
Not in every case; we carefully review the available data and communicate any technical limitations transparently.
How does a relay attack differ from normal key usage?+
Technical anomalies, such as atypical signal patterns or time intervals, can provide clues; however, it is not always possible to distinguish between them with certainty.
Does LanCologne use specialised radio technology for reconstruction?+
We analyse the digital access data stored in the vehicle using our established forensic tools; a technical reconstruction of the attack itself is not the subject of our investigation.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into „forensic analysis of keyless relay attacks"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant vehicle artefacts.

Get in touch now