Thatcham Research Security Rating ranks keyless car theft protection

New Thatcham Research Security Rating tests cars for keyless start vulnerability: six of the 11 new cars tested rated ‘poor’ and one rated ‘unacceptable’

 

Porsche Macan remote locking App

Thatcham has created a bespoke car security test in response to rising vehicle thefts. It is called the Thatcham Research Security Rating. 

It focuses on keyless entry and keyless start vulnerabilities, exploited by car thieves in the so-called ‘relay attack’ technique.

“We’ve seen too many examples of cars being stolen in seconds from driveways,” said Thatcham Research chief technical officer Richard Billyeald.

Any vehicle tested in the new Thatcham Research Security Rating that has a vulnerable keyless start system “will automatically not achieve the best rating”.

New cars slammed for keyless car theft

In March 2020, Thatcham Research tested seven new cars and assessed them for vehicle security both with and without factoring in keyless entry weaknesses.

All seven cars were rated ‘good’ or better when keyless systems weren’t factored in.

However, the DS3 Crossback, Mazda 3, Toyota RAV4 and Volvo S60 (pictured below) were all downgraded to ‘poor’ once keyless entry and start vulnerabilities were included.

Volvo S60

The BMW 7 Series, BMW X7 and Porsche 911 all scored ‘superior’ ratings both before and after their keyless entry performance was assessed.

The tests come as new figures show theft claims are running at their highest rate since 2012. “These figures demonstrate why the automotive industry must move to secure keyless entry and start systems,” said Thatcham Research chief technical officer Richard Billyeald. 

Motion sensor fobs

Ford Focus keyless theft relay attack demonstration

The BMW and Porsche models kept their superior ratings because their keyfobs are equipped with motion sensing technology. After a short period of not being moved, the keyfob goes into ‘sleep’ mode.

This means car thieves with a ‘relay attack’ kit can’t boost the communication range of the fob and enter the vehicle. 

Such security is not exclusive to premium models like BMWs and Porsches though, said Billyeald. Ford has already introduced a security upgrade for keyless systems on the Fiesta and Focus.

“We’re seeing solutions applied to some cars; let’s see them applied to all.”


How to prevent keyless car theft

Motoring Research has written about how to prevent keyless car theft. Thatcham’s Billyeald reiterated some of our advice, saying that “owners can protect their fob with a faraday shielding pouch”. 

Some fobs can also be turned off overnight, such as the Mazda 3 assessed in the latest round of tests.

But as keyless systems are often optional, “buyers need to understand that they could raise the theft risk profile of their new car by ticking that box”. 

To be certain of preventing keyless car theft, it seems, means not having a keyless entry system in the first place…


Laurenz Gerger, adviser to the Association of British Insurers (ABI) said he hoped the latest security results will encourage both manufactures and motorists to take action against “the growing issue of keyless car crime.

“Thatcham’s ratings show that, for many vehicles, there’s still a long way to go to reduce the £1.2 million that is currently paid out every day for all car thefts.”

Mike Hawes, chief executive of automotive industry trade body the Society of Motor Manufacturers and Traders (SMMT) said: “Vehicle manufacturers are continually investing and developing new security features – including motion sensing key fobs and other technologies – to try and stay one step ahead of criminals, which is an ongoing and extremely costly battle.

“There is no ‘one size fits all’ solution and brands will have their own individual strategies to combat vehicle theft with lead-times to engineer, test and source new countermeasures varying across the industry.

“Ultimately, however, technology can only do so much and this is why industry continues to call for action to prevent the open sale of devices used by criminals to steal cars.”

New sleep mode helps fight keyless car theft

In late 2019, six newly introduced models gained ‘superior’ ratings. These are the Audi A6 Allroad, BMW 1 Series, BMW 8 Series, BMW X6, Ford Puma and Volkswagen Passat.

The Audi, BMW, Ford and Volkswagen all improve their security rating by being available with ‘sleeping’ motion-sensitive key fobs.

What is a ‘sleeping’ car key fob?

Keyless car theft 'sleeping keys'

A ‘sleeping’ key fob only activates when it senses movement. Previously, keys constantly emitted a signal, allowing hackers to ‘hijack’ this to unlock and start cars. A ‘sleeping key’ left in your house shouldn’t fall prey to hackers.

“The models rated from Audi, BMW, Ford and Volkswagen not only have strong all-round security but have also made motion sensor enabled fobs available as standard when buyers opt for keyless entry and start,” said Richard Billyeald, chief technical officer at Thatcham Research.

“It’s positive news for consumers that carmakers, in increasing measure, are making this fix available.”

‘A fundamental security flaw remains’

Keyless car theft 'sleeping keys'

However, what isn’t known is exactly how long it takes a key you’ve put down to go into ‘sleep mode’.

“We advise consumers to check how long it takes before the sleep mode on their keyless fob is engaged. Some fobs go to sleep in one or two minutes, others in 15 or even as long as 30 minutes.”

For those without fobs that have this update, or if you’re still worried, there are a number of other options. A ‘Faraday pouch’ has a similar effect, making sure the signal can’t get out.

Keyless car theft 'sleeping keys'

  • Stolen in seconds: keyless new cars that fail security tests

While this ‘fix’ is rolling out now, there are a lot of cars still at risk. Even the sleeping key is described as more of a short-term fix, given the time it takes to enter ‘sleep mode’.

“The motion sensor fob is a good short-term option,” said Billyeald, “but the goal for carmakers must be to design out the vulnerability entirely. Until then, a fundamental security flaw remains.”

New Security Rating test launched

Thatcham Research launched the new Security Rating test in March 2019. Shortly after, it upgraded a car it originally slammed as ‘Poor’ in its new vehicle security test after the manufacturer provided ‘clarification’ to the British testing agency.

The Porsche Macan, was boosted up to a top-ranking ‘Superior’ score, thanks to new information from Porsche Cars GB around the specification of a motion sensor function on the key fob.

Keyless entry car key fob

However, a seventh car, the Suzuki Jimny, remains damned as ‘Unacceptable’ in the 2019 Thatcham Research Security Rating though – despite NOT having a keyless entry system.

“We are pleased to be able to rate the Porsche Macan as having ‘Superior’ security following clarification from Porsche Cars GB,” said Thatcham’s chief technical officer Richard Billyeald.

Thatcham Research Security Rating

The categories in Thatcham’s new vehicle theft test are Superior, Good, Basic, Poor and Unacceptable.

Car (2019 model year) Security Rating
Audi e-tron Superior
Ford Mondeo Poor
Hyundai Nexo Poor
Jaguar XE Superior
Kia Proceed Poor
Lexus UX Poor
Mercedes-Benz B-Class Superior
Porsche Macan Superior (updated from Poor on 26 March 2019)
Range Rover Evoque Superior
Suzuki Jimny Unacceptable
Toyota Corolla Poor

Every car in the first round of tests was assessed with a keyless go system, even if it was optional. Ironically, said Billyeald, most of the cars that received a ‘Poor’ rating would have achieved at least a ‘Good’ score had their keyless entry systems not been susceptible to the Relay Attack.

Audi, Jaguar, Land Rover and Mercedes-Benz were, in contrast, praised by Thatcham. Their keyless entry systems either have the latest, more secure wireless technology, or use key fobs that go to sleep when idle. “This demonstrates that there are solutions and fixes to the problem.”

‘Signpost to thieves’

Car thief

The SMMT has responded by arguing Thatcham’s new consumer guidance system has been developed in isolation – and is at odds with the organisations’ own insurance classification.

“It does not compare like with like,” said Hawes, “it confuses rather than simplifies a very complex issue and will not help consumers”.

Worryingly, argued Hawes, the new system could actually give a signpost to thieves that could increase the risk of targeted criminal activity.

“This is not the rigorous professional approach to evaluation that industry has come to expect from Thatcham.”

Related Articles

Richard Aucock
Richard Aucockhttps://www.richardaucock.co.uk/
Richard is director at Motoring Research. He has been with us since 2001, and has been a motoring journalist even longer. He won the IMCO Motoring Writer of the Future Award in 1996 and the acclaimed Sir William Lyons Award in 1998. Both awards are run by the Guild of Motoring Writers and Richard is currently vice chair of the world's largest organisation for automotive media professionals. Richard is also a juror and Steering Committee director for World Car Awards and the UK juror for the AUTOBEST awards.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Find a Car Review

Latest

New Taycan Turbo GT is Porsche’s most powerful road car ever

With a power output in four figures, the new flagship Taycan Turbo GT has already been breaking lap records.

How to protect your car with an OBD port locking device

We explain how to prevent your car being stolen by criminals targeting its On-Board Diagnostics (OBD) port.

Playmobil creates a safari-ready classic Porsche 911

Off-road 'safari' conversions of the Porsche 911 are popular in the real world, so Playmobil has built a toy version.

How to make a safe U-turn

A U-turn is a 180-degree turn in the road, so your car ends up facing in the opposite direction. Here is how to make the manoeuvre safely.