Relay attacks aimed at keyless-entry systems have transformed modern vehicles into major targets for thieves. The resources for these attacks are affordable, readily available, and necessitate little expertise to operate. Once a relay device deceives the door lock, the standard immobiliser in your automobile becomes ineffective.
This issue is what xAutomotive, an Austrian automotive-IT firm, set out to resolve with a groundbreaking solution. Their offering, xProtect, is not a conspicuous device affixed under your dashboard; rather, it is located within the transmission itself.
The Essential Element: TCU
xProtect is a software enhancement directly installed into your BMW’s Transmission Control Unit (TCU), a processor found deep within the automatic gearbox. After installation, the adapter utilized for flashing the software is removed, leaving your vehicle appearing entirely standard on the exterior.
However, if someone attempts to drive off without knowing your personal code, the engine will start, but the vehicle will not move. This is intentional; xProtect allows the engine to start while preventing the transmission from engaging any gear.
Functions like remote start and Keyless-Go remain unaffected, enabling BMW owners to utilize remote start on cold mornings without entering their code. The code is only required when actually operating the vehicle.
Single Installation
A common misconception is that the OBD adapter must stay connected for xProtect to operate. This misunderstanding is false. Installation is a one-time process: connect the adapter, flash the software into the TCU using the xProtect app on your phone, set your personal code, and then disconnect the adapter. The protection is now embedded into the firmware of the transmission controller, with the adapter functioning merely as an installation tool, akin to a USB stick for an operating system.
To install xProtect, a compatible Wi-Fi OBD adapter is required. Supported options include the xA Ultra (available at the xAutomotive shop), xHP WiFi (now discontinued), Thor, MHD UNI, MHD Orange, and bootmod3 WiFi.
Your Unique Code
The unique code is generated using the physical controls already available in the vehicle, such as the gear lever, steering wheel shift paddles, driving mode selector, brake pedal, and more. Users can create their sequence in the xProtect app’s Code Editor and subsequently flash it to the vehicle via the adapter.
The combination possibilities are extensive. With the variety of inputs available in a typical BMW G-Series interior, xAutomotive estimates over 35 trillion potential combinations. A combination of three buttons along with a continuous activation input provides robust code security. The system enforces a maximum two-second interval between button presses, and any unintended input invalidates the current attempt.
Brute-forcing the code is impractical due to the time limitations and the astronomical number of combinations.
Your sequence is always retrievable within the xProtect app, secured by Face ID or Touch ID on your device. It is stored in an encrypted format linked to your user account on xAutomotive’s Amazon AWS servers. xAutomotive cannot reconstruct your stored code; only you have access to it in the app.
Supplementary Security Features
Beyond preventing gear engagement, xProtect offers additional security: when active and locked, the TCU cannot be reprogrammed. Even a thief equipped with professional diagnostic tools cannot overwrite the TCU to disable the protection while the code is active. While xAutomotive considers this secondary to the primary objective—thieves generally flee when faced with unexpected issues—it effectively mitigates a more sophisticated attack vector.
Engineered for Daily Use
Security systems that hinder users often find themselves disabled. xAutomotive has acknowledged this aspect. The reactivation delay, which can be adjusted between zero and 180 minutes, allows drivers to avoid re-entering their code during brief errands or shopping trips.
For scenarios where another individual needs to operate the vehicle, Friendship Mode can completely suspend the protection. To activate it, while xProtect is in unlocked mode, hold the Park button on the gear lever.
Relay attacks aimed at keyless-entry systems have transformed modern vehicles into major targets for thieves. The resources for these attacks are affordable, readily available, and necessitate little expertise to operate. Once a relay device deceives the door lock, the standard immobiliser in your automobile becomes ineffective.
This issue is what xAutomotive, an Austrian automotive-IT firm, set out to resolve with a groundbreaking solution. Their offering, xProtect, is not a conspicuous device affixed under your dashboard; rather, it is located within the transmission itself.
The Essential Element: TCU
xProtect is a software enhancement directly installed into your BMW’s Transmission Control Unit (TCU), a processor found deep within the automatic gearbox. After installation, the adapter utilized for flashing the software is removed, leaving your vehicle appearing entirely standard on the exterior.
However, if someone attempts to drive off without knowing your personal code, the engine will start, but the vehicle will not move. This is intentional; xProtect allows the engine to start while preventing the transmission from engaging any gear.
Functions like remote start and Keyless-Go remain unaffected, enabling BMW owners to utilize remote start on cold mornings without entering their code. The code is only required when actually operating the vehicle.
Single Installation
A common misconception is that the OBD adapter must stay connected for xProtect to operate. This misunderstanding is false. Installation is a one-time process: connect the adapter, flash the software into the TCU using the xProtect app on your phone, set your personal code, and then disconnect the adapter. The protection is now embedded into the firmware of the transmission controller, with the adapter functioning merely as an installation tool, akin to a USB stick for an operating system.
To install xProtect, a compatible Wi-Fi OBD adapter is required. Supported options include the xA Ultra (available at the xAutomotive shop), xHP WiFi (now discontinued), Thor, MHD UNI, MHD Orange, and bootmod3 WiFi.
Your Unique Code
The unique code is generated using the physical controls already available in the vehicle, such as the gear lever, steering wheel shift paddles, driving mode selector, brake pedal, and more. Users can create their sequence in the xProtect app’s Code Editor and subsequently flash it to the vehicle via the adapter.
The combination possibilities are extensive. With the variety of inputs available in a typical BMW G-Series interior, xAutomotive estimates over 35 trillion potential combinations. A combination of three buttons along with a continuous activation input provides robust code security. The system enforces a maximum two-second interval between button presses, and any unintended input invalidates the current attempt.
Brute-forcing the code is impractical due to the time limitations and the astronomical number of combinations.
Your sequence is always retrievable within the xProtect app, secured by Face ID or Touch ID on your device. It is stored in an encrypted format linked to your user account on xAutomotive’s Amazon AWS servers. xAutomotive cannot reconstruct your stored code; only you have access to it in the app.
Supplementary Security Features
Beyond preventing gear engagement, xProtect offers additional security: when active and locked, the TCU cannot be reprogrammed. Even a thief equipped with professional diagnostic tools cannot overwrite the TCU to disable the protection while the code is active. While xAutomotive considers this secondary to the primary objective—thieves generally flee when faced with unexpected issues—it effectively mitigates a more sophisticated attack vector.
Engineered for Daily Use
Security systems that hinder users often find themselves disabled. xAutomotive has acknowledged this aspect. The reactivation delay, which can be adjusted between zero and 180 minutes, allows drivers to avoid re-entering their code during brief errands or shopping trips.
For scenarios where another individual needs to operate the vehicle, Friendship Mode can completely suspend the protection. To activate it, while xProtect is in unlocked mode, hold the Park button on the gear lever.
