Keyed up With Anticipation: Smart Key Hazards Still Unresolved

Five and a half years ago, the National Highway Traffic Safety Administration vowed that it was going to get on top of the keyless ignition safety issue, publishing a Notice of Proposed Rulemaking. The NPRM acknowledged that keyless ignitions, for all of their purported convenience, had introduced several safety hazards not associated with mechanical key systems – among them, rollaways, when drivers shut off the engine and exit without locking the shift lever in the “Park” position and carbon monoxide poisonings from drivers who inadvertently leave the engine running.

The NPRM only acknowledged two deaths – Ernest Codelia, who died in 2009, and Chastity Glisson, who died in August 2010. By December 11, 2011, when the NPRM appeared in the Federal Register, at least four individuals had also perished in keyless ignition carbon monoxide incidents. In September 2011, child protective service investigator Rebecca Hawk died in her New Tampa condo after a neighbor left his 2011 Mazda 3 running in an adjacent garage.  On Dec. 3, 2011 Harry Pitt, the former Montgomery County Maryland schools superintendent, died in his home after unintentionally leaving his Infiniti running in his attached garage and going to bed.

Since then, at least 16 more people have died in carbon monoxide poisoning incidents tied to keyless ignition. And what has NHTSA or the auto industry done about it? As far as The Safety Record can tell: Nothing.

To recap: when automakers introduced keyless ignition systems in the 1990s, engineers under-estimated the consequences of disrupting the well-established driver behaviors regarding traditional keys. Instead of the key being a physical object, it became an invisible code. The fob is necessary to turn on the vehicle, but it plays no role in turning off the vehicle. As automakers sought guidance from NHTSA regarding the compliance of these new systems with Federal Motor Vehicle Safety Standard 114, the agency and industry agreed to correlate the “key” to the unique electronic code, without explaining it to driver and without fully appreciating the consequences of doing away the tactile, auditory and visual cues that helped drivers recognize when they had made a mistake.

In 2002, National Highway Traffic Safety Administration’s then-Chief Counsel Jacqueline Glassman alluded to the coming problems in an interpretation letter to an unnamed automaker,  Glassman affirmed that a similar system complied with FMVSS 114 – even though, “the removal of the "Smart Key" from the running vehicle would have no effect on the vehicle's operation until the engine is stopped.”

She also noted the human factors issues:

“We observe that if the ‘Smart Key’ device remained in the car. e.g. in the  pocket of a jacket laying on the seat, a person would need only turn the ignition switch knob to start the engine. It appears to us that, with systems of this kind, there would be, in the absence of some kind of a warning, a greater likelihood of drivers inadvertently leaving a ‘Smart Key’ device in the car than with a traditional key. This is because the driver must physically touch a traditional key, unlike the "Smart Key" device, as part of turning off the engine. You and/or the vehicle manufacturer may wish to consider whether there are any practicable means of reducing the possibility of drivers inadvertently leaving their ‘Smart Key’ devices in the car.”

Unfortunately, the agency did not heed its own predictions. In August 2010, Sean Kane, president of Safety Research & Strategies, raised safety concerns and the probability of consumer confusion at a meeting with NHTSA officials. Kane’s presentation noted that “the introduction of electronic keys in combination with push-button ignition systems has introduced new scenarios under which a driver can exit the vehicle, key fob in hand with the motor running, or with the engine off but the vehicle in a gear other than park. With today’s quiet engines, drivers can leave a vehicle, travel great distances from the vehicle with the key in their pockets while the engine is running or the transmission in neutral – all without being aware that they have done so.  As we are seeing from owner complaints and litigation, the marriage of electronics with ignitions and locks has resulted in unintended consequences: carbon monoxide poisoning, rollaway crashes and easy thefts.”  

Nearly 18 months later, the agency published a Notice of Proposed Rulemaking that would standardize engine termination procedures during panic stops (a legacy of the Toyota Unintended Acceleration crisis), and mandate loud auditory alerts to mitigate the rollaways and the carbon monoxide hazard. The issuance of a Final Rule has been pushed off at least three times. The agency’s last planned date for publishing a Final Rule was February 2016. However, the last two editions of the Unified Agenda and Regulatory Plan only note that the agency’s next actions are “to be determined,” even though NHTSA said that Final Rule itself was no biggie:

“We anticipate that these new requirements would have little or no anticipated cost as they are based on a new Society of Automotive Engineers Recommended Practice J2948-20110. We believe that manufacturers already intend to follow that Practice voluntarily. The benefits for these new provisions would be reduced consumer confusion with these new controls and reduced potential risk of death or injury. However, because these systems are not widespread in current vehicles, their benefits cannot yet be readily quantified.”

Why, there’s practically no need for anything so stodgy as a rule!

Nonetheless, in 2012, the agency was preparing to do some human factors research on its proposal to follow the J-standard, given that it took heavy criticism from industry for promulgating a rule based on consumer complaints. (The whole thing was rather rich. Industry argued that the agency had not established the need for a rule, even though industry got together to write its own – apparently unnecessary – standard. The industry scorched NHTSA for failing to do any human factors research to support its proposed countermeasures, even though it failed to produce any of its own human factors research to demonstrate that its systems worked fine as is.) NHTSA posted a Federal Register Notice seeking public comment for a proposal to contract with the John L. Volpe Center and the MIT AgeLab to conduct human factors research into keyless ignition systems. The Alliance of Automobile Manufacturers, of course, vigorously protested this effort, and urged OMB to reject this request.

The proposal was last heard from publicly in October 2012. On June 6, The Safety Record contacted the agency with some simple questions:

What has happened to this effort to conduct human factors research in support of the FMVSS 114 NPRM?

  • Was NHTSA's request approved by OMB?
  • Has any research been conducted?
  • What entity conducted it?
  • If so, what were the results?
  • When will this research be published?

We received this response:

“NHTSA is still in rulemaking on FMVSS No. 114 (Theft protection and rollaway prevention).  NHTSA did not initiate the specific research that you are inquiring about, but is taking a hard look at these systems to determine the best way forward in improving them.” 

NHTSA did offer some helpful advice to watch their safety video  on keyless ignition systems for basic safety tips and to check their driver’s manual for detailed instructions on their specific vehicle. (A. People don’t read owner’s manuals, research shows. B. Most manufacturers’ owner’s manuals are spectacularly unclear about the operations of their keyless ignitions systems – specifically on the matter of engine shutdown.)

The Safety Record wanted to ask a follow-up, like: Why didn’t NHTSA proceed with the research? But, if our last attempt to follow up on a NHTSA action is any measure, actuarial tables indicate that we might not survive the wait for an answer. On January 28, the agency’s Office of Vehicle Safety Compliance sent information requests to Toyota, Ford, General Motors, Nissan, Mazda, Hyundai and Kia regarding 2012 and 2013 model-year vehicles, based on tests of how their keyless ignition systems operate under different scenarios in which to determine if the Theft Protection and Rollaway Prevention Standard had been violated. The agency said that the probe was initiated by a Ford recall (13V-475), for 23,000 vehicles, which have keyless starting systems that did not have an audible warning when the driver exited the vehicle.  NHTSA inspected other vehicles with keyless systems at dealerships, for audible warnings. The agency sent out information requests, asking manufacturers about the electronic architecture of their keyless ignition systems, when the electronic code that now constitutes NHTSA’s two-part key schema is purged from the system, and the audio and visual telltales used to alert the driver that he or she has exited the vehicle. NHTSA also asked for complaint data and the safety information manufacturers provide to their customers about keyless systems. The data NHTSA collected from multiple models showed that there was absolutely no consistency in types of warnings or the decibel level of auditory warnings – even within a particular automaker’s models. Many allowed the driver to exit the vehicle with the engine off and the transmission in a gear other than PARK.  

The Safety Record Blog has been covering this issue for the last five years (Not So Smart Key Standard; The Keyless Ignition Litigation Solution; A Funny Thing Happened on the Way to My Car; Stupid Tricks with Smart Keys; Another CO Death…What Happens When Smart Keys Collide?; NHTSA Opens Smart Key Compliance Probe.)

Naturally, we were curious to learn the conclusion of that probe. In July 2012, The Safety Record Blog submitted a Freedom of Information request seeking the documents that would help us write a follow-up on NHTSA’s investigation. As of today, we are at 711 days and counting, without any documents produced.

So, no one has done much – if any – human factors research. Not one manufacturer, nor NHTSA has produced a scintilla of empirical evidence regarding effective countermeasures to the rollaway and carbon monoxide hazard. Can drivers hear auditory alerts over the sound of a closing garage door? Are they distinguishable from other chimes? What about drivers with hearing impairment? Do drivers understand that the fob turns the vehicle on, but it does not turn the vehicle off? Do drivers even know what the frickin’ key is? Sloppy all the way around.

Automatic Shut Off

Not to worry – there’s another technology available for automakers who don’t want to annoy their customers with a loud warning buzzer, or are too lazy to do figure how best to warn a driver who doesn’t shut down the engine, or are actually interested in preventing keyless ignitions from injuring and killing their customers. It’s available right now! And nearly all automakers use a form of it: an automatic engine shut-off.

Vehicles with remote start features have software that times the idling engine, and turns it off when too much time has passed – usually after 10 or 20 minutes. Toyota, for example, offered this feature in 2005 as an accessory that could be integrated right into the existing key fob. Imagine that! At least six years before the first publicly known carbon monoxide death (Ernest Codelia, caused by a Lexus), and before Toyota began to climb the leader board for keyless ignition-related CO deaths. And check out the language in the brochure to sell the VIP Remote Starter, which promises to “take keyless ignition to the next level”:

“Sudden change of plans? Not a problem. You can remotely shut off your engine any time after you’ve activated the remote start. In fact, just to be safe, the engine will automatically shut off if you don’t put the vehicle in gear within 10 minutes of starting it.”

It’s as though Toyota anticipated that drivers might inadvertently leave their vehicles running, and that such a circumstance might be unsafe!

So far, Ford Motor Company is the sole automaker to take keyless ignitions to the next level. It made automatic engine cut-off feature standard in its 2014 models with keyless ignition.

Nor have automakers done much more to sharpen their communications with customers regarding the hazards of keyless ignitions. In May, the Palm Beach Sheriff’s Office, which has investigated more keyless-ignition related carbon monoxide deaths than any single law enforcement agency in the U.S. launched a public service campaign to warn drivers about the possibility of carbon monoxide poisoning. The department shot a public service announcement.

You can watch it here. The department also created nifty refrigerator magnets emblazoned with the reminder: Did you turn your car off? 

Magnets and a PSA in one Florida community is a start – and its more than the automakers have done – but they are no substitute for regulations or a technological fix – only the government and industry can do that.

Another CO Smart Key Death… and what Happens when Smart Keys Collide?

Tell us again why electronic keys are an automotive technology advance?  Apparently, they’re so great that our National Highway Traffic Safety Administration has to re-write the Federal Motor Vehicle Safety Standard 114 (in a ham-handed way) to accommodate them.  And so super-duper that these new electronic ignition system vehicles are introducing new hazards that are killing and injuring consumers.

The Palm Beach County Sheriff’s office is investigating last week’s carbon monoxide poisoning deaths of Adele Ridless and Mort Victor. The couple is suspected to have succumbed to a build-up of carbon monoxide emanating from their Mercedes with a keyless ignition, parked in an attached garage. The sheriff’s office declined comment pending the outcome of their investigation.

Toyota – whose clever keyless ignition system has been implicated in at least two other carbon monoxide deaths – last month issued a Technical Service Bulletin noting that two “Smart Keys” from different vehicles in close proximity can knock the system for a loop. The February 24 notice covers some 2011 and 2012 Lexus models:

“Some 2011 and 2012 Lexus models may exhibit a condition where the Smart Key system is inoperative when another vehicle’s Smart key is in or near the vehicle. The following functions may also be affected: wireless remote operation, Smart access, and Smart start. The combination meter multi-information display may show the message: “Key not detected” when attempting to start vehicle and when driving.”

What are they talking about? NHTSA and the automakers have told us that the key in an electronic system is an invisible code inside the vehicle’s ignition module. So does that mean if you park next to another Toyota or some other manufacturer with an electronic ignition, your shiny new Lexus won’t start? Wow, that’s going to make parking in public lots a whole lot tougher. Continue reading

A Funny Thing Happened on the Way to My Car…

Has Paula Poundstone been reading our memos to NHTSA about the serious safety problems created by keyless ignition systems? This weekend, the comedienne broke into a spontaneous and funny rant about them during her weekly gig with the NPR news quiz show “Wait, Wait, Don’t Tell Me!”

“You know what my car has that is the worst feature I’ve ever had in a car? Is this damn thing where you don’t put the key in!” she fumes about the systems which allow a driver to exit the vehicle with the key fob and the engine running. “And it’s so frustrating! I can’t tell you how many times I’ve gotten back to the car – oh, Geez, I left it running again! You have no way of knowing that the car’s running!”

(Listen to Paula Poundstone on keyless ignition — Poundstone’s comments begin at about the eight-minute mark.)

Timing is everything in comedy, and as it happens, Ms. Poundstone offered her observational bit just a week after NHTSA posted a Notice of Proposed Rulemaking to “fix” the problems introduced by keyless ignition systems: rollaways and carbon monoxide poisonings. Unfortunately, some people who took their key fobs with them, while inadvertently leaving their vehicles running in an attached garage, died from carbon monoxide poisonings. Rollaways have produced their share of injuries and property damage. These incidents are not so funny.

Many people victimized by poor designs blame themselves for their forgetfulness. But we think Ms. Poundstone hit the mark when she called it “the worst feature” she’s ever had in a car. We similarly think that NHTSA solution is a work-around and doesn’t serve the intent of FMVSS 114 or consumers, who have to pay – not to mention risk their safety – for industry’s and regulators’ bad decisions.

Stay tuned. We’ll be submitting our comments to the docket. In the meantime, if you, like Paula Poundstone, have left your keyless ignition car running, but aren’t a regular radio-show panelist, tell NHTSA by submitting a Vehicle Owner Questionnaire.  Or comment directly to the proposal in Docket NHTSA-2011-0174.

(For more on keyless ignition hazards see Stupid Tricks with Smart Keys)

Stupid Tricks with Smart Keys

Someone should have seen this one coming.

In November, a New York woman filed a lawsuit against Toyota, claiming that its keyless entry system resulted in the death of one man and her own debilitating injuries. How did it happen? Carbon monoxide poisoning from her Lexus, inadvertently left running in the garage under her home. Mary Rivera, of Queens, New York alleged that her so-called Smart Key, an electronic fob system, allowed her to exit the vehicle without it being turned off. The engine was so quiet Rivera didn’t notice that the motor was still running.

Just another one of those crazy lawsuits where some consumer does something really dumb and tries to blame the hapless manufacturer, right? More fodder for all those conservative blatherskites who love to dump on trial lawyers, right?

Actually, no. This preventable tragedy is the inevitable consequence of bad design and a NHTSA’s interpretation of the rules. Continue reading