For　quite　a　long　time,　purchasers　have　come　to　depend　on　the　convenience　and　security　and　included　security　that　a　passive　vehicle　immobilizer　framework　offers.　These　frameworks　comprise　of　a　Passive　Entry　Passive　Start　(PEPS)　innovation,　conveyed　by　the　driver,　and　a　Smart　Key　Unit　(SKU),　mounted　in　the　vehicle　with　regards　to　the　principal　parts　of　these　frameworks.　This　paper　for　the　first　time　shows　the　cyber　vulnerability　of　PEPS　in　the　vehicle　against　the　man-in-the　middle　attack　(MITM).　It　enables　the　hacker　to　open　and　begin　the　vehicle,　although　there　was　still　a　distance　between　the　vehicle　and　the　key.　To　stop　this　physical　cyber　attack,　we　propose　a　hearty　ultra-lightweight　common　confirmation　technique　dependent　on　the　radio　frequency　identification　(RFID)　convention　that　cooperates　with　a　decentralized　database　to　verify　the　PEPS.　A　secure　blockchain　based　on　smart　contract　is　also　developed　which　is　compatible　with　the　mutual　authentication　in　the　vehicle.　A　detailed　security　analysis　is　performed　on　an　undefined　vehicle　to　prove　the　high　security　of　the　proposed　communication　approach　when　facing　MITM.　©　2001-2012　IEEE.