论文标题

使用PUF的物联网设备的基于公钥的身份验证体系结构

Public-Key Based Authentication Architecture for IoT Devices Using PUF

论文作者

Akhundov, Haji, van der Sluis, Erik, Hamdioui, Said, Taouil, Mottaqiallah

论文摘要

如今,物联网(IoT)是计算世界中的一个热门话题。值得注意的是,IoT设备具有严格的设计要求,通常被称为受限设备。因此,轻巧的安全技术和原始功能更适合于此类设备,例如静态随机访问存储器(SRAM)物理不可泄露的功能(PUFS)和椭圆曲线密码(ECC)。 SRAM PUF是一种内在的安全性原始性,在物联网段中广泛采用。 ECC是一种公用算法技术,在受限的IoT设备中一直在广受欢迎。与其他公钥技术(例如RIVEST SHAMIR ADLEMAN)相比,其受欢迎程度是由于使用明显较小的操作数。本文展示了基于SRAM PUF技术和ECC的特定于应用程序的安全通信体系结构的设计,开发和评估,用于受限制的物联网设备。更具体地说,它引入了基于椭圆形的曲线diffie-hellman(ECDH)公钥的加密协议,该协议利用PUF衍生的键作为硅身份验证的trages。此外,它提出了支持协议的模块化硬件体系结构的设计。最后,为了分析所提出的协议的实用性以及可行性,我们通过原型设计和验证商业Xilinx Zynq-7000 APSOC设备上的协议变体来证明解决方案。

Nowadays, Internet of Things (IoT) is a trending topic in the computing world. Notably, IoT devices have strict design requirements and are often referred to as constrained devices. Therefore, security techniques and primitives that are lightweight are more suitable for such devices, e.g., Static Random-Access Memory (SRAM) Physical Unclonable Functions (PUFs) and Elliptic Curve Cryptography (ECC). SRAM PUF is an intrinsic security primitive that is seeing widespread adoption in the IoT segment. ECC is a public-key algorithm technique that has been gaining popularity among constrained IoT devices. The popularity is due to using significantly smaller operands when compared to other public-key techniques such as RSA (Rivest Shamir Adleman). This paper shows the design, development, and evaluation of an application-specific secure communication architecture based on SRAM PUF technology and ECC for constrained IoT devices. More specifically, it introduces an Elliptic Curve Diffie-Hellman (ECDH) public-key based cryptographic protocol that utilizes PUF-derived keys as the root-of-trust for silicon authentication. Also, it proposes a design of a modular hardware architecture that supports the protocol. Finally, to analyze the practicality as well as the feasibility of the proposed protocol, we demonstrate the solution by prototyping and verifying a protocol variant on the commercial Xilinx Zynq-7000 APSoC device.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源