A Robust, Low-Cost and Secure Authentication Scheme for IoT Applications
A Robust, Low-Cost and Secure Authentication Scheme for IoT Applications
复制标题
DOI：
10.3390/cryptography4010008
复制
发表时间：
2020-03-01
期刊：
影响因子：
1.6
通讯作者：
Guin, Ujjwal
中科院分区：
文献类型：
--
作者：
al Mahmod, Md Jubayer;Guin, Ujjwal
连接到物联网（IoT）基础设施的边缘设备越来越容易受到盗版的影响。这些盗版边缘设备对安全构成严重威胁，因为对手可以通过这些非真实设备访问专用网络。有必要通过不安全的通道对边缘设备进行身份验证，以保护网络免受这些假冒设备的渗透。安全功能的实现需要大量的计算能力和大量的硬件/软件开销，由于物联网边缘设备固有的资源限制，这两者都难以满足。本文提出了一种用于物联网边缘设备的低成本认证协议，该协议利用内置SRAM的上电状态生成设备指纹。从片上SRAM生成的不可克隆ID可能是不可靠的，为了规避这个问题，我们提出了一种新的ID匹配方案，该方案强调了需要提高从片上SRAM生成的ID的可靠性。安全性和不同的攻击分析表明，由对手冒充边缘设备的概率是微不足道的。该协议使用商业微控制器实现，这需要很小的代码开销。然而，不需要修改设备硬件。
The edge devices connected to the Internet of Things (IoT) infrastructures are increasingly susceptible to piracy. These pirated edge devices pose a serious threat to security, as an adversary can get access to the private network through these non-authentic devices. It is necessary to authenticate an edge device over an unsecured channel to safeguard the network from being infiltrated through these fake devices. The implementation of security features demands extensive computational power and a large hardware/software overhead, both of which are difficult to satisfy because of inherent resource limitation in the IoT edge devices. This paper presents a low-cost authentication protocol for IoT edge devices that exploits power-up states of built-in SRAM for device fingerprint generations. Unclonable ID generated from the on-chip SRAM could be unreliable, and to circumvent this issue, we propose a novel ID matching scheme that alleviates the need for enhancing the reliability of the IDs generated from on-chip SRAMs. Security and different attack analysis show that the probability of impersonating an edge device by an adversary is insignificant. The protocol is implemented using a commercial microcontroller, which requires a small code overhead. However, no modification of device hardware is necessary.