Controlled physical random functions and applications
Controlled physical random functions and applications
复制标题
DOI：
10.1145/1284680.1284683
复制
发表时间：
2008-01-01
影响因子：
--
通讯作者：
Tuyls, Pim
中科院分区：
文献类型：
--
作者：
Gassend, Blaise;Van Dijk, Marten;Tuyls, Pim
我们在日常生活中使用的加密协议依赖于消费者设备中密钥的安全存储。保护这些密钥不受入侵攻击者的攻击是一个具有挑战性的问题。我们提出了受控物理随机函数（CPUF）作为存储密钥的替代方案，并描述了使用CPUF所需的核心协议。物理随机函数（PUF）是具有输入和输出的物理系统。输入和输出之间的函数关系看起来像一个随机函数。特定关系对于PUF的特定实例是唯一的，因此，需要访问特定PUF实例以评估其体现的功能。PUF的加密应用非常有限，除非PUF与限制PUF评估方式的算法相结合;这是CPUF。使用CPUF的一个主要困难是，您只能知道PUF的一小部分输出-未知输出与已知输出无关。我们提出了解决这个困难的协议，并允许在CPUF制造商和希望与PUF设备安全交互的一方之间建立信任链。我们还介绍了一些基本的应用程序，如认证执行。
The cryptographic protocols that we use in everyday life rely on the secure storage of keys in consumer devices. Protecting these keys from invasive attackers, who open a device to steal its key, is a challenging problem. We propose controlled physical random functions ( CPUFs) as an alternative to storing keys and describe the core protocols that are needed to use CPUFs. A physical random functions (PUF) is a physical system with an input and output. The functional relationship between input and output looks like that of a random function. The particular relationship is unique to a specific instance of a PUF, hence, one needs access to a particular PUF instance to evaluate the function it embodies. The cryptographic applications of a PUF are quite limited unless the PUF is combined with an algorithm that limits the ways in which the PUF can be evaluated; this is a CPUF. A major difficulty in using CPUFs is that you can only know a small set of outputs of the PUF - the unknown outputs being unrelated to the known ones. We present protocols that get around this difficulty and allow a chain of trust to be established between the CPUF manufacturer and a party that wishes to interact securely with the PUF device. We also present some elementary applications, such as certified execution.