Slender PUF Protocol: A Lightweight, Robust, and Secure Authentication by Substring Matching
Slender PUF Protocol: A Lightweight, Robust, and Secure Authentication by Substring Matching
复制标题
DOI：
10.1109/spw.2012.30
复制
发表时间：
2012-05
期刊：
影响因子：
--
通讯作者：
Mehrdad Majzoobi;M. Rostami;F. Koushanfar;D. Wallach;S. Devadas
中科院分区：
文献类型：
--
作者：
Mehrdad Majzoobi;M. Rostami;F. Koushanfar;D. Wallach;S. Devadas
我们介绍了细长的PUF协议，一个有效的和安全的方法来验证从一个强物理不可克隆功能（PUF）产生的响应。新方法是轻量级的，并且适合于能量受限的平台，例如用于识别和认证应用的超低功耗嵌入式系统。所提出的协议不遵循在通信信道上暴露完整PUF响应（或完整响应串的转换）的经典范例。相反，响应的随机子集被揭示并被发送以进行身份验证。响应模式用于以非常高的概率认证证明器设备。我们执行一个彻底的分析方法的弹性，以各种攻击，指导我们的协议参数的调整，一个高效和安全的实施。我们证明，如果精心设计，Slender PUF协议将能够抵御所有已知的机器学习攻击。此外，它还具有内置PUF容错的巨大优势。因此，Slender PUF协议是轻量级的，并且不需要在大多数先前已知的基于PUF的鲁棒认证技术中建议的昂贵的附加纠错、模糊提取器和散列模块。一组硬件实现和评估证实了低开销和实用性的协议。
We introduce Slender PUF protocol, an efficient and secure method to authenticate the responses generated from a Strong Physical Unclonable Function (PUF). The new method is lightweight, and suitable for energy constrained platforms such as ultra-low power embedded systems for use in identification and authentication applications. The proposed protocol does not follow the classic paradigm of exposing the full PUF responses (or a transformation of the full string of responses) on the communication channel. Instead, random subsets of the responses are revealed and sent for authentication. The response patterns are used for authenticating the prover device with a very high probability. We perform a thorough analysis of the method's resiliency to various attacks which guides adjustment of our protocol parameters for an efficient and secure implementation. We demonstrate that Slender PUF protocol, if carefully designed, will be resilient against all known machine learning attacks. In addition, it has the great advantage of an inbuilt PUF error tolerance. Thus, Slender PUF protocol is lightweight and does not require costly additional error correction, fuzzy extractors, and hash modules suggested in most previously known PUF-based robust authentication techniques. The low overhead and practicality of the protocol are confirmed by a set of hardware implementation and evaluations.