Physical Random Functions and Secure Hardware Architectures

提案CCR-0309562标题：物理随机功能和安全硬件架构PI：Srinivas Devadas计算元素正在变得很小，分散和无人监督，并将重大责任放在他们身上。 介绍了物理随机函数（或物理不可克隆函数中的PUF），它是与物理设备建立共享秘密的防篡改方式。 它们依赖于设备之间不可避免的制造差异来为设备产生不可克隆的身份。 PUF可以直接用于认证识别应用，例如钥匙卡和智能卡。在目前的智能卡中，拥有智能卡的人可以通过许多有据可查的攻击之一提取其数字密钥信息来复制它。 由于芯片上有一个唯一的PUF，可以用来验证芯片，因此不需要数字密钥;芯片硬件本身就是密钥。为了实现更复杂的应用，引入了受控物理随机函数（CPUF），这是一种只能通过与PUF物理绑定的算法访问的PUF。 CPUF可用于在物理设备和远程用户之间建立共享秘密。 一旦建立，共享秘密可以用于实现广泛的应用，包括认证执行和知识产权保护。

Proposal CCR-0309562Title: Physical Random Functions and Secure Hardware ArchitecturesPI: Srinivas DevadasComputing elements are becoming small, disseminated and unsupervised, and significant responsibilities are being placed on them. Physical attacks present an increasing risk that must be dealt with.Physical Random Functions (or PUF as in Physical Unclonable Function), which are a tamper resistant way of establishing shared secrets with a physical device are introduced. They rely on the inevitable manufacturing variations between devices to produce an unclonable identity for a device. PUFs can be used directly for authenticated identification applications such as key cards and smart cards. In current smartcards, it is possible for someone who is in possession of the smartcard to produce a clone of it, by extracting its digital key information through one of many well-documented attacks. With a unique PUF on the smartcard that can be used to authenticate the chip, a digital key is not required; the smartcard hardware is itself the secret key.To enable more sophisticated applications, Controlled Physical Random Functions (CPUFs) which are PUFs that can only be accessed via an algorithm that is physically bound to the PUF in an inseparable way are introduced. CPUFs can be used to establish a shared secret between a physical device and a remote user. Once established, the shared secret can be used to enable a wide range of applications, including certified execution and intellectual property protection.