RII Track-4: Photovoltaic Based Physically Unclonable Functions (PUFs) for Vehicular Security

非技术描述今天的汽车有大约1亿行计算机代码和60个电子控制单元(ECU)，以及广泛的计算机支持技术，如电力和信息娱乐系统、远程锁定和解锁、远程发动机启动等。随着计划在新车中采用车对车(V2V)通信技术，预计到2020年全球联网汽车可能多达2.2亿辆。然而，这些车载嵌入式设备容易受到恶意网络攻击，如修改车载系统基础设施、窃取知识产权(IP)、滥用车载通信。需要在硬件和软件层面进行根本性的改进，以创建更可靠的车辆安全基础设施。这项研究调查了物理不可克隆功能(PUF)作为一种硬件安全方法的潜在用途，以简化或解决许多重要的车辆安全问题，如ECU盗版、ECU伪造、安全身份验证和密钥管理。橡树岭国家实验室(ORNL)的合作者拥有PUF所需的专业知识，该项目将为PI提供这一领域所需的培训和指导。这项拟议的研究可能为广泛使用基于光伏的PUF铺平道路，以缓解车辆的网络安全漏洞和潜在攻击的影响，从而提高美国家庭的公共安全并保护司机的个人数据。此外，该项目还将促进肯塔基大学和肯塔基联邦在车辆安全方面的更强有力的研究和教育计划。技术说明该项目将为长期研究计划提供基础，该研究计划将基于现有车辆硬件(如内置传感器或设备)的固有属性来设计硬件安全原语。利用现有的车载硬件构建PUF有可能以最低的重新设计成本和性能损失来缓解车辆的网络威胁。光伏(PV)器件在汽车上有广泛的应用，如环境气候控制、自动前照灯、混合动力汽车和电动汽车的发电等。因此，PI计划研究用于车辆安全的光伏PUF的新设计和原型。这项拟议的研究将为光伏器件中光强和输出电流之间的关系提供更好的理解，以产生光伏PUF。将设计基于光伏的PUF的新方法和电路结构，并将在极端气象测试条件下测试和评估所提出的PUF相对于温度变化和老化效应的可靠性。光伏PUF电路的仿真和原型将检验PI的假设，即车辆中现有的设备和传感器可以用于缓解安全威胁。将开发智能产品，如光伏PUF的新颖电路设计和架构、光伏PUF发电的设计流程以及特定的PUF设计和原型。

Non-technical DescriptionToday's vehicles have approximately 100 million lines of computer code and 60 electronic control units (ECUs), as well as a wide range of computer-enabled technologies such as power and infotainment systems, remote locking and unlocking, remote engine start, etc. With plans underway to include vehicle-to-vehicle (V2V) communications technology in new vehicles, it is expected that there could be as many as 220 million connected cars globally by 2020. However, these embedded devices in vehicles are susceptible to malicious cyber-attacks, such as modifying the in-vehicle system infrastructure, stealing intellectual property (IP), and misusing the vehicle-to-vehicle communication. Fundamental advancements are needed at the hardware and software levels to create a more reliable vehicle security infrastructure. This research investigates the potential use of Physically Unclonable Functions (PUFs) as a hardware security approach to simplify or solve many important vehicular security problems, such as ECU piracy, ECU counterfeiting, secure authentication, and key management. Collaborators at the Oak Ridge National Laboratory (ORNL) have the needed expertise in PUFs, and the project will provide the PI with needed training and mentorship in this area. The proposed research could pave the way for the widespread use of photovoltaic-based PUFs to mitigate vehicle cybersecurity vulnerabilities and the impacts of potential attacks, thereby, increasing the public safety of American families and securing driver's personal data. In addition, the project will lead to a stronger research and education program in vehicular security at the University of Kentucky and the Commonwealth of Kentucky.Technical DescriptionThe project will provide the foundation for a long-term research program to design hardware security primitives based on intrinsic properties of existing vehicular hardware such as built-in sensors or devices. Building PUFs from existing vehicular hardware has the potential to mitigate cyber-threats in vehicles with minimal redesign costs and performance penalties. Photovoltaic (PV) devices have wide applications in vehicles such as ambient climate control, automatic headlights, to generate electricity in hybrid and electric vehicles, etc. Therefore, the PI plans to investigate new designs and prototypes of PV PUFs for vehicular security. The proposed research will provide a better understanding of the relationship between light intensity and output current in PV devices for the generation of PV PUFs. Novel methodologies and circuit architectures of PV-based PUFs will be designed, and the reliability of the proposed PUFs with respect to temperature variations and aging effects will be tested and evaluated under extreme meteorological test conditions. Simulation and prototyping of PV-based PUF circuits will test the PI's hypothesis that existing devices and sensors in vehicles can be used to mitigate the security threats. Intellectual products will be developed, such as novel circuit designs and architectures of PV-based PUFs, design flow of PV-based PUF generation, and specific PUF designs and prototypes.