A PUF Application: Are sensors the key to a secure IoT environment?

点击翻译按钮获取中文摘要

Terminology ExplainedPUF stands for Physical Unclonable Function and can be used to uniquely identify a given device/component. PUF's are based on the premise that no two components (i.e. a RAM module) are the same due to the microscopic physical variations that occur during manufacturing and are near-impossible to replicate accurately and cost-effectively. These physical variations can be used to aid in security.One application of PUF's which is being pursued by this project is the use of PUF's for encryption over the standard key-based encryption which is often poorly implemented (withregard to key-management and storage) and un-optimised for IoT devices (in regard to powerconsumption and processing power).Key ObjectivesThe research project as a whole can be broken down into 3 stages (projects) with each stage acting as a project in itself. It is only expected for the first two projects to be fully completed.Project 1 - Fingerprinting SensorsOn a given device (or type of device), this project aims to fingerprint the device as a whole using the output of multiple sensors.Technical Abilities Required:*Machine Learning - Commonly used technique for fingerprinting*Extracting Raw values from sensors*Sensor background theory (e.g. Calibration)*Maths [Vectors, proofs]*Create an algorithm for fingerprint generation from multipole sensors (*Novelty Aspect)Key Reference Paper: SensorID: Sensor Calibration Fingerprinting for SmartphonesExpected Duration: 1.5 YearsProject 2 - Sensor PUF Creation and Proof [Main Focus]This project follows directly from the first by using the extracted values from the previous project to create a sensor-based PUF. By the end of the project, a limited proof-of-concept of this implementation is expected, at a minimum.Technical Abilities Required:*Maths [Proofs, Vectors]*Sensor PUF Creation, Implementation and Proof (*Novelty Aspect)Key paper of reference: Texture to the Rescue: Practical Paper Fingerprinting Based on Texture PatternsExpected Duration: 1.5 YearsProject 3 - Sensor PUF ApplicationIn the unlikely scenario that time permits, this third project consists of applying the findings from the previous projects; applying the sensor PUF to an existing IoT product/environment. Following this, an authentication-based attack will be enacted on the IoT environment in question prior to and following the implementation of the sensor PUF to show the effectiveness of the PUF.Technical Abilities Required:*Conducting an Authentication-Based Attack*Emulating an IoT Environment*Applying Project 2 (Implementing a PUF) to Existing Set-UpExpected Duration: ~1 YearProject NoveltyThe overarching novelty of the project is the generation of PUF's from sensors to be used in authentication in an IoT environment. PUF's are commonly implemented using RAM, Processors, FPGA's and ASIC's, but there are currently no papers on sensor PUF's (only a patent). What question does project intend to answerThe question the project intends to answer is: Are sensors (literally) the key to a secure IoT environment? Can PUF's generated from sensors reliably be used to increase the security of an IoT environment without the drawbacks of standard key-based encryption?