SaTC: STARSS: Small: IoT Circuit Locking, Obfuscation & Authentication Kernel (CLOAK), A Compilable Architecture for Secure IoT Device Production, Testing, Activation & Ope

物联网(IoT)的大规模部署提供了自主、控制和激励机会，为我们的生活方式和与环境互动的方式打开了革命之门。然而，物联网的广泛采用伴随着将其滥用于恶意目的的危险，威胁到隐私、财产和生命的损失。潜在物联网安全威胁的范围和覆盖范围与物联网设备的数量和覆盖范围一样快。因此，保护物联网的硬件不能留在事后考虑。该项目旨在提高物联网设备在制造和运行期间的安全性。为了确保物联网设备在制造和运行期间的安全性，该提案引入了物联网斗篷-物联网电路锁定、混淆和认证内核。斗篷是一个可编译的、通用的轻量级架构，用于物联网设备的安全生产、测试、云激活和操作。该项目的主要目标包括：(1)建立一个开源编译器，将任何网表合成为伪装保护和伪装混淆的网表；(2)使混淆密钥成为一个真正的移动目标，从激活到激活；(3)通过在云上按需生成密钥，消除在物联网设备上或云上存储密钥的需要；(4)探索轻量级密码学及其侧通道漏洞，以确保物联网-云通信的安全；(5)解决从物联网设备安全读取PUF签名的挑战；(6)研究超轻量级PUF和TRNG解决方案；(7)调查不可信设施中隐身保护芯片的功能测试；(8)开发基于云的隐身管理服务，能够配置、管理、解锁、许可和认证隐身物联网设备。

Autonomy, control and actuation opportunities offered by a colossal deployment of Internet of Things (IoT) open the door to a revolution in the way we live and interact with our environment. However, widespread adoption of IoT comes with the danger of its misuse for malicious purposes, threatening the loss of privacy, property, and life. The scope and reach of potential IoT security threat grows as fast as the number and reach of IoT devices. Hence, protecting the hardware of IoT cannot be left as an afterthought. This project aims to improve the security of the IoT devices throughout their manufacturing and operational lifespan.To secure the IoT devices throughout their manufacturing and operational lifespan, this proposal introduces IoT CLOAK - IoT Circuit Locking, Obfuscation & Authentication Kernel. CLOAK is a compilable, universal and lightweight architecture for secure production, testing, cloud activation & operation of IoT devices. The major goals of this project include: (1) building an open-source compiler to synthesize any netlist into CLOAK-protected and CLOAK-obfuscated netlist; (2) making the obfuscation-key a truly moving target that changes from activation to activation; (3) removing the need to store keys on the IoT devices or on the cloud by generating it on demand on the cloud; (4) exploring lightweight cryptography, and its side channel vulnerabilities, to secure the IoT-Cloud communication; (5) addressing the challenge of safe readout of PUF signature from IoT device; (6) investigating ultra-lightweight PUF and TRNG solutions; (7) investigating the functional testing of the CLOAK-protected chips in untrusted facilities and (8) developing cloud-based CLOAK-management services capable of configuring, managing, unlocking, licensing, and authenticating CLOAK-protected IoT devices.