Lightweight strong PUF (Physical Unclonable Function) generation device and method

Abstract

The invention relates to a lightweight strong PUF (Physical Unclonable Function) generation device and method, belongs to the technical field of PUF generation, and solves the problems of complex structure, sensitivity to power supply voltage and slow response of a PUF generation device in the prior art. Comprising an enhancement judgment module, a dynamic configurable discharge module and an energy storage module, wherein the enhancement judgment module is used for obtaining and outputting a PUF response based on an external control signal and different discharge speeds of the energy storage module; the energy storage module is used for charging to the power supply voltage of the device when the external control signal is set to 0, and discharging when the external control signal is set to 1; and the dynamic configurable discharge module is used for changing the discharge speed of the energy storage module based on the external excitation signal, the discharge enable signal and the voltage of the energy storage module, so that the enhanced judgment module obtains different PUF responses. The PUF generation device which is light in weight, insensitive to power supply voltage and high in response speed is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of PUF generation, and in particular to a lightweight strong PUF generation device and method. Background Art

[0002] With the rapid development of integrated circuit technology and information technology, the importance of information security has gradually received widespread attention. Therefore, how to achieve information security is a key technical issue that needs to be solved in the information age, and it is also a serious social security issue.

[0003] The protection design of the security system includes two methods: software and hardware. The hardware method using security chip encryption has a higher security level. However, with the development of attack technology, security chips are subject to endless threats, such as physical attacks, software attacks, and physical / software joint attacks, and the effective security defense capabilities are gradually reduced. Traditional encryption methods generally store keys in non-volatile memory, which is very vulnerable to risks such as invasive attacks and semi-invasive attacks, resulting in key leakage and the collapse of the entire security system. Moreover, traditional encryption methods require a lot of resources and high manufacturing costs. The development trend of security systems is gradually moving towards lightweight, miniaturization and portability, which poses greater challenges to the performance, power consumption, area and security of integrated circuits. How to achieve high-security and high-reliability encryption protection solutions in resource-limited systems is receiving more and more attention.

[0004] Physical Unclonable Function (PUF) came into being, which can effectively solve information security problems and is used to defend security chips from attacks, becoming a popular technology in the field of hardware security. PUF generates binary PUF codes by extracting process deviations during chip manufacturing. This random, tiny physical difference cannot be copied, so PUF can be called the "fingerprint of the chip." Moreover, PUF has the advantage of being generated when powered on and disappearing when powered off, avoiding the security risk of permanent storage required by traditional hardware encryption methods, and effectively improving the security of the system.

[0005] Physical unclonable functions can realize the mapping from input to corresponding output. The input signal of PUF is called challenge, denoted by C; the output signal is called response, denoted by R; a specific input signal and the corresponding output signal form a challenge response pair (CRP), and the set of all challenge response pairs on PUF is called CRPs. PUF has the characteristics of uniqueness, randomness, stability, unclonability, lightness, tamper-proofness, and reliability. The indicators for measuring PUF performance include intra-chip Hamming distance, inter-chip Hamming distance, bit bias, and uniformity. PUF is classified according to the manufacturing method. PUF is divided into non-silicon PUF and silicon PUF. Silicon PUF is divided into two types. The first type is delay PUF, such as PUF based on ring oscillator (RO PUF) and PUF based on arbiter (Arbiter PUF). The second type is storage PUF, such as PUF based on static random access memory (SRAM PUF) and PUF based on dynamic random access memory (DRAM PUF). PUF is classified according to security (number of stimulus response pairs), and PUF is divided into strong PUF and weak PUF. Strong PUF has a large number of stimulus response pairs (CRPs), and attackers cannot obtain all CRPs. Even if all CRPs are obtained, it is still impossible to complete accurate modeling prediction of the PUF circuit, which has higher security and stability. Compared with strong PUF, weak PUF has a small number of stimulus response pairs (CRPs), such as RO PUF and SRAM PUF. The application of PUF includes key generation, device / chip authentication, and intellectual property protection. Generally, strong PUF is used for target identification, random key generation, identity authentication, anti-counterfeiting, etc., and weak PUF can be used for fuzzy key extraction, etc.

[0006] Traditional PUF structures have the disadvantages of low resource utilization efficiency, sensitivity to power supply voltage and slow response. For example, ROPUF consumes large power, SRAM PUF can only respond by relying on power supply and has poor stability, and non-silicon PUF cannot be integrated in CMOS process. Summary of the invention

[0007] In view of the above analysis, the embodiments of the present invention aim to provide a lightweight strong PUF generation device and method to solve the problems of the existing PUF generation device having a complex structure, being sensitive to the power supply voltage, and having a slow response.

[0008] On the one hand, an embodiment of the present invention provides a lightweight strong PUF generation device, including: a strengthening determination module, a dynamically configurable leakage module and an energy storage module; wherein,

[0009] The enhanced determination module is used to obtain and output a PUF response based on an external control signal and different leakage rates of the energy storage module;

[0010] The energy storage module is used to charge to the device power supply voltage when the external control signal is set to 0, and to discharge the energy when the external control signal is set to 1;

[0011] The dynamically configurable leakage module is used to change the leakage speed of the energy storage module based on the external excitation signal, the leakage enable signal and the voltage of the energy storage module, so that the enhanced determination module obtains different PUF responses.

[0012] A further improvement based on the above scheme also includes a switching circuit; the switching circuit is used to connect the output response of the enhanced determination module to the control end of the leakage pipe in the dynamically configurable leakage module when the external control signal is set to 1.

[0013] Based on a further improvement of the above solution, the PUF response is a signal with multiple bits.

[0014] Based on the further improvement of the above scheme, the dynamically configurable leakage module, the switching circuit and the energy storage module are all two groups with symmetrical structures; the enhanced determination module includes two response output terminals with opposite output results, each response output terminal is connected to an input terminal of a dynamically configurable leakage module and an input terminal of a switching circuit; the output terminal of the switching circuit is connected to the control terminal of the leakage pipe in the dynamically configurable leakage module; an energy storage module includes a capacitor, which is connected in series between the response output terminal of an enhanced determination module and the ground.

[0015] Based on the further improvement of the above solution, the enhanced determination module includes a first PMOS transistor, a second PMOS transistor, a third PMOS transistor, and a fourth PMOS transistor; wherein,

[0016] The sources of the first PMOS transistor, the second PMOS transistor, the third PMOS transistor, and the fourth PMOS transistor are connected to a device power supply; the gates of the first PMOS transistor and the second PMOS transistor receive external control signals respectively; the drain of the first PMOS transistor is connected to the drain of the third PMOS transistor and the gate of the fourth PMOS transistor, and the connection point serves as a response output terminal; the drain of the second PMOS transistor is connected to the drain of the fourth PMOS transistor and the gate of the third PMOS transistor, and the connection point serves as another response output terminal.

[0017] Based on the further improvement of the above solution, the dynamically configurable leakage module includes multiple groups of leakage units and a leakage master switch, each group of leakage units includes a leakage pipe and a leakage switch; wherein,

[0018] The leakage switch comprises an NMOS transistor, the source of the NMOS transistor is connected to the drain of the leakage tube, the gate controls the on and off of the leakage switch based on an external excitation signal, and the drain is connected to the input end of the dynamically configurable leakage module;

[0019] The leakage tube includes an NMOS transistor, the source of the NMOS transistor is grounded, and the gate is connected to the output end of the switching circuit and one end of the leakage main switch;

[0020] The other end of the leakage main switch is grounded; it is turned on when the leakage enable signal is at a high level, so that the dynamically configurable leakage module stops working.

[0021] A further improvement based on the above scheme also includes an arbitration processing module, whose input end is connected to any response output end of the enhancement judgment module, and is used to count the multiple output signals generated by the enhancement judgment module when the same external control signal and external excitation signal are input to the device multiple times to obtain the final output signal.

[0022] Based on the further improvement of the above solution, the selection of the same type of components in each module is the same.

[0023] On the other hand, an embodiment of the present invention provides a lightweight strong PUF generation method, including:

[0024] Pre-charging step; wherein, the external control signal is set to 0, the leakage enable signal is set to 1, and all leakage modules are controlled to be turned off through the external excitation signal, so that the energy storage module is charged, and the two response output terminals of the enhanced determination module both output a high level;

[0025] Discharging to obtain a one-bit output signal; wherein, the external control signal is set to 1, the discharge enable signal is set to 0, and part of the discharge modules are selected and controlled to be turned on through the external excitation signal, and any response output end of the strengthening determination module obtains a one-bit output signal;

[0026] Repeat the above two steps, and concatenate the obtained output signals in sequence to obtain a PUF response with multiple bits.

[0027] A further improvement based on the above method also includes inputting the same external excitation signal multiple times, using the arbitration processing module to perform statistics on the output signal to obtain a final output signal.

[0028] Compared with the prior art, the present invention can achieve at least one of the following beneficial effects:

[0029] 1. The strong PUF circuit proposed in the present invention has the advantages of being lightweight, simple in circuit structure, and easy to implement. Compared with the traditional RO PUF circuit, the circuit structure proposed in the present invention does not require a counter and a comparator, and the output of the circuit is a binary "1" or "0", which does not require special processing to convert the output into a binary value. In addition, it also has the advantages of occupying less hardware resources, low cost, saving layout area, and low power consumption, which has great application prospects in resource-limited system applications.

[0030] 2. The strong PUF circuit structure proposed in the present invention is independent of the power-on speed. Compared with the traditional SRAM PUF circuit, the PUF circuit in the present invention works in two processes: pre-charging and discharge comparison after the power supply is stably powered on. When the external control signal is set to 1, an excitation response pair is generated. The power-on speed has no effect on the generation of the PUF code, and has strong robustness and security.

[0031] 3. The strong PUF circuit proposed in the present invention has a fast response speed. Compared with the RO PUF circuit, it is not necessary to wait for the two ring oscillators to pull a certain frequency difference before outputting a one-bit PUF code. After the external excitation signal is input, the PUF circuit proposed in the present invention amplifies the difference between the output node VO voltage and VOB voltage through the cross-coupling tubes P3 and P4, and quickly pulls them up to the power supply voltage or down to the ground voltage, completing the discharge comparison process, and generating a one-bit PUF code.

[0032] 4. The present invention uses an arbitration processing module to correct the output response of the circuit. Compared with the traditional error correction method, the arbitration processing module proposed in the present invention selects the response with more occurrences by inputting the same stimulus to the circuit multiple times, so that the circuit has the characteristics of high stability and high reliability, and has the advantages of simple working principle and low hardware resource consumption.

[0033] In the present invention, the above-mentioned technical solutions can also be combined with each other to achieve more preferred combination solutions. Other features and advantages of the present invention will be described in the subsequent description, and some advantages can become obvious from the description, or can be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The accompanying drawings are only used for the purpose of illustrating specific embodiments and are not to be considered as limiting the present invention. In the entire drawings, the same reference symbols represent the same components;

[0035] Figure 1 A circuit diagram of a lightweight strong PUF generating device shown in one embodiment of the present invention;

[0036] Figure 2 A block diagram of a lightweight strong PUF generating device according to an embodiment of the present invention;

[0037] Figure 3 A flowchart of an arbitration processing module shown in one embodiment of the present invention;

[0038] Reference numerals:

[0039] 1- Enhanced judgment module; 2- Dynamically configurable discharge module; 3- Energy storage module; 4- Switching circuit; 5- Power consumption adjustment module; 6- Arbitration processing module. DETAILED DESCRIPTION

[0040] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0041] A specific embodiment of the present invention discloses a lightweight strong PUF generation device, such as Figure 1 As shown, it includes: an enhanced determination module 1, a dynamically configurable flow discharge module 2 and an energy storage module 3; wherein,

[0042] The enhanced determination module is used to obtain and output a PUF response based on an external control signal and different leakage rates of the energy storage module;

[0043] The energy storage module is used to charge to the device power supply voltage when the external control signal CTR is set to 0, and to discharge the energy when the external control signal is set to 1;

[0044] The dynamically configurable leakage module is used to change the leakage speed of the energy storage module based on the external excitation signal, the leakage enable signal and the voltage of the energy storage module, so that the enhanced determination module obtains different types of PUF responses.

[0045] Furthermore, it also includes a switching circuit 4; the switching circuit is used to connect the output response of the enhanced determination module to the control end of the leakage pipe in the dynamically configurable leakage module when the external control signal is set to 1. When the external control signal is set to 0, the switching circuit is disconnected, and the enhanced determination module is used to charge the energy storage module.

[0046] Exemplarily, the switching circuit is an NMOS transistor, the gate of the NMOS transistor is connected to an external control signal, the drain is connected to a response output terminal of the enhancement determination module, and the source is connected to the control terminal of the leakage tube in the dynamically configurable leakage module.

[0047] It should be noted that the PUF response is two sets of opposite signals with multiple bits, namely VOB and VO; the dynamically configurable leakage module, the switching circuit and the energy storage module are two sets of symmetrical structures; the enhanced judgment module includes two response output terminals with opposite output results, each of which is connected to the input terminal of a dynamically configurable leakage module and the input terminal of a switching circuit; the output terminal of the switching circuit is connected to the control terminal of the leakage tube in the dynamically configurable leakage module; an energy storage module includes a capacitor, which is connected in series between the response output terminal of an enhanced judgment module and the ground. Exemplarily, for one of the energy storage modules, the capacitor is C1, and for the other energy storage module, the capacitor is C2; the switching circuit 4 is also two symmetrical paths. Exemplarily, for one of the switching circuits, the switch is S1, and for the other switching circuit, the switch is S2.

[0048] Specifically, the enhanced determination module includes a first PMOS transistor P1, a second PMOS transistor P2, a third PMOS transistor P3, and a fourth PMOS transistor P4; wherein,

[0049] The sources of the first PMOS transistor, the second PMOS transistor, the third PMOS transistor and the fourth PMOS transistor are connected to the device power supply VDD; the gates of the first PMOS transistor and the second PMOS transistor receive the external control signal CTR respectively; the drain of the first PMOS transistor is connected to the drain of the third PMOS transistor and the gate of the fourth PMOS transistor, and the connection point serves as a response output terminal VOB; the drain of the second PMOS transistor is connected to the drain of the fourth PMOS transistor and the gate of the third PMOS transistor, and the connection point serves as another response output terminal VO.

[0050] It should be noted that due to process deviations in manufacturing, device parameters are mismatched, and the positive feedback circuit structure accelerates the circuit from bistable to monostable, which ultimately causes the response output terminals VOB and VO to produce low level "0" or high level "1", and the output results are opposite. The enhanced determination module has the advantages of fast response speed and binary 0 / 1 output, which can respond quickly to improve the working rate of the entire system, does not require special processing of the output, and can reduce chip power consumption and cost.

[0051] It is worth noting that the discharge speed of the energy storage module will affect the PUF response. By designing a suitable capacitance value of the energy storage module, the optimal discharge time constant can be obtained, so that the enhanced judgment module can better amplify the difference, quickly and stably generate the PUF response, and achieve better uniformity. For example, the capacitance value of the energy storage module is adjusted, and the differences in the output responses obtained when the same external excitation signal is input multiple times are compared. When the intra-chip Hamming distance is 0%, and the inter-chip Hamming distance, uniformity, and bit offset are 50%, the optimal discharge time constant can be obtained.

[0052] Furthermore, the dynamically configurable leakage module includes multiple groups of leakage units and a leakage master switch, each group of leakage units includes a leakage pipe and a leakage switch, such as Figure 1 N0 and MN0, N1 and MN1...Nn and MNn, the corresponding discharge main switch is T1; Q0 and MQ0, Q1 and MQ1...Qn and MQn, the corresponding discharge main switch is T2; wherein n is the number of discharge units in each discharge module.

[0053] Wherein, the leakage switch includes an NMOS transistor, the source of the NMOS transistor is connected to the drain of the leakage tube, the gate controls the on and off of the leakage switch based on an external excitation signal, and the drain is connected to the input end of the dynamically configurable leakage module; when the external excitation signal is at a high level, the leakage switch is turned on and the source of the leakage tube is grounded; when the external excitation signal is at a low level, the leakage switch is turned off.

[0054] The leakage tube includes an NMOS transistor, the source of the NMOS transistor is grounded, and the gate is connected to the output end of the switching circuit and one end of the leakage main switch;

[0055] The other end of the leakage main switch is grounded; it is turned on when the leakage enable signal PRE is at a high level, so that the dynamically configurable leakage module stops working.

[0056] Specifically, the external excitation signals of the respective leakage switches in each group of dynamically configurable leakage modules remain independent, and the external excitation signals of the leakage switches at corresponding positions in the two groups of dynamically configurable leakage modules are the same.

[0057] It should be noted that the dynamically configurable discharge module uses the excitation signal C <0> ~C <n>Select to open one or more specified discharge units, and there are 2 stimulus response pairs (CRPs) n+1 When the number of stimulus response pairs is large, a strong PUF is formed. For example, the leakage enable signal is 0, T1 and T2 are turned off, and the dynamically configurable leakage module starts to work. <0> Set 1, C <1> ~C <n>When set to 0, the switch tubes MN0 and MQ0 are turned on, MN1~MNn and MQ1~MQn are turned off, and the gate potential of the leakage tubes N0~Nn and Q0~Qn is at a high level. At this time, only the leakage unit where the leakage tubes N0 and Q0 are located participates in the discharge process of the energy storage module.

[0058] The external excitation signal can be <0> ~C <n>Any 1, 2, ..., n+1 of them are selected to control any 2, 4, ..., 2*(n+1) leakage pipes in two symmetrical dynamically configurable leakage modules to open simultaneously; under different working conditions, the deviations of the circuits on the left and right sides are also different, and the responses generated will also be different. For example, when n=64, the lightweight strong PUF circuit shown in this embodiment can generate 2 65 =3.689x10 19 Therefore, the dynamically configurable leakage module is the key to this embodiment, so that the circuit proposed by the present invention has the advantage of strong PUF.

[0059] Preferably, this embodiment also includes two groups of symmetrical power consumption adjustment modules 5, and the power consumption adjustment modules include resistors; wherein one end of the resistor is connected to the output end of the switching circuit, and the other end is connected to the gate of each leakage pipe in the dynamically configurable leakage module and one end of the leakage main switch; illustratively, for one of the power consumption adjustment modules, the resistor is R1, and for the other power consumption adjustment module, the resistor is R2.

[0060] It should be noted that the power consumption regulation module reduces the charging and discharging current and static leakage power consumption of the capacitor in the energy storage module by adopting a resistor or a resistor string current limiting method; and reduces the resource consumption of the circuit by lowering the voltage provided to the dynamically configurable leakage module.

[0061] Furthermore, if Figure 2 As shown, this embodiment also includes an arbitration processing module 6, whose input end is connected to any response output end of the enhancement judgment module, and is used to count the multiple output signals generated by the enhancement judgment module when the same external control signal and external excitation signal are input to the device multiple times to obtain a final output signal.

[0062] Specifically, when the circuit shown in this embodiment works normally, due to the influence of the temperature of the working environment, random noise interference, etc., different responses may be generated under the same external stimulus. In order to improve the stability and reliability of the output response of the circuit, the circuit is input with the same stimulus multiple times and responds multiple times, and the corresponding response during each stimulus is recorded. The arbitration processing module is used to count the number of output responses of "1" and the number of output responses of "0" at a certain bit position. If the number of output responses of "1" at a certain bit position is greater than the number of output responses of "0", the output response of the bit position is recorded as "1"; otherwise, it is recorded as "0", so as to achieve error correction of the output response.

[0063] It is worth noting that the selection of components of the same type in each module is the same.

[0064] Another specific embodiment of the present invention discloses a lightweight strong PUF generation method, which is applicable to the device of the previous embodiment, including:

[0065] S1: pre-charging step; wherein, the external control signal is set to 0, the leakage enable signal is set to 1, and all leakage modules are controlled to be turned off through the external excitation signal, so that the energy storage module is charged, and the two response output terminals of the enhanced determination module both output a high level;

[0066] S2: Discharge to obtain a one-bit output signal; wherein, the external control signal is set to 1, the leakage enable signal is set to 0, and some leakage modules are selected and controlled to be turned on through the external excitation signal, and any response output end of the strengthening determination module obtains a one-bit output signal;

[0067] S3: Repeat the above two steps, and concatenate the obtained output signals in sequence to obtain a PUF response with multiple bits.

[0068] Specifically, during pre-charging, the external control signal is set to 0, the leakage enable signal is set to 1, and the external excitation signal C <0> ~C <n>Set to 0; at this time, the first PMOS transistor P1 and the second PMOS transistor P2 in the enhanced determination module are turned on, and the main leakage switches T1 and T2 in the dynamically configurable leakage module are turned on, so that all leakage modules are turned off, and the capacitors C1 and C2 in the energy storage module are charged, and the output nodes VO and VOB are pulled up to the power supply voltage.

[0069] When a one-bit output signal is obtained by discharge, the external control signal is set to 1, the leakage enable signal is set to 0, and one or more excitation signals are selected to be set to 1 to control the conduction or shutoff of the leakage switches MN0-MNn, MQ0-MQn in the dynamically configurable leakage module, so that one or more leakage tubes symmetrically on the left and right sides of the dynamically configurable leakage module are opened to provide a discharge path for capacitors C1 and C2; during the discharge process, due to the process mismatch, the voltage of VOB and the voltage of VO are different, and the voltage difference between VO and VOB is amplified through the third PMOS transistor P3 and the fourth PMOS transistor P4 of the cross-coupled tube, accelerating the circuit from the bistable state to the monostable state, and quickly pulling VO and VOB up to the power supply voltage or down to the ground voltage, respectively, to complete the discharge comparison process, and generate a one-bit output response. Finally, a one-bit output response is obtained at the output end VO or VOB.

[0070] Repeat the above two steps, and splice the obtained output signals in sequence to obtain a PUF response with multiple bits, thereby achieving the generation of a strong PUF.

[0071] It is worth noting that the current flowing through each leakage tube in the dynamically configurable leakage module can be changed by the power consumption adjustment module; specifically, if the resistance value of the power consumption adjustment module is increased, the voltage division of the power consumption adjustment module increases, the gate voltage of the leakage tube in the dynamically configurable leakage module decreases, and the current flowing through each leakage tube in the dynamically configurable leakage module decreases, so that the power consumption of the entire circuit is reduced, and the discharge time of the capacitor in the energy storage module increases, which is conducive to the enhanced judgment module to better amplify the difference between the output nodes VO and VOB. On the contrary, if the resistance value of the power consumption adjustment module is reduced, the current flowing through the branch increases, the voltage division of the power consumption adjustment module decreases, and the gate voltage of the leakage tube in the dynamically configurable leakage module increases, then the current flowing through the leakage tubes N0 and Q0 of the dynamically configurable leakage module increases, the power consumption of the PUF circuit increases, and the discharge time of the capacitor in the energy storage module decreases, which is not conducive to the enhanced judgment module to amplify the difference between the output nodes VO and VOB.

[0072] In order to obtain a stable and reliable PUF response, the same external excitation signal can be input multiple times, and the output signal can be counted using the arbitration processing module to obtain the final output signal, such as Figure 3 As shown, the specific steps include:

[0073] S41: the initial values ​​of the counting variables x and y are 0, the initial value of the excitation input times cumulative variable c is 0, and the excitation repeated input times n is an odd number; n can be 3, 5, 7, etc. The larger the value of n is, the more resources are needed and the longer the time is consumed, but the more reliable the output signal OUT is, so it can be selected according to the actual situation; for example, n is 7;

[0074] S42: Input the same external excitation signal to the circuit. Each time the external excitation signal is input, the cumulative variable c is incremented by 1, and the output response VO of the circuit is read. Determine whether VO is at a high level "1". If so, the counting variable x responsible for counting the high level "1" is incremented by 1; otherwise, the counting variable y responsible for counting the low level "0" is incremented by 1;

[0075] S43: Determine whether the cumulative variable c of the number of excitation inputs is equal to the number of repeated excitation inputs n. If c is less than n, repeat step S42; otherwise, execute step S44;

[0076] S44: Determine the values ​​of the count variable x and the count variable y. If x>y, the output response of the corresponding bit is "1", and the output signal OUT of the arbitration processing module is "1". Otherwise, the output response of the corresponding bit is "0", and the output signal OUT of the arbitration processing module is "0". Thus, the arbitration processing module outputs a stable and reliable signal OUT to obtain the final output signal.

[0077] Compared with the traditional error correction method, the arbitration processing module proposed in this embodiment inputs the same stimulus to the circuit multiple times, selects the response with a larger number of occurrences, improves the stability and reliability of the output response, and has the advantages of simple working principle and low hardware resource consumption.

[0078] Compared with the prior art, the strong PUF circuit proposed by the present invention provided in this embodiment has the advantages of lightweight, simple circuit structure and easy implementation. Compared with the traditional RO PUF circuit, the circuit structure proposed by the present invention does not require a counter and a comparator, and the output of the circuit is binary "1" or "0", and does not need to be converted into a binary value after special processing. In addition, it also has the advantages of occupying less hardware resources, low cost, saving layout area, and low power consumption, which has great application prospects in resource-limited system applications; the strong PUF circuit structure proposed by the present invention is independent of the power-on speed. Compared with the traditional SRAM PUF circuit, the work of the PUF circuit in the present invention is divided into two processes of pre-charging and discharge comparison after the power supply is stably powered on. When the control signal is set to 1, an excitation response pair is generated. The power-on speed has no effect on the generation of the PUF code, and has strong robustness and security; the strong PUF circuit proposed by the present invention has a fast response speed. Compared with the ROPUF circuit, there is no need to wait for the two ring oscillators to pull a certain frequency difference before a one-bit PUF code can be output. The present invention proposes that after the external excitation signal is input, the PUF circuit amplifies the difference between the output node VO voltage and the VOB voltage through the cross-coupling tubes P3 and P4, and quickly pulls them up to the power supply voltage or down to the ground voltage, completing the discharge comparison process, and then a one-bit PUF code can be generated; the present invention uses an arbitration processing module to correct the output response of the circuit. Compared with the traditional error correction method, the arbitration processing module proposed by the present invention selects the response with more occurrences by inputting the same excitation to the circuit multiple times, so that the circuit has the characteristics of high stability and high reliability, and has the advantages of simple working principle and low hardware resource consumption.

[0079] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0080] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.< / n> < / n> < / n> < / n>

Claims

1. A lightweight strong PUF generation device, characterized in that: include: Strengthen the judgment module, dynamically configurable discharge module and energy storage module; among them, The enhanced determination module is used to obtain and output a PUF response based on an external control signal and different leakage rates of the energy storage module; The energy storage module is used to charge to the device power supply voltage when the external control signal is set to 0, and to discharge the energy when the external control signal is set to 1; The dynamically configurable leakage module is used to change the leakage speed of the energy storage module based on the external excitation signal, the leakage enable signal and the voltage of the energy storage module, so that the enhanced determination module obtains different PUF responses.

2. The lightweight strong PUF generation device according to claim 2, characterized in that: It also includes a switching circuit; the switching circuit is used to connect the output response of the enhanced determination module to the control end of the leakage pipe in the dynamically configurable leakage module when the external control signal is set to 1.

3. The lightweight strong PUF generation device according to claim 2, characterized in that: The PUF response is a signal having multiple bits.

4. The lightweight strong PUF generation device according to claim 3, characterized in that: The dynamically configurable leakage module, the switching circuit and the energy storage module are all two groups with symmetrical structures; the enhanced determination module includes two response output terminals with opposite output results, each of which is connected to an input terminal of a dynamically configurable leakage module and an input terminal of a switching circuit; the output terminal of the switching circuit is connected to the control terminal of the leakage pipe in the dynamically configurable leakage module; an energy storage module includes a capacitor, which is connected in series between a response output terminal of an enhanced determination module and the ground.

5. The lightweight strong PUF generation device according to claim 4, characterized in that: The enhanced determination module includes a first PMOS transistor, a second PMOS transistor, a third PMOS transistor, and a fourth PMOS transistor; wherein, The sources of the first PMOS transistor, the second PMOS transistor, the third PMOS transistor, and the fourth PMOS transistor are connected to a device power supply; the gates of the first PMOS transistor and the second PMOS transistor receive external control signals respectively; the drain of the first PMOS transistor is connected to the drain of the third PMOS transistor and the gate of the fourth PMOS transistor, and the connection point serves as a response output terminal; the drain of the second PMOS transistor is connected to the drain of the fourth PMOS transistor and the gate of the third PMOS transistor, and the connection point serves as another response output terminal.

6. The lightweight strong PUF generation device according to claim 5, characterized in that: The dynamically configurable leakage module includes multiple groups of leakage units and a leakage master switch, each group of leakage units includes a leakage pipe and a leakage switch; wherein, The leakage switch comprises an NMOS transistor, the source of the NMOS transistor is connected to the drain of the leakage tube, the gate controls the on and off of the leakage switch based on an external excitation signal, and the drain is connected to the input end of the dynamically configurable leakage module; The leakage tube includes an NMOS transistor, the source of the NMOS transistor is grounded, and the gate is connected to the output end of the switching circuit and one end of the leakage main switch; The other end of the leakage main switch is grounded; it is turned on when the leakage enable signal is at a high level, so that the dynamically configurable leakage module stops working.

7. The lightweight strong PUF generation device according to claim 1, characterized in that: It also includes an arbitration processing module, whose input end is connected to any response output end of the enhancement judgment module, and is used to count the multiple output signals generated by the enhancement judgment module when the same external control signal and external excitation signal are input to the device multiple times to obtain the final output signal.

8. The lightweight strong PUF generation device according to any one of claims 1 to 7, characterized in that: The selection of components of the same type in each module is the same.

9. A method for generating a lightweight strong PUF implemented by the device according to any one of claims 1 to 8, characterized in that: include: Pre-charging step; wherein, the external control signal is set to 0, the leakage enable signal is set to 1, and all leakage modules are controlled to be turned off through the external excitation signal, so that the energy storage module is charged, and the two response output terminals of the enhanced determination module both output a high level; Discharging to obtain a one-bit output signal; wherein, the external control signal is set to 1, the discharge enable signal is set to 0, and part of the discharge modules are selected and controlled to be turned on through the external excitation signal, and any response output end of the strengthening determination module obtains a one-bit output signal; Repeat the above two steps, and concatenate the obtained output signals in sequence to obtain a PUF response with multiple bits.

10. The lightweight strong PUF generation method according to claim 9, characterized in that: The method also includes inputting the same external excitation signal multiple times, and using the arbitration processing module to perform statistics on the output signal to obtain a final output signal.

Images