PUF (Physical Unclonable Function)-based intelligent credible temperature measurement equipment and system

Abstract

The invention discloses an intelligent trusted temperature measurement device and system based on a PUF. The device comprises a PUF chip, an encryption chip, a low-power-consumption Bluetooth microprocessor, a temperature measurement resistor and a storage chip. The system comprises the intelligent credible temperature measurement equipment and a cloud server, the PUF chip and the encryption chip are used for performing public and private key generation and registration through communication between the low-power-consumption Bluetooth microprocessor and a cloud server and performing bidirectional identity authentication based on an asymmetric algorithm; the temperature measuring resistor is used for measuring object temperature; the low-power-consumption Bluetooth microprocessor is used for processing and storing the temperature measurement data and uploading the temperature data to the cloud server after bidirectional identity authentication; by integrating the PUF, the equipment cannot be copied and counterfeited, and human participation is reduced in the process from generation to storage of the data in combination with the block chain technology, so that the whole-process credibility of the data is realized, the non-tampering and non-repudiation characteristics of the block chain data are advanced to the Internet of Things terminal, and the credibility of the data source is ensured from the bottom layer.

Description

Technical Field

[0001] The present invention relates to the technical field of commodity traceability, and more specifically, to an intelligent and trustworthy temperature measuring device and system based on PUF. Background Art

[0002] Currently, in the field of high-value commodity traceability, there is a general market demand for information traceability, identity confirmation, and data trustworthiness. The demand for devices with the above functions is huge, mainly including two-dimensional codes, barcodes, passive electronic tags, and electronic thermometers.

[0003] For two-dimensional codes and barcodes with a large number of applications, in actual use, there are problems such as being easily copied, counterfeited, and data fraud being easily carried out during source data collection.

[0004] For passive electronic tags, corresponding information is stored in the tags, such as access control, NFC anti-counterfeiting tags for liquor, and anti-counterfeiting tags for printer toner cartridges; by storing corresponding information in an electronic thermometer, relevant information during the power-on or startup period can be measured and stored, such as a Bluetooth electronic thermometer and a Bluetooth temperature and humidity meter.

[0005] However, passive electronic tags are easily batch-copied and counterfeited; the data obtained by electronic thermometers is easily subject to data fraud during source data collection, and generally has a low protection level and a short standby time.

[0006] Therefore, how to provide an intelligent and trustworthy temperature measuring device that cannot be copied or counterfeited and has trustworthy source-collected data is an urgent problem to be solved by those skilled in the art. Summary of the Invention

[0007] In view of this, the present invention provides an intelligent and trustworthy temperature measuring device and system based on PUF to solve the technical problems mentioned in the background art.

[0008] To achieve the above object, the present invention adopts the following technical solutions:

[0009] An intelligent and trustworthy temperature measuring device based on PUF includes a PUF chip, an encryption chip, a low-power Bluetooth microprocessor, a temperature measuring resistor, and a storage chip; the PUF chip, the encryption chip, the temperature measuring resistor, and the storage chip are all connected to the low-power Bluetooth microprocessor;

[0010] The PUF chip and the encryption chip are used to generate and register private keys and public keys through the low-power Bluetooth microprocessor, and perform two-way identity authentication based on an asymmetric algorithm;

[0011] The temperature measuring resistor is used to measure the temperature of an object;

[0012] A low-power Bluetooth microprocessor is used to process temperature measurement data into readable temperature data and store it in a storage chip, and to transmit the temperature data after two-way authentication.

[0013] Preferably, the intelligent trusted temperature measurement device based on PUF further includes a power supply chip and a button battery; the button battery powers the trusted temperature measurement device through the power supply chip.

[0014] Preferably, the low-power Bluetooth microprocessor has an embedded program built-in, which is used to control the temperature measurement resistor to collect and store temperature data at regular intervals automatically.

[0015] Preferably, the low-power Bluetooth microprocessor includes an MCU and Bluetooth.

[0016] An intelligent trusted temperature measurement system includes the intelligent trusted temperature measurement device based on PUF as described above, and a cloud server;

[0017] The intelligent trusted temperature measurement device communicates with the cloud server through the PUF chip and the encryption chip via the low-power Bluetooth microprocessor, and is used for generating and registering private keys and public keys, and performing two-way authentication based on the asymmetric algorithm;

[0018] The low-power Bluetooth microprocessor is also used to transfer the temperature data in the storage chip to the cloud server after two-way authentication to complete the collection work.

[0019] Preferably, the intelligent trusted temperature measurement system as described above further includes a communication gateway, and the intelligent trusted temperature measurement device communicates with the cloud server wirelessly through the communication gateway; when the intelligent trusted temperature measurement device approaches the communication gateway, the access device authentication process is automatically triggered according to the demand, and the PUF chip and the encryption chip participate in the authentication process.

[0020] Preferably, the specific content of generating and registering private keys and public keys is as follows:

[0021] The low-power Bluetooth microprocessor sends the unique device ID number to the cloud server;

[0022] The cloud server saves the unique device ID number of the intelligent trusted temperature measurement device, and generates a random number and sends it to the low-power Bluetooth microprocessor;

[0023] The low-power Bluetooth microprocessor receives the random number, superimposes the random number with the unique device ID number and then sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input, and sends it to the PUF chip through the low-power Bluetooth microprocessor to obtain the PUF output, and returns the PUF output to the cloud server through the low-power Bluetooth microprocessor;

[0024] The cloud server saves the PUF output and associates it with the device unique ID number and the corresponding random number, and the registration is completed.

[0025] Preferably, the specific content of the two-way identity authentication based on the asymmetric algorithm is as follows:

[0026] The low-power Bluetooth microprocessor sends the device unique ID number to the server through the communication gateway;

[0027] The cloud server saves the device unique ID number, queries the corresponding stored random number according to the device unique ID number and sends it to the low-power Bluetooth microprocessor;

[0028] The low-power Bluetooth microprocessor receives the random number, adds the random number to the device unique ID number and then sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input. The PUF input is sent to the PUF chip through the low-power Bluetooth microprocessor to obtain the PUF output, and the PUF output is returned to the cloud server through the low-power Bluetooth microprocessor;

[0029] The cloud server compares and authenticates the PUF output with the PUF output corresponding to the device unique ID number saved in the database. If they are consistent, the authentication passes; if they are inconsistent, the authentication ends. The authentication is completed.

[0030] The cloud server is a blockchain node.

[0031] Preferably, the intelligent and trustworthy temperature measurement system further includes a dedicated APP on a mobile phone or a tablet, which is connected to the cloud server; when relevant data needs to be viewed, the dedicated APP on the mobile phone or the tablet is used to access the cloud server for viewing and analysis.

[0032] Through the above technical solutions, compared with the prior art, the present invention discloses an intelligent and trustworthy temperature measurement device and system based on PUF, which integrates the physical unclonable function of PUF, making the device unable to be replicated and counterfeited, and the data collected at the source is trustworthy; combined with blockchain technology, human participation is reduced in the process from data generation to storage, so as to realize the trustworthiness of the whole process of data, and the characteristics of non-tamperability and non-repudiation of blockchain data are moved forward to the Internet of Things terminal, ensuring the trustworthiness of the data source from the bottom layer and preventing data fraud. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only the embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained according to the provided drawings without creative efforts.

[0034] Figure 1 Schematic diagram of the structure of an intelligent and trustworthy temperature measurement device based on PUF provided by the present invention;

[0035] Figure 2 Schematic diagram of the external shape of an intelligent and trustworthy temperature measurement device based on PUF provided by the present invention;

[0036] Figure 3 Schematic diagram of an intelligent and trustworthy temperature measurement system based on PUF provided by the present invention;

[0037] Figure 4 Schematic diagram of the registration method of the intelligent and trustworthy temperature measurement device provided by the present invention;

[0038] Figure 5 Schematic diagram of the authentication method of the intelligent and trustworthy temperature measurement device provided by the present invention. Detailed implementation manners

[0039] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0040] An embodiment of the present invention discloses an intelligent and trustworthy temperature measurement device based on PUF, such as Figure 1 and Figure 2 , including a PUF chip, an encryption chip, a low-power Bluetooth microprocessor, a temperature measurement resistor, and a storage chip; the PUF chip, the encryption chip, the temperature measurement resistor, and the storage chip are all connected to the low-power Bluetooth microprocessor;

[0041] The PUF chip and the encryption chip are used to generate and register private keys and public keys through the low-power Bluetooth microprocessor, and perform two-way identity authentication based on the asymmetric algorithm;

[0042] The temperature measurement resistor is used to measure the temperature of an object;

[0043] The low-power Bluetooth microprocessor is used to process the temperature measurement data into readable temperature data and store it in the storage chip, and transmit the temperature data after passing the two-way identity authentication.

[0044] In order to further implement the above technical solution, an intelligent and trustworthy temperature measurement device based on PUF further includes a power supply chip and a button battery; the button battery supplies power to the trustworthy temperature measurement device through the power supply chip.

[0045] In this embodiment, the intelligent trusted temperature measurement device integrates a PUF (physically unclonable) chip for private key and public key generation and registration, ensuring the uniqueness and non-replicability of the private key. Different from the encryption scheme of traditional temperature measurement devices, once a device installed with an encryption chip is compromised, all devices of the same model are at risk of being replicated and counterfeited. The intelligent trusted temperature measurement device integrated with a PUF (physically unclonable) chip performs identity authentication based on PUF, and the secret key does not need to be stored on the device's storage medium, eliminating the problem of secret key leakage caused by attacks on the physical storage medium.

[0046] To further implement the above technical solution, the low-power Bluetooth microprocessor has an embedded program built in, which is used to control the temperature measurement resistor to collect and store temperature data at regular intervals.

[0047] To further implement the above technical solution, the low-power Bluetooth microprocessor includes an MCU and Bluetooth.

[0048] An intelligent trusted temperature measurement system, such as Figure 3 includes an intelligent trusted temperature measurement device based on PUF and a cloud server;

[0049] The intelligent trusted temperature measurement device communicates with the cloud server through the PUF chip and the encryption chip via the low-power Bluetooth microprocessor, and is used for private key and public key generation and registration, as well as two-way identity authentication based on the asymmetric algorithm;

[0050] After two-way identity authentication, the low-power Bluetooth microprocessor is also used to transfer the temperature data in the storage chip to the cloud server to complete the collection work.

[0051] To further implement the above technical solution, an intelligent trusted temperature measurement system further includes a communication gateway. The intelligent trusted temperature measurement device communicates wirelessly with the cloud server through the communication gateway. When the intelligent trusted temperature measurement device approaches the communication gateway, the access device authentication process is automatically triggered according to requirements, and the PUF chip and the encryption chip participate in the authentication process.

[0052] In this embodiment, the intelligent trusted temperature measurement device does not require manual intervention from data collection to cloud storage, and can be independently used in information tracing, identity confirmation, data trusted storage and other links in high-value commodity traceability and other fields.

[0053] To further implement the above technical solution, such as Figure 4 the specific content of private key and public key generation and registration is:

[0054] The low-power Bluetooth microprocessor sends the unique ID number of the device to the cloud server;

[0055] The cloud server stores the unique device ID number of the intelligent and trustworthy temperature measurement device, generates a random number correspondingly, and sends it to the low-power Bluetooth microprocessor;

[0056] The low-power Bluetooth microprocessor receives the random number, superimposes the random number with the unique device ID number, and sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input, sends it to the PUF chip through the low-power Bluetooth microprocessor to obtain the PUF output, and returns the PUF output to the cloud server through the low-power Bluetooth microprocessor.

[0057] In this embodiment, when the input challenge signal C is input, the PUF will output the response signal R, forming a CRP pair. The same CRP pair can only be reproduced on the same chip and cannot be cloned to other chips.

[0058] To further implement the above technical solution, as Figure 5 The specific content of the two-way identity authentication based on the asymmetric algorithm is:

[0059] The low-power Bluetooth microprocessor sends the unique device ID number to the server through the communication gateway;

[0060] The cloud server stores the unique device ID number, queries the corresponding stored random number according to the unique device ID number, and sends it to the low-power Bluetooth microprocessor;

[0061] The low-power Bluetooth microprocessor receives the random number, superimposes the random number with the unique device ID number, and sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input, sends the PUF input to the PUF chip through the low-power Bluetooth microprocessor to obtain the PUF output, and returns the PUF output to the cloud server through the low-power Bluetooth microprocessor;

[0062] The cloud server compares and authenticates the PUF output with the PUF output corresponding to the unique device ID number stored in the database. If they are consistent, the authentication passes; if they are inconsistent, the authentication ends and the authentication is completed.

[0063] The cloud server is a blockchain node.

[0064] To further implement the above technical solution, an intelligent and trustworthy temperature measurement system further includes a dedicated APP on a mobile phone or a tablet, which is connected to the cloud server; when relevant data needs to be viewed, the dedicated APP on the mobile phone or the tablet is used to access the cloud server for viewing and analysis.

[0065] The present invention discloses an intelligent and trustworthy temperature measurement device and system based on PUF, which has the following advantages: 1) Integrating the physical unclonable function of PUF, the device cannot be replicated or counterfeited, and the characteristics of data immutability and non-repudiation in the blockchain are shifted forward to the IoT terminal; 2) It has industry specificity compared with traditional temperature measurement devices; 3) The secret key does not need to be stored on the device storage medium, eliminating the problem of secret key leakage caused by attacks on the physical storage medium; 4) The secret key of each device is dynamically generated as the PUF output after the random number is combined with the unique ID number of the device and then undergoes cryptographic transformation as the PUF input, eliminating the problem of analog signal attacks; 5) The authentication secret key on the server side is also generated by the PUF on the device, ensuring that only specific devices can pass the authentication.

[0066] The various embodiments in this specification are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. For the same or similar parts among the various embodiments, reference can be made to each other. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple. For the relevant parts, reference can be made to the description in the method section.

[0067] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be obvious to those skilled in the art. The general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A PUF-based intelligent and trusted temperature measurement device, characterized in that: It includes a PUF chip, an encryption chip, a low-power Bluetooth microprocessor, a temperature measuring resistor and a storage chip; the PUF chip, the encryption chip, the temperature measuring resistor and the storage chip are all connected to the low-power Bluetooth microprocessor; PUF chip and encryption chip for private and public key generation and registration via low-power Bluetooth microprocessor, as well as two-way identity authentication based on asymmetric algorithms; Thermometer resistor, used to measure the temperature of objects; The low-power Bluetooth microprocessor is used to process the temperature measurement data into readable temperature data and store it in a storage chip, and transmit the temperature data after passing the two-way identity authentication.

2. The PUF-based intelligent and trusted temperature measurement device according to claim 1, characterized in that: It also includes a power chip and a button battery; the button battery supplies power to the trusted temperature measurement device through the power chip.

3. The PUF-based intelligent and trusted temperature measurement device according to claim 1, characterized in that: The low-power Bluetooth microprocessor has a built-in embedded program to control the temperature measuring resistor to automatically collect and store temperature data at certain intervals.

4. The PUF-based intelligent and trusted temperature measurement device according to claim 1, characterized in that: The low-power Bluetooth microprocessor includes MCU and Bluetooth.

5. An intelligent and reliable temperature measurement system, characterized in that: A PUF-based intelligent and trusted temperature measurement device comprising any one of claims 1 to 4, and a cloud server; The intelligent and trusted temperature measurement device communicates with the cloud server through the PUF chip and encryption chip via the low-power Bluetooth microprocessor to generate and register private and public keys, as well as perform two-way identity authentication based on an asymmetric algorithm; The low-power Bluetooth microprocessor is also used to mobilize the temperature data in the storage chip and upload it to the cloud server after two-way identity authentication to complete the collection work.

6. The intelligent and reliable temperature measurement system according to claim 5, characterized in that: It also includes a communication gateway, through which the intelligent and trusted temperature measurement device communicates wirelessly with the cloud server; when the intelligent and trusted temperature measurement device approaches the communication gateway, the access device authentication process is automatically triggered according to demand, and the PUF chip and encryption chip participate in the authentication process.

7. The intelligent and reliable temperature measurement system according to claim 5, characterized in that: The specific contents of private key and public key generation and registration are as follows: The low-power Bluetooth microprocessor sends the device’s unique ID number to the cloud server; The cloud server saves the unique device ID number of the intelligent trusted temperature measurement device, generates a random number accordingly and sends it to the low-power Bluetooth microprocessor; The low-power Bluetooth microprocessor receives the random number, superimposes the random number with the unique ID number of the device, and sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input, which is sent to the PUF chip via the low-power Bluetooth microprocessor to obtain the PUF output. The PUF output is returned to the cloud server via the low-power Bluetooth microprocessor. The cloud server saves the PUF output and associates it with the device's unique ID number and the corresponding random number, and the registration is complete.

8. The intelligent and reliable temperature measurement system according to claim 7, characterized in that: The specific contents of two-way identity authentication based on asymmetric algorithm are as follows: The low-power Bluetooth microprocessor sends the device's unique ID number to the server through the communication gateway; The cloud server saves the unique ID number of the device, queries the corresponding stored random number according to the unique ID number of the device, and sends it to the low-power Bluetooth microprocessor; The low-power Bluetooth microprocessor receives the random number, superimposes the random number with the unique ID number of the device, and sends it to the encryption chip. The encryption chip performs cryptographic transformation to obtain a hash value as the PUF input. The PUF input is sent to the PUF chip via the low-power Bluetooth microprocessor to obtain the PUF output, and the PUF output is returned to the cloud server via the low-power Bluetooth microprocessor. The cloud server compares the PUF output with the PUF output of the corresponding device's unique ID number stored in the database for authentication. If they are consistent, the authentication is passed. If they are inconsistent, the authentication is terminated and the authentication is completed.

9. The intelligent and reliable temperature measurement system according to claim 5, characterized in that: The cloud server is the blockchain node.

10. The intelligent and reliable temperature measurement system according to claim 5, characterized in that: It also includes a dedicated APP on a mobile phone or tablet, which is connected to the cloud server; when you need to view relevant data, use the dedicated APP on the mobile phone or tablet to access the cloud server for viewing and analysis.

Images