565 results about "Physical unclonable function" patented technology

The invention discloses a PUF (Physical Unclonable Function) key generation and equipment identity authentication system for a cold chain environment, and particularly relates to the technical field of information security, comprising temperature change data perception, drift modeling, dynamic error correction and closed-loop optimization, and collecting original response data of PUF hardware and temperature sensor readings by simulating the cold chain environment in a temperature-controllable experiment module; learning a nonlinear mapping relation between the dynamic temperature change and PUF response drift, and outputting a drift compensation matrix; constructing a two-stage error correction mechanism based on the drift compensation matrix; the first-stage error correction unit carries out nonlinear calibration on the original PUF response sequence according to the drift compensation matrix; the second-stage error correction unit adopts a temperature sensing type reconfigurable LDPC coding architecture, an LDPC check matrix is obtained based on a temperature-drift joint constraint model, the error correction performance of a high-drift scene is optimized through the LDPC check matrix, and the problem of key instability caused by PUF hardware response drift in a cold chain environment is solved.

The invention discloses a lightweight dynamic security authentication method and system based on PUF (Physical Unclonable Function), and the method comprises the steps: S1, a server side collects to-be-registered information, generates a random challenge and auxiliary information, receives a response corresponding to the challenge generated by an IOT (Internet of Things) device side through a PUF structure, and sends the response to the server side; storing the pseudonym and the private key of the registered user and the CRP pair of the user equipment; s2, when the server side receives the authentication request, the server side initializes the authentication request, generates a challenge of the next round of authentication by using the challenge of the current authentication in the initialization process, and sends the challenge of the next round of authentication to the Internet of Things equipment side; the server side verifies the identity of the device after receiving the data packet sent by the Internet of Things device side; and S3, updating a next round of pseudonym at the server side, generating a next round of challenge and CRP pair by the server side, and sending the challenge and CRP pair to the Internet of Things equipment side. The method has the advantages of being simple in implementation method, small in resource overhead, high in flexibility, capable of dealing with various security threats and the like.

The present disclosure describes apparatuses and methods for implementing secure verification of a physical unclonable function (PUF). In various aspects, a PUF verifier generates a PUF reagent value by obtaining a key from a PUF and a message value useful for PUF verification. The PUF verifier computes a digest value of the PUF key and the message value and selects a portion of the hash digest as a PUF reagent value. The PUF verifier writes the PUF reagent value to a non-volatile memory to enable subsequent verification of the PUF. The PUF verifier may also generate error-correction code information for the PUF reagent value and write this information to the non-volatile memory to enable error correction. Upon device hardware reset, the PUF verifier can securely verify PUF operation by generating a PUF key hash digest and comparing the hash digest with the PUF reagent value without exposing the PUF key.

The invention provides an IKE (Internet Key Exchange) protocol security enhancement method based on PUF (Physical Unclonable Function) dynamic authentication and a post-quantum mixed key, which organically combines a PUF, a post-quantum cryptographic algorithm (PQC, especially Kyber KEM) and an improved Internet Key Exchange Protocol (IKE) to realize key exchange of post-quantum security and enhanced identity authentication. The method comprises the following steps: generating a dynamic pre-shared key (PSK) by utilizing the PUF; the method comprises the following steps: integrating a Kyber KEM to an IKE protocol, and replacing traditional Diffie-Hellman key exchange; the PUF-driven dynamic PSK is used as an identity authentication method of the IKE; meanwhile, Kyber KEM and ECDH are adopted for key exchange, and a final session key is generated through joint participation of a Kyber negotiation key, an ECDH negotiation key and PSK derived by PUF; and an IKE protocol process is optimized, and Kyber key exchange and PUF (Physical Unclonable Function) authentication are completed in an IKESAINIT stage and an IKEINTERMEDIATE stage. According to the method, key exchange is post-quantum secure, identity authentication is also post-quantum secure, and the final key integrates three key components of Kyber, ECDH and PUF, so that triple security assurance is provided.

The invention provides a lightweight encryption authentication method for a wireless sensor network, which comprises the following steps: a gateway node generates a sensing instantaneous key and a user instantaneous key respectively based on a one-way hash function and a preset physical unclonable function, the sensing instantaneous key, the user instantaneous key, a preset sensing long-term key and a user long-term key are respectively sent to the user side and the sensor node; after the user side and the sensor node are registered, the user side performs identity verification on identity information currently input by a user, and performs mutual authentication among the user side, the gateway node and the sensor node based on the identity information, so as to send a sensing hash message authentication code and a user hash message authentication code to the sensor node according to an authentication result; according to the method, the sensor node and the gateway node are subjected to key negotiation authentication to obtain the session key, so that wireless sensor network communication can be carried out based on the session key, and the security authentication problem of the wireless sensor network is effectively solved.

The invention discloses a PUF (Physical Unclonable Function) generation device and a PUF generation method based on a magnetoresistor or a magnetosensitive current sensor. The signal acquisition and processing module acquires a voltage output signal of each magneto-sensitive current sensor and calculates a voltage effective value and a zero offset value; the signal acquisition and processing module uses the calculated effective value output by each magneto-sensitive current sensor to obtain the current value of the conductor to be measured; and the PUF processing module correspondingly generates a digital code of 1 or 0 according to the zero offset value of each magneto-dependent current sensor, and takes the obtained n 1 or 0 digital code sequences as a generated physical unclonable function PUF for digital identity authentication. According to the method, the PUF sequence is generated by adopting the own characteristics of the TMR, the characteristics of good confidentiality, simple scheme, high practicability and the like are achieved by utilizing the randomness of the process, an additional PUF chip does not need to be added, and the additional cost is not increased. With the increase of the TMR number, the higher the measurement accuracy is, the higher the safety is.

The invention discloses a clock signal control soft PUF (Physical Unclonable Function) based on a coding circuit and an application method thereof, the clock signal control soft PUF comprises the coding circuit, a clock signal generator and a register module, the coding circuit can access externally input image information data, and the image information data is simultaneously used as an input excitation signal of the clock signal control soft PUF; the clock signal generator is used for generating three groups of clock signals of which the frequencies are sequentially increased, the clock cycles of the three groups of clock signals are all smaller than the critical path of the coding circuit, and each group of clock signals is an overclocking clock signal which can enable the coding circuit to be in an abnormal working state; if the external input image information data is accessed, the internal data transmission is abnormal, and at the moment, the coding circuit generates an output signal irrelevant to the input image information data and outputs the output signal to the register module for storage; the method has the advantages of being high in safety and low in resource consumption.

The invention discloses an X86 industrial control mainboard identity authentication system based on multi-mode fusion, which relates to the technical field of mainboard identity authentication, and comprises the following steps: acquiring a secret key, generating a dynamic hardware fingerprint by combining cache topology and instruction delay, collecting physical unclonable function characteristics of power supply noise and clock jitter, and generating a circuit fingerprint; generating a firmware execution track, recording dynamic behaviors of a call chain and interrupt processing delay, and constructing a firmware runtime feature library; collecting spatio-temporal characteristics, generating environment fingerprints in combination with a geo-fencing technology, capturing time sequence characteristics, and generating a network behavior portrait in combination with a device topological relation; timestamp synchronization is carried out; simulating a fingerprint data tampering attack; and carrying out weighted fusion on the static features and the dynamic features. The hardware feature acquisition module, the firmware behavior acquisition module and the environment feature acquisition module are arranged, and physical unclonability of circuit fingerprints and time sequence features of firmware behaviors are combined, so that attacks are effectively resisted.

The invention discloses a PUF (Physical Unclonable Function) structure based on delay difference quantization, and the structure comprises a PUF circuit which comprises two time delay circuits which are connected in parallel; a plurality of layers of differential tapped circuits TDC, and decoders connected with each layer of differential tapped circuit TDC; the delay data quantization unit is connected with the multi-layer decoder, and the delay data quantization unit is connected with the LFSR confusion structure; the two delay circuits are connected with the multi-layer differential tap circuit TDC through the signal selection structure, the signal selection structure inputs delay signals which respond first and then respond in the two delay circuits into a start end and a stop end of each layer of differential tap circuit TDC, the decoder determines delay time of the two delay circuits under corresponding delay resolution, and the decoder outputs the delay time to the multi-layer differential tap circuit TDC. The delay data quantization unit is used for averaging the delay time under different time delay resolutions to serve as final delay data, and the final response R is output after the final delay data is confused by the LFSR confusion structure. Signals of the two symmetrical delay paths are respectively input into a framework of a multi-layer TDC quantization circuit, so that delay difference digital code quantization is realized.

The invention discloses a lightweight identity authentication and key exchange scheme based on an SRAM (Static Random Access Memory) PUF (Physical Unclonable Function) in an Internet of Vehicles environment. The lightweight identity authentication and key exchange scheme comprises the following steps: (1) a one-time registration stage: a vehicle unit (OBU) transmits static random access memory (SRAM) information and identity (ID) information serving as fingerprints to a roadside unit (RSU) under a safe condition; and (2) an identity authentication stage: the OBU and the RSU verify each other through dynamic identity authentication. And the OBU sends a challenge value, the RSU generates a response value by using the stored SRAM fingerprint, and the OBU verifies the identity of the RSU by confirming the correctness of the response value. Then, the RSU generates a new challenge value, the OBU generates and sends a response value through the SRAM PUF, the RSU verifies and confirms the OBU identity, and therefore bidirectional authentication is completed; and (3) key generation: after identity authentication is completed, the OBU and the RSU generate a secure session key through Hash operation. The secret key is used for subsequent encryption communication, and the integrity and confidentiality of data in the transmission process are ensured. The new key generated by each communication session further enhances the security of the system.

Methods for applying one-way functions for the purposes of cryptography and authentication are disclosed. The methods may be used in cryptographic systems relying on physical unclonable functions or the measurement of biological objects where repeated, sequential applications of one-way functions is required. Under the method, an input bitstream is received. The bitstream may optionally be expanded with a binary nonce and may be optionally transformed into a balanced ternary stream. A polynomial is generated having coefficients that are the values encoded in the stream. The polynomial is raised to a power to generate a second polynomial, and the coefficients of the second polynomial are read as an output stream.

A self-timed readout driver for a leakage-based physical unclonable function (L-PUF) device, a L-PUF array using the same, and applications thereof are provided. The self-timed readout driver includes a precharge transistor, an inverter and a leaky device. The precharge transistor has a control end, a first end and a second end. The inverter is electrically connected to the second end of the precharge transistor. The leaky device having a control end electrically connected to ground, a first end electrically connected to the second end of the precharge transistor, and a second end electrically connected to ground. The control end of the precharge transistor is configured to receive an input signal. The inverter is configured to generate a sense enable (SE) signal. The input signal and the SE signal may be used as two input signals for the L-PUF device.

The invention discloses a lightweight vehicle intranet identity authentication and key negotiation method based on a PUF (Physical Unclonable Function). The method comprises a system initialization stage, a PUF registration stage, an identity authentication and key negotiation stage and a block chain synchronization stage. The method is oriented to an automobile domain architecture, direct low-cost identity authentication is carried out on the electronic control unit by utilizing the PUF (namely a physical unclonable function), the necessity of installing safety hardware on the electronic control unit can be eliminated, and secret key leakage is prevented; meanwhile, symmetric cryptography is adopted, a hash function, a pseudo-random function and a Lagrange interpolation formula are combined to balance the speed and safety of the key negotiation process of the electronic control unit, and compared with an existing vehicle intranet identity authentication and key negotiation method, the method has remarkable performance advantages.

The invention provides a dynamic PUF-NFC (Physical Unclonable Function-Near Field Communication) and multi-modal authentication quantum door lock method which comprises the following steps: generating a piezoelectric driving parameter by utilizing a chaos algorithm, adjusting the dynamic deformation of a nano structure, and generating a PUF key; obtaining multi-modal biological characteristics, performing characteristic extraction on the multi-modal biological characteristics, and performing fusion to obtain a biological characteristic vector; encrypting the PUF key by using a post quantum cryptographic algorithm, and performing key derivation in combination with the biological feature vector to generate a session key; and unlocking the quantum door lock by using the session key to complete the authentication of the quantum door lock. By means of the method, the quantum door lock has high safety under the double threats of quantum calculation and the high simulation technology.

The invention provides a physical unclonable function magnetic device and an application method thereof, the magnetic device comprises a plurality of magnetic storage units arranged in an array and a control circuit, and each magnetic storage unit comprises a spin orbit moment layer and at least one magnetic tunnel junction arranged on the spin orbit moment layer; and the control circuit is used for applying a composite reconstruction signal with oscillation change to the magnetic memory units, and forming a superposed physical field with oscillation change at the magnetic memory units so as to enable the resistance state of the magnetic tunnel junction to generate oscillation change to realize PUF reconstruction of the plurality of magnetic memory units arranged in an array. In order to solve the problems of limited CRP generated by the PUF circuit and low resource utilization rate, the physical field with oscillation change is formed through the composite reconstruction signal, so that the PUF of the magnetic tunnel junction of the SOT-MRAM generates random oscillation change, the PUF of the magnetic device can be reconstructed, the reconstructed magnetic device can generate new CRP, and the resource utilization rate is improved.

A security component (102, 202) for a device (200) is disclosed. The security component comprises a Physically Unclonable Function (PUF) (150) that is operable to accept a plurality of challenges and to generate a corresponding plurality of responses. The security component further comprises control logic (110) configured to generate a challenge for submission to the PUF on the basis of at least one of measurements of components booted on the device or a measurement of a hardware state of the device. The PUF comprises a plurality of sub functions (152), and the challenge determines how the sub functions are used by the PUF to generate a PUF response. Also disclosed is a method (300) for operating a security component.

A device encrypted authentication method based on a strong physical unclonable function is disclosed, including: generating β matrixes formed by random transformation of a ┌√{square root over (b)}┐-order unit matrix, such that unnecessary device expenditure is reduced; when a sensing device is identified, information to be synchronized between the sensing device and a back-end server is transmitted in the registration phase, such that an attacker cannot obtain confidential information in the encryption phase, and the attacker cannot traverse or completely crack all these possible combinations in a short time; even if the attacker intercepts some CRPs, it is scarcely possible that data sent by the sensing device matches the CRPs collected by the attacker, and with the increase of the number b of bits of challenges and the quick convergence to 0, the accuracy of random guessing is only 50%.

The invention discloses a scanning point imaging encryption transmission method based on a GaN heterojunction device, and belongs to the technical field of semiconductor photoelectronics. According to the method, the same device is switched between a high-speed'detection mode 'and a'synaptic mode' with a memory effect, encryption is realized by utilizing response difference of the device in two working modes, and an encryption key of the device is an analog and time-varying bias protocol instead of a simple digital sequence. The characteristics of the physical unclonable function endow the physical unclonable function with extremely high encryption strength, so that the physical unclonable function is difficult to crack by a conventional algorithm and has higher security.

The invention discloses a cross-regional vehicle authentication method based on a physical unclonable function, which belongs to the field of Internet of Vehicles information security, and comprises the following steps: initializing a trusted management mechanism system; initializing a regional agent mechanism; the cross-regional vehicle CDV selects a local trusted vehicle LTV; carrying out cross-regional vehicle authentication; the agent ATA creates an interaction identity; the LTV generates a temporary key; the CDV obtains the secret key and verifies the secret key; and the LTV verifies the credibility of the CDV. According to the method, the unique identity label is generated by using the PUF, so that the authentication security is ensured, the calculation and communication overhead is reduced, the robustness and diversity of the authentication information are improved, the potential safety hazard in cross-regional authentication can be effectively reduced, and the method has a wide application prospect in the fields of intelligent transportation, automatic driving and the like.

The invention provides an unmanned aerial vehicle lightweight distributed anonymous bidirectional authentication method under the assistance of a block chain, and the method comprises the steps: firstly achieving the authority control through an intelligent contract disposed on the block chain, and guaranteeing that only an authorized entity can access secret information stored on the chain; then, a dynamic pseudonym mechanism is adopted, and the identity label and the session key of the unmanned aerial vehicle are updated in each session; besides, the physical unclonable function is combined with the fuzzy extractor, so that the inherent noise sensitivity problem of response of the physical unclonable function is effectively solved, and meanwhile, the security of the generated session key is kept. According to the invention, the problems of single-point fault and too high calculation / communication cost of a central ground station are solved, and the protocol does not have negative influence on the performance of the unmanned aerial vehicle because the unmanned aerial vehicle is equipment with limited calculation resources.

The invention discloses a signature generation method for a physical unclonable function (PUF) of a multiplexing LBIST structure. The signature generation method comprises an excitation decoding stage, a capture clock period calibration stage, a response generation stage and a signature correction stage. According to the invention, the PUF circuit can be realized on the basis of not changing the original LBIST main body structure of the circuit, so that enough reliability of the PUF can be ensured while low resource overhead is realized.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

A storage device includes: a non-volatile memory for storing a firmware set including a firmware image encrypted using a symmetric key and an encrypted symmetric key generated by encrypting the symmetric key using a public key; and a storage controller for controlling the non-volatile memory, wherein the storage controller includes: a physically unclonable function (PUF) chip having a unique security key; and a one-time programmable (OTP) memory for storing an encrypted secret key generated by encrypting a secret key paired with the public key using the PUF chip, wherein a firmware image is obtained by loading the firmware set, providing the encrypted secret key to the PUF chip, receiving the secret key from the PUF chip, generating the symmetric key by decrypting the encrypted symmetric key using the secret key, and decrypting the encrypted firmware image using the symmetric key.

The invention provides a PUF-based multi-mode challenge response identity authentication method and system, and the method comprises the steps: receiving an authentication instruction, and dynamically determining a dynamic input factor according to a target scene; according to the dynamic input factor and the static factor, using a dynamic weight distribution algorithm to generate a random challenge code fused with scene characteristics; sending the random challenge code to a target device, so that the target device generates a self-adaptive PUF response through a PUF chip, and binding the self-adaptive PUF response with a physical label to generate a composite anti-counterfeiting code; and according to the random challenge code and the composite anti-counterfeiting code, performing identity verification through verification logic. According to the invention, identity authentication based on the PUF in combination with a specific target scene is realized, the method is suitable for multi-scene identity authentication requirements, the calculation overhead is greatly reduced, and the randomness of challenge codes and the scene adaptability are improved.

The invention provides a method and equipment for realizing a firmware trusted platform module on an RISC-V platform, the functions of the trusted platform module are realized without extra hardware extension through cooperation of software and firmware in combination with a PMP mechanism, a PUF and a hardware timer of the RISC-V platform, and the realization mode comprises an isolation execution process, a hardware execution process and a hardware execution process. An fTPM isolation memory area is configured in the starting stage through a PMP mechanism, and access to fTPM codes and data is limited; a static data protection process: generating a device key by using a PUF (Physical Unclonable Function), and carrying out encryption and integrity protection on fTPM persistent data in combination with a Flash locking mechanism; the trusted starting process comprises the steps of adopting a DME mechanism, ensuring and maintaining the integrity of a starting metric chain and supporting a PCR register function; the efficient communication process comprises the steps of dynamically adjusting the PMP permission of a shared memory area through a dynamic permission exchange page mechanism, and realizing zero-copy communication between the fTPM and an operating system or an application program; and the secure clock process comprises the step of constructing an independent trusted clock source based on a hardware timer of the RISC-V platform.

The invention discloses an unmanned aerial vehicle group mutual authentication and key agreement method based on PUF, and relates to the technical field of unmanned aerial vehicle group communication security and network authentication, and the method comprises the steps: S1, obtaining change data through monitoring unmanned aerial vehicle node position coordinate tracking and connection signal intensity in real time, the method comprises the following steps: S1, carrying out state change detection on a node moving speed by adopting position deviation calculation and connection interruption records to obtain a position coordinate tracking sequence after data synchronization update, S2, carrying out data point clustering on the position coordinate tracking sequence by adopting a K-Means clustering algorithm, processing the connection interruption record groups through central point iteration and distance measurement calculation to obtain change vector groups under group number setting; the PUF-based unmanned aerial vehicle group mutual authentication and key agreement method not only effectively solves the problems of slow response, easy communication interruption, unstable key agreement and the like of a traditional unmanned aerial vehicle group authentication mechanism, but also realizes comprehensive improvement in the aspects of safety, robustness and intelligence.

There is described an optical fiber comprising a core with non-fungible noise elements along a length thereof, wherein the non-fungible noise elements generate in use a Physical Unclonable Function (PUF). There is further described an object including the present optical fiber and uses of the present optical fiber in applications such as authentication, encryption and zero trust security. There is also described an apparatus for introducing non-fungible noise elements along a core of a bundled optical fiber, a method for extracting a digital signature of a Physical Unclonable Function (PUF) generated by introduced non-fungible noise elements in the present optical fiber and a network integrating the present optical fiber.

The invention discloses a collaborative authentication method of a safety U disk, which comprises the following steps of: when the safety U disk is inserted into a host for the first time, executing a set read-write sequence on a flash memory storage array of the safety U disk, and acquiring a PUF (Physical Unclonable Function) site of the safety U disk; reading a power-on initial state image of an SRAM (Static Random Access Memory) of an internal controller of the safe USB flash disk when the safe USB flash disk is powered on, and carrying out Hash abstract processing to generate a controller fingerprint abstract of the safe USB flash disk; when the security USB flash disk is authenticated, the host randomly generates a random number, maps the random number into a PUF bit address index and generates a PUF response of the security USB flash disk; combining the controller fingerprint abstract and the PUF response of the secure USB flash disk to obtain a session key; and realizing cooperative authentication of the secure USB flash disk according to the session key. The invention also discloses a system for realizing the collaborative authentication method of the safety USB flash disk. According to the invention, cooperative authentication of the safe USB flash disk is realized, and the reliability is higher and the safety is better.

Systems and methods of generating a security key for an integrated circuit device include generating a plurality of key bits with a physically unclonable function (PUF) generator. Unstable bits of the plurality of key bits are identified, and a security key is generated based on the plurality of key bits, wherein the security key excludes the identified unstable bits.