205 results about "Physical unclonable function" patented technology

The invention discloses a scanning point imaging encryption transmission method based on a GaN heterojunction device, and belongs to the technical field of semiconductor photoelectronics. According to the method, the same device is switched between a high-speed'detection mode 'and a'synaptic mode' with a memory effect, encryption is realized by utilizing response difference of the device in two working modes, and an encryption key of the device is an analog and time-varying bias protocol instead of a simple digital sequence. The characteristics of the physical unclonable function endow the physical unclonable function with extremely high encryption strength, so that the physical unclonable function is difficult to crack by a conventional algorithm and has higher security.

The invention discloses an unmanned aerial vehicle group mutual authentication and key agreement method based on PUF, and relates to the technical field of unmanned aerial vehicle group communication security and network authentication, and the method comprises the steps: S1, obtaining change data through monitoring unmanned aerial vehicle node position coordinate tracking and connection signal intensity in real time, the method comprises the following steps: S1, carrying out state change detection on a node moving speed by adopting position deviation calculation and connection interruption records to obtain a position coordinate tracking sequence after data synchronization update, S2, carrying out data point clustering on the position coordinate tracking sequence by adopting a K-Means clustering algorithm, processing the connection interruption record groups through central point iteration and distance measurement calculation to obtain change vector groups under group number setting; the PUF-based unmanned aerial vehicle group mutual authentication and key agreement method not only effectively solves the problems of slow response, easy communication interruption, unstable key agreement and the like of a traditional unmanned aerial vehicle group authentication mechanism, but also realizes comprehensive improvement in the aspects of safety, robustness and intelligence.

There is described an optical fiber comprising a core with non-fungible noise elements along a length thereof, wherein the non-fungible noise elements generate in use a Physical Unclonable Function (PUF). There is further described an object including the present optical fiber and uses of the present optical fiber in applications such as authentication, encryption and zero trust security. There is also described an apparatus for introducing non-fungible noise elements along a core of a bundled optical fiber, a method for extracting a digital signature of a Physical Unclonable Function (PUF) generated by introduced non-fungible noise elements in the present optical fiber and a network integrating the present optical fiber.

The invention discloses a collaborative authentication method of a safety U disk, which comprises the following steps of: when the safety U disk is inserted into a host for the first time, executing a set read-write sequence on a flash memory storage array of the safety U disk, and acquiring a PUF (Physical Unclonable Function) site of the safety U disk; reading a power-on initial state image of an SRAM (Static Random Access Memory) of an internal controller of the safe USB flash disk when the safe USB flash disk is powered on, and carrying out Hash abstract processing to generate a controller fingerprint abstract of the safe USB flash disk; when the security USB flash disk is authenticated, the host randomly generates a random number, maps the random number into a PUF bit address index and generates a PUF response of the security USB flash disk; combining the controller fingerprint abstract and the PUF response of the secure USB flash disk to obtain a session key; and realizing cooperative authentication of the secure USB flash disk according to the session key. The invention also discloses a system for realizing the collaborative authentication method of the safety USB flash disk. According to the invention, cooperative authentication of the safe USB flash disk is realized, and the reliability is higher and the safety is better.

The invention relates to the technical field of electric digital data processing, and discloses a solid state disk controller circuit and a solid state disk. The controller circuit comprises a physical unclonable function unit based on an SRAM (Static Random Access Memory), which is used for dynamically generating a stable hardware trust root key during power-on; the secure boot and firmware decryption engine is used for deriving a firmware decryption authentication key and a data key packaging key by using the key, and carrying out decryption and integrity verification on the encrypted firmware; the runtime firmware execution monitoring unit is used for detecting illegal jump in real time and triggering safe shutdown through a hardware-level control flow diagram; and the dynamic data encryption key management unit recovers the plaintext data key and sends the plaintext data key to the encryption engine only during operation, and power failure disappears. By means of the scheme, end-to-end security protection of firmware and data is achieved, and the risks of static key leakage and firmware tampering are eradicated.

The invention discloses a centralized control type virtual terminal detection method, device and equipment based on fusion perception, and aims to solve the problems that an existing virtual terminal detection technology depends on a software level, is easy to counterfeit and is low in precision. The method comprises the following steps: a server issues an instruction to a terminal device to trigger a CPU and a vibration motor to work; the equipment synchronously captures a multi-mode physical signal generated by hardware through a built-in magnetic sensor, a vibration sensor and the like; extracting physical unclonable function characteristics capable of uniquely representing the identity of the equipment through modes such as spectral analysis; and inputting the fused features into a pre-trained deep learning model for discrimination. The model innovatively adopts a teacher-student framework to carry out lightweight training, and robustness is enhanced based on a twin neural network architecture. According to the method, the physical terminal and the virtual terminal can be effectively and accurately distinguished by utilizing physical characteristics of a hardware level, and the safety and the reliability of detection are remarkably improved.

The invention discloses a network security monitoring method and system based on the Internet of Things, and relates to the technical field of Internet of Things security. Through dynamic challenge-response physical unclonable authentication, physical parameters and a real-time state are fused to generate a dynamic challenge value, and a physical unclonable function circuit is combined to generate a response value to realize identity verification; adaptive noise lattice-based homomorphic encryption is adopted, a ciphertext is generated based on a high-dimensional lattice-based password, and noise parameters are adjusted through channel quality to guarantee transmission security; multi-modal confrontation federated learning anomaly detection is utilized, flow, energy consumption and physical state characteristics are fused, and parameters are aggregated through a confrontation auto-encoder training model and based on federated learning; through dynamic threshold key negotiation, in combination with identity-based encryption and a block chain smart contract, distributed generation and dynamic adjustment of a key are realized; on the basis of a Merkle-salt value dynamic hash chain and block chain evidence storage, a log is generated in a trusted execution environment, a hash chain is constructed, and chain tail hash is synchronized to block chain evidence storage.

A semiconductor device includes a first transistor cell. The first transistor cell generates a first current signal and a second current signal indicating a bit of a physical unclonable function. The first transistor cell includes a first transistor, a second transistor and a third transistor. The first transistor outputs the first current signal. The second transistor generates the first current signal from a first source / drain structure of the second transistor, and generates the second current signal from a second source / drain structure of the second transistor. The third transistor outputs the second current signal. The first transistor, the second transistor and the third transistor are stacked in order along a first direction. The first source / drain structure of the second transistor and the second source / drain structure of the second transistor are arranged along a second direction different from the first direction.

A memory device includes an anti-fuse memory cell that randomly presents either a first logic state or a second logic state. The memory cell is formed on a frontside of a substrate and at least includes a first programming transistor that is formed in a first one of a plurality of metallization layers disposed over the frontside and gated by a first programming word line, and a first reading transistor that is formed in a second one of the plurality of metallization layers disposed over the frontside or along a major surface on the frontside, coupled to the first programming transistor and a first bit line in series, and gated by a first reading word line.

The embodiment of the invention provides a physical unclonable function generator and a true random number generator. The physical unclonable function generator comprises a storage array and a control unit, a storage unit in the storage array comprises a magnetic storage device, and the magnetic storage device comprises a magnetic tunnel junction; the control unit is used for controlling the application of a magnetic field along a target direction to the storage array, and reading the resistance state of the storage unit to generate a physical unclonable function after the application of the magnetic field is stopped; wherein the target direction is perpendicular to or approximately perpendicular to the magnetic moment direction of the free layer in the magnetic tunnel junction in the in-plane direction, and the randomness and uniformity of the physical unclonable function are improved.

The invention relates to the technical field of mobile communication, and particularly provides a semantic communication security enhancement system based on SIM card quantum key presetting, comprising an SIM card security base module configured to generate physical unclonable function characteristics and preset quantum security keys by using SIM card hardware characteristics; the lightweight authentication protocol module is in communication connection with the SIM card security base module and is configured to realize dynamic identity authentication based on physical unclonable function characteristics and a quantum security key; the semantic security enhancement module is configured to perform privacy protection processing on the semantic communication data; the trusted execution environment optimization module is in communication connection with the SIM card safety base module and the lightweight authentication protocol module and is configured to construct a hardware-software collaborative trusted execution environment; the quantum security enhancement module is integrated on the SIM card security base module and is configured to provide quantum attack resistance and dynamic key management; according to the invention, the real-time performance and anti-quantum computing capability of key distribution are significantly improved.

Physically unclonable function (PUF) enabling secure communications with a PUF enrolled device includes directing a PUF unit to acquire a PUF response to a on optical stimulus upon a physical random medium of the PUF unit for the enrollment, identification and secure communication with a device. The method additionally includes retrieving the PUF response from the PUF unit and generating a secure hash identifier (SHI) from the PUF response, from which a digital certificate may be created with the SHI. Finally, the method includes storing the SHI, digital certificate and PUF response in a record of a registry in connection with the device for use in a subsequent authentication of the device by a communicating client in order to establish a secure tunnel between the communicating client and the device.

Low-resource overhead computer-implemented methods for enrolling, authenticating and establishing encryption keys for one or more queried devices, each of the queried devices including an electrical circuit configured to output electrical signals indica-five of a physically unclonable function (PUF) of the queried device. Authentication and encryption are implemented in low-resource queried device computational architectures, with embodiments of the present invention utilizing pseudo-random number generators configured based on unique primitive polynomials, masking and unmasking functions, and error correction protocols executed in a querying device.

Systems and methods are disclosed herein for protecting data in a storage device by encrypting or decrypting the data with a Data Encryption Key (DEK). The storage device is communicatively coupled to a host and is locked with the host by secret sharing. In one example, the storage device comprises a Physically Unclonable Function (PUF) configured to, during a key generation phase of operation, generate a set of DEK responses based on a set of DEK challenges (chalDEK) and an assembler configured to obtain a set of SED DEK secret shares (SSSED) based on the first set of DEK responses, receive additional data, and assemble at least the set of SED DEK secret shares (SSSED) and the additional data to create a DEK master secret. The storage device also comprises a crypto module configured to receive a DEK based on the master secret and perform encryption and / or decryption of data using the DEK.

The invention relates to the technical field of smart home devices, in particular to a smart home device communication method driven by a physical unclonable function, which is used for establishing a secure session between a resource-limited initiating device and a resource-limited receiving device, and comprises the following steps: A, generating a physical unclonable function key; b, anti-quantum key negotiation; c, combining identity authentication and signature; d, establishing a secure session key; and E, safely transmitting the instruction. According to the method, the non-persistent key is generated and established through the physical unclonable function key, so that the problems of physical attack and key stealing are solved; anti-quantum key negotiation and lattice ciphertext de-encapsulation provide anti-quantum security, and the problem of future calculation threats is solved; identity authentication and signature are combined to realize single handshake, delay and power consumption are reduced, and the requirements of low power consumption and high efficiency are met; drift calibration is implemented, so that the stability of the key of the physical unclonable function is guaranteed, and the reliability is improved; and the confidentiality and the integrity of the instruction are ensured by the final secure transmission of the instruction.

The invention discloses an identity authentication and secure communication method and device based on a physical unclonable function, and the method comprises the steps: obtaining the multi-dimensional features of a device, the multi-dimensional features of the device comprise a device function, an IP address, a data transmission type and a transmission behavior; generating a challenge code; according to the inquiry code, a digital response is generated through a physical unclonable function module; computing a device key from the digital response; identity authentication processing is carried out according to the device key to obtain an identity authentication result, and the identity authentication result is used for establishing communication connection; after the communication connection is established, predicting available overhead resources at the next moment according to a preset duration; calculating equipment energy consumption under different communication protocols; and performing secure communication according to the available overhead resources at the next moment and the equipment energy consumption under different communication protocols. According to the invention, identity authentication and secure communication are realized, the security is improved, and the resource consumption is reduced. The method can be widely applied to the technical field of communication security of the power internet of things.

The invention relates to quantum key distribution, in particular to a quantum key distribution system and method based on end-to-end loss control and enhanced Alice, and is characterized in that on the basis of traditional Alice, an OTDR (Optical Time Domain Reflectometer) transmitting unit and a transmission measurement transmitting unit are integrated; according to the enhanced Bob, on the basis of a traditional Bob, an OTDR receiving unit and a transmission measurement receiving unit are integrated; the data processing and control unit is used for generating an OTDR reflectogram and a loss tomogram, calculating a total effective leakage value, optimizing signal strength and privacy amplification parameters according to the latest effective leakage value, performing information coordination and privacy amplification, continuously performing channel fingerprint authentication and safely terminating when abnormity occurs under the cooperation of the enhanced Alice and the enhanced Bob; the inherent physical structure of the optical fiber quantum channel serves as a physical unclonable function; according to the invention, the defect of sharp contradiction among the key rate, the transmission distance and the actual security can be overcome.

The application provides a physical unclonable sequence generation method and system based on static memory, relates to the technical field of information security, and comprises the following steps: applying a pulse voltage stress to a storage unit and collecting a transient response signal as a physical fingerprint feature; performing multi-scale decomposition on a feature parameter matrix and dividing the feature parameter matrix into a bimodal distribution to generate a bit sequence; constructing a cyclic trigger chain to generate a disturbance sequence to enhance randomness; and constructing a physical unclonable sequence by using a fractal dimension segmentation algorithm and local entropy value adaptive crossover recombination. The application can effectively improve the randomness, uniqueness and attack resistance of the sequence and enhance the information security protection capability.

The invention provides a lightweight network security protection method for an intelligent control terminal of the Internet of Things, and aims to solve the problem of contradiction between security and real-time performance of resource-constrained equipment. According to the method, three core stages of equipment registration, bidirectional identity authentication and information encryption authentication are covered through layered architecture design. The method comprises the following steps: firstly, binding hardware characteristics and registration information by using physical unclonable functions (PUF) and HMAC to ensure that the identity of equipment is unique and credible; secondly, bidirectional identity authentication among the RTU, the LCS and the CCS is realized based on the PUF, the HMAC and the digital signature, and counterfeiting and replay attacks are prevented; and finally, symmetric encryption and asymmetric encryption are adopted to guarantee confidentiality, integrity and non-repudiation of communication data. According to the scheme, a timestamp and random number mechanism is introduced, the anti-attack ability is enhanced, the resource overhead and communication delay are optimized, the real-time requirement of the industrial Internet of Things is met, and the method is suitable for a distributed Internet of Things system in the fields of electric power, energy and the like and has the advantages of being efficient, safe and extensible.

The invention discloses a low-voltage distribution line information safety acquisition control method adaptive to multi-load characteristics, and aims to solve the problems that key updating depends on a central server, the response delay is high, and dynamic load change is difficult to adapt in the prior art. The method specifically comprises the following steps: triggering transient impedance characteristic acquisition when a load monitoring unit detects that a current change rate exceeds a threshold value in real time; the impedance feature extraction module calculates a specific frequency band phase angle and an amplitude to form a feature vector; the physical unclonable function generator binarizes the physical unclonable function and generates an encryption seed; the key synchronization module encrypts the root key and then broadcasts the encrypted root key to an adjacent node; and the security chip executes atomic operation to complete seamless key switching. By adopting the technical scheme, the generation and synchronization of the localized self-triggering key can be realized, the key updating delay time is shortened, and the safety response capability and the attack resistance of the low-voltage distribution line under the dynamic load are remarkably improved.

There is provided a circuit for a physical unclonable function comprising: first and second outputs; a cell comprising a plurality of CMOS devices; and a plurality of switching devices, the plurality of switching devices operable to connect a gate terminal of each of the plurality of CMOS devices to one of the first and second outputs, wherein a quantity of the plurality CMOS devices is a multiple of two, and wherein the circuit is configured such that each of the first and second output is connected to an equal quantity of the plurality of CMOS devices.

A device for generating at least one cryptographic key by selecting at least three input data selected among, on one hand, a predetermined data and, on the other hand, a function of at least one piece of data having a type belonging to the group including: a physical unclonable type, corresponding to physical unclonable function data, a hardwired type, corresponding to data hardwired within said device, and a software type, corresponding to software data, assembling the at least three input data to produce an assembled input data, and applying the assembled input data into a cryptographic element to produce a cryptographic key.

The application discloses a method for expanding random telegraph noise (RTN) based on a storage neural network, and the signal expansion process is realized based on an artificial neural network of a novel storage unit. According to partial RTN measured signals as a learning set, the expansion process of signal prediction reasoning can realize expansion of the signals with an arbitrary time length, and accelerates extraction of the time parameters of the RTN. The method has important significance for development of a physical unclonable function (PUF) technology based on the RTN and information data security.

Provided is a method for generating a physical unclonable function PUF response by a PUF circuit of an electronic device, said PUF circuit comprising pairs of electronic components called PUF primitives implementing said physical unclonable function, by obtaining a challenge (S1), generating PUF output bits (S2) by applying said physical unclonable function to said obtained challenge, and generating said PUF response (S3) from said generated PUF output bits verifying υ>δυ+|T| or υ<−δυ−|T| with δυ a predetermined threshold. In some embodiments it maximizes a PUF response entropy based only on the analog differential values generated by the comparators of the electronic device. Other embodiments disclosed.

A device with boot code, first mutable code stored in non-volatile memory, a first owner information stored in the non-volatile memory, and an SRAM with an SRAM physically unclonable function (SRAM PUF) region. Boot code may generate a first unique private key based on both the first owner information and a portion of the SRAM PUF region, wherein the first unique private key may not be directly accessible by the first mutable code; generate a first unique private keycode corresponding to the first unique private key; and provide the first mutable code with the first unique private keycode corresponding to the first unique private key. First mutable code may use the first unique private keycode to cause data to be signed with the first unique private key and generate a first unique mutable code private key based on at least a portion of the SRAM PUF region.

The application provides a kind of anti-counterfeiting composite material and its preparation method and application, more particularly to a kind of near infrared circular polarized light, unclonable function anti-counterfeiting composite material and its preparation method and application.The anti-counterfeiting composite material includes chiral polymer film and luminescent particles loaded on the chiral polymer film;The chiral polymer film has a photonic band gap, and the band gap center position matches the luminescent wavelength of the luminescent particles.The application designs the specific composition of the anti-counterfeiting composite material, and obtains the anti-counterfeiting composite material with near infrared circular polarized light physical unclonable function, which has three dimensions of information of near infrared, circular polarized luminescence and luminescence asymmetry factor, encodes the information of the three dimensions to obtain the binary key of the physical unclonable function, and only when the triple key matches can it be confirmed as a genuine product, greatly improving the information security.

A secure microcontroller for a secure data storage device can utilize two-terminal non-volatile memory for enhanced security and component density. The secure microcontroller can operate portions of the two-terminal memory in different modes, such as OTP, rewritable or MTP, physical unclonable function PUF and so forth, and discriminate among data access requests according to data characterizations defined for data parameters stored at the secure storage device. A link table maintained by the secure microcontroller can correlate these characterizations with distinct data parameters. In some embodiments of the present disclosure, the secure microcontroller can also maintain predefined characterizations that are common to many data sets. In these embodiments, the link table can simply correlate many of the data sets to one of the predefined characterizations and significantly reduce the overhead involved in characterizing many distinct data parameters.

A memory device comprises an array of memory cells, a physically unclonable function PUF circuit in the memory device to generate a PUF code, a data path connecting a first circuit to a second circuit in the memory device coupled to the array of memory cells, and logic circuitry to encode data on the data path from the first circuit using the PUF code to produce encoded data, and to provide the encoded data to the second circuit.

A method and a device for secure memory transfer are described wherein the method comprises creating a shared memory location in a data storage associated with a first controllable physical unclonable function (CPUF) device, the first CPUF device being part of a network of CPUF devices, the shared memory location comprising first data encrypted using a memory key; receiving a request from a second CPUF device in the network of CPUF devices for accessing the encrypted first data stored in the shared memory location, the second CPUF device sharing a secret key with the first CPUF device based on one or more challenge response pairs of the CPUF of the first CPUF device; encrypting, by the first CPUF device, the memory key associated with the shared memory location with the shared secret key and transmitting the encrypted shared secret key, the encrypted first data to the second CPUF device for processing at least part of the first data into second data; and, receiving, by the first CPUF device, second data by the second CPUF device, the second data being encrypted by the second CPUF device using the memory key, and replacing at least part of the first encrypted data in the shared memory location with the second encrypted data.

A security device includes: a physical unclonable function (PUF) cell array including a plurality of PUF cells connected with a first word line; a controller selecting a target PUF cell among the plurality of PUF cells and outputting a control signal based on the target PUF cell; a decoder applying a first voltage to the first word line in response to the control signal; a bit line selection circuit outputting a target current passing through a bit line connected with the target PUF cell and a sum current corresponding to a sum of currents passing through remaining bit lines connected with other PUF cells; and a bit determiner outputting a target bit of the target PUF cell based on the target current and the sum current, and the security device generating a security key based on the target bit for responding to an authentication request.