370 results about "Physical unclonable function" patented technology

The invention discloses a PUF (Physical Unclonable Function) key generation and equipment identity authentication system for a cold chain environment, and particularly relates to the technical field of information security, comprising temperature change data perception, drift modeling, dynamic error correction and closed-loop optimization, and collecting original response data of PUF hardware and temperature sensor readings by simulating the cold chain environment in a temperature-controllable experiment module; learning a nonlinear mapping relation between the dynamic temperature change and PUF response drift, and outputting a drift compensation matrix; constructing a two-stage error correction mechanism based on the drift compensation matrix; the first-stage error correction unit carries out nonlinear calibration on the original PUF response sequence according to the drift compensation matrix; the second-stage error correction unit adopts a temperature sensing type reconfigurable LDPC coding architecture, an LDPC check matrix is obtained based on a temperature-drift joint constraint model, the error correction performance of a high-drift scene is optimized through the LDPC check matrix, and the problem of key instability caused by PUF hardware response drift in a cold chain environment is solved.

The present disclosure describes apparatuses and methods for implementing secure verification of a physical unclonable function (PUF). In various aspects, a PUF verifier generates a PUF reagent value by obtaining a key from a PUF and a message value useful for PUF verification. The PUF verifier computes a digest value of the PUF key and the message value and selects a portion of the hash digest as a PUF reagent value. The PUF verifier writes the PUF reagent value to a non-volatile memory to enable subsequent verification of the PUF. The PUF verifier may also generate error-correction code information for the PUF reagent value and write this information to the non-volatile memory to enable error correction. Upon device hardware reset, the PUF verifier can securely verify PUF operation by generating a PUF key hash digest and comparing the hash digest with the PUF reagent value without exposing the PUF key.

The invention provides an IKE (Internet Key Exchange) protocol security enhancement method based on PUF (Physical Unclonable Function) dynamic authentication and a post-quantum mixed key, which organically combines a PUF, a post-quantum cryptographic algorithm (PQC, especially Kyber KEM) and an improved Internet Key Exchange Protocol (IKE) to realize key exchange of post-quantum security and enhanced identity authentication. The method comprises the following steps: generating a dynamic pre-shared key (PSK) by utilizing the PUF; the method comprises the following steps: integrating a Kyber KEM to an IKE protocol, and replacing traditional Diffie-Hellman key exchange; the PUF-driven dynamic PSK is used as an identity authentication method of the IKE; meanwhile, Kyber KEM and ECDH are adopted for key exchange, and a final session key is generated through joint participation of a Kyber negotiation key, an ECDH negotiation key and PSK derived by PUF; and an IKE protocol process is optimized, and Kyber key exchange and PUF (Physical Unclonable Function) authentication are completed in an IKESAINIT stage and an IKEINTERMEDIATE stage. According to the method, key exchange is post-quantum secure, identity authentication is also post-quantum secure, and the final key integrates three key components of Kyber, ECDH and PUF, so that triple security assurance is provided.

The invention discloses a clock signal control soft PUF (Physical Unclonable Function) based on a coding circuit and an application method thereof, the clock signal control soft PUF comprises the coding circuit, a clock signal generator and a register module, the coding circuit can access externally input image information data, and the image information data is simultaneously used as an input excitation signal of the clock signal control soft PUF; the clock signal generator is used for generating three groups of clock signals of which the frequencies are sequentially increased, the clock cycles of the three groups of clock signals are all smaller than the critical path of the coding circuit, and each group of clock signals is an overclocking clock signal which can enable the coding circuit to be in an abnormal working state; if the external input image information data is accessed, the internal data transmission is abnormal, and at the moment, the coding circuit generates an output signal irrelevant to the input image information data and outputs the output signal to the register module for storage; the method has the advantages of being high in safety and low in resource consumption.

The invention discloses an X86 industrial control mainboard identity authentication system based on multi-mode fusion, which relates to the technical field of mainboard identity authentication, and comprises the following steps: acquiring a secret key, generating a dynamic hardware fingerprint by combining cache topology and instruction delay, collecting physical unclonable function characteristics of power supply noise and clock jitter, and generating a circuit fingerprint; generating a firmware execution track, recording dynamic behaviors of a call chain and interrupt processing delay, and constructing a firmware runtime feature library; collecting spatio-temporal characteristics, generating environment fingerprints in combination with a geo-fencing technology, capturing time sequence characteristics, and generating a network behavior portrait in combination with a device topological relation; timestamp synchronization is carried out; simulating a fingerprint data tampering attack; and carrying out weighted fusion on the static features and the dynamic features. The hardware feature acquisition module, the firmware behavior acquisition module and the environment feature acquisition module are arranged, and physical unclonability of circuit fingerprints and time sequence features of firmware behaviors are combined, so that attacks are effectively resisted.

The invention discloses a PUF (Physical Unclonable Function) structure based on delay difference quantization, and the structure comprises a PUF circuit which comprises two time delay circuits which are connected in parallel; a plurality of layers of differential tapped circuits TDC, and decoders connected with each layer of differential tapped circuit TDC; the delay data quantization unit is connected with the multi-layer decoder, and the delay data quantization unit is connected with the LFSR confusion structure; the two delay circuits are connected with the multi-layer differential tap circuit TDC through the signal selection structure, the signal selection structure inputs delay signals which respond first and then respond in the two delay circuits into a start end and a stop end of each layer of differential tap circuit TDC, the decoder determines delay time of the two delay circuits under corresponding delay resolution, and the decoder outputs the delay time to the multi-layer differential tap circuit TDC. The delay data quantization unit is used for averaging the delay time under different time delay resolutions to serve as final delay data, and the final response R is output after the final delay data is confused by the LFSR confusion structure. Signals of the two symmetrical delay paths are respectively input into a framework of a multi-layer TDC quantization circuit, so that delay difference digital code quantization is realized.

The invention discloses a lightweight vehicle intranet identity authentication and key negotiation method based on a PUF (Physical Unclonable Function). The method comprises a system initialization stage, a PUF registration stage, an identity authentication and key negotiation stage and a block chain synchronization stage. The method is oriented to an automobile domain architecture, direct low-cost identity authentication is carried out on the electronic control unit by utilizing the PUF (namely a physical unclonable function), the necessity of installing safety hardware on the electronic control unit can be eliminated, and secret key leakage is prevented; meanwhile, symmetric cryptography is adopted, a hash function, a pseudo-random function and a Lagrange interpolation formula are combined to balance the speed and safety of the key negotiation process of the electronic control unit, and compared with an existing vehicle intranet identity authentication and key negotiation method, the method has remarkable performance advantages.

The invention provides a dynamic PUF-NFC (Physical Unclonable Function-Near Field Communication) and multi-modal authentication quantum door lock method which comprises the following steps: generating a piezoelectric driving parameter by utilizing a chaos algorithm, adjusting the dynamic deformation of a nano structure, and generating a PUF key; obtaining multi-modal biological characteristics, performing characteristic extraction on the multi-modal biological characteristics, and performing fusion to obtain a biological characteristic vector; encrypting the PUF key by using a post quantum cryptographic algorithm, and performing key derivation in combination with the biological feature vector to generate a session key; and unlocking the quantum door lock by using the session key to complete the authentication of the quantum door lock. By means of the method, the quantum door lock has high safety under the double threats of quantum calculation and the high simulation technology.

The invention provides a physical unclonable function magnetic device and an application method thereof, the magnetic device comprises a plurality of magnetic storage units arranged in an array and a control circuit, and each magnetic storage unit comprises a spin orbit moment layer and at least one magnetic tunnel junction arranged on the spin orbit moment layer; and the control circuit is used for applying a composite reconstruction signal with oscillation change to the magnetic memory units, and forming a superposed physical field with oscillation change at the magnetic memory units so as to enable the resistance state of the magnetic tunnel junction to generate oscillation change to realize PUF reconstruction of the plurality of magnetic memory units arranged in an array. In order to solve the problems of limited CRP generated by the PUF circuit and low resource utilization rate, the physical field with oscillation change is formed through the composite reconstruction signal, so that the PUF of the magnetic tunnel junction of the SOT-MRAM generates random oscillation change, the PUF of the magnetic device can be reconstructed, the reconstructed magnetic device can generate new CRP, and the resource utilization rate is improved.

A security component (102, 202) for a device (200) is disclosed. The security component comprises a Physically Unclonable Function (PUF) (150) that is operable to accept a plurality of challenges and to generate a corresponding plurality of responses. The security component further comprises control logic (110) configured to generate a challenge for submission to the PUF on the basis of at least one of measurements of components booted on the device or a measurement of a hardware state of the device. The PUF comprises a plurality of sub functions (152), and the challenge determines how the sub functions are used by the PUF to generate a PUF response. Also disclosed is a method (300) for operating a security component.

The invention discloses a scanning point imaging encryption transmission method based on a GaN heterojunction device, and belongs to the technical field of semiconductor photoelectronics. According to the method, the same device is switched between a high-speed'detection mode 'and a'synaptic mode' with a memory effect, encryption is realized by utilizing response difference of the device in two working modes, and an encryption key of the device is an analog and time-varying bias protocol instead of a simple digital sequence. The characteristics of the physical unclonable function endow the physical unclonable function with extremely high encryption strength, so that the physical unclonable function is difficult to crack by a conventional algorithm and has higher security.

The invention discloses a cross-regional vehicle authentication method based on a physical unclonable function, which belongs to the field of Internet of Vehicles information security, and comprises the following steps: initializing a trusted management mechanism system; initializing a regional agent mechanism; the cross-regional vehicle CDV selects a local trusted vehicle LTV; carrying out cross-regional vehicle authentication; the agent ATA creates an interaction identity; the LTV generates a temporary key; the CDV obtains the secret key and verifies the secret key; and the LTV verifies the credibility of the CDV. According to the method, the unique identity label is generated by using the PUF, so that the authentication security is ensured, the calculation and communication overhead is reduced, the robustness and diversity of the authentication information are improved, the potential safety hazard in cross-regional authentication can be effectively reduced, and the method has a wide application prospect in the fields of intelligent transportation, automatic driving and the like.

The invention provides an unmanned aerial vehicle lightweight distributed anonymous bidirectional authentication method under the assistance of a block chain, and the method comprises the steps: firstly achieving the authority control through an intelligent contract disposed on the block chain, and guaranteeing that only an authorized entity can access secret information stored on the chain; then, a dynamic pseudonym mechanism is adopted, and the identity label and the session key of the unmanned aerial vehicle are updated in each session; besides, the physical unclonable function is combined with the fuzzy extractor, so that the inherent noise sensitivity problem of response of the physical unclonable function is effectively solved, and meanwhile, the security of the generated session key is kept. According to the invention, the problems of single-point fault and too high calculation / communication cost of a central ground station are solved, and the protocol does not have negative influence on the performance of the unmanned aerial vehicle because the unmanned aerial vehicle is equipment with limited calculation resources.

The invention discloses a signature generation method for a physical unclonable function (PUF) of a multiplexing LBIST structure. The signature generation method comprises an excitation decoding stage, a capture clock period calibration stage, a response generation stage and a signature correction stage. According to the invention, the PUF circuit can be realized on the basis of not changing the original LBIST main body structure of the circuit, so that enough reliability of the PUF can be ensured while low resource overhead is realized.

The invention discloses an encryption circuit, an encryption method and a server, and the encryption circuit generates a dynamic encryption key through introducing a physical unclonable function, carries out the secondary encryption of initial encryption data through the key, can effectively improve the identity authentication and access control safety of a to-be-accessed module in the server, and improves the safety of the to-be-accessed module. Different from a traditional static password or secret key authentication mode, the dynamic encryption secret key generated based on the physical unclonable function is unpredictable, unique and difficult to clone, and the secret key does not need to provide a storage space for storage, so that even if a malicious device forges an identity or steals the secret key, the secret key can be stored in the storage space. Effective authentication information cannot be obtained through brute force cracking or phishing attack; besides, the verification process is further enhanced by a mechanism of comparing secondary encryption with reference encrypted data, and only a legal user can access the system, so that access of untrusted equipment is effectively prevented, and the security of the server and the integrity of the system are protected.

The invention provides a PUF-based multi-mode challenge response identity authentication method and system, and the method comprises the steps: receiving an authentication instruction, and dynamically determining a dynamic input factor according to a target scene; according to the dynamic input factor and the static factor, using a dynamic weight distribution algorithm to generate a random challenge code fused with scene characteristics; sending the random challenge code to a target device, so that the target device generates a self-adaptive PUF response through a PUF chip, and binding the self-adaptive PUF response with a physical label to generate a composite anti-counterfeiting code; and according to the random challenge code and the composite anti-counterfeiting code, performing identity verification through verification logic. According to the invention, identity authentication based on the PUF in combination with a specific target scene is realized, the method is suitable for multi-scene identity authentication requirements, the calculation overhead is greatly reduced, and the randomness of challenge codes and the scene adaptability are improved.

The invention provides a method and equipment for realizing a firmware trusted platform module on an RISC-V platform, the functions of the trusted platform module are realized without extra hardware extension through cooperation of software and firmware in combination with a PMP mechanism, a PUF and a hardware timer of the RISC-V platform, and the realization mode comprises an isolation execution process, a hardware execution process and a hardware execution process. An fTPM isolation memory area is configured in the starting stage through a PMP mechanism, and access to fTPM codes and data is limited; a static data protection process: generating a device key by using a PUF (Physical Unclonable Function), and carrying out encryption and integrity protection on fTPM persistent data in combination with a Flash locking mechanism; the trusted starting process comprises the steps of adopting a DME mechanism, ensuring and maintaining the integrity of a starting metric chain and supporting a PCR register function; the efficient communication process comprises the steps of dynamically adjusting the PMP permission of a shared memory area through a dynamic permission exchange page mechanism, and realizing zero-copy communication between the fTPM and an operating system or an application program; and the secure clock process comprises the step of constructing an independent trusted clock source based on a hardware timer of the RISC-V platform.

The invention discloses an unmanned aerial vehicle group mutual authentication and key agreement method based on PUF, and relates to the technical field of unmanned aerial vehicle group communication security and network authentication, and the method comprises the steps: S1, obtaining change data through monitoring unmanned aerial vehicle node position coordinate tracking and connection signal intensity in real time, the method comprises the following steps: S1, carrying out state change detection on a node moving speed by adopting position deviation calculation and connection interruption records to obtain a position coordinate tracking sequence after data synchronization update, S2, carrying out data point clustering on the position coordinate tracking sequence by adopting a K-Means clustering algorithm, processing the connection interruption record groups through central point iteration and distance measurement calculation to obtain change vector groups under group number setting; the PUF-based unmanned aerial vehicle group mutual authentication and key agreement method not only effectively solves the problems of slow response, easy communication interruption, unstable key agreement and the like of a traditional unmanned aerial vehicle group authentication mechanism, but also realizes comprehensive improvement in the aspects of safety, robustness and intelligence.

There is described an optical fiber comprising a core with non-fungible noise elements along a length thereof, wherein the non-fungible noise elements generate in use a Physical Unclonable Function (PUF). There is further described an object including the present optical fiber and uses of the present optical fiber in applications such as authentication, encryption and zero trust security. There is also described an apparatus for introducing non-fungible noise elements along a core of a bundled optical fiber, a method for extracting a digital signature of a Physical Unclonable Function (PUF) generated by introduced non-fungible noise elements in the present optical fiber and a network integrating the present optical fiber.

The invention discloses a collaborative authentication method of a safety U disk, which comprises the following steps of: when the safety U disk is inserted into a host for the first time, executing a set read-write sequence on a flash memory storage array of the safety U disk, and acquiring a PUF (Physical Unclonable Function) site of the safety U disk; reading a power-on initial state image of an SRAM (Static Random Access Memory) of an internal controller of the safe USB flash disk when the safe USB flash disk is powered on, and carrying out Hash abstract processing to generate a controller fingerprint abstract of the safe USB flash disk; when the security USB flash disk is authenticated, the host randomly generates a random number, maps the random number into a PUF bit address index and generates a PUF response of the security USB flash disk; combining the controller fingerprint abstract and the PUF response of the secure USB flash disk to obtain a session key; and realizing cooperative authentication of the secure USB flash disk according to the session key. The invention also discloses a system for realizing the collaborative authentication method of the safety USB flash disk. According to the invention, cooperative authentication of the safe USB flash disk is realized, and the reliability is higher and the safety is better.

Systems and methods of generating a security key for an integrated circuit device include generating a plurality of key bits with a physically unclonable function (PUF) generator. Unstable bits of the plurality of key bits are identified, and a security key is generated based on the plurality of key bits, wherein the security key excludes the identified unstable bits.

The invention relates to the field of Internet of Things equipment security upgrading, and discloses an intelligent washing machine embedded software online upgrading method and system, and the method comprises the following steps: 1, a server side stores an encrypted upgrading program file and calculates a verification value, issues the verification value in a wireless manner at a set time, generates an equipment uniqueness voucher based on a physical unclonable function, and sends the equipment uniqueness voucher to the server side; establishing equipment identity binding; 2, dynamically calculating a network coding parameter based on the equipment uniqueness voucher according to a real-time channel quality parameter; and 3, based on the network coding parameters, carrying out dynamic block network coding transmission on the upgrade data, and generating an encrypted upgrade data packet by adopting chaotic encryption in the transmission process. According to the invention, an end-to-end security authentication system is realized by binding the unique voucher of the equipment and establishing an encrypted transmission channel. According to the scheme, the unauthorized access and firmware tampering are effectively prevented by utilizing the dual guarantee of hardware features and a cryptographic algorithm.

The invention relates to the technical field of electric digital data processing, and discloses a solid state disk controller circuit and a solid state disk. The controller circuit comprises a physical unclonable function unit based on an SRAM (Static Random Access Memory), which is used for dynamically generating a stable hardware trust root key during power-on; the secure boot and firmware decryption engine is used for deriving a firmware decryption authentication key and a data key packaging key by using the key, and carrying out decryption and integrity verification on the encrypted firmware; the runtime firmware execution monitoring unit is used for detecting illegal jump in real time and triggering safe shutdown through a hardware-level control flow diagram; and the dynamic data encryption key management unit recovers the plaintext data key and sends the plaintext data key to the encryption engine only during operation, and power failure disappears. By means of the scheme, end-to-end security protection of firmware and data is achieved, and the risks of static key leakage and firmware tampering are eradicated.

The invention discloses a centralized control type virtual terminal detection method, device and equipment based on fusion perception, and aims to solve the problems that an existing virtual terminal detection technology depends on a software level, is easy to counterfeit and is low in precision. The method comprises the following steps: a server issues an instruction to a terminal device to trigger a CPU and a vibration motor to work; the equipment synchronously captures a multi-mode physical signal generated by hardware through a built-in magnetic sensor, a vibration sensor and the like; extracting physical unclonable function characteristics capable of uniquely representing the identity of the equipment through modes such as spectral analysis; and inputting the fused features into a pre-trained deep learning model for discrimination. The model innovatively adopts a teacher-student framework to carry out lightweight training, and robustness is enhanced based on a twin neural network architecture. According to the method, the physical terminal and the virtual terminal can be effectively and accurately distinguished by utilizing physical characteristics of a hardware level, and the safety and the reliability of detection are remarkably improved.

The invention discloses a network security monitoring method and system based on the Internet of Things, and relates to the technical field of Internet of Things security. Through dynamic challenge-response physical unclonable authentication, physical parameters and a real-time state are fused to generate a dynamic challenge value, and a physical unclonable function circuit is combined to generate a response value to realize identity verification; adaptive noise lattice-based homomorphic encryption is adopted, a ciphertext is generated based on a high-dimensional lattice-based password, and noise parameters are adjusted through channel quality to guarantee transmission security; multi-modal confrontation federated learning anomaly detection is utilized, flow, energy consumption and physical state characteristics are fused, and parameters are aggregated through a confrontation auto-encoder training model and based on federated learning; through dynamic threshold key negotiation, in combination with identity-based encryption and a block chain smart contract, distributed generation and dynamic adjustment of a key are realized; on the basis of a Merkle-salt value dynamic hash chain and block chain evidence storage, a log is generated in a trusted execution environment, a hash chain is constructed, and chain tail hash is synchronized to block chain evidence storage.

A semiconductor device includes a first transistor cell. The first transistor cell generates a first current signal and a second current signal indicating a bit of a physical unclonable function. The first transistor cell includes a first transistor, a second transistor and a third transistor. The first transistor outputs the first current signal. The second transistor generates the first current signal from a first source / drain structure of the second transistor, and generates the second current signal from a second source / drain structure of the second transistor. The third transistor outputs the second current signal. The first transistor, the second transistor and the third transistor are stacked in order along a first direction. The first source / drain structure of the second transistor and the second source / drain structure of the second transistor are arranged along a second direction different from the first direction.

The invention discloses an unmanned aerial vehicle mobile edge computing security authentication method and system based on identity-based encryption and a physical unclonable function, and belongs to the field of mobile edge computing and unmanned aerial vehicle communication security. A physical response is generated in combination with PUF hardware of the unmanned aerial vehicle node, the physical response and the ID are bound as a credible voucher, and meanwhile, a derived private key for IBE is generated for the unmanned aerial vehicle node based on the ID; after the unmanned aerial vehicle is networked, the KGC periodically initiates challenge response verification, the unmanned aerial vehicle generates a current response by using PUF hardware and returns the current response, the KGC performs comparison, and if an abnormality occurs, the KGC broadcasts to a full text to isolate an abnormal node; iBE is directly carried out on the basis of the ID of the receiver in communication between the unmanned aerial vehicles, and certificate exchange overhead is avoided. According to the method, lightweight identity authentication, physical attack resistance and efficient key management under dynamic topology are realized, and the method is suitable for unmanned aerial vehicle edge computing scenes with limited resources.

A memory device includes an anti-fuse memory cell that randomly presents either a first logic state or a second logic state. The memory cell is formed on a frontside of a substrate and at least includes a first programming transistor that is formed in a first one of a plurality of metallization layers disposed over the frontside and gated by a first programming word line, and a first reading transistor that is formed in a second one of the plurality of metallization layers disposed over the frontside or along a major surface on the frontside, coupled to the first programming transistor and a first bit line in series, and gated by a first reading word line.

The invention relates to the technical field of robots and network security, discloses a robot health consensus system and method based on ontology trust, and aims to solve the problems that an existing robot health declaration is easy in identity counterfeiting, one-sided in state evaluation, and easy in privacy leakage and replay attack in a certification process. The method comprises the following steps: generating an identity label strongly bound with robot hardware based on a physical unclonable function (PUF); fusing multi-source sensor data in a recursive updating mode to generate a state topology vector capable of reflecting a historical evolution trend; and obtaining a comprehensive health value in combination with the internal health value calculated by the vector and a network consensus factor. Through physical layer identity anchoring, dynamic and continuous state evaluation and an encryption certification mechanism, the authenticity and fraud resistance of the health declaration of the robot are remarkably improved, comprehensive evaluation of the health state of the robot is achieved, state privacy of the robot is effectively protected in interaction, and replay attacks are prevented.