Bus Data Protection Using PUF-Based Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In electronic data processing devices, existing mechanisms for ensuring data confidentiality over a bus are inadequate, as they can be compromised by attackers gaining access to the bus, and cryptographic encryption is computationally intensive.
Innovation Solution
A data protection system using a masking information generation circuit based on Physical Unclonable Function (PUF) values generates unique masking tokens for each master-slave pair or globally, which are used to scramble data before transmission, ensuring confidentiality even if an attacker accesses the bus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic encryption is used to protect data confidentiality over the bus, then data security is improved, but computational overhead and processing time increase
Solution Approach 1:
The patent changes the encryption parameter from complex cryptographic algorithms to simple XOR operations with PUF-generated keys. This parameter change maintains security (data confidentiality) while dramatically reducing computational overhead and processing time, as XOR is a basic bitwise operation that can be executed very quickly compared to full cryptographic encryption/decryption cycles
Solution Approach 2:
The patent extracts the computationally intensive cryptographic operations from the bus communication process by using PUF (Physical Unclonable Function) to generate unique hardware-based keys that are embedded in the components. The actual encryption reduces to simple XOR operations, while the complex key generation is performed once during manufacturing, not during each communication transaction
2Reliability
If masking information is generated for each master-slave pair, then data confidentiality is improved, but device complexity increases
Solution Approach 1:
The patent implements self-service by having each bus component contain an integrated PUF source that automatically generates its own unique identifier and masking information. Components self-configure their security parameters without external intervention, eliminating the need for complex centralized key management systems while ensuring unique masking for each master-slave pair
Solution Approach 2:
The PUF source serves multiple functions: it generates unique component identifiers, creates masking information for data protection, and provides hardware-based authentication. This multi-functionality reduces overall system complexity by consolidating multiple security mechanisms into a single hardware component
3Ease of manufacture
If static masking tokens are used, then implementation simplicity is improved, but vulnerability to statistical analysis attacks increases
Solution Approach 1:
The patent introduces dynamics by making the masking information variable rather than static. The PUF-based masking information changes based on the specific master-slave pair communicating, and can be dynamically updated by regenerating keys from the PUF source. This dynamic behavior prevents statistical analysis attacks while maintaining implementation feasibility through hardware-based automatic key management
Data Source
AI summary
Systems, methods, circuits, and devices for data protection are provided. In one example, a data processing device incudes a Physical Unclonable Function (PUF) source that is configured to generate PUF values, a bus, a plurality of bus access components that are configured to access the bus, and a masking information generation circuit. The masking information generation circuit is configured to generate masking information for at least one pair of bus access components using at least one PUF value and to transmit said information to the bus access components. The pair is configured in such a way that one bus access component masks the data according to the masking information generated for the pair before the data is sent over the bus and the other bus access component de-masks the data received over the bus according to the masking information generated for the pair.