PUF-Enabled Integrated Circuit for Dynamic Security Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing integrated circuits with physically unclonable functions (PUFs) are vulnerable to external hacking due to their structure, which repeatedly generates the same security key, making them inefficient for changing keys without additional circuits or costs.
Innovation Solution
An integrated circuit with a PUF block and controller that performs error correction and length extension operations on PUF data to generate multiple final security keys, providing flexibility and enhanced security by managing these keys through a key management circuit.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the integrated circuit generates the same security key repeatedly using helper data stored in non-volatile memory, then the security key generation is simple and reliable, but the system becomes vulnerable to external hacking and cannot efficiently change keys
Solution Approach 1:
The patent implements dynamic key generation by allowing the system to switch between multiple final keys (first final key, second final key, etc.) based on operational needs. The controller can generate different final keys from the same intermediate key through key derivation operations, enabling the system to adapt and change keys without requiring re-enrollment or additional PUF measurements, thus resolving the vulnerability to hacking while maintaining generation reliability.
2Adaptability or versatility
If the integrated circuit performs error correction and length extension operations to generate multiple final keys, then the security and flexibility are enhanced, but the device complexity increases
Solution Approach 1:
The patent performs preliminary key derivation operations during the enrollment phase, where the controller generates an intermediate key from PUF data and stores it in non-volatile memory. This preliminary action prepares the system with pre-processed key material, so that during normal operation, the controller only needs to perform simpler key derivation operations to generate final keys, reducing operational complexity while maintaining high adaptability and versatility.
3Ease of manufacture
If the integrated circuit stores helper data in non-volatile memory for key generation, then the key generation process is simplified, but additional circuits and costs are required
Solution Approach 1:
The patent makes the non-volatile memory serve multiple functions: it stores both the intermediate key derived from PUF data and the helper data required for key generation. This multi-functionality eliminates the need for separate dedicated storage circuits for different types of data, simplifying the overall hardware architecture and reducing manufacturing costs while maintaining ease of manufacture through a unified storage approach.
Data Source
AI summary
The present disclosure relates to integrated circuits including an integrated circuit supporting a physically unclonable function (PUF). An example integrated circuit includes a PUF block including a PUF cell array, and a controller configured to generate a security key based on PUF data that is generated based on the PUF block. The controller is configured to perform an error correction operation on the PUF data to generate an initial key, perform a length extension operation on the initial key to generate an intermediate key, and generate at least one of a plurality of final keys as the security key from the intermediate key.