Garbled Circuit Authentication Using PUF Values Without Error Correction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional device authentication methods using physical unclonable functions (PUFs) and garbled circuits face issues such as aging-related errors, high computational costs, and vulnerability to security threats like impersonation and replay attacks, especially in resource-constrained devices like IoT appliances and mobile processors.
Innovation Solution
The method employs garbled circuits and PUF values without error correction and oblivious transfer, allowing devices and computers to collaboratively construct and evaluate garbled circuits during enrollment and authentication phases, using symmetric keys for encryption and decryption, and determining device authenticity based on distance thresholds without storing PUF values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional PUF-based authentication with error correction is used, then reliability under aging conditions is improved, but computational cost and device complexity increase
Solution Approach 1:
The patent extracts and removes the error correction code components from the authentication system. By using raw PUF values without error correction, the system eliminates the computational overhead and complexity associated with encoding, decoding, and verifying error correction codes, while still achieving reliable authentication through the inherent stability of PUF characteristics.
Solution Approach 2:
The patent employs disposable symmetric keys for each authentication session rather than maintaining persistent cryptographic key pairs. These session keys are generated, used once for authentication, and then discarded, reducing the complexity of key management and cryptographic operations while maintaining security.
2Measurement precision
If PUF values are stored for authentication comparison, then authentication accuracy is improved, but security against data theft is worsened
Solution Approach 1:
The patent performs preliminary comparison of PUF values during the authentication process itself, rather than storing reference values for later comparison. The system compares the challenge-response pairs generated by the PUF circuitry in real-time, eliminating the need to store sensitive PUF values while maintaining authentication accuracy.
Solution Approach 2:
The patent introduces symmetric keys as intermediaries in the authentication process. Instead of directly comparing raw PUF values or storing them, the system uses encrypted challenge-response pairs mediated by symmetric keys, which protect the underlying PUF characteristics from being exposed or stolen while enabling accurate authentication.
3Reliability
If asymmetric cryptography is used for secure communication, then security is improved, but computational cost and energy consumption increase
Solution Approach 1:
The patent changes the cryptographic parameter from asymmetric key pairs to symmetric keys. This parameter change reduces the computational complexity and energy consumption of cryptographic operations while maintaining security through the use of PUF-based challenge-response authentication that is inherently resistant to impersonation attacks.
Solution Approach 2:
The patent substitutes the mechanical/computational complexity of asymmetric cryptography with a simpler symmetric key system combined with PUF physical characteristics. The security that previously relied on complex mathematical operations is replaced by the physical unclonability of the PUF circuitry, reducing energy consumption while maintaining security.
4Reliability
If oblivious transfer protocol is used for garbled circuit construction, then security is improved, but computational cost and communication overhead increase
Solution Approach 1:
The patent extracts and removes the oblivious transfer protocol from the garbled circuit construction process. By using symmetric key encryption instead, the system eliminates the complex multi-round interactive protocol while maintaining security during the enrollment phase, significantly improving enrollment efficiency.
Solution Approach 2:
The patent uses disposable symmetric keys for the enrollment process rather than implementing the complex oblivious transfer protocol. These keys are generated temporarily for enrollment, used to secure the communication channel, and then discarded, providing adequate security with much lower computational and communication overhead.
Data Source
AI summary
This application describes systems and methods for using a garbled circuit and a physical unclonable function (PUF) value to authenticate a device. During enrollment, the device and at least one computer collaboratively construct multiple garbled circuits corresponding to bits of an enrollment PUF value generated by PUF circuitry coupled to the device. During authentication, the device and at least one computer evaluate the multiple garbled circuits using an authentication PUF value. Using the results of this evaluation, the at least one computer compares the enrollment PUF value with the authentication PUF value and determines a distance between them. The at least one computer may authenticate the device when the calculated distance is less than a threshold value.