Self-Authenticating Device Using Internal Hash Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT devices face challenges in ensuring secure device authentication and unique device identification, leading to potential security vulnerabilities and inefficiencies in tamper detection, particularly when connected to remote databases.
Innovation Solution
The implementation of a self-authentication mechanism using a memory circuit and processing circuit that stores factory, PUF, and program IDs, along with a hash data generation and comparison process, allowing for flexible bit length adjustment of PUF IDs based on device volume, enabling both offline and online authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device authentication relies on remote databases, then authentication can be performed, but security vulnerabilities increase and tamper detection becomes less reliable
Solution Approach 1:
The device performs self-authentication by internally comparing hash data generated from its own identification (ID) against pre-stored reference hash data. This self-service mechanism eliminates dependence on remote databases for authentication, thereby improving reliability while reducing security vulnerabilities associated with external connections.
Solution Approach 2:
Reference hash data is pre-stored in the device's memory circuit during manufacturing. This preliminary action enables the device to perform authentication independently without needing to query remote databases, enhancing both reliability and security by making the authentication process self-contained.
2Ease of manufacture
If fixed-length PUF IDs are used, then implementation is simpler, but memory usage is inefficient and cannot adapt to different device volumes
Solution Approach 1:
The PUF ID length is made dynamic rather than fixed. The processing circuit determines the appropriate PUF ID length based on the specific device volume, allowing the system to adapt memory allocation to actual needs. This dynamic approach improves memory usage efficiency while maintaining implementation feasibility through automated length determination.
Solution Approach 2:
The system changes the parameter of PUF ID length based on device volume characteristics. By adjusting this parameter dynamically, the system optimizes memory usage for different device sizes without requiring complex manual configuration, balancing implementation simplicity with resource efficiency.
3Reliability
If comprehensive authentication data is stored, then authentication security is improved, but memory circuit size increases
Solution Approach 1:
The system extracts and stores only the essential authentication data in the form of pre-computed hash data in the memory circuit. By taking out only the necessary reference information needed for self-authentication and computing other data on-demand, the system maintains high authentication security while minimizing memory circuit size.
Solution Approach 2:
The authentication data is segmented into pre-stored hash data in memory and dynamically generated data during authentication. This segmentation allows the system to store minimal necessary data while maintaining comprehensive authentication capabilities, thus reducing memory circuit size without compromising security.
Data Source
AI summary
A device is disclosed. The device includes a first memory circuit and a processing circuit. The first memory circuit stores identifications of the device that are used to generate first hash data through a hash algorithm. The processing circuit is coupled to the first memory circuit and selects at least one bit of each of the identifications in sequence to form a bit sequence, generates second hash data through the hash algorithm based on the bit sequence and authenticates the device according to a comparison between the first hash data and the second hash data.