PUF Authentication via Distributed Ledger Tamper Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for enhancing hardware security using physically unclonable functions (PUFs) face challenges in ensuring the authenticity and integrity of input and output correspondence information, particularly in preventing tampering and ensuring reliable authentication of semiconductor chips and devices.
Innovation Solution
A monitoring device and system that utilizes a distributed ledger system to distribute circuit information for forming PUF circuits, transmits challenge values, receives response values, and authenticates devices based on pre-registered input and output correspondence information, incorporating mutual authentication and agreement building processes among nodes to ensure authenticity and prevent tampering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If input and output correspondence information (CRP) is recorded in advance in a centralized location, then authentication can be performed efficiently, but the system becomes vulnerable to tampering and illegal modification
Solution Approach 1:
The patent segments the authentication information management by distributing CRP storage across multiple nodes in a blockchain network rather than centralizing it. Each node maintains a copy of the authentication information, eliminating the single point of failure and making tampering detection possible through cryptographic verification across the distributed network.
Solution Approach 2:
The patent introduces a blockchain intermediary layer that mediates between the authentication system and the physical devices. This intermediary uses cryptographic hashing and distributed consensus to verify authentication information without allowing direct modification, thus protecting against tampering while maintaining authentication functionality.
2Object-affected harmful factors
If a distributed ledger system is used to store authentication information, then tampering resistance is improved, but system complexity and computational overhead increase
Solution Approach 1:
The patent performs preliminary actions by pre-generating and storing authentication information in the blockchain before devices need verification. This allows the system to avoid complex real-time computations during authentication, as the verification process simply compares against pre-stored cryptographic hashes rather than performing complex consensus algorithms during each authentication event.
Solution Approach 2:
The patent extracts the computationally intensive consensus and storage operations from the authentication process itself. By separating the information storage function (handled by the blockchain in advance) from the verification function (handled by simple cryptographic comparison), the system reduces real-time computational overhead while maintaining tampering resistance.
3Adaptability or versatility
If PUF circuits are formed in FPGA with field-programmable capabilities, then adaptability and reconfigurability are improved, but security against reverse engineering and tampering decreases
Solution Approach 1:
The patent adds a cryptographic verification dimension to the physical PUF circuit. By layering blockchain-based cryptographic authentication over the physical PUF layer, the system creates a multi-dimensional security model where even if the physical circuit is accessed or reversed engineered, the cryptographic hashes stored in the immutable blockchain prevent unauthorized modification or cloning.
Data Source
AI summary
A monitoring device is configured to monitor a monitoring target device. The monitoring device includes a circuit information distribution program configured to distribute circuit information for programming a physically unclonable function (PUF) circuit to the monitoring target device; a transmission processing program configured to transmit a challenge value to the monitoring target device to which circuit information is distributed; a reception processing program configured to receive a response value corresponding to the challenge value of the PUF circuit programmed in the monitoring target device; and an authentication processing program configured to authenticate the monitoring target device based on input and output correspondence information of the PUF circuit programmed in the monitoring target device and the response value which has been received.


