PUF-Based Data Integrity Tag Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data integrity schemes in computer systems are vulnerable to attacks that modify data stored in memory, as attackers can corrupt data and evade detection by duplicating errors or predicting parity codes, leading to potential system disruptions and data leaks.
Innovation Solution
A data integrity scheme utilizing a physically unclonable function (PUF) device generates a unique, unpredictable data integrity tag associated with stored data, which is stored alongside the data in memory. This tag is used to verify the integrity of the data upon retrieval, preventing unauthorized modifications by leveraging the PUF's inherent uniqueness and robustness.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data integrity schemes (parity codes, redundancy) are used, then data verification capability is provided, but the system becomes vulnerable to attacks that can duplicate errors or predict codes
Solution Approach 1:
The patent introduces a PUF device as an intermediary component between the memory system and the attack vector. The PUF generates challenge-response pairs that serve as cryptographic authentication for stored data, creating a security layer that attackers cannot predict or duplicate. The PUF's physical unclonability ensures that each system has unique authentication credentials, resolving the vulnerability to attacks while maintaining data integrity verification.
Solution Approach 2:
The patent transforms the data integrity verification mechanism from using predictable cryptographic parameters (parity codes, hash functions) to using physically-derived parameters from PUF characteristics. The challenge-response pairs are generated based on physical properties of the PUF device, making the verification parameters unpredictable and unclonable, thus resolving the contradiction between verification capability and attack vulnerability.
2Object-affected harmful factors
If PUF-based data integrity tags are implemented, then attack resistance is improved, but device complexity increases
Solution Approach 1:
The patent designs the PUF device to serve multiple functions: generating authentication tags for data integrity verification, providing unique system identification, and creating unclonable cryptographic credentials. By making the PUF a universal security component that handles multiple security functions, the patent reduces overall system complexity compared to implementing separate mechanisms for each security function.
Solution Approach 2:
The PUF device automatically generates challenge-response pairs based on its physical characteristics without requiring external key management or complex cryptographic processing. The PUF's physical properties inherently provide the security functionality, eliminating the need for additional key distribution, storage, or management infrastructure, thus reducing system complexity while maintaining high attack resistance.
Data Source
AI summary
A system includes a memory device configured to store data at addressable locations in the memory device, a physically unclonable function (PUF) device including an array of PUF elements, and a memory interface coupled to the memory device and the PUF device. The memory interface is configured to receive a request to store first data in the memory device, store the first data in the memory device at a first location of the memory device, and transmit the first data and the first location to the PUF device. The PUF device is configured to create a first challenge value using the first data and the first location, generate a first response value using the first challenge value, and store the first response value as a first data integrity tag in the memory device, wherein the first data integrity tag is associated with the first data.