Physically Unclonable Function Fuse Modification for Anti-Tamper Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices, such as payment readers, face vulnerabilities in protecting critical information from tampering and unauthorized access due to the inability of existing technologies to effectively prevent eavesdropping and tampering attempts, especially in scenarios where attackers attempt to physically access or simulate components.
Innovation Solution
The implementation of Physically Unclonable Functions (PUFs) within these devices, which utilize unique physical characteristics to generate cryptographic keys and respond to tamper attempts by modifying their values, thereby rendering critical information unreadable and enhancing security through anti-tamper mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic keys are stored in memory for secure access, then authentication reliability is improved, but the device becomes vulnerable to tampering and eavesdropping attacks
Solution Approach 1:
The patent extracts the cryptographic key storage function from traditional memory and replaces it with a Physically Unclonable Function (PUF) device. The PUF generates cryptographic keys based on unique physical characteristics of the device itself, eliminating the need to store keys in memory and thereby removing the vulnerability to memory-based attacks while maintaining authentication reliability.
Solution Approach 2:
The PUF device acts as an intermediary between the device hardware and cryptographic operations. Instead of directly storing and accessing cryptographic keys in memory, the system uses the PUF's unique physical characteristics as a mediator to generate keys on-demand, providing a security layer that prevents direct access to sensitive cryptographic material.
2Device complexity
If static cryptographic keys are used for encryption, then encryption simplicity is improved, but security is worsened due to inability to respond to tamper attempts
Solution Approach 1:
The patent transforms static cryptographic keys into dynamic, changeable keys generated by the PUF device. The PUF can modify its output based on environmental conditions and tamper attempts, allowing the cryptographic system to adapt and respond to security threats while maintaining relatively simple encryption operations through the use of challenge-response protocols.
Solution Approach 2:
The PUF device changes its operational parameters based on detected conditions. When tampering is detected, the PUF modifies its physical state or operational characteristics, which in turn changes the generated cryptographic keys. This parameter changing capability allows the system to respond to tamper attempts while keeping the encryption mechanism itself relatively simple.
3Reliability
If unique physical characteristics are utilized for key generation, then unclonability is improved, but key modifiability in response to threats is worsened
Solution Approach 1:
The patent merges two seemingly contradictory properties: the static uniqueness of physical characteristics and the dynamic capability to modify responses. The PUF combines the inherent unclonable physical characteristics of the device with a challenge-response mechanism that allows the same physical characteristics to generate different cryptographic outputs based on external stimuli, thereby achieving both unclonability and modifiability.
Solution Approach 2:
The PUF device serves multiple functions: it provides unique identification through its unclonable physical characteristics, generates cryptographic keys, and responds to tamper attempts. This multi-functionality allows the same physical characteristics to serve both as a static uniqueness source and as a dynamic key generation mechanism that can adapt to different security threats.
Data Source
AI summary
A device may include a physically unclonable function (PUF) source that has at least one fuse embedded in the device. The PUF source may be responsive to an input for transmitting a signal through the fuse and providing a PUF value based on a measurement of such signal. The device also has circuitry that is configured to modify the fuse by transmitting a signal of sufficiently high current or voltage through the fuse to change its resistance, thereby changing a response of the PUF source to the input.