PUF Authentication Using Helper Data for Noisy Responses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face challenges in ensuring unique device identification and secure key generation due to variations in integrated circuit fabrication, leading to potential duplication and error-prone responses from PUF circuits.
Innovation Solution
A method utilizing helper data, including error correcting codes and additional data, is employed to compensate for noise and environmental effects in PUF responses, generating secure device responses through a challenge-response protocol, and obfuscation techniques to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PUF circuits are used for device authentication, then unique device identification is achieved, but error-prone responses occur due to noise and environmental effects
Solution Approach 1:
The patent introduces helper data as an intermediary component that mediates between the noisy PUF response and the authentication system. The helper data contains information about the PUF's physical characteristics and is used to correct noisy responses without directly modifying the PUF circuit itself, thus resolving the contradiction between using PUFs for authentication and dealing with their noise susceptibility
Solution Approach 2:
The system performs preliminary characterization of the PUF circuit during manufacturing or initialization, storing helper data that captures the PUF's response patterns under various conditions. This preliminary action enables later error correction during authentication operations, allowing the system to compensate for noise and environmental effects before they degrade authentication reliability
2Measurement precision
If helper data is stored to correct PUF responses, then authentication accuracy improves, but security risks increase due to potential helper data compromise
Solution Approach 1:
The authentication system is segmented into multiple independent components: the PUF circuit itself, the helper data storage, and the authentication logic. The helper data is segmented and distributed across different locations or formats, so that compromising one part does not reveal the entire authentication mechanism. This segmentation reduces the harm from potential helper data compromise while maintaining authentication accuracy
Solution Approach 2:
The helper data acts as an intermediary layer that protects the core PUF secrets. Instead of storing raw PUF responses or direct authentication credentials, the system stores processed helper data that must be combined with live PUF responses to perform authentication. This intermediary structure ensures that even if helper data is compromised, attackers cannot directly authenticate without the corresponding PUF response
3Reliability
If multiple challenge-response pairs are generated, then device identification uniqueness improves, but the system becomes more complex
Solution Approach 1:
The helper data structure is designed to be universal and multi-functional, serving multiple purposes: error correction, device identification, and authentication verification. By using a single helper data structure that performs multiple functions, the system avoids the complexity of separate mechanisms for each function while maintaining device identification uniqueness through multiple challenge-response pairs
Data Source
AI summary
A method and system for authenticating a device is provided. A noisy response is received from a physically unclonable function for a challenge. An error code is generated for correcting the noisy first response. An expected response is generated from the noisy first response and the error code. The expected response and corresponding first helper data is store. The helper data includes the first challenge and the error code. The helper data is provided to a device in response to an authentication request from the device, the first device including the physically unclonable function.