PUF IoT Device Authentication Using Channel State Information

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

PUF-based IoT device authentication techniques are vulnerable to security threats when challenge-response pairs are exposed in wireless networks, and RF-based key generation methods can produce the same secret key when an eavesdropper is nearby, compromising device security.

Innovation Solution

A PUF-based IoT device authentication method that utilizes channel state information, incorporating a data transmission/reception unit, channel state information estimation unit, PUF control signal generation unit, and secret key generation unit to generate and transmit a secret key based on RF characteristics, enhancing security by preventing exposure of CRP tables and reducing the risk of key duplication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If PUF-based authentication is used in wireless networks, then device authentication can be performed, but CRP tables may be exposed through eavesdropping

Engineering Contradiction:
Improveauthentication securityVSAvoidCRP exposure to eavesdropping
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent divides the authentication process into two independent segments: PUF-based CRP authentication and RF fingerprint-based authentication. Each segment operates separately with its own challenge-response mechanism, so that compromise of one segment does not expose the other. The RF fingerprint segment captures channel state information independently of the PUF CRP table, creating segmented security layers.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent combines two different authentication mechanisms (PUF CRP and RF fingerprinting) into a composite authentication system. The final authentication decision is made by evaluating both mechanisms together, creating a composite security approach where the strengths of one method compensate for the weaknesses of the other, particularly protecting against eavesdropping attacks on CRP tables.

Inventive Principle:
Principle #40Composite materials

2Productivity

If RF-based secret key generation is used, then key generation can be performed, but the same secret key may be generated when an eavesdropper is located near the user

Engineering Contradiction:
Improvesecret key generationVSAvoidsecret key uniqueness
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent applies local quality by capturing RF fingerprint characteristics that are specific to the local physical environment and device hardware. The channel state information and RF fingerprints reflect local properties such as antenna characteristics, surrounding objects, and propagation conditions that are unique to each device's location and physical setup, ensuring that generated secret keys maintain uniqueness even in proximity.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent changes the parameters used for key generation from purely RF signal characteristics to include processed channel state information and RF fingerprint features. By transforming the raw RF data through specific processing steps (feature extraction, dimensionality reduction, and hashing), the system generates keys that are deterministic yet unique to each device's physical characteristics, preventing key duplication even when eavesdroppers are nearby.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12096217B2PUF-based IoT device using channel state information, and authentication method thereof
Publication Date: 2024.09.17 GWANGJU INST OF SCI & TECH
  • US12096217B2 patent drawing
  • US12096217B2 patent drawing
  • US12096217B2 patent drawing

AI summary

The present invention relates to a PUF-based IoT device authentication technique, and more specifically, to a PUF-based IoT device using channel state information, and an authentication method thereof. According to an embodiment of the present invention, security of an authentication key may be strengthened by simultaneously utilizing a PUF-based authentication method and an RF characteristic-based authentication method.