PUF Key Generation for Lightweight IoT Encrypted Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic protocols for Internet of Things devices require bulky hardware, significant computation, and high resource consumption, and are vulnerable to data breaches due to storage of encryption information.
Innovation Solution
A cryptographic communication method utilizing a physically unclonable function (PUF) circuit to generate private keys and session keys on demand, enabling lightweight hardware, low computation, and secure encryption without storing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic protocols are used for data transmission, then data confidentiality and authentication are ensured, but hardware size and resource consumption increase significantly
Solution Approach 1:
The patent extracts the essential cryptographic function (key generation) from traditional bulky cryptographic hardware and implements it using a PUF circuit that leverages inherent physical variations in semiconductor structures. This extraction allows maintaining security while dramatically reducing hardware footprint by eliminating the need for large cryptographic processing units and key storage memory.
Solution Approach 2:
The patent replaces traditional mechanical/electronic cryptographic systems with a physics-based PUF system that uses inherent physical variations in semiconductor materials and structures. The PUF circuit generates cryptographic keys based on physical properties rather than complex computational algorithms, reducing hardware complexity while maintaining security.
2Reliability
If traditional cryptographic protocols are used for data transmission, then data authentication is ensured, but computation requirements and resource consumption increase
Solution Approach 1:
The PUF circuit performs self-authentication by generating unique cryptographic responses based on its inherent physical characteristics. Each PUF circuit is inherently unique due to manufacturing variations, and this uniqueness is automatically exploited for authentication without requiring external verification infrastructure or complex computational validation, reducing overall system resource consumption.
Solution Approach 2:
The PUF circuit pre-generates cryptographic keys and authentication credentials during device manufacturing based on its physical structure. This preliminary action eliminates the need for complex key generation and management operations during runtime, reducing computation requirements and energy consumption during actual data transmission and authentication processes.
3Ease of operation
If encryption information is stored in memory for later use, then cryptographic operations can be performed, but security vulnerability increases when devices are stolen
Solution Approach 1:
The PUF circuit generates cryptographic keys on-demand by reading its physical structure characteristics rather than retrieving stored keys. Each cryptographic operation triggers fresh key generation based on the PUF's physical state, effectively discarding previous keys and preventing their reuse or extraction. This approach maintains cryptographic operation capability while eliminating security vulnerabilities associated with key storage.
Solution Approach 2:
The patent treats cryptographic keys as temporary, disposable objects that are generated and consumed in each cryptographic session. The PUF circuit continuously generates new keys based on its physical characteristics, and these keys have short lifetimes, preventing attackers from benefiting even if they manage to extract or steal the device, as the keys would have already changed.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
The electronic device according to one example disclosed, comprises a PUF circuit which inputs a random challenge signal into a physically unclonable function to generate a private key; a communication device which receives an encrypted message by a temporarily generated message session key, and an encrypted message session key generated by encrypting the message session key with a public key corresponding to the private key, from a counterpart electronic device; and a controller which obtains the message session key by decrypting the encrypted message session key with the private key, and decrypts the encrypted message with the message session key.