PUF-Based Key Generation for Lightweight IoT Encrypted Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic protocols for Internet of Things devices require bulky hardware, significant computation, and high resource consumption, making them unsuitable for ultra-small and low-power devices, and are vulnerable to data breaches due to storage of encryption information.
Innovation Solution
A cryptographic communication method using a physical unclonable function (PUF) circuit to generate private keys, temporary session keys, and public keys for encryption and decryption, ensuring lightweight hardware and low resource consumption, with authentication and integrity verification through challenge-response pairs and digital signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic protocols are used to ensure data confidentiality and integrity, then security is improved, but hardware requirements become bulky and resource consumption increases
Solution Approach 1:
The patent extracts the critical security function from complex traditional cryptographic hardware and implements it through a PUF-based system that uses minimal hardware resources. The PUF circuit generates unique cryptographic keys based on physical characteristics, eliminating the need for bulky cryptographic co-processors while maintaining security.
Solution Approach 2:
The patent replaces traditional mechanical/circuit-based cryptographic implementations with a PUF-based approach that leverages physical unclonability. The PUF circuit uses physical variations in transistor characteristics to generate cryptographic keys, substituting complex cryptographic hardware with simpler physical measurement and computation.
2Reliability
If encryption information is stored in device memory to ensure data confidentiality, then security is improved, but the risk of data breaches increases when devices are stolen
Solution Approach 1:
The patent performs preliminary actions by generating cryptographic keys on-demand through the PUF circuit rather than storing them beforehand. The PUF circuit generates unique keys in real-time based on challenge signals, ensuring that no persistent storage of encryption information is required and eliminating the risk of key extraction from stolen devices.
Solution Approach 2:
The patent introduces dynamics to the static storage model by generating cryptographic keys dynamically on-demand. The PUF circuit receives challenge signals and generates corresponding cryptographic keys in real-time, making the key generation process adaptive and preventing static key storage vulnerabilities.
3Device complexity
If lightweight cryptographic protocols are implemented to reduce hardware requirements, then device complexity is reduced, but computation time and resource consumption may increase
Solution Approach 1:
The patent applies self-service by using the PUF circuit's inherent physical variations to generate cryptographic keys without requiring external cryptographic hardware or complex computation. The PUF circuit leverages its own physical characteristics to produce unique keys, eliminating the need for additional computational resources.
Data Source
AI summary
An electronic device includes a PUF circuit which inputs a random challenge signal into a physically unclonable function to generate a private key, a communication device which receives an encrypted message by a temporarily generated message session key, and an encrypted message session key generated by encrypting the message session key with a public key corresponding to the private key, from a counterpart electronic device, and a controller which obtains the message session key by decrypting the encrypted message session key with the private key, and decrypts the encrypted message with the message session key.