PUF-Based Storage Device Authentication and Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Self-Encrypting Drive (SED) solutions lack a means to authenticate the storage device before providing credentials, making them vulnerable to attacks where an attacker can replace the device or extract encrypted Data Encryption Keys (DEKs) for offline brute force or dictionary attacks, and they are susceptible to weak key attacks due to lack of true randomness and exposure of decrypted keys in volatile memory.
Innovation Solution
A secure storage device utilizing a Physically Unclonable Function (PUF) to generate Data Encryption Keys (DEKs) and authenticate the host before credentials are provided, using a PUF response and a nonce to create an authentication output, and employing error correction and Key Derivation Functions to ensure secure key generation and storage without storing keys on the device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If credentials are provided to the storage device without prior authentication, then the device can be accessed and data can be encrypted/decrypted, but the system becomes vulnerable to device replacement attacks and offline brute force attacks on encrypted keys
Solution Approach 1:
The patent implements preliminary authentication before credential provision by having the storage device generate an authentication token based on PUF response and nonce before the host provides credentials. This preliminary action ensures device authenticity is verified first, preventing device replacement attacks and offline brute force attacks on encrypted keys.
Solution Approach 2:
The patent introduces an authentication token as an intermediary between device authentication and credential provision. The token acts as a mediator that confirms device authenticity without exposing sensitive key material, thereby enhancing security while maintaining protocol manageability through a clear three-step process.
2Productivity
If Data Encryption Keys are stored on the device, then decryption can be performed efficiently, but the keys become vulnerable to extraction and offline attacks
Solution Approach 1:
The patent extracts the key generation process from static storage and makes it dynamic by using PUF-based on-demand key generation. Instead of storing keys permanently, the system extracts key material only when needed for decryption operations, eliminating the vulnerability of stored keys to extraction attacks while maintaining decryption efficiency through hardware-accelerated PUF-based generation.
Solution Approach 2:
The patent changes the parameter of key availability from static (stored) to dynamic (generated on-demand). By using PUF response combined with nonce to generate decryption keys only when needed, the system maintains fast decryption performance while eliminating the security vulnerability of having extractable stored keys.
3Speed
If traditional random number generators are used for key generation, then key generation is fast, but the keys are vulnerable to weak key attacks due to lack of true randomness
Solution Approach 1:
The patent replaces traditional software-based random number generators with a physics-based PUF system. The PUF exploits inherent physical variations in semiconductor manufacturing to generate truly random keys, providing cryptographic strength against weak key attacks while maintaining fast generation speed through hardware acceleration.
Solution Approach 2:
The patent changes the fundamental parameter of randomness source from pseudo-random (software-based) to true random (physics-based PUF). This substitution provides cryptographically strong keys resistant to weak key attacks while maintaining fast generation through efficient PUF challenge-response mechanisms.
4Productivity
If decrypted keys are kept in volatile memory for ongoing operations, then encryption/decryption operations can continue efficiently, but the keys are exposed to memory extraction attacks
Solution Approach 1:
The patent makes key availability dynamic by generating decryption keys on-demand from PUF response and nonce rather than keeping them statically in volatile memory. Keys are generated only when needed for decryption operations and discarded afterward, eliminating the exposure window for memory extraction attacks while maintaining operational efficiency through rapid PUF-based regeneration.
Data Source
AI summary
Systems and methods are disclosed herein for protecting data in a storage device by encrypting or decrypting the data with a Data Encryption Key (DEK). The storage device is communicatively coupled to a host. In one example, the storage device comprises at least one Physically Unclonable Function (PDF) configured to generate PDF responses based on challenges and an authentication output generation module configured to obtain a nonce from the host, obtain an input related to a first PDF response, generate an authentication output based on the input and the nonce using a One-Way Function (OWF), and provide the authentication output to the host. The storage device further comprises a DEK generation module configured to generate a DEK based on a second PDF response and a crypto module to perform encryption or decryption of data using the DEK.