Secure Storage Using Physical Unclonable Function Key Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure storage systems face challenges in maintaining data integrity and security, particularly against cloning and tampering, due to vulnerabilities in cryptographic key management and the risk of reverse engineering, especially in systems where data is stored on conventional processors.
Innovation Solution
The integration of a Physical Unclonable Function (PUF) with data storage systems, where the PUF generates a cryptographic key bound to the storage device, making cloning or tampering with the data impossible without the original PUF, and using a cryptographic unit to perform operations under control of this key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic keys are embedded in the binary image of the computer program or stored in main memory, then the data can be encrypted and authenticated, but the keys become vulnerable to reverse engineering, cloning, and detection
Solution Approach 1:
The patent extracts the cryptographic key from the conventional storage locations (binary image, main memory) and relocates it to a physical uncloneable function (PUF) embedded in the data storage device. This extraction eliminates the vulnerability chain that allowed reverse engineering and cloning attacks, as the key now resides in a physically secure location that cannot be copied through conventional means.
Solution Approach 2:
The patent introduces a physical uncloneable function (PUF) as an intermediary between the data storage device and the cryptographic key. The PUF acts as a mediator that generates the key based on physical properties of the storage device, creating a secure bridge that prevents direct exposure of the key while maintaining encryption and authentication capabilities.
2Device complexity
If a master key is used to derive specific keys for multiple applications, then key management is simplified, but the system becomes vulnerable if the master key is compromised
Solution Approach 1:
The patent segments the key derivation process by eliminating the master key concept entirely. Instead of deriving multiple keys from a single master key, each application gets its own unique key generated through the PUF based on application-specific challenges. This segmentation eliminates the single point of failure that is the master key, while maintaining simplified key management through the PUF's standardized interface.
3Ease of operation
If data is stored on conventional processors, then the storage can be easily accessed and processed, but the cryptographic operations become vulnerable to attacks on the processor architecture
Solution Approach 1:
The patent substitutes the conventional processor-based cryptographic system with a physically embedded PUF system. Instead of relying on software-based encryption and processor security, the system uses physical properties of the storage device (such as manufacturing variations, physical structure) to generate and protect keys. This substitution moves the security foundation from the software/architecture layer to the physical layer, making it resistant to processor-based attacks.
Data Source
AI summary
A system 100 for securely storing digital data includes a data storage 110 and a physical uncloneable function 120 (PUF), including an input (122) for receiving a challenge and an output (124) for producing a response to the challenge. Means 130 determine an identifier associated with the data storage. Means 140 supply a representation of the identifier to the PUF as a challenge and retrieve a corresponding response from the PUF. A cryptographic unit 150 performs a cryptographic operation for securing or verifying a digital content item stored in the data storage, where the cryptographic operation is performed under control of a cryptographic key derived from the received response.