Semiconductor PUF Key Recovery Without Key Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing semiconductor device security techniques, such as those using encryption keys and Physically Unclonable Functions (PUFs), are vulnerable to attacks, particularly side-channel attacks that can reveal confidential information, and do not adequately protect against unauthorized access or data leakage.
Innovation Solution
A semiconductor device and method that generate an intermediate unique code by correcting errors in an initial unique code, then use this code to decrypt transmission data, ensuring that key information is not directly transmitted or received, thereby enhancing security through error correction and encryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are used for security, then unauthorized access is prevented, but key leakage enables illegal access
Solution Approach 1:
The patent extracts the secret key information from the transmission process entirely. Instead of transmitting encryption keys, the system uses PUF-based unique codes that are never transmitted. The key material is generated locally in the semiconductor device through error correction processing of the PUF unique code, eliminating the security vulnerability of key transmission and storage.
Solution Approach 2:
The patent introduces an intermediary element - the PUF-based unique code with embedded errors - that mediates between the need for device identification and security. This unique code serves as a secure intermediary that enables key generation without directly transmitting sensitive information, acting as a secure bridge between communication parties.
2Reliability
If PUF-based unique codes are used for key generation, then device-specific security is achieved, but error correction is required
Solution Approach 1:
The patent applies preliminary action by pre-storing error correction codes in the semiconductor device during manufacturing. These correction codes are prepared in advance and stored in non-volatile memory, enabling the device to autonomously perform error correction on PUF unique codes without requiring external assistance or complex real-time processing systems.
3Ease of repair
If maintenance personnel can access semiconductor devices for maintenance, then device maintainability is improved, but security against insider attacks is reduced
Solution Approach 1:
The patent extracts sensitive key information from the maintenance access path. By using PUF-based unique codes that are never transmitted or stored in accessible memory, the system removes the vulnerability to maintenance personnel attacks. The key material remains confined within the secure PUF circuitry and is never exposed through maintenance interfaces.
4Reliability
If confidential information is transmitted encrypted, then communication security is improved, but transmission of encryption keys creates vulnerability
Solution Approach 1:
The patent extracts the encryption key from the transmission process entirely. Instead of transmitting encrypted keys or key material, the system generates encryption keys locally in each device using the PUF-based unique code. This eliminates the vulnerable transmission and storage of key information while maintaining encrypted communication security.
Data Source
AI summary
A semiconductor device has: a unique code generating unit generating an initial unique code which is a value unique to a device and includes an error in a random bit; a first error correcting unit correcting an error in the initial unique code to generate an intermediate unique code; a second error correcting unit correcting an error in the intermediate unique code to generate a first determinate unique code; and a decrypting unit decrypting, with the first determinate unique code, transmission data obtained by encrypting confidential information with key information generated on the basis of the intermediate unique code by an external device to generate confidential information.