首页> 外文学位 >Lightweight Silicon-based Security Concept, Implementations, and Protocols.
【24h】

Lightweight Silicon-based Security Concept, Implementations, and Protocols.

机译:轻量级的基于硅的安全性概念,实现和协议。

获取原文
获取原文并翻译 | 示例

摘要

Advancement in cryptography over the past few decades has enabled a spectrum of security mechanisms and protocols for many applications. Despite the algorithmic security of classic cryptography, there are limitations in application and implementation of standard security methods in ultra-low energy and resource constrained systems. In addition, implementations of standard cryptographic methods can be prone to physical attacks that involve hardware level invasive or non-invasive attacks.;Physical unclonable functions (PUFs) provide a complimentary security paradigm for a number of application spaces where classic cryptography has shown to be inefficient or inadequate for the above reasons. PUFs rely on intrinsic device-dependent physical variation at the microscopic scale. Physical variation results from imperfections and random fluctuations during the manufacturing process which impact each device's characteristics in a unique way. PUFs at the circuit level amplify and capture variation in electrical characteristics to derive and establish a unique device-dependent challenge-response mapping.;Prior to this work, PUF implementations were unsuitable for low power applications and vulnerable to wide range of security attacks. This doctoral thesis presents a coherent framework to derive formal requirements to design architectures and protocols for PUFs. To the best of our knowledge, this is the first comprehensive work that introduces and integrates these pieces together. The contributions include an introduction of structural requirements and metrics to classify and evaluate PUFs, design of novel architectures to fulfill these requirements, implementation and evaluation of the proposed architectures, and integration into real-world security protocols.;First, I formally define and derive a new set of fundamental requirements and properties for PUFs. This work is the first attempt to provide structural requirements and guideline for design of PUF architectures. Moreover, a suite of statistical properties of PUF responses and metrics are introduced to evaluate PUFs.;Second, using the proposed requirements, new and efficient PUF architectures are designed and implemented on both analog and digital platforms. In this work, the most power efficient and smallest PUF known to date is designed and implemented on ASICs that exploits analog variation in sub-threshold leakage currents of MOS devices. On the digital platform, the first successful implementation of Arbiter-PUF on FPGA was accomplished in this work after years of unsuccessful attempts by the research community. I introduced a programmable delay tuning mechanism with pico-second resolution which serves as a key component in implementation of the Arbiter-PUF on FPGA. Full performance analysis and comparison is carried out through comprehensive device simulations as well as measurements performed on a population of FPGA devices.;Finally, I present the design of low-overhead and secure protocols using PUFs for integration in lightweight identification and authentication applications. The new protocols are designed with elegant simplicity to avoid the use of heavy hash operations or any error correction. The first protocol uses a time bound on the authentication process while second uses a pattern-matching index-based method to thwart reverse-engineering and machine learning attacks. Using machine learning methods during the commissioning phase, a compact representation of PUF is derived and stored in a database for authentication.
机译:在过去的几十年中,加密技术的进步为许多应用程序提供了一系列安全机制和协议。尽管经典密码术具有算法安全性,但在超低能耗和资源受限的系统中,标准安全性方法的应用和实现仍存在局限性。此外,标准加密方法的实现可能容易受到涉及硬件级别的侵入式或非侵入式攻击的物理攻击。物理不可克隆功能(PUF)为许多应用空间提供了互补的安全范例,这些空间已证明经典加密已成为由于上述原因导致效率低下或不足。 PUF在微观尺度上依赖于与设备相关的固有物理变化。物理变化是由制造过程中的缺陷和随机波动引起的,这些缺陷和波动以独特的方式影响每个设备的特性。电路级的PUF放大并捕获电气特性的变化,以推导并建立与设备有关的独特的挑战-响应映射。;在此工作之前,PUF实现不适合低功耗应用且容易受到广泛的安全攻击。该博士论文提出了一个一致的框架,可以得出PUF设计架构和协议的形式要求。据我们所知,这是将这些部分引入并整合在一起的第一项综合性工作。所做的贡献包括介绍用于对PUF进行分类和评估的结构要求和度量,设计满足这些要求的新颖体系结构,对所提议的体系结构进行实施和评估,以及将其集成到现实世界的安全协议中。首先,我正式定义和派生PUF的一组新的基本要求和属性。这项工作是为PUF体系结构的设计提供结构要求和指南的首次尝试。此外,引入了一组PUF响应和度量的统计属性来评估PUF。其次,使用提出的要求,在模拟和数字平台上设计并实现了新型高效的PUF体系结构。在这项工作中,迄今为止最省电,最小的PUF是在ASIC上设计和实现的,该ASIC利用MOS器件亚阈值泄漏电流的模拟变化。在数字平台上,经过多年研究团体的失败尝试,这项工作成功完成了Arbiter-PUF在FPGA上的首次成功实施。我介绍了一种具有皮秒分辨率的可编程延迟调整机制,该机制是在FPGA上实现Arbiter-PUF的关键组件。全面的性能分析和比较是通过全面的器件仿真以及对大量FPGA器件进行的测量来进行的。最后,我介绍了使用PUF集成在轻量识别和身份验证应用中的低开销和安全协议的设计。新协议的设计非常简洁,可以避免使用繁重的哈希操作或任何错误纠正。第一种协议在身份验证过程中使用时间限制,而第二种协议则使用基于模式匹配索引的方法来阻止逆向工程和机器学习攻击。在调试阶段使用机器学习方法,可以得出PUF的紧凑表示形式,并将其存储在数据库中以进行身份​​验证。

著录项

  • 作者

    Majzoobi, Mehrdad.;

  • 作者单位

    Rice University.;

  • 授予单位 Rice University.;
  • 学科 Computer engineering.;Computer science.;Electrical engineering.
  • 学位 Ph.D.
  • 年度 2013
  • 页码 183 p.
  • 总页数 183
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号