面向物联网IP核保护的轻量化认证

doi:10.19665/j.issn1001-2400.2019.05.009

西安电子科技大学学报 ›› 2019, Vol. 46 ›› Issue (5): 62-68.doi: 10.19665/j.issn1001-2400.2019.05.009

面向物联网IP核保护的轻量化认证

陈博^1,²,汪鹏君^1,²(),李刚²

^1. 宁波大学信息科学与工程学院,浙江宁波 315211
^2. 温州大学数理与电子信息工程学院,浙江温州 325035

收稿日期:2019-04-19 出版日期:2019-10-20 发布日期:2019-10-30
通讯作者: 汪鹏君
作者简介:陈博(1981—),男,讲师, 宁波大学博士研究生,E-mail:chenbo@wzu.edu.cn.
基金资助:
国家自然科学基金(61874078);温州市科技创新团队重点项目(C20170005);温州市基础性工业科技项目(G20180010)

Lightweight authentication mechanism for IP protection of IoT

CHEN Bo^1,²,WANG Pengjun^1,²(),LI Gang²

^1. College of Information Science and Engineering, Ningbo University, Ningbo 315211, China
^2. College of Mathematics, Physics and Electronic Information Engineering, Wenzhou University, Wenzhou 325035, China

Received:2019-04-19 Online:2019-10-20 Published:2019-10-30
Contact: Pengjun WANG

摘要/Abstract

摘要：

针对物联网设备和应用的低功耗、微型化等特点,利用物理不可克隆函数和有限状态机模型,提出一种安全且轻量化的认证方案,不仅可以有效地避免面向物联网的IP核被克隆和物理攻击,而且可以防止IP核的盗用和滥用。认证方案以两种混合的物理不可克隆函数为基础,采用三级有限状态机设计,具备错误纠正机制,目的是在不使用复杂计算和不消耗大量硬件资源的前提下,保证物联网设备和应用中的IP核安全并缩减时序复杂度,同时还可以对IP核进行授权使用。实验结果表明,对比已有的一些IP核保护策略,该方案在面积和功耗等轻量化属性上具有较为明显的优势。

关键词: 物联网, 物理不可克隆函数, 有限状态机, 知识产权

Abstract:

This paper proposes a secure and lightweight authentication mechanism, which is signed with the physical unclonable functions (PUF) and finite state machines (FSM), because of the characteristics of low-power and micromation of the Internet of Things (IoT) devices and applications. The model can protect intellectual property (IP) cores from cloning, physical attacks, unauthorized user access, and misuse. The three-level FSM is used to design the authentication with error correction, based on two kinds of hybrid PUF. The goal is to protect IP cores in IoT devices and applications, to reduce the time complexity without using any complex algorithms and huge hardware resources, and to authorize the use. Experimental results show that the lightweight properties such as area and power consumption have obvious advantages compared with existing IP protection.

Key words: internet of things, physical unclonable functions, finite state machines, intellectual property

中图分类号:

TP309

陈博,汪鹏君,李刚. 面向物联网IP核保护的轻量化认证[J]. 西安电子科技大学学报, 2019, 46(5): 62-68.

CHEN Bo,WANG Pengjun,LI Gang. Lightweight authentication mechanism for IP protection of IoT[J]. Journal of Xidian University, 2019, 46(5): 62-68.

图/表 8

图1

图2

图3

图4

图5

表1

表2

图6

参考文献 14

[1]	马巧梅 . 物联网安全与隐私保护研究[J]. 微处理机, 2014,35(2):32-34.
	MA Qiaomei . Research on Security and Privacy Protection of Internet of Things[J]. Microprocessors, 2014,35(2):32-34.
[2]	武传坤 . 物联网安全关键技术与挑战[J]. 密码学报, 2015,2(1):40-53.
	WU Chuankun . An Overview on the Security Techniques and Challenges of the Internet of Things[J]. Journal of Cryptologic Research, 2015,2(1):40-53.
[3]	ZHANG J L, LIN Y P, LYU Y Q , et al. A PUF-FSM Binding Scheme for FPGA IP Protection and Pay-per-device Licensing[J]. IEEE Transactions on Information Forensics and Security, 2015,10(6):1137-1150.
[4]	AMAN M N, SIKDAR B . ATT-Auth: a Hybrid Protocol for Industrial IoT Attestation with Authentication[J]. IEEE Internet of Things Journal, 2018,5(6):5119-5131.
[5]	刘博雅, 张悦, 杨亚涛 , 等. 基于PUF函数的轻量级双向认证协议[J]. 计算机工程, 2019,45(2):38-41. doi: 10.19678/j.issn.1000-3428.0049344
	LIU Boya, ZHANG Yue, YANG Yatao , et al. Lightweight Mutual Authentication Protocol Based on PUF Function[J]. Computer Engineering, 2019,45(2):38-41. doi: 10.19678/j.issn.1000-3428.0049344
[6]	张国栋, 刘强, 张齐军 . 用于FPGA IP保护的低成本高性能PUF设计[J]. 西安电子科技大学学报, 2016,43(6):97-102.
	ZHANG Guodong, LIU Qiang, ZHANG Qijun . Low Cost and High Performance RO-PUF Design for IP Protection of FPGA Implementations[J]. Journal of Xidian University, 2016,43(6), 97-102.
[7]	KUMAR S S, GUAJARDO J, MAES R, et al. The Butterfly PUF Protecting IP on Every FPGA[C]// Proceedings of the 2008 IEEE International Workshop on Hardware-Oriented Security and Trust. Washington: IEEE Computer Society, 2008: 67-70.
[8]	张紫楠, 郭渊博 . 物理不可克隆函数综述[J]. 计算机应用, 2012,32(11):3115-3120. doi: 10.3724/SP.J.1087.2012.03115
	ZHANG Zinan, GUO Yuanbo . Survey of Physical Unclonable Function[J]. Journal of Computer Applications, 2012,32(11):3115-3120. doi: 10.3724/SP.J.1087.2012.03115
[9]	USMANI M A, KESHAVARZ S, MATTHEWS E , et al. Efficient PUF-based Key Generation in FPGAs Using Per-device Configuration[J]. IEEE Transactions on Very Large Scale Integration Systems, 2019,27(2):364-375.
[10]	YU T T, ZHU Y S. A New Water-marking Method for Soft IP Protection[C]// Proceedings of the 2011 International Conference on Consumer Electronics, Communications and Networks. Washington: IEEE Computer Society, 2011: 3839-3842.
[11]	HAGHIGHI M M, ZAMANI M S. Soft IP Protection: an Active Approach Based on Hardware Authentication[C]// Proceedings of the 2016 24th Iranian Conference on Electrical Engineering. Piscataway: IEEE, 2016: 1049-1054.
[12]	LAO Y J, YUAN B, KIM C H , et al. Reliable PUF-based Local Authentication with Self-correction[J]. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2017,36(2):201-213.
[13]	MISKELLY J, GU C Y, MA Q Q, et al. Modeling Attack Analysis of Configurable Ring Oscillator (CRO) PUF Designs[C]// Proceedings of 2018 the International Conference on Digital Signal Processing. Piscataway: IEEE, 2018: 8631638.
[14]	DELVAUX J . Machine-learning Attacks on PolyPUFs, OB-PUFs, RPUFs, LHS-PUFs, and PUF-FSMs[J]. IEEE Transactions on Information Forensics and Security, 2019,14(8):2043-2058.

PUF类型	响应位数	平均汉明距离的稳定性/%	平均汉明距离的惟一性/%
环形振荡器PUF	4 8 16 32	5.000 4.250 2.875 1.875	47.50 48.62 48.16 48.83
蝴蝶PUF	4 8 16 32	9.500 8.250 6.750 3.938	42.24 43.62 44.28 44.56

面向物联网IP核保护的轻量化认证

Lightweight authentication mechanism for IP protection of IoT

RichHTML

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

图/表 8

参考文献 14

相关文章 11

Metrics

本文评价

推荐阅读 10

[1]	李兴华,蔡觉平,李晓龙,王峰,闫振华. T-NTRU物联网动态接入认证技术[J]. 西安电子科技大学学报, 2021, 48(3): 188-196.
[2]	苏景瑞,任光亮,王奇伟,辛吉荣. 卫星物联网中ZigZag-IRSA随机接入方案[J]. 西安电子科技大学学报, 2020, 47(6): 50-57.
[3]	谢丽霞,魏瑞炘. 一种面向物联网节点的综合信任度评估模型[J]. 西安电子科技大学学报, 2019, 46(4): 58-65.
[4]	孟凡振;刘宏;汪明亮;林水样;田彤. 用于物联网的带滤波CMOS低功耗欠采样器设计[J]. 西安电子科技大学学报, 2017, 44(3): 108-113.
[5]	孟凡振;刘宏;汪明亮;林水样;田彤. 用于物联网通信的低功耗唤醒接收机设计[J]. 西安电子科技大学学报, 2017, 44(2): 95-100.
[6]	张国栋;刘强;张齐军. 用于FPGA IP保护的低成本高性能PUF设计[J]. 西安电子科技大学学报, 2016, 43(6): 97-102.
[7]	郭晶晶;马建峰. 面向虚拟社区物联网的信任推荐算法[J]. J4, 2015, 42(2): 52-57+179.
[8]	鱼滨;张琛;李文静. 多Agent协同系统的Pi演算建模方法[J]. J4, 2014, 41(6): 76-82.
[9]	张紫楠;郭渊博;杨奎武;黄惠新;杨占海. 通用可组合认证密钥交换协议[J]. J4, 2014, 41(5): 185-191.
[10]	任方;马建峰;郝选文. 物联网感知层一种基于属性的访问控制机制[J]. J4, 2012, 39(2): 66-72.
[11]	石迎波;李云松;张建龙. 一种高效的H.264 CABAC解码器的VLSI结构[J]. J4, 2006, 33(6): 844-848.