论文标题
具有时间变化的可重新配置双LFSR的船员PUF的身份验证,以反对中间人的攻击
Authentication against Man-in-the-Middle Attack with a Time-variant Reconfigurable Dual-LFSR-based Arbiter PUF
论文作者
论文摘要
随着物联网行业的扩展,物联网设备的信息安全吸引了很多关注。传统的加密算法需要敏感的信息,例如要存储在内存中的密钥,并且还需要对操作系统的支持,这对于资源约束的物联网终端是不可接受的。在制造过程偏差,激励和响应之间引入相应功能关系的过程中,通过提取芯片而不可避免地通过提取芯片来进行物理而不是克隆功能,而不需要存储用户敏感信息,并且只有在电力响应时,电力响应立即消失,这可以节省大量的设备资源以及电力消耗。但是,PUF容易受到建模攻击的影响,诸如挑战混淆方法之类的传统方法是时间不变的,这相当于在传统的APUF电路的前阶段添加固定功能。因此,它可能是通过足够的CRP攻击的潜在建模。为了进一步增强APUF电路对建模攻击的抵抗力,本文提出了一个基于双LFSR的APUF电路,具有时间变化的挑战混淆。此外,传统的身份验证方案通常采用一次性关键方案来增强对中间攻击的抵抗力。本文提出的两次身份验证方案可以提高RFID系统在不牺牲CRP的情况下抵制中间人攻击的能力。
With the expansion of the Internet of Things industry, the information security of Internet of Things devices attracts much attention. Traditional encryption algorithms require sensitive information such as keys to be stored in memory, and also need the support of operating system, which is obviously unacceptable for resource-constrained Internet of Things terminals. Physical not cloning function by extracting the chip is inevitable in the process of manufacturing process deviation, the introduction of the corresponding function relationship between incentive and response, not to need the storage user sensitive information, and only when electricity will respond, in power response immediately disappear, this can save a lot of resources of equipment and the power consumption. However, PUF is vulnerable to modeling attacks, and the traditional methods such as the challenge obfuscation method are time-invariant, which is equivalent to adding a fixed function to the front stage of a traditional APUF circuit. Therefore, it can be potentially modelling attacked with sufficient CRPs. In order to further enhance APUF circuit resistance to modelling attack, this paper proposes a dual-LFSR-based APUF circuit with time-variant challenge obfuscation. Besides, traditional authentication scheme generally adopts the one-time key scheme to enhance resistance to man-in-the-middle attack. The two-time authentication scheme proposed in this paper can improve the ability of RFID system to resist man-in-the-middle attack without sacrificing CRPs.