随着汽车智能化的发展,汽车内的电子控制单元(Electronic Control Unit,ECU)数量激增,因CAN总线自身的特点,挂载在总线上的ECU缺乏必要的安全保护。为此,提出了基于物理不可克隆函数(Physical Unclonable Functions,PUF)的车载网络ECU...随着汽车智能化的发展,汽车内的电子控制单元(Electronic Control Unit,ECU)数量激增,因CAN总线自身的特点,挂载在总线上的ECU缺乏必要的安全保护。为此,提出了基于物理不可克隆函数(Physical Unclonable Functions,PUF)的车载网络ECU身份认证方案。该方案利用PUF的物理特征动态生成密钥,将身份认证划分为两个关联结合阶段,以满足车载网络实时性和安全性的双重需求。在车辆出厂前的非实时场景下,采用数字证书完成ECU间的注册。在车辆启动的实时场景下,基于认证链建立“一次一密”的快速身份认证机制。采用仿真测试对该方案的性能进行了评估,并与其他认证方案进行对比。实验结果表明,该方案可以同时满足车载网络在实时性和安全性方面的需求。展开更多
How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with ...How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with constrained resources,this paper proposes a lightweight physical-layer authentication protocol based on Physical Unclonable Function(PUF)and channel pre-equalization.PUF is employed as a secret carrier to provide authentication credentials for devices due to its hardware-based uniqueness and unclonable property.Meanwhile,the short-term reciprocity and spatio-temporal uniqueness of wireless channels are utilized to attach an authentication factor related to the spatio-temporal position of devices and to secure the transmission of authentication messages.The proposed protocol is analyzed formally and informally to prove its correctness and security against typical attacks.Simulation results show its robustness in various radio environments.Moreover,we illustrate the advantages of our protocol in terms of security features and complexity through performance comparison with existing authentication schemes.展开更多
In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole ...In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole system.In particular,the solidification of the root of trust in non-volatile memory(NVM)restricts the system’s dynamic updating capability,which is an obvious disadvantage in a rapidly changing security environment.To address this issue,this study proposes a novel approach to generate root security parameters using static random access memory(SRAM)physical unclonable functions(PUFs).SRAM PUFs,as a security primitive,show great potential in lightweight security solutions due to their inherent physical properties,low cost and scalability.However,the stability of SRAM PUFs in harsh environments is a key issue.These environmental conditions include extreme temperatures,high humidity,and strong electromagnetic radiation,all of which can affect the performance of SRAM PUFs.In order to ensure the stability of root safety parameters under these conditions,this study proposes an integrated approach that covers not only the acquisition of entropy sources,but also the implementation of algorithms and configuration management.In addition,this study develops a series of reliability-enhancing algorithms,including adaptive parameter selection,data preprocessing,auxiliary data generation,and error correction,which are essential for improving the performance of SRAM PUFs in harsh environments.Based on these techniques,this study establishes six types of secure parameter generation mechanisms,which not only improve the security of the system,but also enhance its adaptability in variable environments.Through a series of experiments,we verify the effectiveness of the proposed method.Under 10 different environmental conditions,our method is able to achieve full recovery of security data with an error rate of less than 25%,which proves the robustness and reliability of our method.These results not only provide strong evidence for the stability of SRAM PUFs in practical applications,but also provide a new direction for future research in the field of smart terminal security.展开更多
文摘随着汽车智能化的发展,汽车内的电子控制单元(Electronic Control Unit,ECU)数量激增,因CAN总线自身的特点,挂载在总线上的ECU缺乏必要的安全保护。为此,提出了基于物理不可克隆函数(Physical Unclonable Functions,PUF)的车载网络ECU身份认证方案。该方案利用PUF的物理特征动态生成密钥,将身份认证划分为两个关联结合阶段,以满足车载网络实时性和安全性的双重需求。在车辆出厂前的非实时场景下,采用数字证书完成ECU间的注册。在车辆启动的实时场景下,基于认证链建立“一次一密”的快速身份认证机制。采用仿真测试对该方案的性能进行了评估,并与其他认证方案进行对比。实验结果表明,该方案可以同时满足车载网络在实时性和安全性方面的需求。
文摘不经意传输(OT,oblivious transfer)协议是密码学中的一个基本协议。基于物理不可克隆函数(PUF,physical unclonable function)给出物理不可克隆函数系统(PUFS,physical unclonable function system)的概念,并在此基础上提出一个新的不经意传输协议(POT,PUFS based OT),最后在通用可组合(UC,universal composition)框架内给出POT协议抵抗静态敌手的安全性证明。相比于传统基于公钥加密的OT方案,POT协议不使用任何可计算的假设,而是基于PUFS的安全属性实现,因此在很大程度上减小了计算和通信开销。
基金supported by National Natural Science Foundation of China(No.61931020,No.U19B2024 and No.62371462).
文摘How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with constrained resources,this paper proposes a lightweight physical-layer authentication protocol based on Physical Unclonable Function(PUF)and channel pre-equalization.PUF is employed as a secret carrier to provide authentication credentials for devices due to its hardware-based uniqueness and unclonable property.Meanwhile,the short-term reciprocity and spatio-temporal uniqueness of wireless channels are utilized to attach an authentication factor related to the spatio-temporal position of devices and to secure the transmission of authentication messages.The proposed protocol is analyzed formally and informally to prove its correctness and security against typical attacks.Simulation results show its robustness in various radio environments.Moreover,we illustrate the advantages of our protocol in terms of security features and complexity through performance comparison with existing authentication schemes.
基金supported by National key Research and Development Program“Security Protection Technology for Critical Information Infrastructure of Distribution Network”(2022YFB3105100).
文摘In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole system.In particular,the solidification of the root of trust in non-volatile memory(NVM)restricts the system’s dynamic updating capability,which is an obvious disadvantage in a rapidly changing security environment.To address this issue,this study proposes a novel approach to generate root security parameters using static random access memory(SRAM)physical unclonable functions(PUFs).SRAM PUFs,as a security primitive,show great potential in lightweight security solutions due to their inherent physical properties,low cost and scalability.However,the stability of SRAM PUFs in harsh environments is a key issue.These environmental conditions include extreme temperatures,high humidity,and strong electromagnetic radiation,all of which can affect the performance of SRAM PUFs.In order to ensure the stability of root safety parameters under these conditions,this study proposes an integrated approach that covers not only the acquisition of entropy sources,but also the implementation of algorithms and configuration management.In addition,this study develops a series of reliability-enhancing algorithms,including adaptive parameter selection,data preprocessing,auxiliary data generation,and error correction,which are essential for improving the performance of SRAM PUFs in harsh environments.Based on these techniques,this study establishes six types of secure parameter generation mechanisms,which not only improve the security of the system,but also enhance its adaptability in variable environments.Through a series of experiments,we verify the effectiveness of the proposed method.Under 10 different environmental conditions,our method is able to achieve full recovery of security data with an error rate of less than 25%,which proves the robustness and reliability of our method.These results not only provide strong evidence for the stability of SRAM PUFs in practical applications,but also provide a new direction for future research in the field of smart terminal security.
