How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with ...How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with constrained resources,this paper proposes a lightweight physical-layer authentication protocol based on Physical Unclonable Function(PUF)and channel pre-equalization.PUF is employed as a secret carrier to provide authentication credentials for devices due to its hardware-based uniqueness and unclonable property.Meanwhile,the short-term reciprocity and spatio-temporal uniqueness of wireless channels are utilized to attach an authentication factor related to the spatio-temporal position of devices and to secure the transmission of authentication messages.The proposed protocol is analyzed formally and informally to prove its correctness and security against typical attacks.Simulation results show its robustness in various radio environments.Moreover,we illustrate the advantages of our protocol in terms of security features and complexity through performance comparison with existing authentication schemes.展开更多
In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole ...In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole system.In particular,the solidification of the root of trust in non-volatile memory(NVM)restricts the system’s dynamic updating capability,which is an obvious disadvantage in a rapidly changing security environment.To address this issue,this study proposes a novel approach to generate root security parameters using static random access memory(SRAM)physical unclonable functions(PUFs).SRAM PUFs,as a security primitive,show great potential in lightweight security solutions due to their inherent physical properties,low cost and scalability.However,the stability of SRAM PUFs in harsh environments is a key issue.These environmental conditions include extreme temperatures,high humidity,and strong electromagnetic radiation,all of which can affect the performance of SRAM PUFs.In order to ensure the stability of root safety parameters under these conditions,this study proposes an integrated approach that covers not only the acquisition of entropy sources,but also the implementation of algorithms and configuration management.In addition,this study develops a series of reliability-enhancing algorithms,including adaptive parameter selection,data preprocessing,auxiliary data generation,and error correction,which are essential for improving the performance of SRAM PUFs in harsh environments.Based on these techniques,this study establishes six types of secure parameter generation mechanisms,which not only improve the security of the system,but also enhance its adaptability in variable environments.Through a series of experiments,we verify the effectiveness of the proposed method.Under 10 different environmental conditions,our method is able to achieve full recovery of security data with an error rate of less than 25%,which proves the robustness and reliability of our method.These results not only provide strong evidence for the stability of SRAM PUFs in practical applications,but also provide a new direction for future research in the field of smart terminal security.展开更多
基金supported by National Natural Science Foundation of China(No.61931020,No.U19B2024 and No.62371462).
文摘How to ensure the security of device access is a common concern in the Internet of Things(IoT)scenario with extremely high device connection density.To achieve efficient and secure network access for IoT devices with constrained resources,this paper proposes a lightweight physical-layer authentication protocol based on Physical Unclonable Function(PUF)and channel pre-equalization.PUF is employed as a secret carrier to provide authentication credentials for devices due to its hardware-based uniqueness and unclonable property.Meanwhile,the short-term reciprocity and spatio-temporal uniqueness of wireless channels are utilized to attach an authentication factor related to the spatio-temporal position of devices and to secure the transmission of authentication messages.The proposed protocol is analyzed formally and informally to prove its correctness and security against typical attacks.Simulation results show its robustness in various radio environments.Moreover,we illustrate the advantages of our protocol in terms of security features and complexity through performance comparison with existing authentication schemes.
基金supported by National key Research and Development Program“Security Protection Technology for Critical Information Infrastructure of Distribution Network”(2022YFB3105100).
文摘In the context of the diversity of smart terminals,the unity of the root of trust becomes complicated,which not only affects the efficiency of trust propagation,but also poses a challenge to the security of the whole system.In particular,the solidification of the root of trust in non-volatile memory(NVM)restricts the system’s dynamic updating capability,which is an obvious disadvantage in a rapidly changing security environment.To address this issue,this study proposes a novel approach to generate root security parameters using static random access memory(SRAM)physical unclonable functions(PUFs).SRAM PUFs,as a security primitive,show great potential in lightweight security solutions due to their inherent physical properties,low cost and scalability.However,the stability of SRAM PUFs in harsh environments is a key issue.These environmental conditions include extreme temperatures,high humidity,and strong electromagnetic radiation,all of which can affect the performance of SRAM PUFs.In order to ensure the stability of root safety parameters under these conditions,this study proposes an integrated approach that covers not only the acquisition of entropy sources,but also the implementation of algorithms and configuration management.In addition,this study develops a series of reliability-enhancing algorithms,including adaptive parameter selection,data preprocessing,auxiliary data generation,and error correction,which are essential for improving the performance of SRAM PUFs in harsh environments.Based on these techniques,this study establishes six types of secure parameter generation mechanisms,which not only improve the security of the system,but also enhance its adaptability in variable environments.Through a series of experiments,we verify the effectiveness of the proposed method.Under 10 different environmental conditions,our method is able to achieve full recovery of security data with an error rate of less than 25%,which proves the robustness and reliability of our method.These results not only provide strong evidence for the stability of SRAM PUFs in practical applications,but also provide a new direction for future research in the field of smart terminal security.
