Abstract:Physical unclonable function (PUF) has emerged as an attractive hardware primitive for lightweight authentication in the Internet of Things (IoT). However, strong-PUF-based authentication schemes are threatened by powerful machine learning attacks. Therefore, dedicated lightweight protocols are required to preserve the privacy of the embedded strong PUF. In this article, we show that the "availability" and "reliability" features of Shamir's secret sharing (SSS) can be applied to address the security issue. In protocol A, the mappings between challenges and responses are randomly shuffled to resist the machine learning attacks. Leveraging the "availability" feature of SSS, the verification process is unaffected by the randomized challenge–response pairs (CRPs) at the server end. Moreover, the "reliability" feature of SSS provides the error-tolerant characteristic in our protocol, which is suitable for the noisy PUFs. Protocol A also presented a method to securely store the CRPs at the server side. The improved protocol A optimizes protocol A by eliminating the response storage and matching process at the server end. In protocol B, we present a mutual authentication protocol, where no response is exposed to the adversary. Protocol B can be classified as the lightweight protocol because it can avoid the use of cryptographic algorithms and error-correcting codes. We rigorously analyze and prove the security of our protocols with formal security proofs, informal security analysis, and several selected machine learning techniques, including logistic regression (LR), the deep neural network (DNN), approximate attack, AutoGluon-Tabular, and a new brute-force machine learning attack. Furthermore, we present an efficient implementation of our protocols on FPGA. The experimental results sh-w the feasibility and practicability of our protocols under different parameters.

A lightweight PUF-based authentication protocol

Lightweight Authentication Protocol Based on Physical Unclonable Function

A Lightweight and Secure PUF-Based Authentication and Key-exchange Protocol for IoT Devices

Obfuscated Challenge-Response: A Secure Lightweight Authentication Mechanism For Puf-Based Pervasive Devices

A Lightweight Authentication Protocol Against Modeling Attacks Based on a Novel LFSR-APUF

A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT

Modeling Attack Resilient Reconfigurable Latent Obfuscation Technique for PUF based Lightweight Authentication

Secure Lightweight Entity Authentication with Strong PUFs: Mission Impossible?

A Novel Configurable RO-Obfuscated PUF Design with Machine Learning Immunity

Design of Efficient Anonymous Identity Authentication Protocol for Lightweight IoT Devices

A Survey on Lightweight Entity Authentication with Strong PUFs

Lightweight Strong PUF for Resource-Constrained Devices

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

A novel lightweight PUF-based RFID mutual authentication protocol

A Lightweight Cross-layer Mutual Authentication with Key Agreement Protocol for IIoT

PUF-RLA: A PUF-based Reliable and Lightweight Authentication Protocol employing Binary String Shuffling

On the Security of a PUF-Based Authentication and Key Exchange Protocol for IoT Devices.

Novel Strong-PUF-based Authentication Protocols Leveraging Shamir’s Secret Sharing

A Challenge Obfuscation Method for Thwarting Model Building Attacks on PUFs.

Lightweight Hardware Based Secure Authentication Scheme for Fog Computing

A Lightweight and Machine-Learning-Resistant PUF Using Obfuscation-Feedback-Shift-Register