Abstract:The challenge of authenticating Internet of Things (IoT) devices, particularly in low-cost deployments with constrained nodes that struggle with dynamic re-keying solutions, renders these devices susceptible to various attacks. This paper introduces a robust alternative mitigation strategy based on Physical-Layer Authentication (PLA), which leverages the intrinsic physical layer characteristics of IoT devices. These unique imperfections, stemming from the manufacturing process of IoT electronic integrated circuits (ICs), are difficult to replicate or falsify and vary with each function executed by the IoT device. We propose a novel lightweight authentication scheme, MAG-PUFs, that uses the unintentional Electromagnetic (EM) emissions from IoT devices as Physical Unclonable Functions (PUFs). MAG-PUFs operate by collecting these unintentional EM emissions during the execution of pre-defined reference functions by the IoT devices. The authentication is achieved by matching these emissions with profiles recorded at the time of enrollment, using state-of-the-art Deep Learning (DL) approaches such as Neural Networks (NN) and Autoencoders. Notably, MAG-PUFs offer compelling advantages: (i) it preserves privacy, as it does not require direct access to the IoT devices; and, (ii) it provides unique flexibility, permitting the selection of numerous and varied reference functions. We rigorously evaluated MAG-PUFs using 25 Arduino devices and a diverse set of 325 reference function classes. Employing a DL framework, we achieved a minimum authentication F1-Score of 0.99. Furthermore, the scheme's efficacy in detecting impostor EM emissions was also affirmed, achieving a minimum F1-Score of 0.99. We also compared our solution to other solutions in the literature, showing its remarkable performance. Finally, we discussed code obfuscation techniques and the impact of Radio Frequency (RF) interference on the IoT authentication process.

Lightweight Authentication Protocol Based on Physical Unclonable Function

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

A lightweight PUF-based authentication protocol

A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT

A Lightweight and Secure PUF-Based Authentication and Key-exchange Protocol for IoT Devices

A Lightweight Authentication Scheme for Power IoT Based on PUF and Chebyshev Chaotic Map

Lightweight Mutual Authentication among Sensors in Body Area Networks Through Physical Unclonable Functions

An efficient authentication scheme syncretizing physical unclonable function and revocable biometrics in Industrial Internet of Things

Gas Sensor Physically Unclonable Function-Based Lightweight Bidirectional Authentication Protocol for Gas Sensor Networks

Novel Strong-PUF-based Authentication Protocols Leveraging Shamir’s Secret Sharing

PhenoAuth: A Novel PUF-Phenotype-based Authentication Protocol for IoT Devices

Enhancing MQTT-SN Security with a Lightweight PUF-Based Authentication and Encrypted Channel Establishment Scheme

PUF-based mutual authentication and session key establishment protocol for IoT devices

Secure PUF-Based Authentication Systems

Lightweight Strong PUF for Resource-Constrained Devices

MAG-PUFs: Authenticating IoT devices via electromagnetic physical unclonable functions and deep learning

Access-based Lightweight Physical Layer Authentication for the Internet of Things Devices

Three-factor Authentication Protocol Using Physical Unclonable Function for IoV

A Strong Physical Unclonable Function with Machine Learning Immunity for Internet of Things Application

A Light-Weight Authentication Scheme for Air Force Internet of Things

A Robust Authentication Protocol for Wireless Medical Sensor Networks Using Blockchain and Physically Unclonable Functions