Abstract:Physical unclonable function (PUF) has emerged as an attractive hardware primitive for lightweight authentication in the Internet of Things (IoT). However, strong-PUF-based authentication schemes are threatened by powerful machine learning attacks. Therefore, dedicated lightweight protocols are required to preserve the privacy of the embedded strong PUF. In this article, we show that the "availability" and "reliability" features of Shamir's secret sharing (SSS) can be applied to address the security issue. In protocol A, the mappings between challenges and responses are randomly shuffled to resist the machine learning attacks. Leveraging the "availability" feature of SSS, the verification process is unaffected by the randomized challenge–response pairs (CRPs) at the server end. Moreover, the "reliability" feature of SSS provides the error-tolerant characteristic in our protocol, which is suitable for the noisy PUFs. Protocol A also presented a method to securely store the CRPs at the server side. The improved protocol A optimizes protocol A by eliminating the response storage and matching process at the server end. In protocol B, we present a mutual authentication protocol, where no response is exposed to the adversary. Protocol B can be classified as the lightweight protocol because it can avoid the use of cryptographic algorithms and error-correcting codes. We rigorously analyze and prove the security of our protocols with formal security proofs, informal security analysis, and several selected machine learning techniques, including logistic regression (LR), the deep neural network (DNN), approximate attack, AutoGluon-Tabular, and a new brute-force machine learning attack. Furthermore, we present an efficient implementation of our protocols on FPGA. The experimental results sh-w the feasibility and practicability of our protocols under different parameters.

A PUF-based provably secure message authentication algorithm and application

Lightweight Authentication Protocol Based on Physical Unclonable Function

A novel lightweight PUF-based RFID mutual authentication protocol

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

A lightweight PUF-based authentication protocol

PUF-Based RFID Authentication Protocol Against Secret Key Leakage

A New Message Authentication Code and Its Security Proof

Novel Strong-PUF-based Authentication Protocols Leveraging Shamir’s Secret Sharing

A Mutual Security Authentication Method for RFID-PUF Circuit Based on Deep Learning

PUF-RLA: A PUF-based Reliable and Lightweight Authentication Protocol employing Binary String Shuffling

A PUF Secured Lightweight Mutual Authentication Protocol for Multi-UAV Networks

Secure Lightweight Entity Authentication with Strong PUFs: Mission Impossible?

A Lightweight Authentication Protocol Against Modeling Attacks Based on a Novel LFSR-APUF

PUF-AES-PUF: a novel PUF architecture against non-invasive attacks

Locking Secret Data in the Vault Leveraging Fuzzy PUFs

On the Security of Encrypt-and-MAC Paradigm

A PUF‐based Lightweight Authentication and Key Agreement Protocol for Smart UAV Networks

A PUF Taxonomy

Old School, New Primitive: Toward Scalable PUF-Based Authenticated Encryption Scheme in IoT

Security Analysis of Machine Learning-Based PUF Enrollment Protocols: A Review

A Novel RFID Authentication Protocol Based on Reconfigurable RRAM PUF