Abstract:Traditional authentication in radio-frequency (RF) systems enable secure data communication within a network through techniques such as digital signatures and hash-based message authentication codes (HMAC), which suffer from key-recovery attacks. State-of-the-art Internet of Things networks such as Nest also use open authentication (OAuth 2.0) protocols that are vulnerable to cross-site-recovery forgery (CSRF), which shows that these techniques may not prevent an adversary from copying or modeling the secret IDs or encryption keys using invasive, side channel, learning or software attacks. Physical unclonable functions (PUFs), on the other hand, can exploit manufacturing process variations to uniquely identify silicon chips which makes a PUF-based system extremely robust and secure at low cost, as it is practically impossible to replicate the same silicon characteristics across dies. Taking inspiration from human communication, which utilizes inherent variations in the voice signatures to identify a certain speaker, we present RF-PUF: a deep neural network-based framework that allows real-time authentication of wireless nodes, using the effects of inherent process variation on RF properties of the wireless transmitters (Tx), detected through in-situ machine learning at the receiver (Rx) end. The proposed method utilizes the already-existing asymmetric RF communication framework and does not require any additional circuitry for PUF generation or feature extraction. The burden of device identification is completely shifted to the gateway Rx, similar to the operation of a human listener’s brain. Simulation results involving the process variations in a standard 65-nm technology node, and features such as local oscillator offset and ${I}$ – ${Q}$ imbalance detected with a neural network having 50 neurons in the hidden layer indicate that the framework can distinguish up to 4800 Tx(s) with an accuracy of 99.9% [≈99% for 10000 Tx(s)] under varying channel conditions, and without the need for traditional preambles. The proposed scheme can be used as a stand-alone security feature, or as a part of traditional multifactor authentication.

SDRLAP: A secure lightweight RFID mutual authentication protocol based on PUF with strong desynchronization resistance

Scalable Pseudo Random RFID Private Mutual Authentication

Lightweight Authentication Protocol Based on Physical Unclonable Function

PUF-Based RFID Authentication Protocol Against Secret Key Leakage

A Novel RFID Authentication Protocol Based on Reconfigurable RRAM PUF

Dynamic Key-Updating: Privacy-Preserving Authentication for RFID Systems

Randomizing RFID Private Authentication

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

A Secure RFID Authentication Protocol Adopting Error Correction Code

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

Security and Privacy on Authentication Protocol for Low-cost RFID

Rapdos: A RFID Authentication Protocol for Defending Against DoS

Ultra-Lightweight Mutual Authentication Protocol to Prevent Replay Attacks for Low-Cost RFID Tags

Design and Analysis of an ID-updated Mutual Authentication Protocol for Mobile RFID System

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

A Double Random Number Based Secure Communication Mechanism of RFID Discovery Service

Who Stole My Cheese?: Verifying Intactness of Anonymous RFID Systems

RF-PUF: Enhancing IoT Security Through Authentication of Wireless Nodes Using In-Situ Machine Learning

ACTION: Breaking the Privacy Barrier for RFID Systems.

Improvement of Lightweight RFID Authentication Protocol