Design & development of public-key based authentication architecture for IoT devices using PUF

Design & development of public-key based authentication architecture for IoT devices using PUF

Akhundov, H.

Hamdioui, S. (mentor)

Electrical Engineering, Mathematics and Computer Science

Quantum Engineering

Computer Engineering

CE-MS-2017-02

2017-01-30

Secure communication has been paramount throughout history. Although in the early ages it was mainly found in niche applications such as the military and royal society, today it is an inevitable part of our daily lives. The recent rapid proliferation of Internet of Things (IoT), a diverse set of devices that are connected to the Internet, imposes new challenges in protecting our privacy and security in our daily connected lives. In most cases, one-size-fits-all security solutions are inefficient; therefore, we need high-quality application-specific solutions. This thesis designs, develops and evaluates a secure communication architecture based on Static Random-Access Memory (SRAM) Physical Unclonable Function (PUF) technology and Elliptic Curve Cryptography (ECC) for IoT devices in collaboration with Intrinsic ID, a world leading PUF technology company. SRAM PUF is a popular emerging hardware intrinsic security primitive: its start-up values (SUV) can be used to uniquely identify and authenticate silicon, due to the hard to clone, inherent and device unique deep-submicron process variations. ECC is an approach to public-key cryptography, which can be used to establish shared secret keys among parties; it has been gaining popularity among lightweight IoT devices because achieving equivalent security level requires significantly smaller operands when compared to other approaches. Our solution consists of two systematic steps: (1) development of a cryptographic protocol which utilizes PUF-derived key as the root-of-trust, while keeping the area constraint into account, and (2) design and development of a modular hardware architecture that supports the protocol. We propose four protocol variants with trade-offs related to security versus implementation requirements. Further, we verify and prototype one protocol variant on the Xilinx Zynq-7000 APSoC device, and analyze its practicality as well as its feasibility. The prototype offers interesting insights and lays a solid foundation for future research.

Security
authentication
PUF
public-key cryptography
protocol
communication

http://resolver.tudelft.nl/uuid:58ad76d8-4552-461e-aa61-54299d021bd1

Student theses

master thesis

(c) 2017 Akhundov, H.