论文标题

基于电容PUF的安全封面的窃听通道

The Wiretap Channel for Capacitive PUF-Based Security Enclosures

论文作者

Garb, Kathrin, Xhemrishi, Marvin, Kürzinger, Ludwig, Frisch, Christoph

论文摘要

为了保护设备免受物理操作的侵害,开发了保护性安全围栏。但是,这些电池支持的解决方案的寿命降低,必须进行积极和持续的监控。为了克服这些弊端,已经开发了基于物理不元件功能(PUF)的无电容电容围栏,该外壳已经开发出生成键键键键(KEK)来解密钥匙链。为了可靠地重现PUF键并补偿噪声和环境影响的影响,关键产生包括误差校正代码。但是,旨在部分破坏外壳的钻井攻击也会改变PUF响应,并进行相同的误差校正程序。但是,纠正攻击效果是高度不受欢迎的,因为它会破坏围栏的安全概念。通常,设计误差校正代码以使它们对攻击提供篡改敏感性,同时仍然纠正噪声和环境效果是一项艰巨的任务。我们首先在外部影响和不同的后处理参数下首先分析PUF反应的行为来解决这个问题。由此,我们得出了基于PUF的外壳的系统模型,并从Q-Ary Polar Codes构建了窃听通道实现。我们在蒙特卡洛模拟中验证获得的误差校正方案,并证明我们的窃听通道实现可实现100位的物理层安全性,用于306位PUF-SECRET的熵。通过此,我们进一步开发了基于电容性PUF的安全外壳,并使它们更接近其商业部署。

In order to protect devices from physical manipulations, protective security enclosures were developed. However, these battery-backed solutions come with a reduced lifetime, and have to be actively and continuously monitored. In order to overcome these drawbacks, batteryless capacitive enclosures based on Physical Unclonable Functions (PUFs) have been developed that generate a key-encryption-key (KEK) for decryption of the key chain. In order to reproduce the PUF-key reliably and to compensate the effect of noise and environmental influences, the key generation includes error correction codes. However, drilling attacks that aim at partially destroying the enclosure also alter the PUF-response and are subjected to the same error correction procedures. Correcting attack effects, however, is highly undesirable as it would destroy the security concept of the enclosure. In general, designing error correction codes such that they provide tamper-sensitivity to attacks, while still correcting noise and environmental effects is a challenging task. We tackle this problem by first analyzing the behavior of the PUF-response under external influences and different post-processing parameters. From this, we derive a system model of the PUF-based enclosure, and construct a wiretap channel implementation from q-ary polar codes. We verify the obtained error correction scheme in a Monte Carlo simulation and demonstrate that our wiretap channel implementation achieves a physical layer security of 100 bits for 306 bits of entropy for the PUF-secret. Through this, we further develop capacitive PUF-based security enclosures and bring them one step closer to their commercial deployment.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源