轻量级的射频识别(radio frequency identification,RFID)协议常采用同步更新机制以避免位置隐私的泄露,但却带来了去同步攻击的问题。去同步攻击使得标签与数据库同步更新的秘密数据不一致,导致标签永久失效。通过对已有协议的分析,发...轻量级的射频识别(radio frequency identification,RFID)协议常采用同步更新机制以避免位置隐私的泄露,但却带来了去同步攻击的问题。去同步攻击使得标签与数据库同步更新的秘密数据不一致,导致标签永久失效。通过对已有协议的分析,发现其不具备抵御去同步攻击的效果。对已有协议进行改进,提出了一种新的抗去同步攻击的轻量级双向认证协议,并利用串空间理想诚实理论对新协议进行了形式化分析,证明了新协议的正确性。展开更多
物理不可克隆函数(PUF:Physical Unclonable Function)是一种新型的加密组件,具有防伪、不可克隆及不可预测等特性.本文提出了一种新型的低成本PUF,与传统PUF相比更适用于无线射频识别(Radio Frequency Identification,RFID)系统.该PUF...物理不可克隆函数(PUF:Physical Unclonable Function)是一种新型的加密组件,具有防伪、不可克隆及不可预测等特性.本文提出了一种新型的低成本PUF,与传统PUF相比更适用于无线射频识别(Radio Frequency Identification,RFID)系统.该PUF结构主要由上电密钥生成器和混合函数两部分构成.上电密钥生成器由比特生成器阵列构成,混合函数则由低成本流加密算法构成,其作用是隐藏密钥生成器,以提高安全性.此外,本文还提出了择多模块和多寻认证协议来改善PUF响应及其在RFID系统中的稳定性.实验表明,该PUF的硬件成本低并且具有很好的稳定性,非常适用于RFID系统等资源受限的应用场合.展开更多
Silicon physical unclonable function （PUF） is a popular hardware security primitive that exploits the intrinsic variation of IC manufacturing process to generate chip-unique information for various security related ...Silicon physical unclonable function （PUF） is a popular hardware security primitive that exploits the intrinsic variation of IC manufacturing process to generate chip-unique information for various security related applications. For example, the PUF information can be used as a chip identifier, a secret key, the seed for a random number generator, or the response to a given challenge. Due to the unpredictability and irreplicability of IC manufacturing variation, silicon PUF has emerged as a promising hardware security primitive and gained a lot of attention over the past few years. In this article, we first give a survey on the current state-of-the-art of silicon PUFs, then analyze known attacks to PUFs and the countermeasures. After that we discuss PUF-based applications, highlight some recent research advances in ring oscillator PUFs, and conclude with some challenges and opportunities in PUF research and applications.展开更多
文摘轻量级的射频识别(radio frequency identification,RFID)协议常采用同步更新机制以避免位置隐私的泄露,但却带来了去同步攻击的问题。去同步攻击使得标签与数据库同步更新的秘密数据不一致,导致标签永久失效。通过对已有协议的分析,发现其不具备抵御去同步攻击的效果。对已有协议进行改进,提出了一种新的抗去同步攻击的轻量级双向认证协议,并利用串空间理想诚实理论对新协议进行了形式化分析,证明了新协议的正确性。
文摘基于不可复制功能(PUF)的射频识别(RFID)认证协议是近年来的研究热点。2011年,Bassil等在ITST国际会议上提出了一种新的基于PUF的RFID认证协议(BASSIL R,EL-BEAINO W,KAYSSI A,et al.A PUF-basedultra-lightweight mutual-authentication RFID protocol[C]//2011 International Conference on Internet Technology andSecured Transactions.Piscataway:IEEE,2011:495-499)。分析了该认证协议的安全性,通过假设敌手参与协议,指出其不能抵抗密钥泄露攻击、跟踪攻击,也不能抵抗阅读器冒充攻击以及同步破坏攻击;同时描述了这些攻击的细节,并给出了它们的成功概率和计算复杂度。
文摘物理不可克隆函数(PUF:Physical Unclonable Function)是一种新型的加密组件,具有防伪、不可克隆及不可预测等特性.本文提出了一种新型的低成本PUF,与传统PUF相比更适用于无线射频识别(Radio Frequency Identification,RFID)系统.该PUF结构主要由上电密钥生成器和混合函数两部分构成.上电密钥生成器由比特生成器阵列构成,混合函数则由低成本流加密算法构成,其作用是隐藏密钥生成器,以提高安全性.此外,本文还提出了择多模块和多寻认证协议来改善PUF响应及其在RFID系统中的稳定性.实验表明,该PUF的硬件成本低并且具有很好的稳定性,非常适用于RFID系统等资源受限的应用场合.
基金supported in part by the National Natural Science Foundation of China under Grant No.61228204the scholarship from China Scholarship Council under Grant No.201306130042the Ph.D.Candidates’ Innovative Research Project of Hunan Province of China under Grant No.CX2012B142
文摘Silicon physical unclonable function （PUF） is a popular hardware security primitive that exploits the intrinsic variation of IC manufacturing process to generate chip-unique information for various security related applications. For example, the PUF information can be used as a chip identifier, a secret key, the seed for a random number generator, or the response to a given challenge. Due to the unpredictability and irreplicability of IC manufacturing variation, silicon PUF has emerged as a promising hardware security primitive and gained a lot of attention over the past few years. In this article, we first give a survey on the current state-of-the-art of silicon PUFs, then analyze known attacks to PUFs and the countermeasures. After that we discuss PUF-based applications, highlight some recent research advances in ring oscillator PUFs, and conclude with some challenges and opportunities in PUF research and applications.
