Security device generating key based on physically unclonable function and method of operating the same

Patent metadata

Field	Value
Publication number	US-11516026-B2
Application number	US-202017014418-A
Country	US
Kind code	B2
Filing date	Sep 8, 2020
Priority date	Feb 12, 2020
Publication date	Nov 29, 2022
Grant date	Nov 29, 2022

Abstract

A security device generates a key based on a physically unclonable function (PUF). The security device includes a physically unclonable function (PUF) block, an integrity detector, and a post processor. The PUF block outputs a plurality of first random signals and a plurality of corresponding first inverted random signals each having a logic level opposite to that of each of the plurality of corresponding first random signals. The integrity detector determines data integrity of the plurality of first random signals by using the plurality of first random signals and the plurality of corresponding first inverted random signals. The post processor generates a first row key that includes validity signals satisfying the data integrity.

First claim

What is claimed is:

1. A security device, comprising:
a physically unclonable function (PUF) block including a plurality of PUF cells that generate a plurality of first random signals and outputting the plurality of first random signals and a plurality of corresponding first inverted random signals each having a logic level opposite to that of each of the plurality of first random signals;
an integrity detector determining data integrity of the plurality of first random signals by using the plurality of first random signals and the plurality of corresponding first inverted random signals; and
a post processor generating a first row key that includes validity signals satisfying the data integrity and which are selected from the plurality of first random signals, generating helper data including parity data corresponding to the first row key based on a predetermined error correction algorithm, and generating by using the helper data a key for use which is based on a PUF from one of the plurality of PUF cells.

2. The security device of claim 1 , further comprising:
a validity detector generating a plurality of validity signals respectively corresponding to the plurality of PUF cells in a first mode based on validity of the plurality of first random signals; and
a memory block storing a validity map,
wherein the post processor further comprises an enrollment module generating the validity map for the PUF block based on the plurality of validity signals, selecting first valid random signals from the plurality of first random signals based on the validity map, and generating the first row key including the first valid random signals.

3. The security device of claim 2 , the post processor further comprising:
a key generator receiving a plurality of second random signals in a second mode, receiving the plurality of second random signals from the PUF block, receiving the validity map from the memory block, selecting second valid random signals from the plurality of second random signals based on the validity map, and generating a second row key including the second valid random signals in the second mode.

4. The security device of claim 3 , wherein the PUF block further generates the plurality of second random signals and a plurality of corresponding second inverted random signals each having a logic level opposite to that of each of the plurality of second random signals in the second mode, and
wherein the integrity detector determines data integrity of the plurality of second random signals by using the plurality of second random signals and the plurality of corresponding second inverted random signals in the second mode.

5. The security device of claim 3 , further comprising:
an encoding module generating the helper data in the first mode,
wherein the memory block further stores the helper data.

6. The security device of claim 5 , wherein the post processor further comprises:
a decoding module receiving the second row key from the key generator, receiving the helper data from the memory block, and generating the key for use by performing error correction on the second row key based on the helper data in the second mode.

7. The security device of claim 6 , wherein the first mode is performed once at a point in time at which the security device is manufactured, and
wherein the second mode is performed when the key for use is to be generated by using the security device.

8. The security device of claim 5 , the memory block further comprising:
a non-volatile memory storing at least one of the helper data and the validity map generated in the first mode.

9. The security device of claim 8 , the post processor further comprising:
a decoding module receiving the second row key from the key generator, receiving the helper data from the memory block, and generating the key for use by performing error correction on the second row key based on the helper data in the second mode,
wherein the key generator reads the validity map from the non-volatile memory upon entering the second mode, and
wherein the decoding module reads the helper data from the non-volatile memory upon entering the second mode.

10. The security device of claim 1 , the post processor further comprising:
an interface block communicating with a counterpart outside of the security device and outputting the key for use outside of the security device.

11. The security device of claim 10 , the interface block further comprising:
an attack detector including a first register that stores the first row key and determining whether the first register is attacked.

12. The security device of claim 11 , wherein the attack detector further comprises:
an inverter generating an inverted key by inverting the key for use;
a second register storing the inverted key;
a comparator determining whether the first register and the second register are attacked by comparing the key for use with the inverted key; and
a key switch outputting the key for use outside based on a result of the comparator determining whether the first register and the second register are attacked.

13. A security device, comprising:
a physically unclonable function (PUF) block including a plurality of PUF cells that generates a plurality of first random signals and outputting the plurality of first random signals;
a validity detector generating a plurality of validity signals respectively corresponding to the plurality of PUF cells based on the plurality of first random signals in a first mode;
an enrollment module generating a validity map for the PUF block based on the plurality of validity signals, selecting first valid random signals from the plurality of first random signals based on the validity map, generating a first row key that includes the first valid random signals, and generating helper data including parity data corresponding to the first row key based on a predetermined error correction algorithm; and
a memory block storing the validity map and the helper data to be used when a key is generated based on a PUF from one of the plurality of PUF cells.

14. The security device of claim 13 , further comprising:
an encoding module generating the helper data in the first mode.

15. The security device of claim 13 , further comprising:
a key generator receiving a plurality of second random signals from the PUF block in a second mode, receiving the validity map from the memory block, selecting second valid random signals from the plurality of second random signals based on the validity map, and generating a second row key including the second valid random signals in the second mode.

16. The security device of claim 15 , further comprising:
a decoding module receiving the second row key from the key generator, receiving the helper data from the memory block, and generating, by performing error correction on the second row key based on the helper data in the second mode, a key which is based on a PUF from one of the plurality of PUF cells.

17. The security device of claim 13 , further comprising:
an interface block communicating with a counterpart outside of the security device and outputting a key for use outside of the security device.

18. The security device of claim 17 , wherein the interface block further comprises:
a first register storing the key for use;
an inverter generating an inverted key by inverting the key for use;
a second register storing the inverted key;
a comparator determining whether the first register and the second register are attacked by comparing the key for use with the inve

Assignees

• Samsung Electronics Co Ltd

Inventors

• Ahn Kyoungmoon
• Kim Yongsoo
• Lee Yongki
• Choi Yunhyeok
• Karpinskyy Bohdan

Classifications

• H04L9/0869

  involving random numbers or seeds · CPC title

• G06F11/1048

  using arrangements adapted for a specific error detection or correction feature · CPC title

• H04L9/3278 Primary

  using physically unclonable functions [PUF] · CPC title

• H04L9/0866 Primary

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title