Hardness amplification of physical unclonable functions (PUFS)

Patent metadata

Field	Value
Publication number	US-11799673-B2
Application number	US-202016841873-A
Country	US
Kind code	B2
Filing date	Apr 7, 2020
Priority date	Apr 22, 2019
Publication date	Oct 24, 2023
Grant date	Oct 24, 2023

Abstract

Combined physical unclonable function (PUFs); methods, apparatuses, systems, and computer program products for enrolling combined PUFs; and methods, apparatuses, systems, and computer program products for authenticating a device physically associated with a combined PUF are described. In an example embodiment, a combined PUF includes a plurality of PUFs and one or more logic gates. Each PUF includes a plurality of stages and an arbiter configured to generate a single PUF response based on response portions generated by the plurality of stages. The one or more logic gates are configured to combine the single PUF response for each of the plurality of PUFs in accordance with a combination function to provide a combined response.

First claim

The invention claimed is:

1 . A combined physical unclonable function (PUF) comprising:
a plurality of PUFs, each PUF comprising a plurality of stages and an arbiter configured to generate a single PUF response based on response portions generated by the plurality of stages; and one or more logic gates, the one or more logic gates configured to combine the single PUF response for each of the plurality of PUFs in accordance with a combination function, wherein a number of the plurality of PUFs is determined based on a desired level of security for the combined PUF and the number of the plurality of PUFs for the desired level of security is determined based on a low degree algorithm approximation of the security of the combined PUF.

2 . The combined PUF of claim 1 , wherein the single PUF responses comprise one or more rolled response portions.

3 . The combined PUF of claim 2 , wherein the one or more rolled response portions each correspond to an influential stage of the corresponding PUF.

4 . The combined PUF of claim 2 , wherein a rolling strategy used to determine the one or more rolled response portions is determined based on a desired level of security for the combined PUF.

5 . The combined PUF of claim 1 , wherein the combination function is a Tribes function.

6 . A method for enrolling a combined physical unclonable function (PUF), the method comprising:
implementing a first PUF; based on an analysis of the first PUF, determining a number of PUFs for the combined PUF; determining influential stages of the first PUF; based on the influential stages, determining a rolling strategy for rolling one or more stages of the first PUF, wherein the rolling strategy comprises reconfiguring at least one stage of the one or more stages; and implementing the number of PUFs such that the rolling strategy is implemented for each PUF of the number of PUFs and a response of each PUF of the number of PUFs is combined in accordance with a combination function to generate a combined response.

7 . The method of claim 6 , wherein the combination function is a Tribes function.

8 . The method of claim 6 , further comprising determining a bias for each PUF of the number of PUFs.

9 . The method of claim 8 , further comprising AND-ing together, via one or more logic gates, two or more PUFs having different levels of bias so that, for each AND-combined group of PUFs, a minimum level of bias is achieved.

10 . The method of claim 9 , further comprising OR-ing together, via one or more logic gates, two or more AND-combined groups of PUFs to generate a combined response.

11 . The method of claim 6 , further comprising, generating authentication information for the combined PUF and storing the authentication information.

12 . The method of claim 11 , wherein the authentication information is stored in an authentication database.

13 . The method of claim 12 , wherein the authentication database is an encrypted database.

14 . The method of claim 6 , wherein the number of PUFs is determined based on a desired level of security for the combined PUF.

15 . A method of authenticating a device, wherein the device is physically associated with a combined PUF, the method comprising:
issuing a challenge to the combined PUF; receiving a response from the combined PUF; and determining whether the response matches an expected response based on the challenge and authentication information stored in association with an identifier configured to identify the combined PUF, wherein the combined PUF generates the response by determining a plurality of individual responses, each of the plurality of individual responses generated by one of a plurality of PUFs of the combined PUF, and combining the plurality of individual responses in accordance with a combination function, wherein the combination function is a Tribes function.

16 . The method of claim 15 , wherein the authentication information was generated in part by:
determining a bias for each PUF of the number of PUFs; and AND-ing together, via one or more logic gates, two or more PUFs having different levels of bias so that, for each AND-combined group of PUFs, a minimum level of bias is achieved.

17 . The method of claim 16 , wherein the authentication information was generated in part by OR-ing together, via one or more logic gates, two or more AND-combined groups of PUFs to generate a combined response.

18 . The method of claim 15 , wherein the authentication information comprises a plurality of empirically determined challenge-response pairs for the combined PUF.

19 . The method of claim 15 , wherein determining whether the response matches an expected response based on the challenge and the authentication information comprises taking into account a noise profile.

Assignees

• Univ Florida
• Univ Berlin Tech

Inventors

• Ganji Fatemeh
• Tajik Shahin
• Seifert Jean-Pierre
• Forte Domenic
• Tehranipoor Mark M

Classifications

• H04L9/3278 Primary

  using physically unclonable functions [PUF] · CPC title

• H03K19/0963 Primary

  using transistors of complementary type (H03K19/0966 takes precedence) · CPC title

• H03K19/1737

  using multiplexers (H03K19/1738 takes precedence) · CPC title

• H03K19/17748

  Structural details of configuration resources · CPC title

• H04L9/002

  Countermeasures against attacks on cryptographic mechanisms (network architectures or network communication protocols for protection against malicious traffic H04L63/1441) · CPC title