ePUF: A Lightweight Double Identity Verification in IoT  

作　　者：Bo Zhao Pengyuan Zhao Peiru Fan 

机构地区：[1]the School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China [2]the School of Cyber Security and Computer,Hebei University,Baoding 071002,China

出　　处：《Tsinghua Science and Technology》2020年第5期625-635,共11页清华大学学报（自然科学版（英文版）

基　　金：supported in part by the National Basic Research Program of China(973 Program)(No.2014CB340600);in part by the Wuhan Frontier Program of Application Foundation(No.2018010401011295)。

摘　　要：Remote authentication is a safe and verifiable mechanism.In the Internet of Things (loT),remote hosts need to verify the legitimacy of identity of terminal devices.However,embedded devices can hardly afford sufficient resources for the necessary trusted hardware components.Software authentication with no hardware guarantee is generally vulnerable to various network attacks.In this paper,we propose a lightweight remote verification protocol.The protocol utilizes the unique response returned by Physical Unclonable Function (PUF) as legitimate identity basis of the terminal devices and uses quadratic residues to encrypt the PUF authentication process to perform a double identity verification scheme.Our scheme is secure against middleman attacks on the attestation response by preventing conspiracy attacks from forgery authentication.Remote authentication is a safe and verifiable mechanism.In the Internet of Things (loT),remote hosts need to verify the legitimacy of identity of terminal devices.However,embedded devices can hardly afford sufficient resources for the necessary trusted hardware components.Software authentication with no hardware guarantee is generally vulnerable to various network attacks.In this paper,we propose a lightweight remote verification protocol.The protocol utilizes the unique response returned by Physical Unclonable Function (PUF) as legitimate identity basis of the terminal devices and uses quadratic residues to encrypt the PUF authentication process to perform a double identity verification scheme.Our scheme is secure against middleman attacks on the attestation response by preventing conspiracy attacks from forgery authentication.

关 键 词：Internet of Things(IoT) Identity-Based Encryption(IBE) Physically Unclonable Functions(PUFs) 

分 类 号：TN929.5[电子电信—通信与信息系统] TP391.44[电子电信—信息与通信工程]