基于BST-PUF模型的轻量型认证与会话密钥交换协议  

Lightweight Authentication and Session Key Exchange Protocol Based on BST-PUF

作　　者：贺章擎[1] 项链 汪晨 吴铁洲[1] HE Zhangqing;XIANG Lian;WANG Chen;WU Tiezhou(Hubei Key Laboratory for High-Efficiency Utilization of Solar Energy and Operation Control of Energy Storage System,Hubei University of Technology,Wuhan 430068,China)

机构地区：[1]湖北工业大学太阳能高效利用湖北省协同创新中心,武汉430068

出　　处：《计算机工程与应用》2022年第1期122-127,共6页Computer Engineering and Applications

基　　金：湖北省自然科学基金(2020CFB814)。

摘　　要：为解决现有PUF密钥交换协议存在的纠错机制复杂、辅助数据过大而导致的高开销问题,利用新提出的比特自检PUF电路(BST-PUF)设计了一种轻量型认证与密钥交换协议,在含有PUF的密码设备与服务器之间进行安全认证并建立共享会话密钥。协议能实现双向认证与可靠的密钥交换,抵抗篡改攻击、中间人攻击、DoS攻击、物理探测攻击与建模攻击等各种攻击技术。协议采用BST-PUF电路和鲁棒响应提取器来生成可靠的响应,取代传统PUF和纠错码组合,将可靠性标志F作为辅助数据用来恢复密钥,大幅降低纠错复杂性,减少辅助数据长度并提升PUF利用率。In order to solve the problem of high overhead caused by the complicated error correction mechanism and excessive Helper data in the existing PUF key exchange protocol,this paper uses the newly proposed Bit Self-Test physical unclonable function(PUF)circuit(BST-PUF)to design a lightweight authentication with the key exchange protocol,security authentication is performed between the cryptographic device containing the PUF and the server and a shared session key is established.The protocol can realize two-way authentication and reliable key exchange,and resist various attack techniques such as tampering attacks,man-in-the-middle attacks,DoS attacks,physical detection attacks and modeling attacks.The protocol uses BST-PUF circuits and robust response extractors to generate reliable responses,replacing the traditional PUF and error correction code combination.The reliability flag F is used as auxiliary data to recover the key,which greatly reduces the complexity of error correction,and reduces the length of auxiliary data and improves PUF utilization.

关 键 词：纠错 辅助数据 BST-PUF电路 认证与密钥交换 建模攻击 鲁棒响应提取器 可靠性标志 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]