# US 10,484,188 B2 · PUF hardware arrangement for increased throughput

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,188 B2
- Document ID: US10484188B2
- Status: Granted
- Kind: B2
- Application number: 16/201,861
- Filed: 2018-11-27
- Published: 2019-05-30
- Granted: 2019-11-19
- Earliest claimed: 2016-11-09
- Assignees: Arizona Board of Regents On Behalf of Northern Arizona University
- Applicants: Arizona Board of Regents on Behalf of Northern Arizona University
- Inventors: Bertrand Francis Cambou
- Web page: https://patentgrep.com/patent/US10484188B2

## CPC

- H04L 9/3278: {using physically unclonable functions [PUF]}
- G06F 21/44: Program or device authentication
- G06F 21/46: by designing passwords or checking the strength of passwords
- G09C 1/00: Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00)
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- G06F 2221/2103: Challenge-response
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G09C: CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY

## Abstract

The present invention provides a method for authenticating distributed peripherals on a computer network using an array of physically unclonable functions (PUF). As each PUF is unique, each PUF is able to generate a plurality of challenge response pairs that are unique to that PUF. The integrated circuits of the PUF comprise a plurality of cells, where a parameter (such as a voltage) of each cell may be measured (possibly averaged over many readings). The plurality of cells in the PUF may be arranged in a one, two or more dimensional matrix. A protocol based on an addressable PUF generator (APG) allows the protection of a network having distributed peripherals such as Internet of things (IoT), smart phones, lap top and desk top computers, or ID cards. This protection does not require the storage of a database of passwords, or secret keys. and thereby is immune to traditional database hacking attacks.

## Claims

### Claim 1

A method for a host and an addressable physically unclonable function generator (H/APG) in a plurality of H/APGs to authenticate a distributed peripheral, comprising the steps of:
receiving, by a matrix controller, from the distributed peripheral a user identification and a second password;
determining, by the matrix controller, a second horizontal axis and a second vertical axis in a matrix of the plurality of H/APGs based on the user identification;
addressing, by the matrix controller, a second H/APG in the plurality of H/APGs using the second horizontal axis and the second vertical axis;
generating, by the second H/APG in the plurality of H/APGs, a response;
revealing, by the second H/APG in the plurality of H/APGs, a challenge from the second password;
comparing the challenge to the response; and
upon determining the challenge matches the response within a predetermined statistical limit, authenticating the distributed peripheral.

### Claim 2 (depends on 1)

The method of claim 1, wherein a password is permanently stored on the distributed peripheral and not permanently stored anywhere else.

### Claim 3 (depends on 1)

The method of claim 1, wherein each H/APG in the plurality of H/APGs comprises an array of PUFs and each PUF in the array of PUFs comprises a memory array configured to generate a plurality of challenge response pairs that are unique to a PUF due to manufacturing variations in the PUF as compared to other PUFs.

### Claim 4 (depends on 1)

The method of claim 1, wherein each H/APGs compromises an array of PUFs and each PUF in the array of PUFs compromises an integrated circuit configured to generate a plurality of challenge response pairs that are unique to the integrated circuit due to manufacturing variations in the integrated circuit as compared to other integrated circuits.

### Claim 5 (depends on 1)

The method of claim 1, wherein the distributed peripheral is a connected device in the internet of things.

### Claim 6 (depends on 1)

The method of claim 1, wherein the matrix of the plurality of H/APGs is configured so that two or more H/APGs in the matrix of the plurality of H/APGs authenticate two or more distributed peripherals at overlapping times.

### Claim 7

A system to authenticate a distributed peripheral, comprising:
a host; and
a first addressable physically unclonable function generator (H/APG) in a plurality of H/APGs;
wherein each of the host and the H/APG comprises a memory, and
wherein the host and the plurality of H/APGs are configured to:
receive, by a matrix controller, from the distributed peripheral a user identification and a second password;
determine, by the matrix controller, a second horizontal axis and a second vertical axis in a matrix of the plurality of H/APGs based on the user identification;
address, by the matrix controller, a second H/APG in the plurality of H/APGs using the second horizontal axis and the second vertical axis;
generate, by the second H/APG in the plurality of H/APGs, a response;
reveal, by the second H/APG in the plurality of H/APGs, a challenge from the second password;
compare the challenge to the response; and
upon determining the challenge matches the response within a predetermined statistical limit, authenticate the distributed peripheral.

### Claim 8 (depends on 7)

The system of claim 7, wherein a password is permanently stored on the distributed peripheral and not permanently stored anywhere else.

### Claim 9 (depends on 7)

The system of claim 7, wherein each H/APG in the plurality of H/APGs comprises an array of PUFs and each PUF in the array of PUFs comprises a memory array configured to generate a plurality of challenge response pairs that are unique to a PUF due to manufacturing variations in the PUF as compared to other PUFs.

### Claim 10 (depends on 7)

The system of claim 7, wherein each H/APG in the plurality of H/APGs comprises an array of PUFs and each PUF in the array of PUFs comprises an integrated circuit configured to generate a plurality of challenge response pairs that are unique to the integrated circuit due to manufacturing variations in the integrated circuit as compared to other integrated circuits.

### Claim 11 (depends on 7)

The system of claim 7, wherein the distributed peripheral is a connected device in an Internet of Things.

### Claim 12 (depends on 7)

The system of claim 7, wherein the matrix of the plurality of H/APGs is configured so that two or more H/APGs in the matrix of the plurality of H/APGs authenticate two or more distributed peripherals at overlapping times.