Authentication system and device including physical unclonable function and threshold cryptography

A computer-implemented method for authenticating a device, the method comprising:

• communicating, by at least one processor, in a first stage with at least one identity circuit to generate a first portion of an encrypted identity, wherein the first portion is a threshold share of a shared secret, wherein the at least one identity circuit is constructed to generate values characteristic to physical properties of the identity circuit;
• performing a first threshold cryptographic operation on the first portion of the encrypted identity obscuring the first portion in memory;
• communicating, by the at least one processor, in a second stage with the at least one identity circuit to generate at least a second portion of an encrypted identity wherein the second portion is a threshold share of the shared secret;
• performing a second threshold cryptographic operation on the second portion of the encrypted identity obscuring the second portion in memory;
• and
• executing a combination operation on at least the obscured first portion and the obscured second portion to produce an obscured value for execution of a cryptographic operation associated with the encrypted identity;
• and
• managing execution of the first and second stage such that only one portion of the encrypted identity is in memory at one time.

An authentication device comprising:

• an identity circuit constructed to generate values characteristic to the physical properties of the identity component;
• at least one processor configured to:
• manage generation of a first portion of an encrypted identity in a first stage with the identity circuit, wherein the first portion is a threshold share of a shared secret;
• manage generation of at least a second portion of an encrypted identity in a second stage with the identity circuit wherein the second portion is a threshold share of the shared secret;
• and
• manage execution of the first and second stage such that only one portion of the encrypted identity is in memory at one time
• means for performing a first threshold cryptographic operation on the first portion of the encrypted identity to obscure the first portion and means for performing a second threshold cryptographic operation on the second portion of the encrypted identity to obscure the second portion;
• and
• means for executing a combination operation on at least the obscured first portion and the obscured second portion and enabling execution of a cryptographic operation associated with the encrypted identity.