Secure PUF-based device authentication using adversarial challenge selection
AssigneeIntel Corporation
InventorsVikram Suresh, Raghavan Kumar, Sanu Mathew
Life of this patent
Estimating the term…
Abstract
A method comprises generating, during an enrollment process conducted in a controlled environment, a dark bit mask comprising a plurality of state information values derived from a plurality of entropy sources at a plurality of operating conditions for an electronic device, and using at least a portion of the plurality of state information values to generate a set of challenge-response pairs for use in an authentication process for the electronic device.
Claims18
A method comprising:
- using at least a portion of a plurality of state information values derived from a plurality of entropy sources at a plurality of operating conditions for an electronic device to generate a set of challenge-response pairs for use in an authentication process for the electronic device;
- selecting, from the plurality of state information values, a set of state information values from one or more entropy sources that exhibit a stable response at the plurality of different operating conditions for the electronic device and from one or more entropy sources that exhibit an unstable response at one or more operating conditions for the electronic device;
- and
- using the set of challenge-response pairs in an authentication procedure for the electronic device;
- generating, during an enrollment process conducted in a controlled environment, a dark bit mask comprising a plurality of state information values derived from a plurality of entropy sources at a plurality of operating conditions for an electronic device;
- and
- using at least a portion of the plurality of state information values to generate a set of challenge-response pairs for use in an authentication process for the electronic device.
An apparatus comprising:
- a processor;
- and
- a computer readable memory comprising instructions which, when executed by the processor, cause the processor to:
- use at least a portion of a plurality of state information values derived from a plurality of entropy sources at a plurality of operating conditions for an electronic device to generate a set of challenge-response pairs for use in an authentication process for the electronic device;
- select, from the plurality of state information values, a set of state information values from one or more entropy sources that exhibit a stable response at the plurality of different operating conditions for the electronic device and from one or more entropy sources that exhibit an unstable response at one or more operating conditions for the electronic device;
- and
- use the set of challenge-response pairs in an authentication procedure for the electronic device.
One or more computer-readable storage media comprising instructions stored thereon that, in response to being executed, cause a computing device to:
- use at least a portion of a plurality of state information values derived from a plurality of entropy sources at a plurality of operating conditions for an electronic device to generate a set of challenge-response pairs for use in an authentication process for the electronic device;
- select, from the plurality of state information values, a set of state information values from one or more entropy sources that exhibit a stable response at the plurality of different operating conditions for the electronic device and from one or more entropy sources that exhibit an unstable response at one or more operating conditions for the electronic device;
- and
- use the set of challenge-response pairs in an authentication procedure for the electronic device.
Dependencies are inferred from the claim text.