Use of physical unclonable functions to prevent counterfeiting of industrial control products

An industrial device associated with an industrial process in an industrial automation environment, the industrial device comprising:

• a memory that stores executable components;
• and
• a processor, operatively coupled to the memory, that executes the executable components, the executable components comprising:
• an extraction component configured to extract a physical unclonable function response of the industrial device, wherein the industrial device is associated with the industrial process in the industrial automation environment;
• a certificate transmission component configured to, in response to receiving a request for a security certificate from a system, transmit the security certificate signed by a certificate authority that includes a device public key associated with the industrial device, wherein the system validates the security certificate, encrypts an authentication challenge comprising a random number for the industrial device using the device public key, and transmits the authentication challenge for delivery to the industrial device;
• a decryption component configured to, in response to receiving the authentication challenge, generate a device private key using the physical unclonable function response of the industrial device and decrypt the authentication challenge using the device private key;
• and
• an authentication component configured to:
• generate an authentication response by applying a predetermined mathematical function to the random number, wherein the predetermined mathematical function is agreed-upon by the industrial device and the system and the predetermined mathematical function is not associated with the device public key, and
• encrypt the authentication response using the device private key, and transmit the authentication response for delivery to the system, wherein the system decrypts the authentication response using the device public key and authenticates the industrial device based on the authentication response.

A non-transitory computer-readable medium having stored thereon instructions that, in response to execution, cause an industrial device comprising a processor to perform operations, the operations comprising:

• extracting a physical unclonable function response of the industrial device, wherein the industrial device is associated with an industrial process in an industrial automation environment;
• in response to receiving a request for a security certificate from a system, transmitting the security certificate signed by a certificate authority that includes a device public key associated with the industrial device, wherein the system validates the security certificate, encrypts an authentication challenge comprising a random number for the industrial device using the device public key, and transmits the authentication challenge for delivery to the industrial device;
• in response to receiving the authentication challenge, generating a device private key using the physical unclonable function response of the industrial device and decrypting the authentication challenge using the device private key;
• generating an authentication response by applying a predetermined mathematical function to the random number, wherein the predetermined mathematical function is agreed-upon by the industrial device and the system and the predetermined mathematical function is not associated with the device public key;
• and
• encrypting the authentication response using the device private key, and transmitting the authentication response for delivery to the system, wherein the system decrypts the authentication response using the device public key and authenticates the industrial device based on the authentication response.