计算机技术与发展2024,Vol.34Issue(8) :73-77.DOI:10.20165/j.cnki.ISSN1673-629X.2024.0147

基于多PUF模组的身份标识与身份认证机制研究

Research on Identity Generation and Identity Authentication Mechanism Based on Multi-PUF Modules

谢峰 孟坤 张旺 许嘉鑫 王启源
计算机技术与发展2024,Vol.34Issue(8) :73-77.DOI:10.20165/j.cnki.ISSN1673-629X.2024.0147

基于多PUF模组的身份标识与身份认证机制研究

Research on Identity Generation and Identity Authentication Mechanism Based on Multi-PUF Modules

谢峰 1孟坤 1张旺 1许嘉鑫 1王启源1
扫码查看

作者信息

  • 1. 北京信息科技大学计算机学院,北京 100101
  • 折叠

摘要

身份认证是保护用户数据的第一道防线,为用户数据安全提供重要的保证.现有的身份认证方法均依赖于凭证服务提供商(CSP)等权威中心,信任其自身管控性和安全防护能力.但是,权威中心对身份标识具有绝对管控权,权威中心一旦失效将带来信息安全隐患.基于此,提出了一种基于多PUF模组的身份标识生成及身份认证机制,将PUF硬件指纹引入认证机制中,设计了一种去中心化身份认证机制.物理不可克隆功能(Physical Unclonable Function,PUF)描述了一种具有唯一性、不可篡改性的物理功能,已在身份认证领域得到了广泛应用,但其易受到使用环境等的影响而失效.现有的基于PUF的身份认证方法均未提供对PUF芯片失效的容忍方案.该文利用多PUF模组关联的方式,提出了提高身份认证机制可用性的解决方案.最后,对所提出的机制从安全性、可行性和可靠性三个方面进行了讨论和证明.

Abstract

Identity authentication serves as the primary line of defense for safeguarding user data,providing crucial assurance for the security of user information.Existing identity authentication methods rely on authoritative centers such as Credential Service Providers(CSP),trusting their self-control and security capabilities.However,authoritative centers possess absolute control over identity,and any failure in these centers may pose security risks to information.Considering this,we propose an identity generation and authentication mechanism based on multi-PUF modules,introducing PUF hardware fingerprints into the authentication process and designing a decentralized identity authentication mechanism.Physical Unclonable Function(PUF)describes a physically unique and tamper-resistant function widely applied in the field of identity authentication.However,PUFs are susceptible to environmental influences,leading to potential failures.Existing PUF-based identity authentication methods have not provided tolerance solutions for PUF chip failures.We propose a solution to enhance the usability of identity authentication mechanisms by utilizing a correlated approach with multiple PUF modules.Finally,we discuss and demonstrate the proposed mechanism in terms of security,feasibility,and reliability.

关键词

去中心化/物理不可克隆功能/身份认证/可靠性/硬件指纹

Key words

decentralization/physical unclonable function/identity authentication/reliability/hardware fingerprints

引用本文复制引用

基金项目

北京市教委科技计划一般项目(2019)(KM201911232002)

出版年

2024
计算机技术与发展
陕西省计算机学会

计算机技术与发展

CSTPCD
影响因子:0.621
ISSN:1673-629X
参考文献量3
段落导航相关论文