Multi-state unclonable functions and related systems
View Patent ↗The present disclosure relates to implementations of physically unclonable functions (PUFs) for cryptographic and authentication purposes. Specifically, the disclosure describes implementations of machine learning engines (MLEs) in conjunction with PUFs generating outputs having multiple states.
1. An authentication system for authenticating a device, comprising:
a physically unclonable function (PUF);
a secure memory;
a sensing element configured to detect a physical parameter of the PUF; and
a processor configured to:
generate a challenge for a challenge response pair (CRP), wherein the CRP is used to authenticate the device;
retrieve, from the PUF, a response for the CRP based on the generated challenge, the response including a plurality of bits,
associate each bit in the plurality of bits in the response with one of three or more groups, wherein bits associated with the same group are generated by cells in the PUF sharing a physical attribute; and
store an indication of the association of each bit in the plurality of bits in the response in the secure memory.
2. The authentication system of claim 1 , wherein the processor is further configured to:
use the indication of the association of each bit in the plurality of bits with the one of the three or more groups to perform an authentication routine using the physical parameter detected by the sensing element.
3. The authentication system of claim 2 , including a machine learning engine configured to use the indication of the association of each bit in the plurality of bits with the one of the three or more groups in the PUF, the physical parameter detected by the sensing element and a history of prior responses from the PUF when analyzing a second response from the PUF.
4. The authentication system of claim 2 , wherein the sensing element is configured to detect at least one of a temperature and a bias condition of the PUF.
5. The authentication system of claim 2 , wherein the physical attribute comprises an input voltage for switching a cell storing a logical value of “0” to a logical value of a “1” in the PUF.
6. An authentication system for authenticating a device coupled to a secure server, comprising:
a physically unclonable function (PUF);
a secure memory;
a sensing element configured to detect a physical parameter of the PUF; and
a processor configured to:
receive, from the secure server, a challenge for a challenge response pair (CRP), wherein the CRP is used to authenticate the device;
retrieve, from the PUF, a response for the CRP based on the received challenge, the response including a plurality of bits,
associate each bit in the plurality of bits of the response with one of three or more groups, wherein bits associated with the same group are generated by cells in the PUF sharing a physical attribute, and
store an indication of the association of each bit in the plurality of bits in the response in the secure memory.
7. The authentication system of claim 6 , wherein the processor is further configured to:
use the indication of the association of each bit in the plurality of bits with the one of the three or more groups to perform an authentication routine using the physical parameter detected by the sensing element.
8. The authentication system of claim 7 , including a machine learning engine configured to use the indication of the association of each bit in the plurality of bits with the one of the three or more groups in the PUF, the physical parameter detected by the sensing element and a history of prior responses from the PUF when analyzing a second response from the PUF.
9. The authentication system of claim 7 , wherein the sensing element is configured to detect at least one of a temperature and a bias condition of the PUF.
10. The authentication system of claim 7 , wherein the physical attribute comprises an input voltage for switching a cell storing a logical value of “0” to a logical value of a “1” in the PUF.
11. The authentication system of claim 6 , wherein the processor is further configured to:
upon a determination that the challenge matches the response within a predetermined threshold value, generate a positive authentication.
12. An authentication system for authenticating a device coupled to a secure server, comprising:
a physically unclonable function;
a secure memory;
a sensing element configured to detect a physical parameter of the PUF; and
a processor configured to:
receive, from the secure server, a challenge for a challenge response pair (CRP), wherein the CRP is used to authenticate the device;
retrieve, from the PUF, a response for the CRP based on the received challenge, the response including a plurality of bits,
associate each bit in the plurality of bits in the response with one of three or more groups, wherein bits associated with the same group are generated by cells in the PUF sharing a physical attribute,
store an indication of the association of each bit in the plurality of bits in the response in the secure memory, and
authenticate the device.
13. The authentication system of claim 12 , wherein the processor is further configured to:
use the indication of the association of each bit in the plurality of bits with the one of the three or more groups to perform an authentication routine using the physical parameter detected by the sensing element.
14. The authentication system of claim 13 , including a machine learning engine configured to use the indication of the association of each bit in the plurality of bits with the one of the three or more groups in the PUF, the physical parameter detected by the sensing element and a history of prior responses from the PUF when analyzing a second response from the PUF.
15. The authentication system of claim 13 , wherein the sensing element is configured to detect at least one of a temperature and a bias condition of the PUF.
16. The authentication system of claim 13 , wherein the physical attribute comprises an input voltage for switching a cell storing a logical value of “0” to a logical value of a “1” in the PUF.
17. The authentication system of claim 12 , wherein the processor is further configured to:
upon a determination that the challenge matches the response within a predetermined threshold value, generate a positive authentication.