PUF hardware arrangement for increased throughput
View Patent ↗The present invention provides a method for authenticating distributed peripherals on a computer network using an array of physically unclonable functions (PUF). As each PUF is unique, each PUF is able to generate a plurality of challenge response pairs that are unique to that PUF. The integrated circuits of the PUF comprise a plurality of cells, where a parameter (such as a voltage) of each cell may be measured (possibly averaged over many readings). The plurality of cells in the PUF may be arranged in a one, two or more dimensional matrix. A protocol based on an addressable PUF generator (APG) allows the protection of a network having distributed peripherals such as Internet of things (IoT), smart phones, lap top and desk top computers, or ID cards. This protection does not require the storage of a database of passwords, or secret keys. and thereby is immune to traditional database hacking attacks.
1. A method for a host and an addressable physically unclonable function generator (H/APG) in a plurality of H/APGs to generate a password, comprising the steps of:
determining, by a matrix controller, a horizontal axis and a vertical axis in a matrix of the plurality of H/APGs based on a user identification of a distributed peripheral;
addressing, by the matrix controller, the H/APG in the plurality of H/APGs using the horizontal axis and the vertical axis;
generating, by the H/APG in the plurality of H/APGs, the password configured to reveal a challenge; and
transmitting the password to the distributed peripheral.
2. The method of claim 1 , wherein the password is permanently stored on the distributed peripheral and not permanently stored anywhere else.
3. The method of claim 1 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable functions (PUFs), and each PUF comprises a memory array configured to generate a plurality of challenge-response pairs that are unique to the PUF due to manufacturing variations in the PUF as compared to other PUFs.
4. The method of claim 1 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable function (PUFs), and each PUF comprises an integrated circuit configured to generate a plurality of challenge-response pairs that are unique to the integrated circuit due to manufacturing variations in the integrated circuit as compared to other integrated circuits.
5. The method of claim 1 , wherein the distributed peripheral is a connected device in an Internet of Things.
6. The method of claim 1 , wherein the matrix of the plurality of H/APGs is configured so that two or more H/APGs in the matrix of the plurality of H/APGs generate two or more passwords at overlapping times.
7. A method for a host and an addressable physically unclonable function generator (H/APG) in a plurality of H/APGs to generate a password, comprising the steps of:
determining, by a matrix controller, a horizontal axis and a vertical axis in a matrix of a plurality of H/APGs based on a user identification of a distributed peripheral;
addressing, by the matrix controller, the H/APG in the plurality of H/APGs using the horizontal axis and the vertical axis;
generating, by the H/APG in the plurality of H/APGs, the password configured to reveal a challenge; and
transmitting the password to the distributed peripheral, wherein after transmitting the password to the distributed peripheral, the host does not retain or store the user identification or the password so as to prevent a hacker from obtaining the user identification or the password from the host.
8. The method of claim 7 , wherein the password is permanently stored on the distributed peripheral and not permanently stored anywhere else.
9. The method of claim 7 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable functions (PUFs), and each PUF comprises a memory array configured to generate a plurality of challenge-response pairs that are unique to the PUF due to manufacturing variations in the PUF as compared to other PUFs.
10. The method of claim 7 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable function (PUFs), and each PUF comprises an integrated circuit configured to generate a plurality of challenge-response pairs that are unique to the integrated circuit due to manufacturing variations in the integrated circuit as compared to other integrated circuits.
11. The method of claim 7 , wherein the distributed peripheral is a connected device in an Internet of Things.
12. The method of claim 7 , wherein the matrix of the plurality of H/APGs is configured so that two or more H/APGs in the matrix of the plurality of H/APGs generate two or more passwords at overlapping times.
13. A method for a host and an addressable physically unclonable function generator (H/APG) in a plurality of H/APGs to generate a first password for a first distributed peripheral and a second password for a second distributed peripheral, comprising the steps of:
receiving, by a matrix controller, a first user identification for the first distributed peripheral;
determining, by the matrix controller, a first horizontal axis and a first vertical axis in a matrix of a plurality of H/APGs based on the first user identification of the first distributed peripheral;
addressing, by the matrix controller, a first H/APG in the plurality of H/APGs using the first horizontal axis and the first vertical axis;
generating, by the first H/APG in the plurality of H/APGs, the first password configured to reveal a first challenge;
transmitting the first password to the first distributed peripheral, wherein after transmitting the first password to the first distributed peripheral, the host does not retain or store the first password so as to prevent a hacker from obtaining the first password from the host;
receiving, by the matrix controller, a second user identification for the second distributed peripheral;
determining, by the matrix controller, a second horizontal axis and a second vertical axis in the matrix of the plurality of H/APGs based on the second user identification of the second distributed peripheral;
addressing, by the matrix controller, a second H/APG in the plurality of H/APGs using the second horizontal axis and the second vertical axis;
generating, by the second H/APG in the plurality of H/APGs, the second password configured to reveal a second challenge; and
transmitting the second password to the second distributed peripheral, wherein after transmitting the second password to the second distributed peripheral, the host does not retain or store the second password so as to prevent a hacker from obtaining the second password from the host.
14. The method of claim 13 , wherein the first password is permanently stored on the first distributed peripheral, the second password is permanently stored on the second distributed peripheral and the first password and the second password are not permanently stored anywhere else.
15. The method of claim 13 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable functions (PUFs), and each PUF comprises a memory array configured to generate a plurality of challenge-response pairs that are unique to the PUF due to manufacturing variations in the PUF as compared to other PUFs.
16. The method of claim 13 , wherein each H/APG in the plurality of H/APGs comprises an array of physically unclonable function (PUFs), and each PUF comprises an integrated circuit configured to generate a plurality of challenge-response pairs that are unique to the integrated circuit due to manufacturing variations in the integrated circuit as compared to other integrated circuits.
17. The method of claim 13 , wherein the first distributed peripheral and the second distributed peripheral are connected devices in an Internet of Things.
18. The method of claim 13 , wherein the matrix of the plurality of H/APGs is configured so that two or more H/APGs in the matrix of the plurality of H/APGs generate two or more passwords at overlapping times.