PUFs from sensors and their calibration
Several methods may be used to exploit the natural physical variations of sensors, to generate cryptographic physically unclonable functions (PUF) that may strengthen the cybersecurity of microelectronic systems. One method comprises extracting a stream of bits from the calibration table of each sensor to generate reference patterns, called PUF challenges, which can be stored in secure servers. The authentication of the sensor is positive when the data streams that are generated on demand, called PUF responses, match the challenges. To prevent a malicious party from generating responses, instructions may be added as part of the PUF challenges to define which parts of the calibration tables are to be used for response generation. Another method is based on differential sensors, one of them having the calibration module disconnected. The response to a physical or chemical signal of such a sensor may then be used to authenticate a specific pair of sensors.
1. A system comprising:
a secure terminal having a secure memory that stores PUF challenge data that includes instructions and a set of PUF challenges; and
a sensor system comprising:
a sensor operable to measure detectable physical or chemical signals and produce corresponding analog electrical signals;
a non-volatile memory storing a sensor calibration table that stores sensor calibration data for the sensor, wherein the sensor calibration data is applied to the output analog electrical signals of the sensor in order to standardize the sensor output signals and to generate sensor output signals that more accurately represent the detectable physical or chemical signals; and
a physically unclonable function (PUF) generator connected to the sensor calibration table that is configured to:
receive the PUF challenge data from the secure terminal,
extract a set of instructions from the PUF challenge data,
extract at least a portion of the sensor calibration data from the sensor calibration table according to the instructions,
generate a set of PUF responses from the at least a portion of the sensor calibration data retrieved from the sensor calibration table, wherein the PUF challenge data is separate from any detectable physical or chemical signals measured by the sensor and the analog electrical signals;
send the set of PUF responses to the secure terminal, which is configured to:
compare the set of PUF responses at the secure terminal with the set of PUF challenges in the PUF challenge data to determine a degree to which the set of PUF responses and the set of PUF challenges match; and
authenticate the sensor system when the secure terminal determines that the degree to which the set of PUF responses and the set of PUF challenges match is at or above a predetermined threshold.
2. The system of claim 1 , wherein the sensor is operable to measure detectable signals selected from a group consisting of physical signals and chemical signals.
3. The system of claim 1 , wherein the secure terminal includes comparator circuitry that compares the set of PUF responses to the set of PUF challenges to determine the degree at which the set of PUF responses and the set of PUF challenges match.
4. The system of claim 3 , wherein the comparator circuitry comprises exclusive-OR logic gates.
5. The system of claim 3 , wherein the sensor system further comprises:
a random access memory (RAM) cache comprising a plurality of RAM cells.
6. The system of claim 5 , wherein the PUF generator generates an additional set of PUF responses based on a percentage of the plurality of RAM cells that are in an ON state after powering on the RAM cache.
7. The system of claim 6 , wherein the PUF challenge data includes an additional set of PUF challenges, and wherein the comparator circuitry compares the additional set of PUF responses to the additional set of PUF challenges to determine an additional degree at which the additional set of PUF responses and the additional set of PUF challenges match.
8. The system of claim 7 , wherein the secure terminal authenticates the sensor system when the secure terminal determines that the degree at which the set of PUF responses and the set of PUF challenges match is at or above a predetermined threshold and that the additional degree at which the additional set of PUF responses and the additional set of PUF challenges match is at or above the predetermined threshold.
9. A method for authenticating a sensor system comprising:
with a secure terminal, issuing physically unclonable function (PUF) challenge data to the sensor system;
with a PUF generator in the sensor system:
extracting a set of instructions from the PUF challenge data,
in accordance with the extracted set of instructions, extracting calibration data from a calibration table in the sensor system, wherein the calibration data is applied to output analog electrical signals of a sensor of the sensor system in order to standardize the sensor output signals and to generate sensor signals that more accurately represent detectable physical or chemical signals sensed by the sensor and any detectable physical or chemical signals measured by the sensor are separate from the PUF challenge data,
generating PUF responses from the calibration data;
with the PUF generator, sending the PUF responses to the secure terminal;
with the secure terminal, comparing the PUF responses with corresponding PUF challenges in the PUF challenge data to determine a degree to which the PUF responses and the corresponding PUF challenges match;
and authenticate the sensor system when the secure terminal determines that the degree to which the PUF responses and the corresponding PUF challenges match is at or above a predetermined threshold.
10. The method of claim 9 , wherein comparing the PUF responses with the corresponding PUF challenges in the PUF challenge data to determine the degree at which the PUF responses and the corresponding PUF challenges match further comprises:
with exclusive-OR (XOR) logic in comparator circuitry in the secure terminal, comparing the PUF responses with the corresponding PUF challenges in the PUF challenge data by performing XOR logic operations on the PUF responses and the corresponding PUF challenges to determine the degree at which the PUF responses and the corresponding PUF challenges match.
11. The method of claim 9 , further comprising:
with the PUF generator, generating additional PUF responses based on a percentage of random access memory (RAM) cells in a RAM cache that are in an ON state when the RAM cache is powered on;
with the secure terminal, comparing the additional PUF responses with corresponding additional PUF challenges in the PUF challenge data to determine an additional degree at which the PUF responses and the corresponding PUF challenges match; and
with the secure terminal, authenticating the sensor system when the degree at which the PUF responses and the corresponding PUF challenges match and the additional degree at which the PUF responses and the corresponding PUF challenges match are each at or above a predetermined threshold.
12. The method of claim 9 , wherein the calibration data stored in the calibration table is usable to enhance the linearity of the response of the sensor.
13. The method of claim 9 , wherein the calibration data stored in the calibration table is usable to ensure uniformity of sensor performance.