Connected synthetic physically unclonable function
There is disclosed a Connected Synthetic Physically Unclonable Function (acronym CSPUF) made of a circuit configured to receive signals of one or more sensors and/or actuators in/of a computer device; determine one or more statistical properties of the noise distribution of the selected one or more of the sensors and/or actuators; receive data IN from one or more external data sources; determine one or more digital signatures (responses) from the statistical properties and the selected external data. In one embodiment, along a response R when challenged by a challenge C, the circuit is configured to receive data IN and/or to communicate data OUT from one or more external data sources. Developments describe uses and advantages of data IN and data OUT channels, e.g. static or dynamic calibration, options to disable the circuit. Other embodiments consider variants of interconnections of two CSPUF circuits, providing “self-cycled”, “iterative”, “cascaded” and other “blockchain” arrangements.
1. A PUF circuit comprising one or more imaging sensors, the PUF circuit comprising a processor configured to receive information about a subset of sensor pixels of an image sensor, the PUF circuit being configured to apply one or more challenges to the subset of sensor pixels under spatially uniform conditions, the PUF circuit comprising a receiver configured to receive output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and the PUF circuit is configured to:
determine one or more statistical moments of a noise distribution of said output signal values;
further receive input data IN through said data communication channel from one or more external data sources using the data communication channel, said data IN relating to an external environment in which the PUF circuit is used;
determine a PUF response R from said one or more statistical moments and said selected input data IN received from said one or more external data sources, said response being a digital signature, wherein the input Data IN are used to handle of the PUF circuit,
wherein the PUF circuit is further configured to communicate data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit; and wherein said communicated data OUT is configured to modify an applied challenge C.
2. The circuit of claim 1 , wherein the received data IN comprises information leading directly or indirectly to disabling of the PUF circuit.
3. The circuit of claim 1 , wherein the received data IN, or parts thereof, serves as or contributes to a challenge of the PUF circuit, said circuit providing a response in response to said one or more challenges.
4. The circuit of claim 1 , wherein the received data IN, or parts thereof, signs a challenge of the PUF circuit.
5. The circuit of claim 1 , wherein said at least one external entities comprise at least one computer or another PUF circuit.
6. The circuit of claim 1 , wherein the applied challenge C is configured to modify and/or control and/or influence communicated data OUT.
7. The circuit of claim 1 , wherein said data IN is configured to modify the response R, while or after the response R is produced.
8. The circuit of claim 1 , wherein the response R is configured to retroact on data IN.
9. The circuit of claim 1 , wherein the response R is configured to modify the challenge C.
10. A system comprising two or more PUF circuits according to claim 1 , the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the communicated data OUT of the first PUF circuit is taken as an input data IN by the second PUF circuit.
11. A system comprising two or more PUF circuits according to claim 1 , the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of the first circuit is taken as an input data IN by the second circuit.
12. A system comprising two or more PUF circuits according to claim 1 , the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein communicated data OUT of the first circuit is taken as a challenge C by the second circuit.
13. A system comprising two or more PUF circuits according to claim 1 , the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of the first circuit is taken as a challenge C by the second circuit.
14. A method for generating a digital signature, the method being implemented by a PUF circuit comprising one or more imaging sensors, the method comprising receiving information about a subset of sensor pixels of an imaging sensor, applying one or more challenges to the subset of sensor pixels under spatially uniform conditions, and receiving output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and
wherein the method comprises:
determining one or more statistical properties of a noise distribution of said output signal values;
receiving input data IN from one or more external data sources, through said data communication channel, said data IN relating to an external environment in which the PUF circuit is used;
determining a PUF response R from said one or more statistical properties and selected input data IN received from said one or more external data sources, said response being a digital signature,
wherein the input Data IN are used to handle of the PUF circuit,
wherein the method comprises communicating data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit; and wherein said communicated data OUT is configured to modify an applied challenge C.
15. The circuit of claim 1 , wherein the processor is configured to determine the statistical moment of order i of a temporal distribution of the output signal value of the each sensor pixel, the processor being further configured to determine one or more outlier sensor pixels, the outliers sensor pixels being pixels whose i th order statistical moment has a difference with the mean value of the spatial distribution of the chosen moment over the subset superior in absolute value to a threshold, the i th order statistical moment of one sensor pixel being estimated on the temporal distribution associated to this sensor pixel, the processor being further configured to generate an identifier from the determined outliers' pixels.
16. The circuit of claim 1 , wherein the processor is configured to:
for each pixel of the subset of sensor pixels, determine the statistical moment of order i of a temporal distribution of the output signal value of each sensor pixel; and
determine one or more pathological sensor pixels, the pathological pixels being pixels whose sum of distances of values to all the other pixels of the subset is greater than a threshold, the distance between two sensor pixels being determined by the difference of the i th statistical moment values of the two temporal distributions associated to the pixels obtained when challenging the subset of sensor pixels under uniform conditions,
the processor being further configured to generate an identifier from the determined pathological sensor pixels.