Building PUF based authentication and key exchange protocol for iot without explicit CRPs in verifier database
Abstract
Physically Unclonable Functions (PUFs) promise to be a critical hardware primitive to provide unique identities to billions of connected devices in Internet of Things (IoTs). In traditional authentication protocols a user presents a set of credentials with an accompanying proof such as password or digital certificate. However, IoTs need more evolved methods as these classical techniques suffer from the pressing problems of password dependency and inability to bind access requests to the “things” from which they originate. Additionally, the protocols need to be lightweight and heterogeneous. Although PUFs seem promising to develop such mechanism, it puts forward an open problem of how to develop such mechanism without needing to store the secret challenge-response pair (CRP) explicitly at the verifier end. In this paper, we develop an authentication and key exchange protocol by combining the ideas of Identity based Encryption (IBE), PUFs and Key-ed Hash Function to show that this combination can help to do away with this requirement. The security of the protocol is proved formally under the Session Key Security and the Universal Composability Framework. A prototype of the protocol has been implemented to realize a secured video surveillance camera using a combination of an Intel Edison board, with a Digilent Nexys-4 FPGA board consisting of an Artix-7 FPGA, together serving as the IoT node. We show, though the stand-alone video camera can be subjected to man-in-the-middle attack via IP-spoofing using standard network penetration tools, the camera augmented with the proposed protocol resists such attacks and it suits aptly in an IoT infrastructure making the protocol deployable for the industry.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Once hardware information is leaked, the security of the system is no longer guaranteed.
“Once the hardware information is leaked, the security of the system is no longer guaranteed.”
From Secure Video Surveillance Framework in Smart City (2021) · cites this paper as [22]
Cites
Identity-Based Encryption from the Weil Pairing
Boneh, D., & Franklin, M. (2003) · SIAM Journal on Computing · doi:10.1137/s0097539701398521 · Cited by 3,540 · see citing works
Universally composable security: a new paradigm for cryptographic protocols
Canetti, R. (2001) · Annual Symposium on Foundations of Computer Science · doi:10.1109/sfcs.2001.959888 · Cited by 3,348 · see citing works
Introduction to Modern Cryptography
Katz, J., & Lindell, Y. (2007) · doi:10.1201/9781420010756 · Cited by 1,238 · see citing works
Extracting secret keys from integrated circuits
Lim, D., Lee, J. W., Gassend, B., Suh, G. E., van Dijk, M., & Devadas, S. (2005) · IEEE Transactions on Very Large Scale Integration (VLSI) Systems · doi:10.1109/tvlsi.2005.859470 · Cited by 1,049 · see citing works
Modeling attacks on physical unclonable functions
Rührmair, U., Sehnke, F., Sölter, J., Dror, G., Devadas, S., & Schmidhuber, J. (2010) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/1866307.1866335 · Cited by 1,035 · see citing works
Controlled physical random functions
Gassend, B., Clarke, D. E., van Dijk, M., & Devadas, S. (2003) · Annual Computer Security Applications Conference · doi:10.1109/csac.2002.1176287 · Cited by 390 · see citing works
Mutual Authentication in IoT Systems Using Physical Unclonable Functions
Aman, M. N., Chua, K. C., & Sikdar, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703088 · Cited by 316 · see citing works
Cloning Physically Unclonable Functions
Helfmeier, C., Boit, C., Nedospasov, D., & Seifert, J. (2013) · IEEE International Symposium on Hardware Oriented Security and Trust (HOST) · doi:10.1109/hst.2013.6581556 · Cited by 288 · see citing works
Slender PUF Protocol: A Lightweight, Robust, and Secure Authentication by Substring Matching
Majzoobi, M., Rostami, M., Koushanfar, F., Wallach, D. S., & Devadas, S. (2012) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2012.30 · Cited by 230 · see citing works
Elliptic-Curve-Based Security Processor for RFID
Lee, Y. K., Sakiyama, K., Batina, L., et al. (2008) · IEEE Transactions on Computers · doi:10.1109/tc.2008.148 · Cited by 228 · see citing works
Physical Unclonable Functions and Public-Key Crypto for FPGA IP Protection
Guajardo, J., Kumar, S. S., Schrijen, G.-J., et al. (2007) · International Conference on Field Programmable Logic and Applications (FPL) · doi:10.1109/fpl.2007.4380646 · Cited by 212 · see citing works
A PUF-Based Secure Communication Protocol for IoT
Chatterjee, U., Chakraborty, R. S., & Mukhopadhyay, D. (2017) · ACM Transactions on Embedded Computing Systems · doi:10.1145/3005715 · Cited by 210 · see citing works
Asokan, N., Brasser, F., Ibrahim, A., et al. (2015) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2810103.2813670 · Cited by 202 · see citing works
Practical and Secure IoT Device Authentication Using Physical Unclonable Functions
Wallrabenstein, J. R. (2016) · IEEE International Conference on Future Internet of Things and Cloud (FiCloud) · doi:10.1109/ficloud.2016.22 · Cited by 117 · see citing works
Towards Robust Low Cost Authentication for Pervasive Devices
Öztürk, E., Hammouri, G., & Sunar, B. (2008) · IEEE International Conference on Pervasive Computing and Communications · doi:10.1109/percom.2008.54 · Cited by 114 · see citing works
Efficient Fuzzy Extraction of PUF-Induced Secrets: Theory and Applications
Delvaux, J., Gu, D., Verbauwhede, I. M. R., et al. (2016) · Lecture notes in computer science · doi:10.1007/978-3-662-53140-2_20 · Cited by 97 · see citing works
Security of CCTV and Video Surveillance Systems
Costin, A. (2016) · doi:10.1145/2995289.2995290 · Cited by 96 · see citing works
Recyclable PUFs: logically reconfigurable PUFs
Katzenbeisser, S., Koçabas, Ü., van der Leest, V., et al. (2011) · Journal of Cryptographic Engineering · doi:10.1007/s13389-011-0016-9 · Cited by 95 · see citing works
Kong, J., Koushanfar, F., Pendyala, P. K., et al. (2014) · Proceedings - ACM IEEE Design Automation Conference · doi:10.1145/2593069.2593192 · Cited by 94 · see citing works
PUFs as Promising Tools for Security in Internet of Things
Mukhopadhyay, D. (2016) · IEEE Design and Test · doi:10.1109/mdat.2016.2544845 · Cited by 88 · see citing works
Secure Lightweight Entity Authentication with Strong PUFs: Mission Impossible?
Delvaux, J., Gu, D., Schellekens, D., et al. (2014) · Lecture notes in computer science · doi:10.1007/978-3-662-44709-3_25 · Cited by 68 · see citing works
A Privacy-Preserving, Mutual PUF-Based Authentication Protocol
Che, W., Martin, M. T., Pocklassery, G., Kajuluri, V. K., Saqib, F., & Plusquellic, J. (2016) · Cryptography · doi:10.3390/cryptography1010003 · Cited by 62 · see citing works
Reliable PUF-Based Local Authentication With Self-Correction
Lao, Y., Yuan, B., Kim, C. H., et al. (2016) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2016.2569581 · Cited by 51 · see citing works
Physical Unclonable Functions in Cryptographic Protocols: Security Proofs and Impossibility Results.Preprint
van Dijk, M., & Rührmair, U. (2012) · IACR Cryptology ePrint Archive · Cited by 50 · see citing works
Converse PUF-Based Authentication
Koçabas, Ü., Andreas, P., Katzenbeisser, S., et al. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-30921-2_9 · Cited by 49 · see citing works
Authenticating IoT Devices with Physically Unclonable Functions Models
Barbareschi, M., Bagnasco, P., & Mazzeo, A. (2015) · International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC) · doi:10.1109/3pgcic.2015.117 · Cited by 42 · see citing works
Side-channel information leakage of encrypted video stream in video surveillance systems
Li, H., He, Y., Sun, L., Cheng, X., & Yu, J. (2016) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom.2016.7524621 · Cited by 38 · see citing works
Boot Attestation: Secure Remote Reporting with Off-The-Shelf IoT Sensors
Schulz, S., Schaller, A., Kohnhäuser, F., et al. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-66399-9_24 · Cited by 36 · see citing works
Cost-Effective Security Support in Real-Time Video Surveillance
Puvvadi, U. L. N., Benedetto, K. D., Patil, A., et al. (2015) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2015.2491259 · Cited by 32 · see citing works
Theory and Application of Delay Constraints in Arbiter PUF
Chatterjee, U., Chakraborty, R. S., Kapoor, H., & Mukhopadhyay, D. (2016) · ACM Transactions on Embedded Computing Systems · doi:10.1145/2815621 · Cited by 21 · see citing works
User authentication protocol for blocking malicious user in Network CCTV environment
Park, T., & Jun, M.-S. (2012) · Computer Sciences and Convergence Information Technology (ICCIT), 2011 6th International Conference on · Cited by 3 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
A survey on physical unclonable function (PUF)-based security solutions for Internet of Things
Shamsoshoara, A., Korenda, A. R., Afghah, F., & Zeadally, S. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107593 · Cited by 316 · see citing works
Mall, P., Amin, R., Das, A. K., Leung, M. T., & Choo, K. R. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3142084 · Cited by 225 · see citing works
A Survey on Supply Chain Security: Application Areas, Security Threats, and Solution Architectures
Hassija, V., Chamola, V., Gupta, V., Jain, S., & Guizani, N. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3025775 · Cited by 232 · see citing works
A Privacy-Preserving and Scalable Authentication Protocol for the Internet of Vehicles
Aman, M. N., Javaid, U., & Sikdar, B. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3010893 · Cited by 178 · see citing works
“Table III presents the computational requirement for the proposed protocol and the protocols in [28] and [29].”
BackgroundMethodInfluentialLi, S., Zhang, T., Yu, B., & He, K. (2020) · IEEE Sensors Journal · doi:10.1109/jsen.2020.3028872 · Cited by 125 · see citing works
“In addition, the key escrow problem (SF9) exists in protocols [9], [16]–[19], [37] and the protocols [16], [17], [37], [44] need the clock synchronization (SF10) between devices, which may be hard for the resource-constrained node devices in IoT to implement.”
BackgroundMethodInfluentialPUF-Based Mutual Authentication and Key Exchange Protocol for Peer-to-Peer IoT Applications
Zheng, Y., Liu, W., Gu, C., et al. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3193570 · Cited by 119 · see citing works
“No extra intermediate “verifier” node is required, which is unlike the scheme in [13].”
BackgroundMethodInfluentialTwo-Factor Authentication for IoT With Location Information
Aman, M. N., Basheer, M. H., & Sikdar, B. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2882610 · Cited by 116 · see citing works
Toward Secure and Provable Authentication for Internet of Things: Realizing Industry 4.0
Garg, S., Kaur, K., Kaddoum, G., & Choo, K. R. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2019.2942271 · Cited by 113 · see citing works
“In another work [15], an authentication and key exchange mechanism for IoT was presented.”
MethodPUF-RAKE: A PUF-Based Robust and Lightweight Authentication and Key Establishment Protocol
Qureshi, M. A., & Munir, A. (2021) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3059454 · Cited by 113 · see citing works
“Chatterjee et al. [26] have proposed a protocol which uses PUF-based authentication in an Internet of things (IoT) scenario and replaces the traditional certificate-based authentication.”
BackgroundMethodResultInfluentialThree-factor authentication protocol using physical unclonable function for IoV
Jiang, Q. G., Zhang, X., Zhang, N., et al. (2021) · Computer Communications · doi:10.1016/j.comcom.2021.03.022 · Cited by 108 · see citing works
Zhang, Y., Li, B., Wu, J., Liu, B., Chen, R., & Chang, J. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3176192 · Cited by 105 · see citing works
“However, the long-term secret keys of the server will not be accessed by the adversary as assumed in [38].”
BackgroundData Provenance for IoT With Light Weight Authentication and Privacy Preservation
Aman, M. N., Basheer, M. H., & Sikdar, B. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2019.2939286 · Cited by 87 · see citing works
FPGA-based Physical Unclonable Functions: A comprehensive overview of theory and architectures
Anandakumar, N. N., Hashmi, M., & Tehranipoor, M. M. (2021) · Integration · doi:10.1016/j.vlsi.2021.06.001 · Cited by 87 · see citing works
MFSPV: A Multi-Factor Secured and Lightweight Privacy-Preserving Authentication Scheme for VANETs
Alfadhli, S. A., Lu, S., Chen, K., et al. (2020) · IEEE Access · doi:10.1109/access.2020.3014038 · Cited by 79 · see citing works
Zhang, Y., Li, B., Liu, B., Hu, Y., & Zheng, H. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3068410 · Cited by 77 · see citing works
A Survey of Key Bootstrapping Protocols Based on Public Key Cryptography in the Internet of Things
Malik, M., Dutta, M., & Granjal, J. (2019) · IEEE Access · doi:10.1109/access.2019.2900957 · Cited by 71 · see citing works
A PUF-Based Modeling-Attack Resilient Authentication Protocol for IoT Devices
Ebrahimabadi, M., Younis, M., & Karimi, N. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3098496 · Cited by 71 · see citing works
“Chatterjee et al. [14] used PUFs to generate public and private keys to be used for securing data transfer in IoT.”
BackgroundMethodA Review of Physical Unclonable Functions (PUFs) and Its Applications in IoT Environment
Yadav, A. Y., Kumar, S., & Singh, J. (2022) · Lecture notes in networks and systems · doi:10.1007/978-981-16-7952-0_1 · Cited by 70 · see citing works
PLAKE: PUF-Based Secure Lightweight Authentication and Key Exchange Protocol for IoT
Roy, S., Das, D., Mondal, A., Mahalat, M. H., Sen, B., & Sikdar, B. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3202265 · Cited by 72 · see citing works
“Again in [17], a protocol is developed which needs multiple executions of the same protocol for N2S and N2N communication.”
BackgroundMethodPhysically Secure and Conditional-Privacy Authenticated Key Agreement for VANETs
Liang, Y., Luo, E., & Liu, Y. (2023) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2023.3241882 · Cited by 67 · see citing works
“pointed out the shortcomings of those schemes [15], [16], [17] respectively.”
BackgroundMethodInfluentialInjecting Reliable Radio Frequency Fingerprints Using Metasurface for the Internet of Things
Rajendran, S., Sun, Z. Y., Lin, F., et al. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3045318 · Cited by 65 · see citing works
“These responses are used in place of digital signature and are included in the communication packet transmitted by IoT devices for securing the communication between them [18].”
BackgroundCui, J., Yu, J., Zhong, H., et al. (2022) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2022.3227949 · Cited by 64 · see citing works
“Chatter-jee’s [23] designed authentication scheme using identity-based encryption and PUF.”
BackgroundMethodD2D-MAP: A Drone to Drone Authentication Protocol Using Physical Unclonable Functions
Lounis, K., Ding, S. H. H., & Zulkernine, M. (2022) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2022.3224611 · Cited by 61 · see citing works
“As inter-drone communication falls under T2T communication, many research works have been conducted to design and develop authentication protocols that can be applied by resource-constrained devices in T2T architectures [9], [10], [11], [12], [13], [14], [15], [16], [17], [18], [19], [20], [21], [22], [23].”
BackgroundInfluentialIdriss, T. A., Idriss, H., & Bayoumi, M. (2021) · IEEE Access · doi:10.1109/access.2021.3084903 · Cited by 59 · see citing works
Token-Based Security for the Internet of Things With Dynamic Energy-Quality Tradeoff
Aman, M. N., Taneja, S., Sikdar, B., Chua, K. C., & Alioto, M. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2875472 · Cited by 57 · see citing works
A Physically Secure, Lightweight Three-Factor and Anonymous User Authentication Protocol for IoT
Liu, Z., Guo, C., & Wang, B. (2020) · IEEE Access · doi:10.1109/access.2020.3034219 · Cited by 57 · see citing works
“Some protocols [7]–[9] with PUF need to store a set of CRPs for each sensor node, which increases the storage space complexity of GateWay [10].”
BackgroundSafe is the New Smart: PUF-Based Authentication for Load Modification-Resistant Smart Meters
Boyapally, H., Mathew, P., Patranabis, S., et al. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.2992801 · Cited by 56 · see citing works
“The PUF-based protocols presented in [27], [28] were proposed for Internet of Things where the PUF response is used as the public key for each device along with certificate-less identity-based encryption.”
MethodOthman, W., Miao, F., Xue, K., et al. (2021) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2021.3121449 · Cited by 56 · see citing works
“[21] introduced an authentication, key exchange protocol for IoT by combining identity-based encryption (IBE), PUFs, keyed hash function.”
BackgroundMethodWang, D., Cao, Y., Lam, K., Hu, Y., & Kaiwartya, O. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3371101 · Cited by 54 · see citing works
“As the number of messages increases, E2U and U2U outperform [19], [20], [21], [22], [24], and [25].”
BackgroundMethodInfluentialKorenda, A. R., Afghah, F., Cambou, B., et al. (2019) · IEEE International Conference on Sensing, Communication, and Networking (SECON) · doi:10.1109/sahcn.2019.8824887 · Cited by 53 · see citing works
“More importantly, PUFs can provide a low cost alternative solution for on-demand generation of cryptographic keys from the device rather than the conventional methods, where the secret keys are produced and distributed by the server and stored in the IoT device memories [8].”
Background3PAA: A P rivate P UF P rotocol for A nonymous A uthentication
Chatterjee, U., Mukhopadhyay, D., & Chakraborty, R. S. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.3021917 · Cited by 52 · see citing works
“Physically Unclonable Functions (PUFs) [11] has been proposed as a promising unconventional cryptographic primitive for certificate-less identity based authentication [12], [13].”
BackgroundA Survey on Recent Advanced Research of CPS Security
Wang, Z., Xie, W., Wang, B., Tao, J., & Wang, E. (2021) · Applied Sciences · doi:10.3390/app11093751 · Cited by 53 · see citing works
“(2) Industrial Control System: ICS refers to distributed control systems in many industries, such as water treatment [88] and IP cameras [130].”
BackgroundMethodAn FPGA-Based Performance Evaluation of Artificial Neural Network Architecture Algorithm for IoT
Teodoro, A. A. M., Gomes, O. D. S. M., Saadi, M., et al. (2021) · Wireless Personal Communications · doi:10.1007/s11277-021-08566-1 · Cited by 51 · see citing works
“As for the exchange of encryption keys, the biggest driver for new algorithms is the proposal and implementations of post-quantum systems, such as the work of [34–37]; as optimization work for embedded systems, such as those in [38, 39].”
MethodTwo-Factor Authentication Protocol Using Physical Unclonable Function for IoV
Jiang, Q. G., Zhang, X., Zhang, N., et al. (2019) · IEEE/CIC International Conference on Communications in China (ICCC) · doi:10.1109/iccchina.2019.8855828 · Cited by 50 · see citing works
“In the following year, the response of the PUF is used as a session key to encrypt the communication message in Chatterjee’s protocol [10].”
BackgroundMethodInfluentialHardware Security for Internet of Things Identity Assurance
Cirne, A., Sousa, P. R., Resende, J. S., & Antunes, L. F. (2024) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2024.3355168 · Cited by 49 · see citing works
“Other researchers, such as Qureshi and Munir [231] and Qureshi et al. [219], have proposed solutions that eliminate the assumption of a secure CRP database.”
BackgroundA Novel PUF-Based Group Authentication and Data Transmission Scheme for NB-IoT in 3GPP 5G Networks
Ren, X., Cao, J. P., Ma, M., et al. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3098224 · Cited by 47 · see citing works
Zhang, Q., Zhou, X., Zhong, H., Cui, J., Li, J., & He, D. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3451357 · Cited by 48 · see citing works
“In Table III, it can be clearly observed that our scheme has more security attributes than [25], [35], [36], and [38] and has similar security attributes compared to [4] and [37].”
MethodResultA Novel Ultra-Compact FPGA PUF: The DD-PUF
Sala, R. D., Bellizia, D., & Scotti, G. (2021) · Cryptography · doi:10.3390/cryptography5030023 · Cited by 46 · see citing works
Nimmy, K., Sankaran, S., & Achuthan, K. (2021) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-021-03421-4 · Cited by 42 · see citing works
“In particular, Chatterjee et al. (2018) proposed a scheme to prevent explicit storing of CRPs in the database by making the security credential generator offline, which has the entire database in it.”
BackgroundResultInfluentialLee, T., Ye, X., & Lin, S.-H. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3149117 · Cited by 42 · see citing works
Anti-BlUFf: towards counterfeit mitigation in IC supply chains using blockchain and PUF
Aniello, L., Halak, B., Chai, P., Dhall, R., Mihalea, M., & Wilczynski, A. (2020) · International Journal of Information Security · doi:10.1007/s10207-020-00513-8 · Cited by 41 · see citing works
“The use of PUF for building entity-authentication protocols has been extensively explored in the literature [6,31,32].”
MethodA PUF-based anonymous authentication protocol for wireless medical sensor networks
Shao, X., Guo, Y., Guo, Y., et al. (2022) · Wireless Networks · doi:10.1007/s11276-022-03070-1 · Cited by 41 · see citing works
“Schemes [44, 45] cannot provide device anonymity.”
T2T-MAP: A PUF-Based Thing-to-Thing Mutual Authentication Protocol for IoT
Lounis, K., & Zulkernine, M. (2021) · IEEE Access · doi:10.1109/access.2021.3117444 · Cited by 39 · see citing works
“In [16], Chatterjee et al. , proposed a PUF-based authentication protocol for IoT.”
MethodPUF‐Assisted Lightweight Group Authentication and Key Agreement Protocol in Smart Home
Xia, Y., Qi, R., Ji, S., Shen, J., Miao, T., & Wang, H. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/8865158 · Cited by 38 · see citing works
“[33] combined IBE, PUF, and message authentication code to propose a low-power, low-latency authentication, and key agreement protocol that solves the database storage overhead and successfully defies man-in-the-middle attacks.”
BackgroundPUF-Based Authentication-Oriented Architecture for Identification Tags
Rullo, A., Felicetti, C., Vatalaro, M., Rose, R. D., Lanuzza, M., Crupi, F., & Saccà, D. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3387568 · Cited by 38 · see citing works
“Zalivaka et al. [42] and Chatterjee et al. [43] proposed PUF-based authentication schemes for secure communication between two IoT devices that are enrolled in a trusted third party (TTP) acting as Security Credential Generator (SCG).”
Novel Strong-PUF-Based Authentication Protocols Leveraging Shamir’s Secret Sharing
Chen, S., Li, B., Chen, Z., Zhang, Y., Wang, C., & Tao, C. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3065836 · Cited by 36 · see citing works
Das, A. K., Kalam, S., Sahar, N., et al. (2020) · Computers & Security · doi:10.1016/j.cose.2020.101938 · Cited by 34 · see citing works
Lessons Learned: Analysis of PUF-based Authentication Protocols for IoT
Lounis, K., & Zulkernine, M. (2021) · Digital Threats Research and Practice · doi:10.1145/3487060 · Cited by 34 · see citing works
“, [14] proposed a PUF-based authentication protocol for IoT.”
MethodRETRACTED: A lightweight authentication scheme with privacy preservation for vehicular networks
Rawat, G. S., Singh, K., Arshad, N. I., et al. (2022) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2022.108016 · Cited by 34 · see citing works
RetractedModern Authentication Schemes in Smartphones and IoT Devices: An Empirical Survey
Ahvanooey, M. T., Zhu, M. X., Li, Q., Mazurczyk, W., Choo, K. R., Gupta, B. B., & Conti, M. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3138073 · Cited by 33 · see citing works
A Full Lifecycle Authentication Scheme for Large-scale Smart IoT Applications
Chen, F., Xiao, Z., Xiang, T., et al. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3178115 · Cited by 33 · see citing works
Joint Heterogeneous PUF-Based Security-Enhanced IoT Authentication
Yoon, S., Han, S., & Hwang, E. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3279847 · Cited by 32 · see citing works
“To evaluate the proposed scheme, a threat model was assumed in which the adversary could eavesdrop and manipulate the communicated data in the wireless network [42], [43].”
MethodFPGA-Based PUF Designs: A Comprehensive Review and Comparative Analysis
Lata, K., & Cenkeramaddi, L. R. (2023) · Cryptography · doi:10.3390/cryptography7040055 · Cited by 32 · see citing works
Secure Video Surveillance Framework in Smart City
Li, H., Xiezhang, T., Yang, C., Deng, L., & Yi, P. (2021) · Sensors · doi:10.3390/s21134419 · Cited by 31 · see citing works
“According to both [20] and [22], critical hardware is the foundation of security.”
BackgroundSecure PUF-Based Authentication Systems
Tun, N. W., & Mambo, M. (2024) · Sensors · doi:10.3390/s24165295 · Cited by 31 · see citing works
“…[24] Secure WiFi 2018 CD, DoS Yanambaka et al. [25] Energy efficient 2019 CD, ML, I Kim et al. [26] Single CRP 2019 CD, DoS, I Chatterjee et al. [27] CRPs preserved 2019 CD, ML, I Bansal et al. [28] V2G 2020 CD, I Zerrouki et al. [2] Noise resilient 2023 CD, ML, I Nimmy et al. [29] Secret…”
BackgroundInfluentialSecure Mutual Authentication and Key-Exchange Protocol between PUF-Embedded IoT Endpoints
Zheng, Y., & Chang, C.-H. (2021) · IEEE International Symposium on Circuits and Systems proceedings · doi:10.1109/iscas51556.2021.9401135 · Cited by 31 · see citing works
End-to-End Authenticated Key Exchange Based on Different Physical Unclonable Functions
Byun, J. W. (2019) · IEEE Access · doi:10.1109/access.2019.2931472 · Cited by 30 · see citing works
“have proposed PUF-based AKE without explicit PUF’s challenge and response pairs (CRP) under IoT setting [12].”
MethodOn the Adoption of Physically Unclonable Functions to Secure IIoT Devices
Barbareschi, M., Casola, V., Benedictis, A. D., Montagna, E. L., & Mazzocca, N. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3059656 · Cited by 30 · see citing works
Security preservation in industrial medical CPS using Chebyshev map: An AI approach
Qi, R., Ji, S., Shen, J., Vijayakumar, P., & Kumar, N. (2021) · Future Generation Computer Systems · doi:10.1016/j.future.2021.03.008 · Cited by 30 · see citing works
PreLatPUF: Exploiting DRAM Latency Variations for Generating Robust Device Signatures
Talukder, B. M. S. B., Ray, B., Forte, D. J., et al. (2019) · IEEE Access · doi:10.1109/access.2019.2923174 · Cited by 30 · see citing works
“In recent years, PUFs have also been used in IoT applications because they enable low-cost solutions with a high level of security [10]– [12].”
BackgroundARMOR: An Anti-Counterfeit Security Mechanism for Low Cost Radio Frequency Identification Systems
Yılmaz, Y., Do, V.-H., & Halak, B. (2020) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2020.2964435 · Cited by 29 · see citing works
“PUF has been used for key generation and authentication [7, 8, 16, 17] as well as anti-counterfeiting, IP protection and licensing [18, 19].”
BackgroundMethodInfluentialDesigning secure PUF-based authentication protocols for constrained environments
Lee, S.-W., Safkhani, M., Le, Q. N. H., et al. (2023) · Scientific Reports · doi:10.1038/s41598-023-48464-z · Cited by 28 · see citing works
A Lightweight and Practical Anonymous Authentication Protocol Based on Bit-Self-Test PUF
An, Y., Zhang, Y., Cao, W., et al. (2022) · Electronics · doi:10.3390/electronics11050772 · Cited by 28 · see citing works
“The hardware overhead of our proposed scheme is much lower than that of the protocol in [14], which is more suitable for RFID, a resource-constrained Internet of Things device.”
BackgroundMethodInfluentialA Generic Dynamic Responding Mechanism and Secure Authentication Protocol for Strong PUFs
Wang, Y., Wang, C., Gu, C., Cui, Y., O'Neill, M. P., & Liu, W. (2022) · IEEE Transactions on Very Large Scale Integration (VLSI) Systems · doi:10.1109/tvlsi.2022.3189953 · Cited by 28 · see citing works
“Among the authentication protocols based on strong PUFs [7]–[9], [30], [32]–[34], in order to achieve security, modules such as Hash function, TRNG, and finite state machine (FSM) are commonly used (almost all protocols use TRNG).”
BackgroundMethodInfluentialNetwork Slicing in 6G: An Authentication Framework for Unattended Terminals
Ren, Z., Li, X., Jiang, Q. G., et al. (2022) · IEEE Network · doi:10.1109/mnet.112.2100738 · Cited by 27 · see citing works
“Therefore some works [11–14] use the uniqueness of PUF to authenticate a terminal.”
MethodReliable and efficient PUF‐based cryptographic key generator using bit self‐tests
He, Z., Chen, W., Xu, X., et al. (2020) · Electronics Letters · doi:10.1049/el.2020.0344 · Cited by 26 · see citing works
A Dynamically Configurable PUF and Dynamic Matching Authentication Protocol
Wang, Y., Wang, C., Gu, C., Cui, Y., O'Neill, M. P., & Liu, W. (2021) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2021.3072421 · Cited by 26 · see citing works
“Physical unclonable function (PUF), a lightweight hardware security primitive, can provide low-cost identity authentications for IoT devices [2], [3].”
BackgroundLi, Q., Chen, F., Kang, J., Wang, P., Su, J., Huang, F. C., Li, M., & Zhang, J. (2021) · Advanced Photonics Research · doi:10.1002/adpr.202100207 · Cited by 26 · see citing works
Compact SRAM-Based PUF Chip Employing Body Voltage Control Technique
Nam, J.-W., Ahn, J.-H., & Hong, J.-P. (2022) · IEEE Access · doi:10.1109/access.2022.3153359 · Cited by 26 · see citing works
A Novel FPGA Implementation of the NAND-PUF with Minimal Resource Usage and High Reliability
Sala, R. D., & Scotti, G. (2023) · Cryptography · doi:10.3390/cryptography7020018 · Cited by 26 · see citing works
Fuzzy-in-the-Loop-Driven Low-Cost and Secure Biometric User Access to Server
Irshad, A., Usman, M., Chaudhry, S. A., et al. (2020) · IEEE Transactions on Reliability · doi:10.1109/tr.2020.3021794 · Cited by 26 · see citing works
“This distance must be adequately small for a viable authentication model [9], [10].”
BackgroundTwo Sides of the Same Coin: Boons and Banes of Machine Learning in Hardware Security
Liu, W., Chang, C.-H., Wang, X., Liu, C., Fung, J. M., Ebrahimabadi, M., Karimi, N., Meng, X., & Basu, K. (2021) · IEEE Journal on Emerging and Selected Topics in Circuits and Systems · doi:10.1109/jetcas.2021.3084400 · Cited by 27 · see citing works
“Moreover, PUF primitives can be deployed for authentication purposes in a network of multiple nodes such as IoT frameworks [44], [45].”
BackgroundZhu, J., & Sun, Y. (2020) · Chaos Solitons & Fractals · doi:10.1016/j.chaos.2020.109745 · Cited by 24 · see citing works
Authentication of Smart Grid by Integrating QKD and Blockchain in SCADA Systems
Aggarwal, S., & Kaddoum, G. (2024) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2024.3423762 · Cited by 24 · see citing works
“In a cutting-edge centralized SCADA systems, these provers are typically represented by RTUs responsible for controlling field sensors at the physical layer [21].”
BackgroundMethodShariq, M., Ahmed, I. T., Masud, M., et al. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111155 · Cited by 23 · see citing works
A Microservice and Serverless Architecture for Secure IoT System
Ouyang, R., Wang, J., Xu, H., et al. (2023) · Sensors · doi:10.3390/s23104868 · Cited by 23 · see citing works
“In recent years, scholars have put forth various models for the security architecture of IoT, including the collaboration and identity-based security architecture model [10,11] as well as the blockchain-based security architecture model [12].”
BackgroundA Novel Modeling-Attack Resilient Arbiter-PUF Design
Ebrahimabadi, M., Younis, M., Lalouani, W., et al. (2021) · International Conference on VLSI Design and International Conference on Embedded Systems (VLSID) · doi:10.1109/vlsid51830.2021.00026 · Cited by 23 · see citing works
“On the other hand, IBE uses public cryptography for which the public keys are extracted from publicly known information about the device [3].”
BackgroundA lightweight authentication protocol for IoT‐based cloud environment
Zargar, S., Shahidinejad, A., & Ghobaei‐Arani, M. (2021) · International Journal of Communication Systems · doi:10.1002/dac.4849 · Cited by 24 · see citing works
“Braeken 26 shows that the key agreement scheme of a recently proposed Physical Unclonable Functions (PUF) based protocol presented by Chatterjee et al. 27 for the Internet of Things (IoT) is vulnerable to man-in-the-middle, impersonation, and replay attacks.”
BackgroundAdvances on networked ehealth information access and sharing: Status, challenges and prospects
Aski, V. J., Dhaka, V. S., Kumar, S., Verma, S., & Rawat, D. B. (2021) · Computer Networks · doi:10.1016/j.comnet.2021.108687 · Cited by 23 · see citing works
Gandla, S., Moon, C., Leem, J. W., Yoon, J., Yun, H. S., Kim, M. S., Kim, D., Lee, S., Yao, Y., Alexandropoulos, D., et al. (2025) · ACS Nano · doi:10.1021/acsnano.5c01917 · Cited by 23 · see citing works
Shan, X., Yu, H., Chen, Y., et al. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2023.3248107 · Cited by 20 · see citing works
PUF Based Authenticated Key Exchange Protocol for IoT Without Verifiers and Explicit CRPs
Chuang, Y., & Lei, C. (2021) · IEEE Access · doi:10.1109/access.2021.3103889 · Cited by 20 · see citing works
“In Chatterjee et al. ’s scheme [34], there is no explicit CRP in verifier database; their scheme employs a hierarchical architecture that the verifier helps the subordinate IoT nodes to authenticate each other and exchange their public keys, and hence the IoT nodes cannot establish a new session if…”
BackgroundInfluentialLightweight Flexible Group Authentication Utilizing Historical Collaboration Process Information
Fang, H., Xiao, Z., Wang, X., et al. (2023) · IEEE Transactions on Communications · doi:10.1109/tcomm.2023.3240440 · Cited by 20 · see citing works
“Typical authentication schemes include the conventional cryptography-based algorithms [12], [13], [14], such as the public key infrastructure (PKI)-based methods [15], [16] and the identity-based methods [17], [18].”
MethodA Distributed Lightweight PUF-Based Mutual Authentication Protocol for IoV
Alkanhal, M., Alali, A., & Younis, M. (2023) · IoT · doi:10.3390/iot5010001 · Cited by 20 · see citing works
“This paper aims to address this technical issue by utilizing the physical properties of communication links to obscure the exchanged challenge and response bits between IoV nodes [13].”
BackgroundMethodAlhamarneh, R. A., & Singh, M. M. (2024) · Applied Sciences · doi:10.3390/app14051700 · Cited by 25 · see citing works
Chanda, S., Luhach, A. K., Alnumay, W. S., Sengupta, I., & Roy, D. S. (2022) · Computer Communications · doi:10.1016/j.comcom.2022.03.012 · Cited by 20 · see citing works
Two-Layered Multi-Factor Authentication Using Decentralized Blockchain in an IoT Environment
Bamashmos, S. H., Chilamkurti, N., & Shahraki, A. S. (2024) · Sensors · doi:10.3390/s24113575 · Cited by 19 · see citing works
“PUF is a special hardware presented in IoT devices to ensure security [4].”
BackgroundSDR Implementation of a D2D Security Cryptographic Mechanism
Bălan, T., Bălan, A., & Sandu, F. (2019) · IEEE Access · doi:10.1109/access.2019.2904909 · Cited by 19 · see citing works
“There are several methods for authentication or keymanagement using the PUF [15], but not applied on D2D key management schemes.”
MethodA low-cost privacy preserving user access in mobile edge computing framework
Irshad, A., Chaudhry, S. A., Ghani, A., Mallah, G. A., Bilal, M., & Alzahrani, B. A. (2022) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2022.107692 · Cited by 19 · see citing works
Group Secret Key Generation Using Physical Layer Security for UAV Swarm Communications
Jangsher, S., Al‐Dweik, A., Iraqi, Y., et al. (2023) · IEEE Transactions on Aerospace and Electronic Systems · doi:10.1109/taes.2023.3307092 · Cited by 19 · see citing works
“The static data can be stored in lookup table (LUT), and thus, it is considered a hardware overhead [51].”
BackgroundMachine Learning Based IoT Edge Node Security Attack and Countermeasures
Ramnath, V. L., Islam, S. A., Aakur, S. N., et al. (2019) · IEEE Computer Society Annual Symposium on VLSI · doi:10.1109/isvlsi.2019.00124 · Cited by 19 · see citing works
Wang, H., Meng, J., Du, X., et al. (2022) · Security and Communication Networks · doi:10.1155/2022/1203691 · Cited by 19 · see citing works
AlJanah, S., Zhang, N., & Tay, S. W. (2022) · IEEE Access · doi:10.1109/access.2022.3170844 · Cited by 18 · see citing works
“Chatterjee et al. [11] proposed a Physical Unclonable Function (PUF) based architecture to secure authentication.”
BackgroundPhysically Related Functions: Exploiting Related Inputs of PUFs for Authenticated-Key Exchange
Chatterjee, D., Boyapally, H., Patranabis, S., et al. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3214089 · Cited by 18 · see citing works
“This protocol [33] is modified in [1] and [31].”
MethodPrivacy-Preserving Authentication Protocols for IoT Devices Using the SiRF PUF
Plusquellic, J., Tsiropoulou, E. E., & Minwalla, C. (2023) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2023.3296016 · Cited by 18 · see citing works
“A PUF-based authentication and key management protocol for IoT is proposed in [22], improving upon on the attack resilience and performance overhead of the previous method [23].”
MethodPUF-based dynamic secret-key strategy with hierarchical blockchain for UAV swarm authentication
Chen, L., Zhu, Y., Liu, S., Yu, H., & Zhang, B. (2024) · Computer Communications · doi:10.1016/j.comcom.2024.02.001 · Cited by 18 · see citing works
Yang, W. J., Hou, C., Wang, Y., Zhang, Z., Wang, X., & Cao, Y. (2024) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2024.3363004 · Cited by 18 · see citing works
Provably Secure ECC-Based Anonymous Authentication and Key Agreement for IoT
Hu, S., Jiang, S., Miao, Q., Yang, F., Zhou, W., & Duan, P. (2024) · Applied Sciences · doi:10.3390/app14083187 · Cited by 20 · see citing works
Machine Learning Assisted PUF Calibration for Trustworthy Proof of Sensor Data in IoT
Chatterjee, U., Chatterjee, S., Mukhopadhyay, D., et al. (2020) · ACM Transactions on Design Automation of Electronic Systems · doi:10.1145/3393628 · Cited by 18 · see citing works
“Several applications of PUFs in the security domain have been proposed, such as device authentication and identification [12, 17, 33], random number generation [20], intellectual property protection [15], and secure protocol design [5, 8, 9].”
MethodMutual Authentication Protocols Based on PUF and Multitrusted Authority for Internet of Vehicles
Yang, Y., Tan, W., Li, Z., et al. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3449901 · Cited by 17 · see citing works
- Authors
- Chatterjee, U., Govindan, V., Sadhukhan, R., Mukhopadhyay, D., Chakraborty, R. S., Mahata, D., & Prabhu, M. M.
- Affiliations
- Indian Institute of Technology Kharagpur (IN)
- Wipro (India) (IN)
- ORCID
- Venue
- IEEE Transactions on Dependable and Secure Computing
- Published
- 2019-05-01
- Volume
- 16
- Issue
- 3
- Pages
- 424-437
- ISSN
- 1545-5971 (ISSN-L)
- 1941-0018
- 2160-9209
- OpenAlex
- W2801237935
- Semantic Scholar
- fb6cb6f6f1e4a6dd07ff58073a5e27f306216b90
- Cited by
- 290
- References
- 31
- Citations by year
- 2026: 20 · 2025: 35 · 2024: 49 · 2023: 46 · 2022: 42 · 2021: 50 · 2020: 31 · 2019: 14 · 2018: 3
- FWCI
- 15.18
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- IEEE Transactions on Dependable and Secure Computing (publishedVersion)
- Funders
- Wipro Limited, Information security education Awareness Program
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Physical Sciences › Computer Science › Hardware and Architecture › Physical Unclonable Functions (PUFs) and Hardware Security
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Keywords
- physical unclonable functions, IoT device authentication, key exchange, identity-based encryption, challenge-response pairs, device identity, session key security, universal composability, man-in-the-middle attacks, IP spoofing, video surveillance cameras
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
