关于用于物联网设备的基于PUF的身份验证和密钥交换协议的安全性
Da-Zhi Sun1, Yi-Na Gao1, Yangguang Tian2
1Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin 300350, China.
Sensors (Basel, Switzerland)
|July 29, 2023
概括
对物联网 (IoT) 设备的新物理非克隆功能 (PUF) 协议存在安全漏洞. 恶意的内部物联网节点可以窃听,冒充他人或伪装为服务器,破坏身份验证.
科学领域:
- 网络安全 网络安全
- 计算机工程 计算机工程
- 密码学 密码学 密码学 密码学
背景情况:
- 物理非克隆功能 (PUF) 为物联网设备提供基于硬件的安全性.
- 罗伊和其他人. 提出了一个集成的PUF协议,用于高效的Node-to-Node (N2N) 和Node-to-Server (N2S) 认证和密钥交换.
- 现有的PUF协议的安全分析往往缺乏具体的,非碎的评估.
研究的目的:
- 对罗伊等人提出的基于PUF的身份验证和密钥交换协议进行彻底的安全检查.
- 在内部攻击场景下调查协议的漏洞.
- 为提供这个特定的PUF协议的第一个非微不足道的具体安全分析.
主要方法:
- 在内部攻击假设下,PUF协议的加密分析.
- 使用Scyther自动化安全协议分析工具进行模拟和验证.
- 识别和记录特定的攻击载体及其影响.
主要成果:
- 确定了允许合法但恶意物联网节点的漏洞:窃听N2N和N2S通信.
- 恶意节点可以冒充其他物联网节点来欺骗服务器和其他节点.
- 恶意节点可以伪装成服务器,在N2N和N2S认证中欺骗其他物联网节点.
结论:
- 该PUF协议显示了可被内部威胁利用的重大安全漏洞.
- 使用Scyther的自动验证证实了所发现的漏洞.
- 讨论了在PUF协议中减轻这些弱点的建议.
相关概念视频
Non-ohmic Devices
1.1K
In most substances, the current flow is proportional to the voltage applied to it. A simple relationship between the values of current, voltage, and resistance is known as Ohm's law. Nonohmic devices do not exhibit a linear relationship between voltage and current. One such device is the semiconducting circuit element known as a diode. A diode is a circuit device that allows current flow in only one direction.
Consider a simple circuit consisting of a battery, a diode, and a resistor. A...
Consider a simple circuit consisting of a battery, a diode, and a resistor. A...
1.1K
Protein-protein Interfaces
12.5K
Many proteins form complexes to carry out their functions, making protein-protein interactions (PPIs) essential for an organism's survival. Most PPIs are stabilized by numerous weak noncovalent chemical forces. The physical shape of the interfaces determines the way two proteins interact. Many globular proteins have closely-matching shapes on their surfaces, which form a large number of weak bonds. Additionally, many PPIs occur between two helices or between a surface cleft and a...
12.5K


