PUF-derived IoT identities in a zero-knowledge protocol for blockchain

As the internet of things moves into increasingly sensitive domains, connected devices need to be secured against data manipulation and counterfeiting. Where the underlying business processes involve multiple independent parties, a blockchain platform can provide a common source of truth. If changes...

Full description

Bibliographic Details
Authors: Prada Delgado, Miguel Ángel, Baturone Castillo, María Iluminada, Dittmann, Gero, Jelitto, Jens, Kind, Andreas
Format: article
Status:Versión enviada para evaluación y publicación
Publication Date:2020
Country:España
Institution:Universidad de Sevilla (US)
Repository:idUS. Depósito de Investigación de la Universidad de Sevilla
OAI Identifier:oai:idus.us.es:11441/169131
Online Access:https://hdl.handle.net/11441/169131
https://doi.org/10.1016/j.iot.2019.100057
Access Level:Open access
Keyword:Authentication
Blockchain
IoT
Microcontroller
PUF
SRAM
Zero-knowledge proof
id ES_2b4f1a5a80cf976342b96dbccefff71b
oai_identifier_str oai:idus.us.es:11441/169131
network_acronym_str ES
network_name_str España
repository_id_str
spelling PUF-derived IoT identities in a zero-knowledge protocol for blockchainPrada Delgado, Miguel ÁngelBaturone Castillo, María IluminadaDittmann, GeroJelitto, JensKind, AndreasAuthenticationBlockchainIoTMicrocontrollerPUFSRAMZero-knowledge proofAs the internet of things moves into increasingly sensitive domains, connected devices need to be secured against data manipulation and counterfeiting. Where the underlying business processes involve multiple independent parties, a blockchain platform can provide a common source of truth. If changes to the common state depend on IoT devices, the authenticity and integrity of the IoT input must be ensured. Employing a blockchain platform for authenticating devices makes the process independent of the device manufacturer. This paper shows how cryptographic keys derived from a device's physical fingerprint can be employed in a zero-knowledge protocol to authenticate a device. As the keys are regenerated at boot time rather than stored, the approach does not need an expensive secure element. An efficient implementation enables even lightweight devices to prove their identity and sign messages. Experimental results demonstrate the robustness of the approach.Agencia Estatal de Investigación TEC2017-83557-R, RTC-2017-6595-RElsevierElectrónica y ElectromagnetismoAgencia Estatal de Investigación. España2020info:eu-repo/semantics/articleinfo:eu-repo/semantics/submittedVersionapplication/pdfapplication/pdfhttps://hdl.handle.net/11441/169131https://doi.org/10.1016/j.iot.2019.100057reponame:idUS. Depósito de Investigación de la Universidad de Sevillainstname:Universidad de Sevilla (US)InglésInternet of Things (The Netherlands), 9, 100057.TEC2017-83557-RRTC-2017-6595-Rhttps://doi.org/10.1016/j.iot.2019.100057info:eu-repo/semantics/openAccessoai:idus.us.es:11441/1691312026-06-17T12:51:07Z
dc.title.none.fl_str_mv PUF-derived IoT identities in a zero-knowledge protocol for blockchain
title PUF-derived IoT identities in a zero-knowledge protocol for blockchain
spellingShingle PUF-derived IoT identities in a zero-knowledge protocol for blockchain
Prada Delgado, Miguel Ángel
Authentication
Blockchain
IoT
Microcontroller
PUF
SRAM
Zero-knowledge proof
title_short PUF-derived IoT identities in a zero-knowledge protocol for blockchain
title_full PUF-derived IoT identities in a zero-knowledge protocol for blockchain
title_fullStr PUF-derived IoT identities in a zero-knowledge protocol for blockchain
title_full_unstemmed PUF-derived IoT identities in a zero-knowledge protocol for blockchain
title_sort PUF-derived IoT identities in a zero-knowledge protocol for blockchain
dc.creator.none.fl_str_mv Prada Delgado, Miguel Ángel
Baturone Castillo, María Iluminada
Dittmann, Gero
Jelitto, Jens
Kind, Andreas
author Prada Delgado, Miguel Ángel
author_facet Prada Delgado, Miguel Ángel
Baturone Castillo, María Iluminada
Dittmann, Gero
Jelitto, Jens
Kind, Andreas
author_role author
author2 Baturone Castillo, María Iluminada
Dittmann, Gero
Jelitto, Jens
Kind, Andreas
author2_role author
author
author
author
dc.contributor.none.fl_str_mv Electrónica y Electromagnetismo
Agencia Estatal de Investigación. España
dc.subject.none.fl_str_mv Authentication
Blockchain
IoT
Microcontroller
PUF
SRAM
Zero-knowledge proof
topic Authentication
Blockchain
IoT
Microcontroller
PUF
SRAM
Zero-knowledge proof
description As the internet of things moves into increasingly sensitive domains, connected devices need to be secured against data manipulation and counterfeiting. Where the underlying business processes involve multiple independent parties, a blockchain platform can provide a common source of truth. If changes to the common state depend on IoT devices, the authenticity and integrity of the IoT input must be ensured. Employing a blockchain platform for authenticating devices makes the process independent of the device manufacturer. This paper shows how cryptographic keys derived from a device's physical fingerprint can be employed in a zero-knowledge protocol to authenticate a device. As the keys are regenerated at boot time rather than stored, the approach does not need an expensive secure element. An efficient implementation enables even lightweight devices to prove their identity and sign messages. Experimental results demonstrate the robustness of the approach.
publishDate 2020
dc.date.none.fl_str_mv 2020
dc.type.none.fl_str_mv info:eu-repo/semantics/article
info:eu-repo/semantics/submittedVersion
format article
status_str submittedVersion
dc.identifier.none.fl_str_mv https://hdl.handle.net/11441/169131
https://doi.org/10.1016/j.iot.2019.100057
url https://hdl.handle.net/11441/169131
https://doi.org/10.1016/j.iot.2019.100057
dc.language.none.fl_str_mv Inglés
language_invalid_str_mv Inglés
dc.relation.none.fl_str_mv Internet of Things (The Netherlands), 9, 100057.
TEC2017-83557-R
RTC-2017-6595-R
https://doi.org/10.1016/j.iot.2019.100057
dc.rights.none.fl_str_mv info:eu-repo/semantics/openAccess
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
application/pdf
dc.publisher.none.fl_str_mv Elsevier
publisher.none.fl_str_mv Elsevier
dc.source.none.fl_str_mv reponame:idUS. Depósito de Investigación de la Universidad de Sevilla
instname:Universidad de Sevilla (US)
instname_str Universidad de Sevilla (US)
reponame_str idUS. Depósito de Investigación de la Universidad de Sevilla
collection idUS. Depósito de Investigación de la Universidad de Sevilla
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1869405136016637952
score 15.811543