Efficient RO-PUF for Generation of Identifiers and Keys in Resource-Constrained Embedded Systems

• Published in: Cryptography Vol. 6; no. 4; p. 51
• Main Authors: Martínez-Rodríguez, Macarena C., Rojas-Muñoz, Luis F., Camacho-Ruiz, Eros, Sánchez-Solano, Santiago, Brox, Piedad
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01.12.2022
• Subjects: Algorithms; Data security; Design; Design parameters; device authentication; Electronic devices; Embedded systems; Field programmable gate arrays; hardware security; Integrated circuits; key generation; Manufacturing; Methods; Oscillators (Electronics); Performance evaluation; Physical properties; physical unclonable functions; reconfigurable devices; Reliability analysis; Safety and security measures; Security; Software; Startups; Spain
• ISSN: 2410-387X; 2410-387X
• DOI: 10.3390/cryptography6040051

The generation of unique identifiers extracted from the physical characteristics of the underlying hardware ensures the protection of electronic devices against counterfeiting and provides security to the data they store and process. This work describes the design of an efficient Physical Unclonable Function (PUF) based on the differences in the frequency of Ring Oscillators (ROs) with identical layout due to variations in the technological processes involved in the manufacture of the integrated circuit. The logic resources available in the Xilinx Series-7 programmable devices are exploited in the design to make it more compact and achieve an optimal bit-per-area rate. On the other hand, the design parameters can also be adjusted to provide a high bit-per-time rate for a particular target device. The PUF has been encapsulated as a configurable Intellectual Property (IP) module, providing it with an AXI4-Lite interface to ease its incorporation into embedded systems in combination with soft- or hard-core implementations of general-purpose processors. The capability of the proposed RO-PUF to generate implementation-dependent identifiers has been extensively tested, using a series of metrics to evaluate its reliability and robustness for different configuration options. Finally, in order to demonstrate its utility to improve system security, the identifiers provided by RO-PUFs implemented on different devices have been used in a Helper Data Algorithm (HDA) to obfuscate and retrieve a secret key.