KR20220058106A - Authentication device using physical unclonable function - Google Patents

Abstract

Disclosed is an authentication device using a physical unclonable function. The authentication device includes a physical unclonable function (PUF) chip that outputs specific response data to specific challenge data. The authentication device selects challenge data to be used for authentication from among a plurality of challenge data included in a CRPs table of the PUF chip according to an authentication information generation rule shared with a server and generates PUF encrypted data using the selected challenge data and response data when the selected challenge data is input to the PUF chip. The PUF encrypted data may be used to derive an authentication result through comparison with server-encrypted data generated by the server according to the same authentication information generation rule as the authentication information generation rule used to generate the PUF encrypted data. Accordingly, a problem in which the challenge data and response data are exposed on a network can be prevented.

Description

AUTHENTICATION DEVICE USING PHYSICAL UNCLONABLE FUNCTION

The present invention relates to an authentication device using a Physical Unclonable Function (PUF), and more specifically, a CRPs table composed of a Challenge-Response Pair (CRP) during network communication for authentication. It relates to a device that improves security performance by eliminating the exposure of

Existing software-based security proceeds by storing the key in a non-volatile memory (NVM), but the digital key stored in the NVM is vulnerable to security as the algorithm hacking speed using a physical attack accelerates. There are disadvantages. To overcome this, “Physical Unclonable Function (PUF)”, a type of hardware-based security method that generates unique volatile digital keys, was devised.

PUF can generate random numbers by utilizing unpredictable and uncontrollable process deviations that appear in hardware equipment. By using such random numbers for key generation and authentication, a simple hardware chip that cannot be duplicated can compensate for the shortcomings of the existing software security method. You can provide a way to

More specifically, the output output when a specific input signal called challenge data is put into a PUF chip formed differently according to process deviation is called response data, and PUF can utilize such a challenge-response data pair in the security authentication procedure. In this case, some or all of the CRPs that can be generated in the PUF chip may be referred to as a CRPs table.

For example, assuming that the server has a CRPs table and the user has an authentication device including a PUF chip, when the server transmits challenge data to the authentication device, the authentication device transmits the received challenge data to the PUF chip. Response data can be output by inputting to . Thereafter, when the authentication device transmits the output response data to the server, the server can determine whether authentication is performed by checking whether the challenge-response data pair matches using the CRPs table possessed.

However, in the process in which the server transmits the challenge data to the authentication device and the authentication device transmits the response data to the server, the challenge data and the response data may be exposed on the network, thereby exposing the CRPs table There was a problem in that the risk of hacking through the

The present invention provides an apparatus and method capable of preventing the problem of exposing challenge data and response data on a network by performing authentication using encrypted data generated through challenge data and response data.

An authentication device according to an embodiment of the present invention includes a PUF (Physical Unclonable Function) chip that outputs specific response data with respect to specific challenge data, and the authentication device includes authentication information shared with a server Response when challenge data to be used for authentication is selected from among a plurality of challenge data included in the CRPs table of the PUF chip according to a generation rule, and the selected challenge data and the selected challenge data are input to the PUF chip Generate PUF-encrypted data using data, wherein the PUF-encrypted data compares with server-encrypted data generated by the server according to the same authentication information generation rule as the authentication information generation rule used to generate the PUF-encrypted data. It can be used to derive authentication results through

When two or more challenge data from among a plurality of challenge data included in the CRPs table of the PUF chip are selected according to the authentication information generation rule, the authentication device includes the selected challenge data and the selected challenge data. Different PUF-encrypted data may be generated according to a combination order of response data corresponding to .

The authentication device may share a rule list with the server, and may sequentially select and update different authentication information generation rules included in the rule list at regular intervals from a reference time.

The authentication device shares a list of rules with the server and selects a predetermined authentication information generation rule for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list You can update them by selecting them out of sequence.

The authentication device shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list out of sequence there is.

An authentication device according to an embodiment of the present invention includes a PUF (Physical Unclonable Function) chip that outputs specific response data with respect to specific challenge data, and the authentication device includes authentication information shared with a server According to a generation rule, random challenge data and random response data to be used for authentication are selected from among a plurality of challenge data and response data included in the CRPs table of the PUF chip, respectively, and the selected challenge data and response Generate PUF-encrypted data using data, wherein the PUF-encrypted data compares with server-encrypted data generated by the server according to the same authentication information generation rule as the authentication information generation rule used to generate the PUF-encrypted data. It can be used to derive authentication results through

The authentication device may share a rule list with the server, and may sequentially select and update different authentication information generation rules included in the rule list at regular intervals from a reference time.

The authentication device shares a list of rules with the server and selects a predetermined authentication information generation rule for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list You can update them by selecting them out of sequence.

The authentication device shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list out of sequence there is.

An authentication device according to an embodiment of the present invention includes a plurality of PUF (Physical Unclonable Function) chips that output different response data to the same challenge data, and the authentication device is shared with a server selects at least one PUF chip from among the plurality of PUF chips according to an authentication information generation rule, and generating PUF-encrypted data using the selected challenge data and response data when the selected challenge data is input to the PUF chip, and the PUF-encrypted data generates authentication information used to generate the PUF-encrypted data It can be used to derive an authentication result through comparison with server encrypted data generated by the server according to the same authentication information generation rule as the rule.

When two or more PUF chips are selected from among the plurality of PUF chips, the authentication device responds to the challenge data selected from the CRPs table of the selected PUF chips and the response data when the selected challenge data is input to the PUF chip Different PUF-encrypted data can be generated according to the combination order.

The authentication device may share a rule list with the server, and may sequentially select and update different authentication information generation rules included in the rule list at regular intervals from a reference time.

The authentication device shares a list of rules with the server and selects a predetermined authentication information generation rule for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list You can update them by selecting them out of sequence.

The authentication device shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list out of sequence there is.

The present invention can prevent the problem of exposing the challenge data and the response data on the network by performing authentication using the encrypted data generated through the challenge data and the response data.

1 is a diagram illustrating an authentication system using specific challenge-response data according to an embodiment of the present invention.
2 is a diagram illustrating an authentication system using arbitrary challenge-response data according to an embodiment of the present invention.
3 is a diagram illustrating a system using multi-PUF chips according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an authentication system using specific challenge-response data according to an embodiment of the present invention.

The authentication system 100 provided in the present invention may provide mutual authentication between the server 110 and the authentication device 120 possessed by the user. More specifically, Fig. 1 (a) is an example when the server 110 confirms the authenticity of the authentication device 120, Figure 1 (b) is the authentication device 120 is the authenticity of the server 110 It is a drawing showing an example of the case of confirmation. In this case, the elements constituting the authentication system 100 are not limited to the server 110 and the authentication device 120 , and mutual authentication between the servers 110 or between the authentication devices 120 may be provided.

The authentication device 120 may include a PUF chip, and the PUF chip may receive arbitrary challenge data and output unique response data. In this way, the pair of challenge-response data input/output through the PUF chip may be referred to as a CRPs table, and the server 110 may store the CRPs table of the PUF chip in advance. In this case, the CRPs table stored in the server 110 may be composed of some or all of CRPs that can be generated by the PUF chip.

A process in which the authentication device 120 puts challenge data into the PUF chip and obtains response data is called a random number reading mode, and a process of generating PUF authentication information to be returned to the server 110 based on the response data generated in the PUF chip may be referred to as an authentication information generation mode. The authentication device 120 may perform authentication with the server 110 by using the generated PUF authentication information.

As an example, referring to (a) of FIG. 1 , the authentication device 120 may be used for authentication among a plurality of challenge data included in the CRPs table of the PUF chip according to the authentication information generation rule shared with the server 110 . Challenge data can be selected. That is, since the authentication device 120 does not need to receive the challenge data from the outside, that is, the server 110 by selecting the challenge data to be used for authentication according to the authentication information generation rule, exposure of the challenge data on the network is prevented. can do.

Thereafter, the authentication device 120 may acquire response data when the selected challenge data is input to the PUF chip. The authentication device 120 transmits the thus-obtained response data to the server 110 as it is to perform authentication, but instead uses the challenge data and the response data according to the encryption method included in the authentication information generation rule to obtain PUF-encrypted data. may be generated, and the generated PUF encrypted data may be transmitted to the server 110 as PUF authentication information. That is, the authentication device 120 generates PUF encrypted data according to the authentication information generation rule and performs authentication using the generated PUF data, thereby preventing exposure of response data over the network. In this case, the authentication device 120 may use an encryption function such as a hash function, or may use a digital operation utilizing challenge data and response data.

When the server 110 receives the PUF authentication information from the authentication device 120 , the server 110 may select challenge data to be used for authentication according to the authentication information generation rule shared with the authentication device 120 , and use the pre-stored CRPs table. Thus, it is possible to identify response data corresponding to the selected challenge data.

In addition, the server 110 may generate server encryption data using the challenge data and the response data according to the encryption method included in the authentication information generation rule. In this case, the server 110 may generate the server encrypted data according to the same encryption method as the encryption method used by the authentication device 120 to generate the PUF encrypted data.

Thereafter, the server 110 may derive the authentication result by comparing the generated server encrypted data with the PUF encrypted data received from the authentication device 120 . Then, the server 110 may complete the authentication by transmitting the derived authentication result to the authentication device 120 .

Meanwhile, the server 110 may not transmit the derived authentication result to the authentication device 120 . As described above, the authentication system 100 of the present invention can prevent the validity of the PUF encrypted data from being exposed by not transmitting the authentication result for the PUF encrypted data.

For example, in FIG. 1A , the authentication device 120 may select “1” as the challenge data to be used for authentication among a plurality of challenge data according to the authentication information generation rule, and the challenge data “1” Response data "A" may be obtained by inputting ? to the PUF chip. Then, the authentication device 120 may generate PUF-encrypted data called “A” by using the challenge data “1” and the response data “A” according to the authentication information generation rule, and then transmit it to the server 110 .

When the server 110 receives the PUF-encrypted data “A” from the authentication device 120 , the server 110 selects a challenge to be used for authentication among a plurality of challenge data according to the same authentication information generation rule shared with the authentication device 120 . “1” may be selected as data, and response data “A” corresponding to the selected challenge data “1” may be identified using the previously stored CRPs table. Then, the server 110 generates the server encrypted data “A” using the challenge data “1” and the response data “A” according to the authentication information generation rule and compares it with the PUF encrypted data to derive the authentication result. can

Figure 1 (b) is an example of a case in which the authentication device 120 checks the authenticity of the server 110. In Figure 1 (a), the roles between the server 110 and the authentication device 120 are reversed. The description will be omitted.

On the other hand, in the example of (a) and (b) of Figure 1 provides a configuration for selecting one challenge data to be used for authentication from among a plurality of challenge data included in the CRPs table. Contrary to this, the authentication system 100 of the present invention may select at least two or more challenge data from among a plurality of challenge data included in the CRPs table.

As an example, the authentication device 120 of the authentication system 100 may select the challenge data “1” and “3” according to the authentication information generation rule, and by inputting them into the PUF chip, the response data “A” and “C” " can be obtained individually. In this case, the authentication device 120 encrypts different PUFs by changing the combination order of the thus obtained challenge-response data pairs (1-A) and (3-C) according to the encryption method included in the authentication information generation rule. Data can be generated, which can improve security.

Meanwhile, the authentication information generation rule shared by the server 110 and the authentication device 120 may be updated according to a predetermined method.

(One) fixed cycle type.

The server 110 and the authentication device 120 may share a reference time and a list of rules in advance. Thereafter, the server 110 and the authentication device 120 may sequentially select and update a plurality of authentication information generation rules included in the rule list at regular intervals from the reference time through their respective clocks.

(2) Time information type.

The server 110 and the authentication device 120 may share information on the number of rules to be used in advance according to the rule list and time information. After that, based on the real-time information on which the authentication process is performed, it is possible to select and update an authentication information generation rule suitable for the corresponding time information. At this time, the time information is the time when the server 110 transmits the challenge data to the authentication device 120 or the time when the authentication device 120 receives the challenge data or the authentication device 120 sends the PUF authentication information to the server ( 110) may mean real-time information during the authentication process, such as the time transmitted.

Alternatively, the server 110 and the authentication device 120 may non-sequentially select and update different authentication information generation rules included in the rule list based on time information during which the authentication procedure is performed. More specifically, the server 110 and the authentication device 120 apply different authentication information generation rules included in the rule list by applying the information on the number of challenge-response data pairs constituting the CRPs table to the time information during which the authentication procedure is performed. You can update them by selecting them out of sequence.

For example, it is assumed that the server 110 or the authentication device 120 generates authentication information using the time (seconds) for transmitting the information. At this time, referring to (a) and (b) of FIG. 1 , the CPRs table consists of a total of four challenge-response data pairs, and if the server 110 or the authentication device 120 If information is transmitted in seconds, a remainder of 1 can be obtained by dividing 57, which is time information corresponding to seconds, by 4, which is the number of challenge-response data pairs. At this time, since 0, 1, 2, and 3 may exist in the remainder of 4, the server 110 or the authentication device 120 corresponds to the obtained remainder 1 and includes the second cell among the challenge-response data pairs included in the CPRs table. The Lindsey-response data pair (2-B) can be updated by selecting it as a new credential generation rule.

(3) Previous authentication information type.

The server 110 and the authentication device 120 can share information on which rule to use according to the rule list and previous authentication information in advance, and select and update an authentication information generation rule corresponding to the previous authentication information. . Alternatively, the server 110 and the authentication device 120 may non-sequentially select and update different authentication information generation rules included in the rule list based on previous authentication information.

More specifically, the server 110 and the authentication device 120 identify the challenge-response data pair used for the previous authentication based on the previous authentication information, and use the identified challenge-response data pair to a hash function. By applying, it is possible to obtain an output for selecting the authentication information generation rule.

As an example, it is assumed that the server 110 or the authentication device 120 uses the CRPs table applied to (a) and (b) of FIG. 1 . Since there is no previous authentication information during the initial authentication, the server 110 and the authentication device 120 may perform authentication using an arbitrary challenge-response data pair in the CRPs table. For example, the server 110 or the authentication device 120 may use the first challenge-response data pair 1-A in the CRPs table for authentication.

Thereafter, the server 110 or the authentication device 120 may determine a challenge-response data pair to be used for the next authentication by using the challenge-response data pair used in the first authentication. To this end, the server 110 or the authentication device 120 uses the output “#1” obtained by applying the challenge-response data pair used in the first authentication to the hash function as shown in Table 1 below to be used for the next authentication. A challenge-response data pair may be determined.

In this case, the server 110 or the authentication device 120 converts some or all of the output of the hash function into a number and divides it by the number information of the challenge-response data pairs constituting the CRPs table to obtain the remainder. As an example, the server 110 or the authentication device 120 divides the last number "7" among the output "#1" converted into numbers by 4, which is the number of challenge-response data pairs to obtain a remainder of 3 can In this case, various values may be selected by the user as the value of the output “#1” used to determine the challenge-response data pair to be used for the next authentication.

Since 0, 1, 2, and 3 may exist in the remainder of 4, the server 110 or the authentication device 120 corresponds to the obtained remaining 3 and is included in the CPRs table - the fourth challenge among the response data pairs - The response data pair (4-D) can be updated by selecting it as a new authentication information generation rule.

Then, the server 110 or the authentication device 120 may obtain the output “#2” by applying “#1” and (4-D) used in the next authentication to the hash function, and use it for the next authentication. It can be used to determine a challenge-response data pair.

In this case, if only the challenge-response data pair used in the previous authentication is applied to the hash function, the next authentication combination may be affected only by the immediately preceding authentication combination. On the other hand, if the result of the hash function generated based on the previous authentication combination is applied to the hash function again to determine the next authentication combination, the next authentication combination may be affected by all authentication combinations after the first authentication.

As described above, the authentication system 110 provided in the present invention has the advantage of being able to verify the subject participating in the authentication by utilizing the previous authentication information.

2 is a diagram illustrating an authentication system using arbitrary challenge-response data according to an embodiment of the present invention.

Unlike FIG. 1, in the authentication system 200 provided in FIG. 2, the server 210 or the authentication device 220 does not generate encrypted data using one specific challenge-response data pair in the CRPs table, but each other. Two or more different challenge-response data pairs may be utilized to generate encrypted data.

Referring to FIG. 2 , the CRPs table generated through the PUF chip is defined as (1-A), (2-B), (3-C), and (4-D), but the server 210 or the authentication device ( 220) may generate more diverse types of encrypted data by selecting each of the challenge data and response data to be used for authentication from two or more different challenge-response data pairs according to a shared authentication information generation rule.

For example, referring to FIG. 2 , the authentication device 220 may sequentially select “1” and “3” as challenge data to be used for authentication according to the authentication information generation rule. The authentication device 220 may use the first selected challenge data “1” as it is, and input the second selected challenge data “3” to the PUF chip to obtain response data “C”. The authentication device 220 encrypts the obtained challenge data “1” and response data “C” according to the encryption method included in the authentication information generation rule to generate PUF-encrypted data called “false” and then transmits it to the server ( 210) can be transmitted.

When the server 210 receives the PUF-encrypted data of “no” from the authentication device 220 , the server 210 selects a challenge to be used for authentication among a plurality of challenge data according to the same authentication information generation rule shared with the authentication device 220 . You can select "1" and "3" sequentially as data. The server 210 may use the first selected challenge data “1” as it is, and identify response data “C” corresponding to the second selected challenge data “3” using the pre-stored CRPs table. Then, the server 210 generates server-encrypted data called “go” by using the challenge data “1” and the response data “C” according to the encryption method included in the authentication information generation rule, and compares it with the PUF-encrypted data. By doing so, the authentication result can be derived.

3 is a diagram illustrating a system using multi-PUF chips according to an embodiment of the present invention.

Referring to FIG. 3 , the authentication system 300 may include a server 310 and an authentication device 320 including multiple PUF circuits including one or more PUF chips. In this case, the authentication device 320 may include a plurality of PUF chips 321-322 as shown in FIG. 3 , and each of the plurality of PUF chips 321-322 has different unique response data for the same challenge data. can be printed out.

Therefore, the authentication system 300 of the present invention uses the authentication device 320 composed of a plurality of PUF chips 321-322 as described above, thereby limiting the security performance of the limited number of CRPs in the authentication system through a single PUF chip. can be improved

More specifically, the authentication device 320 may select at least one PUF chip from among the plurality of PUF chips 321-322 according to the authentication information generation rule shared with the server 310 . Thereafter, the authentication device 320 may select at least one challenge data to be used for authentication from among a plurality of challenge data included in the CRPs table of the selected PUF chip. The authentication device 320 may generate PUF encrypted data using the selected challenge data and response data when the selected challenge data is input to the PUF chip, and then transmit it to the server 310 .

When the server 310 receives the PUF encrypted data from the authentication device 320 , the server 310 may select a CRPs table to be used for authentication from among a plurality of CRPs tables according to an authentication information generation rule shared with the authentication device 320 . Thereafter, the server 310 may select at least one or more challenge data to be used for authentication from among a plurality of challenge data included in the selected CRPs table, and use the pre-stored CRPs table to retrieve response data corresponding to the selected challenge data. can be identified.

In addition, the server 310 may generate server encryption data using the challenge data and response data selected according to the encryption method included in the authentication information generation rule. In this case, the server 310 may generate the server encrypted data according to the same encryption method as the encryption method used by the authentication device 320 to generate the PUF encrypted data.

Thereafter, the server 310 may derive an authentication result by comparing the generated server encrypted data with the PUF encrypted data received from the authentication device 320 . Then, the server 310 may complete the authentication by transmitting the derived authentication result to the authentication device 320 .

For example, in FIG. 3 , the authentication apparatus 320 may select sub-PUF1 and sub-PUF2 from among a plurality of PUF chips according to an authentication information generation rule. Thereafter, the authentication device 320 may select “1” and “2” as challenge data to be used for authentication in the CRPs table corresponding to the sub-PUF1 and sub-PUF2 selected according to the authentication information generation rule, respectively, and the selected challenge Response data "A" and "b" can be obtained by inputting data "1" and "2" to sub-PUF1 and sub-PUF2, respectively.

Then, the authentication device 320 encrypts the challenge-response data pairs (1-A) and (2-b) obtained in this way according to the encryption method included in the authentication information generation rule, so that PUF-encrypted data called “intermediate” may be generated and then transmitted to the server 310 .

When the server 310 receives the PUF-encrypted data called “liver” from the authentication device 320 , the server 310 follows the same authentication information generation rule shared with the authentication device 220 , among a plurality of CRPs tables sub-PUF1 and sub- It is possible to identify each CRPs table corresponding to PUF2. Then, the server 310 may identify response data "A" and "b" corresponding to "1" and "2", which are challenge data to be used for authentication in the identified CRPs table, respectively. Then, the server 310 encrypts the challenge-response data pairs (1-A) and (2-b) obtained in this way according to the encryption method included in the authentication information generation rule to obtain server-encrypted data called “intermediate”. After creation, the authentication result can be derived by comparing it with PUF-encrypted data.

At this time, the server 310 and the authentication device 320 change the combination order of the challenge-response data pairs (1-A) and (2-b) obtained through the authentication information generation rule to obtain different PUF-encrypted data can be created, and this can improve security.

Meanwhile, the method according to the present invention is written as a program that can be executed on a computer and can be implemented in various recording media such as magnetic storage media, optical reading media, and digital storage media.

Implementations of the various techniques described herein may be implemented in digital electronic circuitry, or in computer hardware, firmware, software, or combinations thereof. Implementations may be implemented for processing by, or controlling the operation of, a data processing device, eg, a programmable processor, computer, or number of computers, a computer program product, ie an information carrier, eg, a machine readable storage It may be embodied as a computer program tangibly embodied in an apparatus (computer readable medium) or a radio signal. A computer program, such as the computer program(s) described above, may be written in any form of programming language, including compiled or interpreted languages, as a standalone program or in a module, component, subroutine, or computing environment. It can be deployed in any form, including as other units suitable for use in A computer program may be deployed to be processed on one computer or multiple computers at one site or distributed across multiple sites and interconnected by a communications network.

Processors suitable for processing a computer program include, by way of example, both general and special purpose microprocessors, and any one or more processors of any kind of digital computer. Generally, a processor will receive instructions and data from either read-only memory or random access memory or both. Elements of a computer may include at least one processor that executes instructions and one or more memory devices that store instructions and data. In general, a computer may include one or more mass storage devices for storing data, for example magnetic, magneto-optical disks, or optical disks, receiving data from, sending data to, or both. may be combined to become Information carriers suitable for embodying computer program instructions and data are, for example, semiconductor memory devices, for example, magnetic media such as hard disks, floppy disks and magnetic tapes, Compact Disk Read Only Memory (CD-ROM). ), an optical recording medium such as a DVD (Digital Video Disk), a magneto-optical medium such as an optical disk, ROM (Read Only Memory), RAM (RAM) , Random Access Memory), flash memory, EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), and the like. Processors and memories may be supplemented by, or included in, special purpose logic circuitry.

In addition, the computer-readable medium may be any available medium that can be accessed by a computer, and may include both computer storage media and transmission media.

While this specification contains numerous specific implementation details, they should not be construed as limitations on the scope of any invention or claim, but rather as descriptions of features that may be specific to particular embodiments of particular inventions. should be understood Certain features that are described herein in the context of separate embodiments may be implemented in combination in a single embodiment. Conversely, various features that are described in the context of a single embodiment may also be implemented in multiple embodiments, either individually or in any suitable subcombination. Furthermore, although features operate in a particular combination and may be initially depicted as claimed as such, one or more features from a claimed combination may in some cases be excluded from the combination, the claimed combination being a sub-combination. or a variant of a sub-combination.

Likewise, although acts are depicted in the drawings in a particular order, it should not be construed that all acts shown must be performed or that such acts must be performed in the specific order or sequential order shown to obtain desirable results. In certain cases, multitasking and parallel processing may be advantageous. Further, the separation of the various device components of the above-described embodiments should not be construed as requiring such separation in all embodiments, and the program components and devices described may generally be integrated together into a single software product or packaged into multiple software products. You have to understand that you can.

On the other hand, the embodiments of the present invention disclosed in the present specification and drawings are merely presented as specific examples to aid understanding, and are not intended to limit the scope of the present invention. It will be apparent to those of ordinary skill in the art to which the present invention pertains that other modifications based on the technical spirit of the present invention can be implemented in addition to the embodiments disclosed herein.

100: authentication system
110 : server
120: authentication device

Claims (14)

In the authentication device,
Includes a PUF (Physical Unclonable Function) chip that outputs specific response data for specific challenge data,
The authentication device is
According to the authentication information generation rule shared with the server, challenge data to be used for authentication is selected from among a plurality of challenge data included in the CRPs table of the PUF chip, and the selected challenge data and the selected challenge data are combined with the PUF chip. Generates PUF-encrypted data using the response data when input to
The PUF encrypted data is
An authentication device used to derive an authentication result through comparison with server encrypted data generated by the server according to the same authentication information generating rule as the authentication information generating rule used to generate the PUF encrypted data. 2. The method of claim 1
The authentication device is
When two or more of the plurality of challenge data included in the CRPs table of the PUF chip are selected according to the authentication information generation rule, the selected challenge data and a response corresponding to the selected challenge data An authentication device that generates different PUF-encrypted data according to the data combination order. According to claim 1,
The authentication device is
An authentication device that shares a rule list with the server and sequentially selects and updates different authentication information generation rules included in the rule list every predetermined period from a reference time. According to claim 1,
The authentication device is
A rule list is shared with the server, and a predetermined authentication information generation rule is selected for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list are selected non-sequentially. Authenticator to select and update. According to claim 1,
The authentication device is
An authentication device that shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list non-sequentially. In the authentication device,
Includes a PUF (Physical Unclonable Function) chip that outputs specific response data for specific challenge data,
The authentication device is
According to the authentication information generation rule shared with the server, random challenge data and random response data to be used for authentication are selected from among a plurality of challenge data and response data included in the CRPs table of the PUF chip, respectively, and each PUF encryption data is generated using the selected challenge data and response data,
The PUF encrypted data is
An authentication device used to derive an authentication result through comparison with server encrypted data generated by the server according to the same authentication information generating rule as the authentication information generating rule used to generate the PUF encrypted data. 7. The method of claim 6,
The authentication device is
An authentication device that shares a rule list with the server and sequentially selects and updates different authentication information generation rules included in the rule list every predetermined period from a reference time. 7. The method of claim 6,
The authentication device is
A rule list is shared with the server, and a predetermined authentication information generation rule is selected for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list are selected non-sequentially. Authenticator to select and update. 7. The method of claim 6,
The authentication device is
An authentication device that shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list non-sequentially. In the authentication device,
It includes a plurality of PUF (Physical Unclonable Function) chips that output different response data to the same challenge data,
The authentication device is
At least one PUF chip is selected from among the plurality of PUF chips according to an authentication information generation rule shared with the server, and at least one challenge to be used for authentication among a plurality of challenge data included in the CRPs table of the selected PUF chip selecting data, and generating PUF encrypted data using the selected challenge data and response data when the selected challenge data is input to the PUF chip;
The PUF encrypted data is
An authentication device used to derive an authentication result through comparison with server encrypted data generated by the server according to the same authentication information generating rule as the authentication information generating rule used to generate the PUF encrypted data. 11. The method of claim 10,
The authentication device is
When two or more PUF chips are selected from among the plurality of PUF chips, the challenge data selected from the CRPs table of the selected PUF chips and the response data when the selected challenge data is input to the PUF chip according to the combination order An authenticator that generates different PUF-encrypted data. 11. The method of claim 10,
The authentication device is
An authentication device that shares a rule list with the server and sequentially selects and updates different authentication information generation rules included in the rule list every predetermined period from a reference time. 11. The method of claim 10,
The authentication device is
A rule list is shared with the server, and a predetermined authentication information generation rule is selected for the corresponding time information based on the time information at which the authentication procedure is performed, or different authentication information generation rules included in the rule list are selected non-sequentially. Authenticator to select and update. 11. The method of claim 10,
The authentication device is
An authentication device that shares a rule list with the server, selects a predetermined authentication information generation rule based on previous authentication information, or selects and updates different authentication information generation rules included in the rule list non-sequentially.

Images