A Secure Secret Key Agreement Scheme among Multiple Twinning Superlattice PUF Holders

Abstract

Modern cryptography attributes the security of a cryptographic system to the security of the key. How to securely distribute the key has always been a bottleneck in key management. This paper proposes a secure group key agreement scheme for multiple parties using a multiple twinning superlattice physical unclonable function (PUF) that can be synchronized. By sharing the challenge and helper data among multiple twinning superlattice PUF holders, the scheme employs a reusable fuzzy extractor to obtain the key locally. Moreover, adopting public-key encryption encrypts public data for establishing the subgroup key, which provides independent communication for the subgroup. At the same time, when the subgroup membership changes, the public key encrypts new public data to update the subgroup key, forming scalable group communication. This paper also presents a cost and formal security analysis, which shows that the proposed scheme can achieve computational security by applying the key obtained by the computationally secure reusable fuzzy extractor to the EAV-secure symmetric-key encryption, which has indistinguishable encryption in the presence of an eavesdropper. Additionally, the scheme is secure against physical attacks, man-in-the-middle attacks, and machine learning modeling attacks.

A Survey on Key Agreement and Authentication Protocol for Internet of Things Application

“…To enable users to switch to different groups, the dynamic joining and leaving processes can reduce the cost of the authentication process [31], [32]. Group-based authentication is suitable for distributed and scalable IoT environments [33], [34], [35].…”

An On-Demand Fault-Tolerant Routing Strategy for Secure Key Distribution Network

“…However, this method requires a dedicated optical channel and has the drawback that the key generation rate decays exponentially with distance [4]. Physical Unclonable Functions (PUF) based on Semiconductor Superlattice (SSL) is a Secure Key Distribution (SKD) system designed by synchronizing random numbers generated by the space-separated chaotic systems of both parties through the public channel [5,6]. The random information outputted by the SSL device is a complex nonlinear function of the driving signal, and the two twinning SSL devices under the same wafer are strongly correlated but difficult to be cloned in different wafers at some time in the future even if the same process is adopted [7].…”

“…To enable more users to communicate securely through a one-time pad cipher, each user needs to install a twinning SSL device with each other. However, in large-scale networks, a single node will have communication and computing performance bottlenecks due to the need to deal with tasks such as fuzzy extraction [6]. At the same time, the high manufacturing cost of SSL devices will also limit the installation and deployment of a large number of devices [9].…”