Systems, Methods and Apparatuses for Prevention of Unauthorized Cloning of a Device

• US 20150046715A1
• Filed: 08/05/2014
• Published: 02/12/2015
• Est. Priority Date: 08/06/2013
• Status: Abandoned Application

• Current Assignee: OLogN Technologies AG
• Original Assignee: OLogN Technologies AG
• Inventors: IGNATCHENKO, Sergey
• Application Number:
  US14/452,057
• Publication Number:
  US 20150046715A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

A self-authenticating device and a method for authenticating the self-authenticating device may be provided. In one aspect, a device may comprise a sensing circuit, which may comprise a circuit to be measured. The sensing circuit may generate measurement data for one or more physical properties of the device using the circuit to be measured. The device may further comprise a storage to store an authenticity certificate that contains authentication data derived from the measurement data and a communication port to communicate the authenticity certificate and measurement data with a communication partner via a link coupled to the communication port.

Claims

1. A device, comprising:

a sensing circuit comprising a circuit to be measured, the sensing circuit to generate measurement data for one or more physical properties of the device using the circuit to be measured;

a storage to store an authenticity certificate that contains authentication data derived from the measurement data; and

a communication port to communicate the authenticity certificate and measurement data with a communication partner via a link coupled to the communication port.

2. The device of claim 1, wherein the authenticity certificate is received via the communication port and stored in the storage.

3. The device of claim 1, wherein the one or more physical properties include one or more of the following:

an amount of heat generated or a temperature reached by the circuit to be measured on the device, a leakage current of a specific MOSFET transistor or several specific MOSFET transistors, a delay on a specific path, power consumed by a specific circuit during specific operations, and a frequency generated by an on-chip oscillator.

4. The device of claim 1, wherein the sensing circuit is configured to measure environmental information when taking measurement of the one or more physical properties.

5. The device of claim 4, wherein the environmental information include one or more of:

power supply voltage, back bias voltage, and temperature.

6. The device of claim 5, wherein the authentication data includes signed data of the environment information.

7. The device of claim 5, wherein the authentication data stored in the authenticity certificate is normalized to some pre-defined temperature and/or voltage.

8. A method for authenticating a device to protect from an unauthorized clone, comprising:

obtaining an authenticity certificate from the device;

determining whether the authenticity certificate is authentic;

collecting measurement data from the device for one or more physical properties of the device,

comparing the collected measurement data to authentication data contained in the authenticity certificate; and

determining whether the device is authentic based on the comparison result.

9. The method of claim 8, wherein the one or more physical properties include one or more of the following:

an amount of heat generated or a temperate reached by the circuit to be measured on the device when the circuit to be measured is performing a predefined operation, a leakage current of a specific MOSFET transistor or several specific MOSFET transistors, a delay on a specific path, power consumed by a specific circuit during specific operations, and a frequency generated by an on-chip oscillator.

10. The method of claim 8, wherein the authentication data includes signed data of environment information.

11. The method of claim 10, wherein the environmental information include one or more of:

power supply voltage, back bias voltage, and temperature.

12. The method of claim 10, wherein the authentication data stored in the authenticity certificate is normalized to some pre-defined temperature and/or voltage.

13. The method of claim 8, wherein whether the device is determined to be authentic depends on whether the collected measurement data is within an expected range.

14. The method of claim 13, wherein the expected range is predefined.

15. The method of claim 13, wherein the expected range is derived from data in the obtained authenticity certificate.

16. The method of claim 8, wherein comparing the collected measurement data to the authentication data in the authenticity certificate comprises assigning weights to at least some of measured data.

17. The method of claim 8, wherein comparing the collected measurement data to the authentication data in the authentication certificate comprises calculating a probability that the device is authentic.

18. The method of claim 17, wherein calculating the probability that the device is authentic comprises verifying a statistical hypothesis that the collected measurement data corresponds to the authentication data obtained from the authenticity certificate.

19. The method of claim 18, wherein verifying the statistical hypothesis comprises using a chi-square method on multiple measurement results and determining that a p-value is greater than a predefined threshold.

20. An authentication apparatus for authenticating a device;

comprising;

a storage for storing a public key;

a signature verification block configured to use the public key to authenticate authenticity certificates;

a communication port; and

a processor configured to;

establish a connection to the device to be authenticated through the communication port;

obtain an authenticity certificate from the device through the communication port;

collect measurement data from the device for one or more physical properties of the device;

compare the collected measurement data to authentication data in the authenticity certificate; and

determine whether the device is authentic based on the comparison result.

21. The authentication apparatus of claim 20, wherein the one or more physical properties include one or more of the following:

an amount of heat generated or a temperate reached by a circuit to be measured on the device when the circuit to be measured is performing a predefined operation, a leakage current of a specific MOSFET transistor or several specific MOSFET transistors, a delay on a specific path, power consumed by a specific circuit during specific operations, and a frequency generated by an on-chip oscillator.

22. The authentication apparatus of claim 20, wherein to compare the collected measurement data to the authentication data in the authentication certificate is to verify that the received measurement data is within an expected range.

23. The authentication apparatus of claim 22, wherein the expected range is predefined.

24. The authentication apparatus of claim 22, wherein the expected range is derived from the data in authenticity certificate.

25. The authentication apparatus of claim 20, wherein to compare the collected measurement data to the authentication data in the authentication certificate comprises assigning weights to at least some of measured data.

26. The authentication apparatus of claim 20, wherein to compare the collected measurement data to the authentication data in the authentication certificate comprises to calculate a probability that the device is authentic.

27. The authentication apparatus of claim 26, wherein to calculate the probability that the device is authentic comprises to verify a statistical hypothesis that the collected measurement data corresponds to the authentication data obtained from the authenticity certificate.

28. The authentication apparatus of claim 27, wherein to verify the statistical hypothesis comprises using a chi-square method on multiple measurement results and determining that a p-value is greater than a predefined threshold.