Secure Authentication

• US 20100293612A1
• Filed: 05/12/2009
• Published: 11/18/2010
• Est. Priority Date: 05/12/2009
• Status: Active Grant

• Current Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC), Regents of the University of California (University of California)
• Original Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Inventors: Potkonjak, Miodrag
• Granted Patent: US 9,032,476 B2
• Time in Patent Office: Days
• US Class Current: 726/20
• CPC Class Codes: B82Y 20/00 Nanooptics, e.g. quantum optics or photonic crystals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H01L 29/0669 Nanowires or nanotubes carbon nanotubes as material of solid-state device active part H10K85/211
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

Technologies are generally described for secure authentication tokens that employ hardware public physically unclonable functions. Each unique token can be implemented as hardware such that manufacturing variations provide measurable performance differences resulting in unique, unclonable devices or systems. For example, slight timing variations through a large number of logic gates may be used as a hardware public physically unclonable function of the authentication token. The authentication token can be characterized such that its physical characteristics may be publicly distributed to authenticators. Authenticators may then simulate the result from a particular input vector and then request the authentication token to generate the same result in a very short amount of time. The time may be specified such that the result could not be simulated by an imposter for a timely response.

Claims

1. An authentication token device comprising:

a hardware public physically unclonable function having operational characteristics capable of being characterized by parameters, wherein the parameters are affected by manufacturing variability for the hardware public physically unclonable function;

an input register for loading signals into the hardware public physically unclonable function; and

an output register for delivering result values from the hardware public physically unclonable function.

2. The authentication token device of claim 1, further comprising a timing mechanism for determining when the result values are latched at the output register.

3. The authentication token device of claim 1, further comprising an interface to a host computer, the interface coupled to the input register and the output register.

4. The authentication token device of claim 1, wherein the hardware public physically unclonable function operates with a time less than a time used for simulating the hardware public physically unclonable function from the parameterized characteristics.

5. The authentication token device of claim 1, wherein the hardware public physically unclonable function comprises a plurality of logic gates.

6. The authentication token device of claim 1, wherein the hardware public physically unclonable function comprises nanowires.

7. The authentication token device of claim 1, wherein the hardware public physically unclonable function comprises photonic crystals.

8. A method for generating an authentication challenge response using a hardware public physically unclonable function, the method comprising:

receiving initial values associated with the authentication challenge into an input register associated with the hardware public physically unclonable function;

coupling logic signals corresponding to the initial values from the input register into the hardware public physically unclonable function;

propagating the logic signals through the hardware public physically unclonable function so as to transform the logic signals; and

receiving a signal to latch the transformed logic signals from the hardware public physically unclonable function into an output register.

9. The method of claim 8, further comprising initializing the input register to a known state prior to receiving the initial values.

10. The method of claim 8, wherein the hardware public physically unclonable function generates a result with a time less than a time used for simulating the hardware public physically unclonable function to generate the result.

11. The method of claim 8, wherein the hardware public physically unclonable function comprises a plurality of logic gates.

12. The method of claim 8, wherein the hardware public physically unclonable function comprises nanowires.

13. The method of claim 8, wherein the hardware public physically unclonable function comprises photonic crystals.

14. The method of claim 8, wherein the authentication challenge comprises a vector of initial values and a timing specification for latching the transformed logic signals into the output register.

16. The computer storage medium of claim 8, wherein the authentication challenge comprises multiple result requests from the hardware public physically unclonable function.

17. The computer storage medium of claim 8, wherein the authentication challenge comprises a vector of initial values to load into the hardware public physically unclonable function and a timing specification for latching an output from the hardware public physically unclonable function.

18. The computer storage medium of claim 8, wherein the expected result comprises a set of results generated within a tolerance window of time.

19. The computer storage medium of claim 8, wherein the expected result comprises a statistical sampling of a complete output vector.

20. The computer storage medium of claim 8, wherein the hardware public physically unclonable function comprises a plurality of logic gates.

15. A computer storage medium having computer-executable instructions stored thereon which, when executed by a computer system, cause the computer system to:

receive information characterizing unique parameters associated with a hardware public physically unclonable function;

formulate an authentication challenge to be posed to the hardware public physically unclonable function;

simulate the hardware public physically unclonable function based on the information characterizing unique parameters to generate an expected result to the authentication challenge;

offer the authentication challenge to an authentication device comprising the hardware public physically unclonable function;

classify the authentication challenge as passed in response to receiving the expected result from the authentication device within a specified time period; and

classify the authentication challenge as failed in response to not receiving the expected result from the authentication device within a specified time period.