Abstract
Authenticating Internet of Things (IoT) devices is still a challenge, especially in deployments involving low-cost constrained nodes. The cited class of IoT devices hardly support dynamic re-keying solutions, hence being vulnerable to several attacks. To provide a viable general-purpose solution, in this paper we propose MAG-PUF, a novel lightweight authentication scheme based on the usage of unintentional magnetic emissions generated by IoT devices as Physical Unclonable Functions (PUFs). Specifically, through MAG-PUF, we collect unintentional magnetic emissions produced by the IoT devices at run-time while executing pre-defined reference functions, and we verify the match of such emissions with the profiles collected at enrolment time, providing device authentication. MAG-PUF enjoys unique flexibility, allowing the selection of an unlimited number and types of reference functions. We extensively assessed the performance of MAG-PUF through experiments on 25 Arduino devices and a set of exemplary reference functions. We obtained an authentication accuracy above 99%, hence proving the feasibility of using code-driven magnetic emissions as a lightweight, efficient, and robust PUF for IoT devices.
| Original language | English |
|---|---|
| Title of host publication | Security and Privacy in Communication Networks |
| Subtitle of host publication | 18th EAI International Conference, SecureComm 2022, Virtual Event, October 2022, Proceedings |
| Editors | Fengjun Li, Kaitai Liang, Zhiqiang Lin, Sokratis K. Katsikas |
| Place of Publication | Cham |
| Publisher | Springer |
| Pages | 130-149 |
| Number of pages | 20 |
| ISBN (Electronic) | 978-3-031-25538-0 |
| ISBN (Print) | 978-3-031-25537-3 |
| DOIs | |
| Publication status | Published - 4 Feb 2023 |
| Event | 18th EAI International Conference on Security and Privacy in Communication Networks, SecureComm 2022 - Virtual, Online Duration: 17 Oct 2022 → 19 Oct 2022 |
Publication series
| Name | Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering (LNICST) |
|---|---|
| Volume | 462 |
| ISSN (Print) | 1867-8211 |
| ISSN (Electronic) | 1867-822X |
Conference
| Conference | 18th EAI International Conference on Security and Privacy in Communication Networks, SecureComm 2022 |
|---|---|
| City | Virtual, Online |
| Period | 17/10/22 → 19/10/22 |
Funding
Acknowledgements. This publication was partially supported by award GSRA6- This publication was partially supported by award GSRA6-1-0528-19046, from the QNRF-Qatar National Research Fund, a member of Qatar Foundation. The information and views set out in this publication are those of the authors and do not necessarily reflect the official opinion of the QNRF. This publication was also partially supported by the INTERSECT project, Grant No. NWA.1162.18.301, funded by Netherlands Organization for Scientific Research (NWO) and the NATO Science for Peace and Security Programme-MYP G5828 project “SeaSec: DronNets for Maritime Border and Port Security”.
Keywords
- Authentication
- IoT
- Magnetic emissions
- PUF