Protection Profile for PUF-based Devices

Andrea Kolberger; Ingrid Schaumüller-Bichl; Verena Brunner; Martin Deutschmann

doi:10.1007/978-3-642-55415-5_8

Protection Profile for PUF-based Devices

Andrea Kolberger, Ingrid Schaumüller-Bichl, Verena Brunner, Martin Deutschmann

R&D-Headquarters

Research output: Chapter in Book/Report/Conference proceedings › Conference contribution

3 Citations (Scopus)

Abstract

Physically Unclonable Functions (PUFs) are a promising technology in cryptographic application areas. The idea of PUFs is to make use of the unique "fingerprint" of the IC, to enable generation of secrets or keys without storing sensitive data permanently in memory. Since PUFs are "noisy" functions, some kind of post processing is required to reliably reconstruct the respective PUF response. Based on potential threats and vulnerabilities as well as the security requirements for PUF-based tokens we developed a draft version of a Protection Profile according to Common Criteria. This paper discusses the central parts of this Protection Profile, namely the Target of Evaluation (TOE), PUF-specific security functional requirements (SFRs), and requirements on the operational environment regarding the whole life cycle of the TOE.

Original language	English
Title of host publication	ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings
Editors	Nora Cuppens-Boulahia, Frédéric Cuppens, Sushil Jajodia, Anas Abou El Kalam, Thierry Sans
Publisher	Springer
Pages	91-98
Number of pages	8
ISBN (Electronic)	9783642554148
ISBN (Print)	978-3-642-55414-8
DOIs	https://doi.org/10.1007/978-3-642-55415-5_8
Publication status	Published - 2014
Event	IFIP SEC 2014 29th International Information Security and Privacy Conference - Marrakech, Morocco Duration: 2 Jun 2014 → 4 Jun 2014 http://www.ensa.ac.ma/sec2014/

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	428
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	IFIP SEC 2014 29th International Information Security and Privacy Conference
Country/Territory	Morocco
City	Marrakech
Period	02.06.2014 → 04.06.2014
Internet address	http://www.ensa.ac.ma/sec2014/

Keywords

Physically Unclonable Function (PUF)
Protection Profile

Access to Document

10.1007/978-3-642-55415-5_8

Cite this

Kolberger, A., Schaumüller-Bichl, I., Brunner, V., & Deutschmann, M. (2014). Protection Profile for PUF-based Devices. In N. Cuppens-Boulahia, F. Cuppens, S. Jajodia, A. A. E. Kalam, & T. Sans (Eds.), ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings (pp. 91-98). (IFIP Advances in Information and Communication Technology; Vol. 428). Springer. https://doi.org/10.1007/978-3-642-55415-5_8

Kolberger, Andrea ; Schaumüller-Bichl, Ingrid ; Brunner, Verena et al. / Protection Profile for PUF-based Devices. ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. editor / Nora Cuppens-Boulahia ; Frédéric Cuppens ; Sushil Jajodia ; Anas Abou El Kalam ; Thierry Sans. Springer, 2014. pp. 91-98 (IFIP Advances in Information and Communication Technology).

@inproceedings{bdbf3c5744324ee2ac13ea8499a43c53,

title = "Protection Profile for PUF-based Devices",

abstract = "Physically Unclonable Functions (PUFs) are a promising technology in cryptographic application areas. The idea of PUFs is to make use of the unique {"}fingerprint{"} of the IC, to enable generation of secrets or keys without storing sensitive data permanently in memory. Since PUFs are {"}noisy{"} functions, some kind of post processing is required to reliably reconstruct the respective PUF response. Based on potential threats and vulnerabilities as well as the security requirements for PUF-based tokens we developed a draft version of a Protection Profile according to Common Criteria. This paper discusses the central parts of this Protection Profile, namely the Target of Evaluation (TOE), PUF-specific security functional requirements (SFRs), and requirements on the operational environment regarding the whole life cycle of the TOE.",

keywords = "Physically Unclonable Function (PUF), Protection Profile, Physically Unclonable Function (PUF), Protection Profile",

author = "Andrea Kolberger and Ingrid Schaum{\"u}ller-Bichl and Verena Brunner and Martin Deutschmann",

year = "2014",

doi = "10.1007/978-3-642-55415-5_8",

language = "English",

isbn = "978-3-642-55414-8",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer",

pages = "91--98",

editor = "Nora Cuppens-Boulahia and Fr{\'e}d{\'e}ric Cuppens and Sushil Jajodia and Kalam, {Anas Abou El} and Thierry Sans",

booktitle = "ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings",

address = "Germany",

note = "IFIP SEC 2014 29th International Information Security and Privacy Conference ; Conference date: 02-06-2014 Through 04-06-2014",

url = "http://www.ensa.ac.ma/sec2014/",

}

Kolberger, A, Schaumüller-Bichl, I, Brunner, V & Deutschmann, M 2014, Protection Profile for PUF-based Devices. in N Cuppens-Boulahia, F Cuppens, S Jajodia, AAE Kalam & T Sans (eds), ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. IFIP Advances in Information and Communication Technology, vol. 428, Springer, pp. 91-98, IFIP SEC 2014 29th International Information Security and Privacy Conference, Marrakech, Morocco, 02.06.2014. https://doi.org/10.1007/978-3-642-55415-5_8

Protection Profile for PUF-based Devices. / Kolberger, Andrea; Schaumüller-Bichl, Ingrid; Brunner, Verena et al.
ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. ed. / Nora Cuppens-Boulahia; Frédéric Cuppens; Sushil Jajodia; Anas Abou El Kalam; Thierry Sans. Springer, 2014. p. 91-98 (IFIP Advances in Information and Communication Technology; Vol. 428).

Research output: Chapter in Book/Report/Conference proceedings › Conference contribution

TY - GEN

T1 - Protection Profile for PUF-based Devices

AU - Kolberger, Andrea

AU - Schaumüller-Bichl, Ingrid

AU - Brunner, Verena

AU - Deutschmann, Martin

PY - 2014

Y1 - 2014

N2 - Physically Unclonable Functions (PUFs) are a promising technology in cryptographic application areas. The idea of PUFs is to make use of the unique "fingerprint" of the IC, to enable generation of secrets or keys without storing sensitive data permanently in memory. Since PUFs are "noisy" functions, some kind of post processing is required to reliably reconstruct the respective PUF response. Based on potential threats and vulnerabilities as well as the security requirements for PUF-based tokens we developed a draft version of a Protection Profile according to Common Criteria. This paper discusses the central parts of this Protection Profile, namely the Target of Evaluation (TOE), PUF-specific security functional requirements (SFRs), and requirements on the operational environment regarding the whole life cycle of the TOE.

AB - Physically Unclonable Functions (PUFs) are a promising technology in cryptographic application areas. The idea of PUFs is to make use of the unique "fingerprint" of the IC, to enable generation of secrets or keys without storing sensitive data permanently in memory. Since PUFs are "noisy" functions, some kind of post processing is required to reliably reconstruct the respective PUF response. Based on potential threats and vulnerabilities as well as the security requirements for PUF-based tokens we developed a draft version of a Protection Profile according to Common Criteria. This paper discusses the central parts of this Protection Profile, namely the Target of Evaluation (TOE), PUF-specific security functional requirements (SFRs), and requirements on the operational environment regarding the whole life cycle of the TOE.

KW - Physically Unclonable Function (PUF)

KW - Protection Profile

KW - Physically Unclonable Function (PUF)

KW - Protection Profile

UR - http://www.scopus.com/inward/record.url?scp=84926460598&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-55415-5_8

DO - 10.1007/978-3-642-55415-5_8

M3 - Conference contribution

SN - 978-3-642-55414-8

T3 - IFIP Advances in Information and Communication Technology

SP - 91

EP - 98

BT - ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings

A2 - Cuppens-Boulahia, Nora

A2 - Cuppens, Frédéric

A2 - Jajodia, Sushil

A2 - Kalam, Anas Abou El

A2 - Sans, Thierry

PB - Springer

T2 - IFIP SEC 2014 29th International Information Security and Privacy Conference

Y2 - 2 June 2014 through 4 June 2014

ER -

Kolberger A, Schaumüller-Bichl I, Brunner V, Deutschmann M. Protection Profile for PUF-based Devices. In Cuppens-Boulahia N, Cuppens F, Jajodia S, Kalam AAE, Sans T, editors, ICT Systems Security and Privacy Protection - 29th IFIP TC 11 International Conference, SEC 2014, Proceedings. Springer. 2014. p. 91-98. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-642-55415-5_8

Protection Profile for PUF-based Devices

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this