公开(公告)号：US09129671B2

公开(公告)日：2015-09-08

申请号：US12296875

申请日：2007-04-04

申请人： Roelof H. W. Salters ,  Rutger S. Van Veen ,  Manuel P. C. Heiligers ,  Abraham C. Kruseman ,  Pim T. Tuyls ,  Geert J. Schrijen ,  Boris Skoric

发明人： Roelof H. W. Salters ,  Rutger S. Van Veen ,  Manuel P. C. Heiligers ,  Abraham C. Kruseman ,  Pim T. Tuyls ,  Geert J. Schrijen ,  Boris Skoric

IPC分类号： H04L9/06 ,  G11C7/24 ,  G06F21/73 ,  H04L9/08 ,  G06F21/30 ,  G11C7/20 ,  G11C16/20 ,  G11C16/22 ,  G11C29/04 ,  G11C29/44 ,  G11C29/50

CPC分类号： G11C7/24 ,  G06F21/30 ,  G06F21/73 ,  G11C7/20 ,  G11C16/20 ,  G11C16/22 ,  G11C2029/0407 ,  G11C2029/4402 ,  G11C2029/5002 ,  H04L9/0866

摘要： A method (100) is disclosed of generating an identifier from a semiconductor device (600) comprising a volatile memory (610) having a plurality of memory cells. The method comprises causing (110) the memory cells to assume a plurality of pseudo-random bit values inherent to variations in the microstructure of the memory cells; retrieving (120) the bit values from at least a subset of the plurality of memory cells; and generating the identifier from the retrieved bit values. The method (100) is based on the realization that a substantial amount of the cells of a volatile memory can assume a bit value that is governed by underlying variations in manufacturing process parameters; this for instance occurs at power-up for an SRAM or after a time period without refresh for a DRAM. This can be used for several identification purposes, such as identifying a semiconductor device (600) comprising the volatile memory (610), or for secure key generation by mapping error-correcting code words onto the identifier bit locations. The present invention further includes a semiconductor device (600, 1000) configured to be subjectable to the method (100) of the present invention.

摘要翻译： 公开了一种从包括具有多个存储单元的易失性存储器（610）的半导体器件（600）生成标识符的方法（100）。 该方法包括使（110）存储器单元呈现存储器单元的微结构变化所固有的多个伪随机位值; 从所述多个存储器单元的至少一个子集中检索（120）所述位值; 以及从所检索的位值生成所述标识符。 方法（100）基于以下认识：易失性存储器的大量单元可以采用受制造工艺参数的潜在变化控制的位值; 这例如在SRAM的上电时或者在不刷新DRAM的时间段之后发生。 这可以用于多个识别目的，例如识别包括易失性存储器（610）的半导体器件（600），或者通过将纠错码字映射到标识符位置上来进行安全密钥生成。 本发明还包括被配置为可受本发明的方法（100）的半导体器件（600,1000）。

公开(公告)号：US08339875B2

公开(公告)日：2012-12-25

申请号：US12921901

申请日：2009-04-16

申请人： Pim T. Tuyls ,  Geert J. Schrijen ,  Abraham C. Kruseman

发明人： Pim T. Tuyls ,  Geert J. Schrijen ,  Abraham C. Kruseman

IPC分类号： G11C7/22

CPC分类号： G11C11/412 ,  G11C7/04 ,  G11C7/1006 ,  G11C7/20 ,  H03K3/0375 ,  H04L9/3278

摘要： A method for alleviating burn-in effect and enabling performing a start-up process in respect of a device comprising a plurality of challengeable memory elements, wherein the memory elements are able to, upon start-up, generate a response pattern of start-up values useful for identification as the response pattern depends on physical characteristics of the memory elements, the method comprising the step of, after start-up of the memory elements, writing a data pattern to the memory elements which is inverse to a response pattern that was previously read from the same memory elements. Thus, degradation of the PMOS transistors due to NBTI can be alleviated.

摘要翻译： 一种用于减轻老化效应并且能够对包括多个可询问存储器元件的器件执行启动过程的方法，其中存储器元件能够在启动时产生启动的响应模式 对于识别作为响应模式有用的值取决于存储器元件的物理特性，该方法包括以下步骤：在启动存储器元件之后，将数据模式写入与响应模式相反的存储器元件，该响应模式与 以前从相同的内存元素读取。 因此，可以减轻由于NBTI引起的PMOS晶体管的劣化。

公开(公告)号：US20110103161A1

公开(公告)日：2011-05-05

申请号：US12921901

申请日：2009-04-16

申请人： Pim T. Tuyls ,  Geert J. Schrijen

发明人： Pim T. Tuyls ,  Geert J. Schrijen

IPC分类号： G11C7/22 ,  G11C7/00

CPC分类号： G11C11/412 ,  G11C7/04 ,  G11C7/1006 ,  G11C7/20 ,  H03K3/0375 ,  H04L9/3278

摘要： A method for alleviating burn-in effect and enabling performing a start-up process in respect of a device comprising a plurality of challengeable memory elements, wherein the memory elements are able to, upon start-up, generate a response pattern of start-up values useful for identification as the response pattern depends on physical characteristics of the memory elements, the method comprising the step of, after start-up of the memory elements, writing a data pattern to the memory elements which is inverse to a response pattern that was previously read from the same memory elements. Thus, degradation of the PMOS transistors due to NBTI can be alleviated.

摘要翻译： 一种用于减轻老化效应并且能够对包括多个可询问存储器元件的器件执行启动过程的方法，其中存储器元件能够在启动时产生启动的响应模式 对于识别作为响应模式有用的值取决于存储器元件的物理特性，该方法包括以下步骤：在启动存储器元件之后，将数据模式写入与响应模式相反的存储器元件，该响应模式与 以前从相同的内存元素读取。 因此，可以减轻由于NBTI引起的PMOS晶体管的劣化。

公开(公告)号：US08143705B2

公开(公告)日：2012-03-27

申请号：US12671067

申请日：2008-07-29

申请人： Johannes A. J. Van Geloven ,  Pim T. Tuyls ,  Robertus A. M. Wolters ,  Nynke Verhaegh

发明人： Johannes A. J. Van Geloven ,  Pim T. Tuyls ,  Robertus A. M. Wolters ,  Nynke Verhaegh

IPC分类号： H01L29/40

CPC分类号： H01L23/576 ,  H01L24/73 ,  H01L2224/48091 ,  H01L2224/73265 ,  H01L2924/09701 ,  H01L2924/14 ,  H01L2924/3011 ,  H01L2924/00014 ,  H01L2924/00

摘要： The invention relates to a tamper-resistant semiconductor device comprising a substrate (5) comprising an electronic circuit arranged on a first side thereof. An electrically-conductive protection layer (50, 50a, 50b) is arranged on a second side of the substrate (5) opposite to the first side. At least three through-substrate electrically-conductive connections (45) extend from the first side of the substrate (5) into the substrate (5) and in electrical contact with the electrically-conductive protection layer (50, 50a, 50b) on the second side of the substrate (5). A security circuit is arranged on the first side connected to the through-substrate electrically-conductive connections (45) and is arranged for measuring at least two resistance values (R12, R23, R34, R14, R13, R24) of the electrically-conductive protection layer (50, 50a, 50b) through the through-substrate electrically-conductive connections (45). The security circuit is further arranged for comparing the measured resistance values (R12, R23, R34, R14, R13, R24) with reference resistance values.

摘要翻译： 本发明涉及一种防篡改半导体器件，其包括基板（5），该基板包括布置在其第一侧上的电子电路。 导电保护层（50,50a，50b）布置在与第一侧相对的基板（5）的第二侧上。 至少三个贯穿基板的导电连接（45）从基板（5）的第一侧延伸到基板（5）中并与导电保护层（50,50a，50b）电接触 基板（5）的第二侧。 安全电路布置在与贯穿基板导电连接（45）连接的第一侧上，并且布置成用于测量导电的至少两个电阻值（R12，R23，R34，R14，R13，R24） 保护层（50,50a，50b）穿过贯通基板导电连接（45）。 安全电路还被布置为将测得的电阻值（R12，R23，R34，R14，R13，R24）与参考电阻值进行比较。

公开(公告)号：US08446250B2

公开(公告)日：2013-05-21

申请号：US12602567

申请日：2008-06-10

申请人： Klaus Kursawe ,  Pim T. Tuyls

发明人： Klaus Kursawe ,  Pim T. Tuyls

IPC分类号： H04L9/38

CPC分类号： G06F21/602 ,  G06F21/86 ,  H04L9/3278

摘要： This invention relates to a method and system for providing digital security by means of a reconfigurable physical uncloneable function, RPUF. The RPUF comprises a physical system constituted by distributed components arranged to generate a first response when receiving a first challenge at a point of the physical system. The physical reconfiguring of the RPUF comprises redistributing the components such that they generate a second response, which differs from said first response, when again applying the first challenge at the point. The reconfiguration step is further utilized in providing secure storage for digital items. The digital item is data of any kind, including data that needs to be accessed and updated, i.e. which is dynamic in nature. The method is exemplified by implementations such as secure storage of a key, a secure counter and a seed generator.

摘要翻译： 本发明涉及通过可重新配置的物理不可克隆功能RPUF提供数字安全的方法和系统。 RPUF包括由分布式组件构成的物理系统，其被布置成在物理系统的某一点接收到第一挑战时产生第一响应。 RPUF的物理重新配置包括重新分配组件，使得当在该点再次应用第一挑战时，它们产生与所述第一响应不同的第二响应。 重新配置步骤进一步用于为数字项提供安全存储。 数字项目是任何类型的数据，包括需要被访问和更新的数据，即本质上是动态的。 该方法由诸如密钥的安全存储，安全计数器和种子发生器的实现来示例。

公开(公告)号：US20100121315A1

公开(公告)日：2010-05-13

申请号：US12593634

申请日：2008-03-28

申请人： Karen I. Trovato ,  Pim T. Tuyls ,  Anne E. Barschall

发明人： Karen I. Trovato ,  Pim T. Tuyls ,  Anne E. Barschall

IPC分类号： A61K9/22 ,  A61B5/07

CPC分类号： A61M31/002 ,  A61B1/041 ,  A61B5/4839 ,  H04L9/3278 ,  H04L2209/805 ,  H04L2209/88

摘要： A wearable accessory controls (103) and provides security for a pill delivering medical substances and services. An initialization procedure allows decryption information (814) to be loaded into the accessory for each pill and/or decryption information (818) about the accessory to be loaded into the pill. The pill preferably sends encrypted messages to the accessory and the accessory preferably sends encrypted messages to the pill. The pill operates only when the proximity of the accessory is verified or authenticated during the operation of the pill, preferably at frequent intervals. Where the pill is no longer useful, its information can be deleted (1205) from memory in the accessory or other controlling device.

摘要翻译： 可穿戴附件控制（103）并为运送药物和服务的药丸提供安全保护。 初始化过程允许解密信息（814）被加载到附件中以用于每个药丸和/或解密信息（818），关于待加载到药丸中的附件。 药丸优选地将加密的消息发送到附件，并且附件优选地将加密的消息发送到药片。 药片仅在附件的接近度在药丸的操作期间被证实或认证时才优选地进行，优选以频繁的间隔。 如果药丸不再有用，其信息可以从配件或其他控制设备中的内存中删除（1205）。

公开(公告)号：US07555646B2

公开(公告)日：2009-06-30

申请号：US10538449

申请日：2003-11-21

申请人： Pim T. Tuyls ,  Bruce Murray

发明人： Pim T. Tuyls ,  Bruce Murray

IPC分类号： H04L9/00

CPC分类号： H04L9/3271 ,  H04L9/321 ,  H04L9/3218 ,  H04L2209/80

摘要： An efficient implementation of zero knowledge protocols for authentication of devices and for identification of devices connecting to a network. According to one aspect, the present invention provides a method of verifying the knowledge of a secret number s in a prover device by a verifier device having no knowledge of the secret number, with a zero-knowledge protocol using the Montgomery representation of numbers and Montgomery multiplication operations therein.

摘要翻译： 用于认证设备和识别连接到网络的设备的零知识协议的有效实现。 根据一个方面，本发明提供一种通过具有秘密号码知识的验证器装置来验证证明器装置中秘密号码的知识的方法，其中使用蒙哥马利数字蒙哥马利（Montgomery）表示的零知识协议 乘法运算。

公开(公告)号：US20100177898A1

公开(公告)日：2010-07-15

申请号：US12602857

申请日：2008-06-09

申请人： Pim T. Tuyls ,  Jorge Guajardo Merchan

发明人： Pim T. Tuyls ,  Jorge Guajardo Merchan

IPC分类号： H04K1/00 ,  H04L9/00

CPC分类号： G06F21/35 ,  H04L9/3278 ,  H04L2209/08 ,  H04L2209/805

摘要： The present invention relates to an electronic device, comprising a physical uncloneable function (PUF) module, and circuitry adapted to receive a cryptographic query (α) from an electronic unit, read, from the PUF module, data generated at a challenge of the PUF module, and generate a cryptographic response (β) based on the data, a random noise component comprised in the data, and the cryptographic query (α), thereby enabling authentication of the electronic device. An advantage with the invention is that it will not be necessary to include an additional random generator together with the electronic device, as the fuzzy output provided by the PUF module can be seen as already containing a random noise component. In some cryptographic schemes, the random noise provides for a possibility to reach a higher level of security and to minimize the possibility for a third party to find patterns in cryptographic responses generated during use of the electronic device. The present invention also relates to a similar authentication method.

摘要翻译： 本发明涉及一种电子设备，包括物理不可克隆功能（PUF）模块和适于从电子单元接收加密查询（α）的电路，从PUF模块读取在PUF的挑战下产生的数据 模块，并且基于数据，包括在数据中的随机噪声分量和密码查询（α）生成加密响应（＆bgr），从而使得电子设备的认证。 本发明的优点在于，不需要将附加的随机发生器与电子设备一起包括，因为由PUF模块提供的模糊输出可以被看作已经包含随机噪声分量。 在一些加密方案中，随机噪声提供了达到更高级别的安全性的可能性，并且使得第三方在使用电子设备期间生成的加密响应中找到模式的可能性最小化。 本发明还涉及类似的认证方法。

公开(公告)号：US20100176920A1

公开(公告)日：2010-07-15

申请号：US12602567

申请日：2008-06-10

申请人： Klaus Kursawe ,  Pim T. Tuyls

发明人： Klaus Kursawe ,  Pim T. Tuyls

IPC分类号： H04L9/32 ,  G06F21/02

CPC分类号： G06F21/602 ,  G06F21/86 ,  H04L9/3278

摘要： This invention relates to a method and system for providing digital security by means of a reconfigurable physical uncloneable function, RPUF. The RPUF comprises a physical system constituted by distributed components arranged to generate a first response when receiving a first challenge at a point of the physical system. The physical reconfiguring of the RPUF comprises redistributing the components such that they generate a second response, which differs from said first response, when again applying the first challenge at the point. The reconfiguration step is further utilized in providing secure storage for digital items. The digital item is data of any kind, including data that needs to be accessed and updated, i.e. which is dynamic in nature. The method is exemplified by implementations such as secure storage of a key, a secure counter and a seed generator.

摘要翻译： 本发明涉及通过可重新配置的物理不可克隆功能RPUF提供数字安全的方法和系统。 RPUF包括由分布式组件构成的物理系统，其被布置成在物理系统的某一点接收到第一挑战时产生第一响应。 RPUF的物理重新配置包括重新分配组件，使得当在该点再次应用第一挑战时，它们产生与所述第一响应不同的第二响应。 重新配置步骤进一步用于为数字项提供安全存储。 数字项目是任何类型的数据，包括需要被访问和更新的数据，即本质上是动态的。 该方法由诸如密钥的安全存储，安全计数器和种子发生器的实现来示例。