An Improved PUF-Based Privacy-Preserving IoT Protocol for Cloud Storage

Cédrick De Pauw, Jan Mühlberg, Jean-Michel Dricot

2024

Abstract

The IoT technology allows many types of personal data to be measured by many kinds of devices and sensors, and to be sent over the Internet for various applications. However, this data transmission has to be secure and the privacy of the users should ideally be preserved. In this work, we propose a SRAM PUF-based privacy-preserving IoT protocol for cloud storage based on an existing protocol from the literature. Proposals are made to increase the supply chain security of the PUF construction used by a device, to extend the secure lifetime of this device by increasing the number of keys it may generate and avoiding reboot-based attacks, and to allow a PUF construction to be used for different applications. These proposals only require changes on the device enrollment and on the master key generation procedure, leaving the PUF construction, the fuzzy extractor construction and the cryptographic key derivation unchanged. Benefits and limitations of this new protocol are evaluated and security objectives achieved with these proposals are analyzed.

Paper Citation

in Harvard Style

De Pauw C., Mühlberg J. and Dricot J. (2024). An Improved PUF-Based Privacy-Preserving IoT Protocol for Cloud Storage. In Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP; ISBN 978-989-758-683-5, SciTePress, pages 725-732. DOI: 10.5220/0012326000003648

in Bibtex Style

@conference{icissp24,
author={Cédrick De Pauw and Jan Mühlberg and Jean-Michel Dricot},
title={An Improved PUF-Based Privacy-Preserving IoT Protocol for Cloud Storage},
booktitle={Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP},
year={2024},
pages={725-732},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012326000003648},
isbn={978-989-758-683-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 10th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP
TI - An Improved PUF-Based Privacy-Preserving IoT Protocol for Cloud Storage
SN - 978-989-758-683-5
AU - De Pauw C.
AU - Mühlberg J.
AU - Dricot J.
PY - 2024
SP - 725
EP - 732
DO - 10.5220/0012326000003648
PB - SciTePress