NFC-PUF Three-Pass Authentication for Supply Blockchains
摘要
The counterfeit goods poses a persistent threat to both manufacturers and consumers. Addressing this problem requires comprehensive transparency and end-to-end traceability across the supply chain. Blockchain technology offers a solution by enabling the creation of an immutable and transparent ledger, thereby strengthening Know Your Seller (KYS) and Know Your Customer (KYC) compliance frameworks. Crucially, ensuring authenticity requires a verifiable and tamper-resistant link between the physical product and its digital representation. Bridging this physical-digital divide is essential for effective and trustworthy product verification. In this paper, we propose a lightweight and secure authentication protocol that integrates Near Field Communication (NFC), Physical Unclonable Functions (PUF), and blockchain technology to establish a decentralized, tamper-evident system for product verification. The protocol uses a three-pass mutual authentication scheme to resource limitated environments via symmetric AES encryption. We completed a security analysis of the authentication protocol with the ProVerif tool, confirming that our solution satisfies all security requirements. Additionally, it also uses PUF-derived digital signatures to protect against cloning and physical manipulation. Product identities and ownership histories are on a public blockchain, providing immutable, enhanced transparency, and resistance to tampering.