A Survey on Privacy-Preserving Authentication Schemes using PUFs for Industrial Internet of Things
摘要
The Industrial Internet of Things (IIoT) enables seamless communication between machines, sensors, and gateways optimizing production efficiency. IIoT contains sensitive data, so it is essential to preserve privacy and security while considering the lightweight and resource constraints of IIoT devices. Deploying IIoT devices in hostile areas is a problem for physical security. One aspect of hardware security in the IIoT involves the design and manufacturing of devices with resilient components that can withstand harsh environmental conditions, such as extreme temperatures, humidity, and physical stress. This resilience is essential to ensure the consistent and reliable operation of IIoT devices in challenging settings. Hence Physical Unclonable Function (PUF) plays a vital role in hardware security, providing unique, hardware-derived identifiers that resist cloning attempts, adding a layer of protection against unauthorized access and tampering, thereby reinforcing the security posture of IIoT devices in demanding operational settings. Furthermore, authentication and key agreement (AKA) schemes [9] play a vital role in ensuring secure communication and preventing unauthorized users from accessing the network and devices. When a device tries to connect to the network, it has to go through a mutual authentication process with the network’s authentication server. Unauthorized users are discouraged from trying to access network services by this procedure. It is crucial to employ Authentication and Key Agreement (AKA) schemes in verifying the identity of a device or entity seeking access to state-of-the-art Physically Unclonable Functions (PUFs). This survey offers a thorough examination of PUF-based authentication schemes for IIoT, designed to resist a range of attacks including Impersonation, Replay, Man-in-the-middle, Physical, DoS, and Eavesdropping. Moreover, our study encompasses a detailed performance analysis of various authentication schemes, focusing on computation and communication costs. Ultimately, the exploration of diverse PUF-based authentication schemes highlights discernible variations in communication and computation costs, furnishing valuable insights to guide informed decision-making for enhancing security measures in IIoT applications.