A PUF Based Hardware Authentication Scheme for Embedded Devices

This paper describes an offline authentication scheme for resource-constrained embedded devices designated for applications in the Internet of Things (IoT). The novelty of the work is the combination of SRAM based PUF structures and hash values of the bootloader to derive a device unique fingerprint. We propose the usage of asymmetric encryption to secure the communication path. On top of the description of the generic concepts, we also present alternative variations using additional components such as one-time programmable (OTP) memory. The schemes are thoroughly evaluated against a set of relevant attack scenarios.