Development of the Unified Security Requirements of PUFs During the Standardization Process

• Published in: Innovative Security Solutions for Information Technology and Communications Vol. 11359; no. 11359; pp. 314 - 330
• Main Authors: Bruneau, Nicolas, Danger, Jean-Luc, Facon, Adrien, Guilley, Sylvain, Hamaguchi, Soshi, Hori, Yohei, Kang, Yousung, Schaub, Alexander
• Format: Book Chapter
• Language: English
• Published: Switzerland Springer International Publishing AG 2019; Springer International Publishing; Springer
• Series: Lecture Notes in Computer Science
• Subjects: Computer Science; Cryptography and Security
• ISBN: 9783030129415; 3030129411; 9783030129422; 303012942X
• ISSN: 0302-9743; 1611-3349; 1611-3349
• DOI: 10.1007/978-3-030-12942-2_24

This paper accounts for some scientific aspects related to the international standardization process about physically unclonable functions (PUFs), through the drafting of ISO/IEC 20897 project. The primary motivation for this standard project is to structure and expand the market of PUFs, as solutions for non-tamperable electronic chips identifiers. While drafting the documents and discussing with international experts, the topic of PUF also gained much maturity. This article accounts how scientific structuration of the PUF as a field of embedded systems security has been emerging as a byproduct. First, the standardization has allowed to merge two redundant security requirements (namely diffuseness and unpredictability) into one (namely randomness), which in addition better suits all kinds of PUFs. As another contribution, the standardization process made it possible to match unambiguous and consistent tests with the security requirements. Furthermore, the process revealed that tests can be seen as estimators from their theoretic expressions, the so-called stochastic models.