Physical Unclonable Functions for data security of IoT based systems

Detalhes bibliográficos
Autor(a) principal: Rodrigues, Pedro Afonso de Carvalho
Data de Publicação: 2022
Tipo de documento: Dissertação
Idioma: eng
Título da fonte: Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
Texto Completo: http://hdl.handle.net/10362/155436
Resumo: With the growth of IoT devices connected to the internet in order to transmit and share collected data, it is required to ensure that the data transmitted was not corrupted at any point during a transmission. This can be done by avoiding data corruption and malicious attacks that bypass authentication mechanisms. For this reason, this dissertation intends to propose a new authentication protocol for IoT devices that, while maintaining data integrity, confidentiality and non-repudiation, consumes less resources than other authentication protocols for these devices. Nowadays, data transferred from IoT devices is used in many areas such as advanced industrial installations, simple medical devices or in traffic lights systems. Therefore, any attack on these devices might cause significant problems in the infrastructures that they operate, creating economic issues on the organizations or even putting at risk people that depend on such systems. Taking these considerations in account, the importance of data integrity and authentication in IoT devices has been gaining attention in the IoT security community. Con-sequently, there are plenty of available methodologies to verify data security and integrity, but most do not address properly the issues of devices with lower computational resources. There-fore, the objective of this dissertation is to define a new lightweight authentication protocol using Physical Unclonable Functions and a guide that showcases multiples technologies that can be used to implement the proposed protocol, so that such security needs of IoT are ad-dressed, warranting a proper solution based in the level of computational power of the devices available in each system.
id RCAP_70b2be55997e5c7eb5906d08bf3cb844
oai_identifier_str oai:run.unl.pt:10362/155436
network_acronym_str RCAP
network_name_str Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
repository_id_str 7160
spelling Physical Unclonable Functions for data security of IoT based systemsDomínio/Área Científica::Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e InformáticaWith the growth of IoT devices connected to the internet in order to transmit and share collected data, it is required to ensure that the data transmitted was not corrupted at any point during a transmission. This can be done by avoiding data corruption and malicious attacks that bypass authentication mechanisms. For this reason, this dissertation intends to propose a new authentication protocol for IoT devices that, while maintaining data integrity, confidentiality and non-repudiation, consumes less resources than other authentication protocols for these devices. Nowadays, data transferred from IoT devices is used in many areas such as advanced industrial installations, simple medical devices or in traffic lights systems. Therefore, any attack on these devices might cause significant problems in the infrastructures that they operate, creating economic issues on the organizations or even putting at risk people that depend on such systems. Taking these considerations in account, the importance of data integrity and authentication in IoT devices has been gaining attention in the IoT security community. Con-sequently, there are plenty of available methodologies to verify data security and integrity, but most do not address properly the issues of devices with lower computational resources. There-fore, the objective of this dissertation is to define a new lightweight authentication protocol using Physical Unclonable Functions and a guide that showcases multiples technologies that can be used to implement the proposed protocol, so that such security needs of IoT are ad-dressed, warranting a proper solution based in the level of computational power of the devices available in each system.Com o aumento de dispositivos IoT ligados à internet bem como com o aumento da quantidade de dados transmitidos, é necessário saber se estes dados foram alterados ou cor-rompidos durante a sua transmissão, seja por falha de equipamento ou por ataques maliciosos de terceiros. Por este motivo procedeu-se, nesta dissertação, ao estudo de uma nova aborda-gem ao processo de autenticação nos sistemas IoT, que garantindo a integridade dos dados, a sua confidencialidade e a sua não-repudiação, consome menos recursos que outros proces-sos de autenticação usados nestes dispositivos. Atualmente os dados transferidos por dispositivos IoT podem ser usados para regular instalações industriais críticas, certos dispositivos médicos, etc... Algum ataque aos dados, ou falha de leitura destes dispositivos pode causar danos significativos tanto economicamente, como a infraestruturas ou à saúde de pessoas que dependam destes dispositivos. Tendo em conta os riscos inerentes à quebra de integridade de dados e à falha da autenticação de dispositivos em sistemas críticos como os referidos anteriormente, é seguro assumir que a segurança de dados em dispositivos IoT é um tópico cada vez mais relevante e embora já existam metodologias tradicionais para os processos de autenticação e verificação da integridade de dados, estas nem sempre se aplicam a dispositivos com menos recursos computacionais. É então pretendido com esta dissertação a definição de um novo protocolo de autenticação que use Physical Unclonable Functions, de maneira que as necessidades de segurança de dispositivos IoT sejam cumpridas, garantindo uma solução baseada no nível de poder computacional disponível por tais dispositivos IoT.Sarraipa, JoãoSilva, JoãoRUNRodrigues, Pedro Afonso de Carvalho2023-07-18T12:01:29Z2022-072022-07-01T00:00:00Zinfo:eu-repo/semantics/publishedVersioninfo:eu-repo/semantics/masterThesisapplication/pdfhttp://hdl.handle.net/10362/155436enginfo:eu-repo/semantics/openAccessreponame:Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)instname:Agência para a Sociedade do Conhecimento (UMIC) - FCT - Sociedade da Informaçãoinstacron:RCAAP2024-03-11T05:38:00Zoai:run.unl.pt:10362/155436Portal AgregadorONGhttps://www.rcaap.pt/oai/openaireopendoar:71602024-03-20T03:56:04.117113Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos) - Agência para a Sociedade do Conhecimento (UMIC) - FCT - Sociedade da Informaçãofalse
dc.title.none.fl_str_mv Physical Unclonable Functions for data security of IoT based systems
title Physical Unclonable Functions for data security of IoT based systems
spellingShingle Physical Unclonable Functions for data security of IoT based systems
Rodrigues, Pedro Afonso de Carvalho
Domínio/Área Científica::Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e Informática
title_short Physical Unclonable Functions for data security of IoT based systems
title_full Physical Unclonable Functions for data security of IoT based systems
title_fullStr Physical Unclonable Functions for data security of IoT based systems
title_full_unstemmed Physical Unclonable Functions for data security of IoT based systems
title_sort Physical Unclonable Functions for data security of IoT based systems
author Rodrigues, Pedro Afonso de Carvalho
author_facet Rodrigues, Pedro Afonso de Carvalho
author_role author
dc.contributor.none.fl_str_mv Sarraipa, João
Silva, João
RUN
dc.contributor.author.fl_str_mv Rodrigues, Pedro Afonso de Carvalho
dc.subject.por.fl_str_mv Domínio/Área Científica::Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e Informática
topic Domínio/Área Científica::Engenharia e Tecnologia::Engenharia Eletrotécnica, Eletrónica e Informática
description With the growth of IoT devices connected to the internet in order to transmit and share collected data, it is required to ensure that the data transmitted was not corrupted at any point during a transmission. This can be done by avoiding data corruption and malicious attacks that bypass authentication mechanisms. For this reason, this dissertation intends to propose a new authentication protocol for IoT devices that, while maintaining data integrity, confidentiality and non-repudiation, consumes less resources than other authentication protocols for these devices. Nowadays, data transferred from IoT devices is used in many areas such as advanced industrial installations, simple medical devices or in traffic lights systems. Therefore, any attack on these devices might cause significant problems in the infrastructures that they operate, creating economic issues on the organizations or even putting at risk people that depend on such systems. Taking these considerations in account, the importance of data integrity and authentication in IoT devices has been gaining attention in the IoT security community. Con-sequently, there are plenty of available methodologies to verify data security and integrity, but most do not address properly the issues of devices with lower computational resources. There-fore, the objective of this dissertation is to define a new lightweight authentication protocol using Physical Unclonable Functions and a guide that showcases multiples technologies that can be used to implement the proposed protocol, so that such security needs of IoT are ad-dressed, warranting a proper solution based in the level of computational power of the devices available in each system.
publishDate 2022
dc.date.none.fl_str_mv 2022-07
2022-07-01T00:00:00Z
2023-07-18T12:01:29Z
dc.type.status.fl_str_mv info:eu-repo/semantics/publishedVersion
dc.type.driver.fl_str_mv info:eu-repo/semantics/masterThesis
format masterThesis
status_str publishedVersion
dc.identifier.uri.fl_str_mv http://hdl.handle.net/10362/155436
url http://hdl.handle.net/10362/155436
dc.language.iso.fl_str_mv eng
language eng
dc.rights.driver.fl_str_mv info:eu-repo/semantics/openAccess
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
dc.source.none.fl_str_mv reponame:Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
instname:Agência para a Sociedade do Conhecimento (UMIC) - FCT - Sociedade da Informação
instacron:RCAAP
instname_str Agência para a Sociedade do Conhecimento (UMIC) - FCT - Sociedade da Informação
instacron_str RCAAP
institution RCAAP
reponame_str Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
collection Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
repository.name.fl_str_mv Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos) - Agência para a Sociedade do Conhecimento (UMIC) - FCT - Sociedade da Informação
repository.mail.fl_str_mv
_version_ 1799138146688958464