Connected devices are deployed at a rapid rate and in broad domains like home automation or industry, forming the Internet of Things. Those devices need to be secure and trusted to prevent malicious use. However some connected devices are low-cost, memory constrained, power constrained, etc.. Thisgreatly limits the deployment of usual security solutions. As the absence of security is not acceptable, it is necessary to search for lightweight security solutions adapted to such devices. Physical Unclonable Function (PUF) technology can support new lightweight security mechanisms and several lightweight security protocols using this technology have been proposed over the years. Those protocols look promising, however there are still some unaddressed challenges which have slowed down a large scale adoption. This article presents the design of a new authentication protocol for constrained devices which takes into account those challenges. This protocol is implemented on a hardware platform used for connected devices development, which is then used to evaluate the security level and performances of the protocol in a realistic scenario. This evaluation shows that the protocol is secure and can meet industrial time constraints.

中文翻译：

---

受限设备的可再填充 PUF 身份验证协议

联网设备快速部署在家庭自动化或工业等广泛领域，形成了物联网。这些设备需要安全可靠，以防止恶意使用。然而，一些连接的设备成本低、内存受限、功率受限等。这极大地限制了通常安全解决方案的部署。由于缺乏安全性是不可接受的，因此有必要寻找适用于此类设备的轻量级安全解决方案。物理不可克隆函数（PUF）技术可以支持新的轻量级安全机制，并且多年来已经提出了几种使用该技术的轻量级安全协议。这些协议看起来很有希望，但仍有一些未解决的挑战减缓了大规模采用。本文介绍了一种针对受限设备的新身份验证协议的设计，该协议考虑了这些挑战。该协议在用于连接设备开发的硬件平台上实现，然后用于评估协议在现实场景中的安全级别和性能。该评估表明该协议是安全的，可以满足工业时间限制。