PUF-Based Device Authentication with Zero-Knowledge Proof in IoT

With the development of science and technology, the Internet of Things (IoT) had been integrated into the daily life of people. That makes the security of IoT a necessity and gains more attention. The Device authentication is an important issue in the security of IoT. In this paper, we propose a device authentication scheme based on both Physically Unclonable Function (PUF) and zero-knowledge proof. The proposed mutual authentication scheme reduces the memory load on the server and provides both data integrity and confidentiality during the authenticating process. We verify the proposed device authentication algorithm on the IoT platform Raspberry Pi using SRAM-PUF. The experimental results reveal that the proposed device authentication scheme is novel for IoT. It can resist brute force attack, replay attack, man-in-the-middle attack, machine learning attacks, and etc.