A Strong Mutual Authentication Protocol for SHIELD

• Published in: Advances in electrical and computer engineering Vol. 20; no. 4; pp. 81 - 90
• Main Authors: OZCANHAN, M. H., TURKSONMEZ, H.
• Format: Journal Article
• Language: English
• Published: Suceava Stefan cel Mare University of Suceava 01-11-2020
• Subjects: Access control; authentication; Communication; computer security; Counterfeit; Counterfeiting; Defense; Design; Embedded systems; Encryption; Integrated circuits; Intellectual property; Nuclear power plants; radiofrequency identification; Research projects; Security; Sensors; Smartphones; Supply chains; Threats; Wireless networks; United States > US
• ISSN: 1582-7445; 1844-7600
• DOI: 10.4316/AECE.2020.04010

Study shows that counterfeit semiconductors or Integrated Circuits (ICs) are increasingly penetrating into advanced electronic defense systems. Traditional supply chain management policies have been found unsuccessful in protecting the IC supply chain. Our study demonstrates that the newly started threat mitigation initiative of Defense Advanced Research Projects Agency's (DARPA) Supply Chain Hardware Integrity for Electronics Defense (SHIELD) scheme has not matured yet, and the proposed authentication protocol improvements are still vulnerable to known non-invasive, sidechannel attacks. In present work, a novel authentication protocol based on strong mutual authentication is proposed, which resists the demonstrated attacks on previous schemes. The security and performance comparison with the previous work is provided, to inform the IC community about the seriousness of the weaknesses, in previous works. The comparison results show that our proposed protocol exchanges more information, uses more memory and makes more encryption computations. Thus, although our proposed scheme consumes more energy, it has the security required by SHIELD. The outcome forces IC producers to provide enough memory and processing power in a small die area, if the electronic defense IC supply chain is to have the expected security.