| Modern cryptography ascribes the security of the cryptosystem to the security of key.Therefore,the management about key becomes the most important infrastructure and security guarantee of information systems.the key generation and key distribution,as the most fundamental security primitives in key management.With the rapid development of cloud computing,big data,Internet of Things,and other technologies,new network structures and application scenarios are rapidly changing,bringing new cybersecurity requirements meanwhile.On the one hand,all kinds of applications urgently call for high speed,high quality,high stability true random number generators,on the other hand,more secure,flexible,and efficient access authentication and key distribution technology are increasingly needed.Semiconductor superlattice is an artificially designed periodic nanoscale multilayer semiconductor material structure with quantum resonance tunneling effect,forming a nonlinear dynamic system with multiple degrees of freedom at the micro level and high-frequency chaotic oscillation at the macro level.It can be regarded as a special physical function with twin characteristics,which is expected to provide a brand new high-quality physical cryptographic solution for key management.However,superlattice cryptography is a cross-subject,and there are still two challenges in its promotion:the first is the lack of systematic theoretical research on its intrinsic mechanism,and the other is the need for more typical cryptographic application verification.For the challenges above,the semiconductor superlattice is intergrated into the theoretical framework of physically unclonable functions(PUF),and the superlattice digital PUF cryptographic application model is constructed to promote the theoretical research spanning from physics research to cryptographic application.Then,a random number generator based on superlattice digital PUF is designed and implemented,and the application of semiconductor superlattice as the physical entropy source of random number generator is verified.Finally,based on theoretical model research and data analysis results,the verifi cation of superlattice in access authentication and key distribution scheme is carried out.The main work and contribution of this paper are as follows:(1)Construction of semiconductor superlattice digital PUF cryptographic application model:a digital PUF cryptographic application model of semiconductor superlattices is constructed based on the theoretical research framework of PUF.The physical mechanism of PUF properties and twin pair properties are analyzed based on the model.The key space and security against typical attacks are evaluated.Combined with quantum confinement and quantum resonance tunneling,the key space of the semiconductor superlattice is estimated,and the security against brute force attacks,birthday attacks,replay attacks,and clone attacks is analyzed.The results show that the semiconductor superlattice digital PUF has the characteristics of physical non-clonability,unpredictability,uniqueness,stability,and twin pair property,the key space is about 2400×50,has a large number of challenge-response pairs set,is the strong PUF,can resist brute force attack,birthday attack,replay attack,and clone attack.It can be used as the physical entropy source of true random number generators and can be applied to access authentication and key distribution schemes.(2)Design and implementation of miniaturized superlattice random number generator:for the key generation,an estimation scheme is proposed based on the semiconductor superlattice digital PUF which can fulfill the req uirements for high speed,high quality,high stability and miniaturized random number generator.This paper proposes a design model of random number generator including entropy source quality monitoring system.And a true random number generator is realized based on the domestic components.The analysis of superlattice cryptographic characteristics shows that the superlattice is in a chaotic oscillation status and shows excellent nonlinearity and chaotic characteristics,and contains rich information entropy.the random number can pass the randomness test standards of the National Cryptography Administration and National Institute of Standards and Technology(NIST)with the rate at 300Mbit/s,which proves that semiconductor superlattice is prospectful in high-speed random number generators.(3)A superlattice-based access authentication and key distribution scheme is proposed:for the key distribution,given the advantage of superlattice digital PUF twin pairs,an application scheme of the integrated network access authentication and key distribution based on the superlattice digital PUF is proposed in this paper.Firstly,the authentication and key distribution scheme between the satellite and ground station are realized based on superlattice digital PUF twin pairs.The access and handover authentication between the terminals and satellite are realized based on universal superlattice devices.Secondly,formal security proof is given for the scheme.The analysis results show that the scheme has confidentiality,integrity,authentic ability,and forward security,and can resist camouflage attacks,replay attacks,and man-in-the-middle attacks.Finally,the evaluation results show that the scheme has obvious performance advantages over the elliptic curve and bilinear pair schemes.Compared with the pre-shared symmetric key scheme,it has similar performance and more advantages in unconditional security and dynamic key management.The scheme further verifies that semiconductor superlattices can realize access authentication and key distribution through the open network,complex and diverse network environment,which means semiconductor superlattice is an ideal access authentication and key distribution technology.In conclusion,the research results of this paper will further enrich and develop the theoretical basis of semiconductor superlattice cryptography,expand the application scenarios of the semiconductor superlattice,and promote semiconductor superlattice from theoretical research to engineering practice rapidly. |
