Physical Unclonable Functions (PUFs) are hardware security primitives whose inherent physical complexity can be exploited for secure authentication and cryptographic key generation. Silicon photonic devices, owing to their suitability for quantum and artificial intelligence applications alongside standard CMOS fabrication processes, constitute a highly promising substrate for integrated multifunctional PUFs. Despite the advanced security guarantees offered by quantum cryptographic protocols and the central role of silicon photonics in quantum technologies, quantum readout strategies based on single-photon states for photonic PUFs remain largely unexplored. In this work, we experimentally demonstrate a silicon nitride (SiN) programmable photonic Mach Zehnder interferometer mesh that implements a unitary transformation and operates as a PUF, whose secret physical signature arises from uncontrollable waveguide variations during fabrication. Using experimentally derived parameters from the SiN integrated mesh, we further introduce and numerically evaluate a quantum readout protocol that combines single-photon states with PUFs. Maximally mixed quantum states are employed to conceal the underlying unitary transformation from passive eavesdropping. Security against adversaries possessing devices fabricated under similar conditions is assessed, with authentication performance quantified through Monte Carlo analysis of the false acceptance and false rejection rates as a function of the number of detected events and corrected errors. The results indicate exceptional performance with equal error rates as low as 10 to the minus 14, highlighting the potential of quantum secure PUFs for high security authentication applications.
Physical Unclonable Functions (PUFs) are hardware security primitives whose inherent physical complexity can be exploited for secure authentication and cryptographic key generation. Silicon photonic devices, owing to their suitability for quantum and artificial intelligence applications alongside standard CMOS fabrication processes, constitute a highly promising substrate for integrated multifunctional PUFs. Despite the advanced security guarantees offered by quantum cryptographic protocols and the central role of silicon photonics in quantum technologies, quantum readout strategies based on single-photon states for photonic PUFs remain largely unexplored. In this work, we experimentally demonstrate a silicon nitride (SiN) programmable photonic Mach Zehnder interferometer mesh that implements a unitary transformation and operates as a PUF, whose secret physical signature arises from uncontrollable waveguide variations during fabrication. Using experimentally derived parameters from the SiN integrated mesh, we further introduce and numerically evaluate a quantum readout protocol that combines single-photon states with PUFs. Maximally mixed quantum states are employed to conceal the underlying unitary transformation from passive eavesdropping. Security against adversaries possessing devices fabricated under similar conditions is assessed, with authentication performance quantified through Monte Carlo analysis of the false acceptance and false rejection rates as a function of the number of detected events and corrected errors. The results indicate exceptional performance with equal error rates as low as 10 to the minus 14, highlighting the potential of quantum secure PUFs for high security authentication applications.
Abstract We demonstrate the uniqueness, unclonability and secure authentication of N = 56 physical unclonable functions (PUFs) realized from silicon photonic moiré quasicrystal interferometers. Compared to prior photonic-PUF demonstrations typically limited in scale to only a handful of unique devices and on the order of 10 false authentication attempts, this work examines > 103 inter-device comparisons and false authentication attempts. Device fabrication is divided across two separate fabrication facilities, allowing for cross-fab analysis and emulation of a malicious foundry with exact knowledge of the PUF photonic circuit design and process. Our analysis also compares cross-correlation based authentication to the traditional Hamming distance method and experimentally demonstrates an authentication error rate AER = 0%, false authentication rate FAR = 0%, and an estimated probability of cloning below 10−30. This work validates the potential scalability of integrated photonic-PUFs which can attractively leverage mature wafer-scale manufacturing and automated contact-free optical probing. Such structures show promise for authenticating hardware in the untrusted supply chain or augmenting conventional electronic-PUFs to enhance system security.
Integrated circuit anti-counterfeiting based on optical physical unclonable functions (PUFs) plays a crucial role in guaranteeing secure identification and authentication for Internet of Things (IoT) devices. While considerable efforts have been devoted to exploring optical PUFs, two critical challenges remain: incompatibility with the complementary metal-oxide-semiconductor (CMOS) technology and limited information entropy. Here, we demonstrate all-silicon multidimensionally-encoded optical PUFs fabricated by integrating silicon (Si) metasurface and erbium-doped Si quantum dots (Er-Si QDs) with a CMOS-compatible procedure. Five in-situ optical responses have been manifested within a single pixel, rendering an ultrahigh information entropy of 2.32 bits/pixel. The position-dependent optical responses originate from the position-dependent radiation field and Purcell effect. Our evaluation highlights their potential in IoT security through advanced metrics like bit uniformity, similarity, intra- and inter-Hamming distance, false-acceptance and rejection rates, and encoding capacity. We finally demonstrate the implementation of efficient lightweight mutual authentication protocols for IoT applications by using the all-Si multidimensionally-encoded optical PUFs.
With the increase of digital devices, the need for robust authentication mechanisms has become crucial. Traditional methods relying on cryptographic key management are susceptible to various risks, particularly the exposure of keys to interception or theft. As cyber threats evolve, the short-comings of these methods are accentuated, necessitating more secure solutions. Physically Unclonable Functions (PUFs) have emerged as a potential alternative, utilizing inherent hardware variations for device authentication without stored secrets. However, recent studies reveal vulnerabilities in conventional PUF implementations. Simultaneously, there's a growing recognition for authentication mechanisms tailored for quantum devices. This recognition has prompted the exploration of Quantum PUFs (QPUFs), which represent a promising solution to enhance security and reliability, leveraging the unique properties of quantum mechanics. In this paper, we propose a novel approach using QPUFs for device authentication that does not require any quantum communication channel or even quantum memory. We design a quantum circuit to serve as a QPUF, evaluating metrics such as instability, randomness, and uniqueness. Additionally, we devise an authentication scheme that exploits the challenge-response paradigm, taking advantage of the distinctive properties of quantum PUFs. Furthermore, we delineate a threat model to identify and mitigate potential risks associated with the authentication process. By assessing the proposed QPUFs efficacy on real real quantum hardware provided by IBM, this research contributes to the advancement of secure authentication protocols in quantum era.
Physical unclonable functions (PUFs) are physical structures that are hard to clone and have a unique challenge-response behavior. The term PUF was coined by Pappu et al. in 2001. That work triggered a lot of interest, and since then a substantial number of papers has been written about the use of a wide variety of physical structures for different security purposes such as identification, authentication, read-proof key storage, key distribution, tamper evidence, anti-counterfeiting, software-to-hardware binding and trusted computing. In this paper we propose a new security primitive: the quantum-readout PUF (QR-PUF). This is a classical PUF, without internal quantum degrees of freedom, which is challenged using a quantum state, e.g. a single-photon state, and whose response is also a quantum state. By the no-cloning property of unknown quantum states, attackers cannot intercept challenges or responses without noticeably disturbing the readout process. Thus, a verifier who sends quantum states as challenges and receives the correct quantum states back can be certain that he is probing a specific QR-PUF without disturbances, even if the QR-PUF is far away "in the field" and under hostile control. For PUFs whose information content is not exceedingly large, all currently known PUF-based authentication and anti-counterfeiting schemes require trusted readout devices in the field. Our quantum readout scheme has no such requirement. Furthermore, we show how the QR-PUF authentication scheme can be interwoven with quantum key exchange (QKE), leading to an authenticated QKE protocol between two parties. This protocol has the special property that it requires no a priori secret shared by the two parties, and that the quantum channel is the authenticated channel, allowing for an unauthenticated classical channel. We provide security proofs for a limited class of attacks. The proofs depend on the physical unclonability of PUFs and on the practical infeasibility of building a quantum computer.
As quantum technologies advance, ensuring secure authentication of quantum devices has become increasingly important. Existing methods, often relying on stored cryptographic keys, are vulnerable to physical and side-channel attacks. Quantum Physical Unclonable Functions (QPUFs) offer a promising alternative by leveraging quantum phenomena such as superposition, entanglement, and quantum noise to produce unique, unclonable responses. However, many existing QPUF designs are based on simulations or report only idealized, best-case results. This work presents and evaluates a set of QPUF circuits on IBM’s real quantum hardware, assessing their performance in terms of instability, randomness, and uniqueness to identify the most effective configurations. Our results show that specific configurations can achieve a positive balance between stability and device distinguishability, reaching 0.05 instability, 0.48 uniqueness, and 0.75 randomness. These findings provide a solid foundation for implementing robust authentication protocols tailored for quantum devices in real-world settings.
The Internet of Things (IoT) has ushered in significant advancements in networked technologies, yet it simultaneously raises concerns about the security and privacy of connected devices. Traditional authentication methods based on cryptographic protocols are increasingly vulnerable to attacks as the number of devices grows and attackers develop more sophisticated strategies. In this paper, we propose a novel quantum-based authentication method using Quantum Physical Unclonable Functions (QPUFs) to address the security challenges in IoT devices. Quantum PUFs exploit the inherent quantum properties of devices to generate unique, unclonable responses to challenges, providing a high level of security and resilience against attacks such as cloning, spoofing, and interception. We present the architecture of the proposed quantum authentication system, discuss the challenge-response protocol, and evaluate the system’s performance. Experimental results show that this approach offers strong security guarantees with minimal computational overhead. We Evaluate the Security, Scalability of our approach in simulated adverse IoT environment.