A Generic Multifactor Authenticated Key Exchange with Physical Unclonable Function

Abstract EN

We study how to generally construct a PUF-based multifactor authenticated key exchange (MAKE) protocol from any secure password-based authenticated key exchange protocol.

We newly consider a new setting in which a user holding a PUF-embedded device desires to perform an authenticate key exchange through multifactor authentication factors (password, biometrics, secret).

Our construction is the first PUF-based general MAKE construction.

By applying a PUF in a device, our MAKE construction is still secure even if all authentication factors are totally compromised.

Our construction is the first PUF-based generic MAKE protocol requiring additional three communication flows without any public key based primitives such as signature.