With the rising numbers for IoT objects, it is becoming easier to penetrate counterfeit objects into the mainstream market by adversaries. Such infiltration of bogus products can be addressed with third-party-verifiable identification. Generally, state-of-the-art identification schemes do not guarantee that an identifier e.g. barcodes or RFID itself cannot be forged. This paper introduces identification patterns representing the objects intrinsic identity by robust hashes and not only by generated identification patterns. Inspired by these two notions, a collection of uniquely identifiable attributes called quasi-identifiers (QI) can be used to identify an object. Since all attributes do not contribute equally towards an object's identity, each QI has a different contribution towards the identifier. A robust hash developed utilising the QI has been named fuzzified robust hashes (FaR hashes), which can be used as an object identifier. Although the FaR hash is a single hash string, selected bits change in response to the modification of QI. On the other hand, other QIs in the object are more important for the object's identity. If these QIs change, the complete FaR hash is going to change. The calculation of FaR hash using attributes should allow third parties to generate the identifier and compare it with the current one to verify the genuineness of the object.
翻译:随着物联网设备数量的增加,竞争对手越来越容易将伪造的产品混入主流市场。第三方可验证标识可以解决这种伪造物品的入侵问题。一般来说,现有的身份识别方案不能保证识别符本身(例如条形码或RFID)不会被伪造。本文介绍了利用鲁棒性哈希表示物品内部识别,而不仅是由生成的识别模式来实现。基于这两个概念,可以使用一组被称为准标识符(QI)的唯一可识别属性来确定一个物品的唯一标识。由于所有属性对物品的唯一性没有均等的贡献,每个QI对标识符的贡献也不同。利用QI开发的鲁棒性哈希被命名为模糊鲁棒哈希(FaR哈希),可用作对象标识符。虽然FaR哈希是一个单个的哈希字符串,但QI的修改会导致选定的位数变化。另一方面,物品的其他QIs对物品的唯一性贡献更为重要。如果这些QI发生变化,整个FaR哈希都会发生变化。使用属性计算FaR哈希应该允许第三方生成标识符并将其与当前标识符进行比较,以验证物品的真实性。