ISO/IEC 20897-1:2020 PDF

Name: ISO/IEC 20897-1:2020 — Information security, cybersecurity and privacy protection — Physically unclonable functions — Part 1: Security requirements
SKU: ISO/IEC 20897-1:2020
Price: 25 EUR
Availability: InStock

Information security, cybersecurity and privacy protection — Physically unclonable functions — Part 1: Security requirements

Название (английский):

ISO/IEC 20897-1:2020

Information security, cybersecurity and privacy protection — Physically unclonable functions — Part 1: Security requirements

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 16
Дата публикации:: 9 декабря 2020 г.
Издание:: ISO/IEC IS 20897 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version240 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:3 раб. дн. (перевод)

Цена:240 €

Описание (английский):

This document specifies the security requirements for physically unclonable functions (PUFs). Specified security requirements concern the output properties, tamper-resistance and unclonability of a single and a batch of PUFs. Since it depends on the application which security requirements a PUF needs to meet, this documents also describes the typical use cases of a PUF. Amongst PUF use cases, random number generation is out of scope in this document.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC 20897-1:2020 specifies security requirements for physically unclonable functions (PUFs). It defines what properties PUFs must exhibit - at the level of a single instance and of batches - to be used safely in cryptographic modules and security systems. The standard describes PUF output properties, tamper‑resistance and unclonability, typical PUF use cases (security parameter generation, device identification and device authentication) and how security requirements map to those use cases. Random number generation from PUFs is explicitly out of scope.

Key topics and technical requirements

Output properties: requirements for steadiness, randomness and uniqueness of PUF responses; concepts such as intra‑Hamming distance (intra‑HD) and inter‑Hamming distance (inter‑HD) are used to quantify reliability and distinctness.

Unclonability: both mathematical unclonability (resistance to modeling and prediction) and physical unclonability (resistance to physical copying or reproduction).

Tamper‑resistance: expectations for protection against invasive and non‑invasive attacks, side‑channel analysis and fault injection that could recover or influence PUF outputs.

PUF interface and building blocks: security considerations for challenge/response interfaces, no‑challenge PUFs, and integration with error‑correction (e.g., fuzzy extractors) to mitigate noise in raw PUF outputs.

Performance metrics: false acceptance rate (FAR) and false rejection rate (FRR) as measures of inter/intra variability and decision thresholds.

System‑level view: guidance on evaluating PUFs in context (device life‑cycle, supply chain, and attack surface) and mapping requirements to specific use cases.

Classification and implementations: informative annexes cover PUF types, example implementations, and PUF life‑cycle considerations.

Applications

ISO/IEC 20897-1 is intended for use where PUFs generate non‑stored cryptographic parameters or serve as device fingerprints. Typical applications include:

Security parameter generation (keys, nonces, seeds) without storing secrets in non‑volatile memory.

Device identification for asset tracking and provisioning.

Device authentication in IoT, secure elements and embedded systems. The standard helps stakeholders specify, evaluate and communicate PUF security properties during procurement, development and certification.

Related standards

ISO/IEC 19790 - Security requirements for cryptographic modules (context for PUF use in modules)

ISO/IEC 18031 - Random bit generation (referenced; RNG via PUFs is out of scope here)

ISO/IEC 20897-1:2020 guides both vendors and buyers to specify and evaluate robust PUF implementations, improving tamper‑resistance and unclonability in modern security architectures.

ISO/IEC 20897-1:2020 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Applications

Who should use this standard

Related standards

Технические детали

EN ISO/IEC 19896-2:2026

Information security, cybersecurity and privacy protection - Requirements for the competence of IT security c…

ISO/IEC 18031:2011/Amd 1:2017

Information technology — Security techniques — Random bit generation — Amendment 1: Deterministic random bit…

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies