{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T08:00:22Z","timestamp":1781251222245,"version":"3.54.1"},"reference-count":48,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T00:00:00Z","timestamp":1781136000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Fundamental Research Program of Shanxi","award":["202403021212165"],"award-info":[{"award-number":["202403021212165"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>Distributed photovoltaic (PV) power stations are core enablers for dual-carbon goals in modern power systems, with IoT-based monitoring systems serving as their nerve center for real-time data collection and grid dispatch. However, PV monitoring nodes operate in harsh, unattended outdoor environments with severe computational resource constraints, exposing them to critical hardware security risks that can trigger cross-domain cascading hazards. Existing research focuses primarily on communication and software security, lacking systematic hardware security modeling and lightweight defense designs. Generic IoT hardware security solutions are also inapplicable due to excessive overhead. To address these gaps, this paper proposes LHSF, a lightweight hardware security framework tailored for resource-constrained PV edge nodes. It integrates an on-chip OTP-based lightweight hardware root of trust (L-HROT) with an SRAM-PUF-driven non-resident key management protocol, which implements full-lifecycle key management via a \u201cpower-on generation, on-demand usage, post-use destruction, zero-residue storage\u201d paradigm. Experiments on ESP32 and Raspberry Pi 4B show that LHSF provides robust resistance to side-channel recovery, physical extraction, malicious firmware boot and rollback attacks, reducing fault injection bypass rate to 6.8%. Compared to standard TPM 2.0, it cuts boot delay by 60.7%, power consumption by 18.6% and memory footprint by 72.7% with negligible performance overhead. This work fills the hardware security gap for PV monitoring systems and provides a reusable technical pathway for distributed energy IoT terminals.<\/jats:p>","DOI":"10.3390\/info17060584","type":"journal-article","created":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T06:53:10Z","timestamp":1781247190000},"page":"584","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Lightweight Hardware Security Framework for IoT-Based Photovoltaic Monitoring Systems Using OTP and SRAM-PUF"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9214-7135","authenticated-orcid":false,"given":"Zeyu","family":"Li","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyaun 030051, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jintao","family":"Xue","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyaun 030051, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyaun 030051, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guosheng","family":"Song","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyaun 030051, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yi","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, North University of China, Taiyaun 030051, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,6,11]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"012069","DOI":"10.1088\/1742-6596\/1367\/1\/012069","article-title":"IoT based photovoltaic monitoring system application","volume":"1367","author":"Priharti","year":"2019","journal-title":"J. Phys. Conf. Ser."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Khan, M.S., Sharma, H., and Haque, A. (2019, January 14\u201316). IoT Enabled Real-Time Energy Monitoring for Photovoltaic Systems. Proceedings of the 2019 International Conference on Machine Learning, Big Data, Cloud and Parallel Computing (COMITCon), Faridabad, India.","DOI":"10.1109\/COMITCon.2019.8862246"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1109\/MSP.2012.68","article-title":"Hardware-Anchored Security Based on SRAM PUFs, Part 1","volume":"10","author":"Handschuh","year":"2012","journal-title":"IEEE Secur. Priv."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Sassalou, E.-N., and Petreu\u0219, D. (2025, January 4\u20136). A PUF-based Root-of-Trust for resource-constrained IoT devices. Proceedings of the 2025 IEEE International Conference on Cyber Security and Resilience (CSR), Chania, Greece.","DOI":"10.1109\/CSR64739.2025.11130114"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1633","DOI":"10.1016\/j.energy.2015.10.037","article-title":"Assessment of the safe operation and maintenance of photovoltaic systems","volume":"93","author":"Kamenopoulos","year":"2015","journal-title":"Energy"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Chaudhuri, S., and Danger, J.-L. (2006, January 20\u201322). FASE: An Open Run-Time Reconfigurable FPGA Architecture for Tamper-Resistant and Secure Embedded Systems. Proceedings of the 2006 IEEE International Conference on Reconfigurable Computing and FPGA\u2019s (ReConFig), San Luis Potosi, Mexico.","DOI":"10.1109\/RECONF.2006.307752"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Latif, M.A., Ahmad, M.B., and Khan, M.K. (2020, January 6\u20138). A Review on Key Management and Lightweight Cryptography for IoT. Proceedings of the 2020 Global Conference on Wireless and Optical Technologies (GCWOT), Malaga, Spain.","DOI":"10.1109\/GCWOT49901.2020.9391613"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Fischer, T., Lesjak, C., Pirker, D., and Steger, C. (2019, January 17\u201319). RPC Based Framework for Partitioning IoT Security Software for Trusted Execution Environments. Proceedings of the 2019 IEEE 10th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, BC, Canada.","DOI":"10.1109\/IEMCON.2019.8936247"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Khalil, K., Idriss, H., Idriss, T., and Bayoumi, M. (2025). Security in Resource-Constrained IoT Devices. Lightweight Hardware Security and Physically Unclonable Functions, Springer.","DOI":"10.1007\/978-3-031-76328-1"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"16393","DOI":"10.1109\/ACCESS.2017.2742020","article-title":"A Lightweight XMPP Publish\/Subscribe Scheme for Resource-Constrained IoT Devices","volume":"5","author":"Wang","year":"2017","journal-title":"IEEE Access"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Aditya, A., Vidyarthi, D., and Nene, M.J. (2024, January 14\u201315). A Study of Common Vulnerabilities in IoT Devices. Proceedings of the 2024 11th International Conference on Reliability, Infocom Technologies and Optimization (Trends and Future Directions) (ICRITO), Noida, India.","DOI":"10.1109\/ICRITO61523.2024.10522155"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"100874","DOI":"10.1016\/j.iot.2023.100874","article-title":"IRIS: An embedded secure boot for IoT devices","volume":"23","author":"Bellido","year":"2023","journal-title":"Internet Things"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Pocklassery, G., Kajuruli, V.K., Plusquellic, J., and Saqib, F. (2017, January 1\u20135). Physical unclonable functions and dynamic partial reconfiguration for security in resource-constrained embedded systems. Proceedings of the 2017 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), Mclean, VA, USA.","DOI":"10.1109\/HST.2017.7951809"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Bhasin, S., and Regazzoni, F. (2015, January 24\u201327). A survey on hardware trojan detection techniques. Proceedings of the 2015 IEEE International Symposium on Circuits and Systems (ISCAS), Lisbon, Portugal.","DOI":"10.1109\/ISCAS.2015.7169073"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Ming, T.C. (2017, January 10\u201311). Reliability in IoT Era. Proceedings of the 2017 2nd International Conference on Telecommunication and Networks (TEL-NET), Noida, India.","DOI":"10.1109\/TEL-NET.2017.8343490"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Oton, C.N., and Iqbal, M.T. (2021, January 1\u20134). Low-Cost Open Source IoT-Based SCADA System for a BTS Site Using ESP32 and Arduino IoT Cloud. Proceedings of the 2021 IEEE 12th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON), New York, NY, USA.","DOI":"10.1109\/UEMCON53757.2021.9666691"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Sayekti, N.C., Fhaizal, M.A., and Wijaya, W. (2024, January 17\u201318). Smart Farming Design with NodeMCU ESP32 for NFT HYDROPONIC. Proceedings of the 2024 18th International Conference on Telecommunication Systems, Services, and Applications (TSSA), Bali, Indonesia.","DOI":"10.1109\/TSSA63730.2024.10864065"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Gielen, G. (2009, January 25\u201326). Low-power sensor interfaces. Proceedings of the 2009 3rd International Workshop on Advances in Sensors and Interfaces, Trani, Italy.","DOI":"10.1109\/IWASI.2009.5184773"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Newmarch, J. (2017). Raspberry Pi. Linux Sound Programming, Springer.","DOI":"10.1007\/978-1-4842-2496-0"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Savola, R., and Ahonen, P. (2006, January 16\u201318). Information Security Challenges in Industrial Automation Systems. Proceedings of the 2006 4th IEEE International Conference on Industrial Informatics, Singapore.","DOI":"10.1109\/INDIN.2006.275626"},{"key":"ref_21","first-page":"301","article-title":"Blockchains as security-enabler for industrial IoT-applications","volume":"11","author":"Skwarek","year":"2017","journal-title":"Asia Pac. J. Innov. Entrep."},{"key":"ref_22","first-page":"71","article-title":"Information Security Risks Monitoring and Management System","volume":"58","author":"Agayev","year":"2024","journal-title":"Cauc.-Econ. Soc. Anal. J. South. Cauc."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Chiu, T., and Xiong, W. (2023, January 29). SoK: Fault Injection Attacks on Cryptosystems. Proceedings of the 12th International Workshop on Hardware and Architectural Support for Security and Privacy, Toronto, ON, Canada.","DOI":"10.1145\/3623652.3623671"},{"key":"ref_24","unstructured":"Li, J., Zhang, H., and Zhao, B. (2011, January 24\u201326). Research of reliable trusted boot in embedded systems. Proceedings of the 2011 International Conference on Computer Science and Network Technology, Harbin, China."},{"key":"ref_25","unstructured":"Ravi, S., Raghunathan, A., and Chakradhar, S. (2004, January 5\u20139). Tamper resistance mechanisms for secure embedded systems. Proceedings of the 17th International Conference on VLSI Design, Mumbai, India."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Xu, G., Adetifa, O., and Mao, J. (2025). Developing Quantum Trusted Platform Module (QTPM) to Advance IoT Security. Future Internet, 17.","DOI":"10.3390\/fi17050193"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"312","DOI":"10.1109\/TST.2016.7488742","article-title":"TPM-Based Remote Attestation for Wireless Sensor Networks","volume":"21","author":"Fu","year":"2016","journal-title":"Tsinghua Sci. Technol."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"R\u00fchrmair, U., and Sehnke, F. (2010, January 4\u20138). Modeling attacks on physical unclonable functions. Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS), Chicago, IL, USA.","DOI":"10.1145\/1866307.1866335"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Mattela, V. (2015, January 22\u201325). IoT device development challenges and solutions. Proceedings of the 2015 IEEE Hot Chips 27 Symposium (HCS), Cupertino, CA, USA.","DOI":"10.1109\/HOTCHIPS.2015.7477322"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Anagnostopoulos, N.A. (2018, January 23\u201325). Securing IoT Devices Using Robust DRAM PUFs. Proceedings of the 2018 Global Information Infrastructure and Networking Symposium (GIIS), Thessaloniki, Greece.","DOI":"10.1109\/GIIS.2018.8635789"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Nilesh, K., Deppe, C., and Boche, H. (October, January 29). Secret key generation and Storage based on QPUF. Proceedings of the 2025 IEEE Information Theory Workshop (ITW), Sydney, Australia.","DOI":"10.1109\/ITW62417.2025.11240507"},{"key":"ref_32","first-page":"31","article-title":"Efficient and Lightweight IoT Security Using CNTFET-Based Ultra-Low Power SRAM-PUF","volume":"57","author":"Shafiei","year":"2025","journal-title":"AUT J. Electr. Eng."},{"key":"ref_33","unstructured":"Liu, J., Wang, J., Dong, F., Jiang, P., and Xue, A. (2006, January 21\u201323). Wireless Communication System Design for Remote Monitoring. Proceedings of the 2006 6th World Congress on Intelligent Control and Automation, Dalian, China."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Voicu, V., Petreu\u0219, D., Etz, R., and Mois, G. (2025, January 19\u201321). IoT Sensor Node for Solar Energy Measurements. Proceedings of the 2025 26th International Carpathian Control Conference (ICCC), Star\u00fd Smokovec, Slovakia.","DOI":"10.1109\/ICCC65605.2025.11022931"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Brier, E., Clavier, C., and Olivier, F. (2004, January 11\u201313). Correlation Power Analysis with a Leakage Model. Proceedings of the International Workshop on Cryptographic Hardware and Embedded Systems (CHES 2004), Cambridge, MA, USA.","DOI":"10.1007\/978-3-540-28632-5_2"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Maragathavalli, K., and Jothi, R.M.J. (2025, January 18\u201320). A Lightweight Protocol for Secure Communication Using Two-Layered Encryption. Proceedings of the 2025 Third International Conference on Industry 4.0 Technology (I4Tech), Pune, India.","DOI":"10.1109\/I4Tech64670.2025.11277542"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Kocher, P.C., Genkin, D., and Gruss, D. (2019, January 19\u201323). Spectre Attacks: Exploiting Speculative Execution. Proceedings of the 2019 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP.2019.00002"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Romero-S\u00e1nchez, M.G., and Rodriguez-Abreo, O. (2025, January 22\u201324). Development of a Solar Panel Monitoring System for Power and Visible Light Using Arduino and INA219\/BH1750 Sensors. Proceedings of the 2025 22nd International Conference on Electrical Engineering, Computing Science and Automatic Control (CCE), Mexico City, Mexico.","DOI":"10.1109\/CCE67728.2025.11272019"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1108\/02602280110406927","article-title":"Low cost smart sensors using infrared detector arrays","volume":"21","author":"Porter","year":"2001","journal-title":"Sens. Rev."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"55","DOI":"10.35940\/ijeat.B3297.1211221","article-title":"Proposed Methods to Rollback A Failed Update of IoT Devices","volume":"11","author":"Nguyen","year":"2021","journal-title":"Int. J. Eng. Adv. Technol."},{"key":"ref_41","unstructured":"Dai, W., and Rubin, S.H. (November, January 27). A supply chain model for software components management. Proceedings of the Fifth IEEE Workshop on Mobile Computing Systems and Applications, Las Vegas, NV, USA."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Moon, Y.H., and Jeon, Y.S. (2016, January 19\u201321). Cooperative remote attestation for IoT swarms. Proceedings of the 2016 International Conference on Information and Communication Technology Convergence (ICTC), Jeju, Republic of Korea.","DOI":"10.1109\/ICTC.2016.7763415"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"312","DOI":"10.1002\/geot.202400017","article-title":"AI-based anomaly detection in tunnel excavation data","volume":"17","author":"Macke","year":"2024","journal-title":"Geomech. Und Tunnelbau"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Yahya, W., and Basuki, A. (2017, January 26\u201327). Lightweight monitoring system for IOT devices. Proceedings of the 2017 11th International Conference on Telecommunication Systems Services and Applications (TSSA), Lombok, Indonesia.","DOI":"10.1109\/TSSA.2017.8272897"},{"key":"ref_45","unstructured":"(2014). Failure Mechanism Based Stress Test Qualification for Integrated Circuits (Standard No. AEC-Q100)."},{"key":"ref_46","unstructured":"(2013). Environmental Testing\u2014Part 1: General and Guidance (Standard No. IEC 60068-1)."},{"key":"ref_47","unstructured":"(2021). Safety of Machinery\u2014Functional Safety of Safety-Related Control Systems (Standard No. IEC 62061)."},{"key":"ref_48","unstructured":"(2023). Road Vehicles\u2014Environmental Conditions and Testing for Electrical and Electronic Equipment\u2014Part 1: General (Standard No. ISO 16750-1)."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/17\/6\/584\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T07:34:06Z","timestamp":1781249646000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/17\/6\/584"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,11]]},"references-count":48,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2026,6]]}},"alternative-id":["info17060584"],"URL":"https:\/\/doi.org\/10.3390\/info17060584","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,11]]}}}