{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T11:21:53Z","timestamp":1787829713549,"version":"build-2784847793"},"reference-count":36,"publisher":"MDPI AG","issue":"17","license":[{"start":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T00:00:00Z","timestamp":1787788800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Universal Plug and Play (UPnP) is widely used for resource discovery in internet of things and smart-edge environments because of its lightweight and decentralized operation. However, conventional UPnP and Simple Service Discovery Protocol (SSDP) mechanisms expose static identifiers and service metadata, making them vulnerable to spoofing, replay, unauthorized resource enumeration, device fingerprinting, and long-term traffic correlation. Existing software-based authentication methods rely on stored credentials and do not protect discovery privacy, while conventional Arbiter Physical Unclonable Functions (PUFs) remain vulnerable to machine-learning modeling attacks and are typically used only for device authentication. This paper presents a novel Recursive Hybrid Entropy PUF (RHE-PUF) and a privacy-preserving secure UPnP discovery architecture. The proposed RHE-PUF introduces recursive adaptive delay propagation, entropy injection, feed-forward coupling, and multi-path timing diversification to increase challenge\u2013response nonlinearity and modeling resistance. Its responses are used to generate dynamic ephemeral identities, authenticate devices anonymously, and encrypt SSDP service advertisements without exposing permanent device identifiers. The complete framework was implemented on a Xilinx Spartan-7 FPGA and evaluated under realistic UPnP discovery and attack scenarios. The RHE-PUF achieved 49.31% uniqueness, 98.14% reliability, 50.22% uniformity, and 98.91% entropy. The implementation operated at up to 192 MHz with 0.84 W dynamic power, 0.88 \u00b5s authentication latency, and 13.4 ms secure discovery delay. The strongest deep-neural-network modeling attack achieved only 58.27% prediction accuracy. Replay and spoofing attack success rates were reduced to at or below 1.1% and 0.8%, respectively, while long-term tracking probability remained below 13%. These results demonstrate that the proposed joint hardware-security and privacy-preserving discovery framework provides resource-efficient authentication, anonymous UPnP resource discovery, and resistance to network and machine-learning attacks.<\/jats:p>","DOI":"10.3390\/s26175410","type":"journal-article","created":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T10:58:21Z","timestamp":1787828301000},"page":"5410","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Secure UPnP Resource Discovery Using a PUF-Assisted Hardware Accelerator for IoT"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9659-8566","authenticated-orcid":false,"given":"Kasem","family":"Khalil","sequence":"first","affiliation":[{"name":"Electrical and Computer Engineering Department, University of Mississippi, Oxford, MS 38677, USA"},{"name":"Electrical Engineering Department, Assiut University, Assiut 71515, Egypt"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,8,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"9065","DOI":"10.1007\/s10586-024-04509-0","article-title":"Securing Internet of Things Using Machine and Deep Learning Methods: A Survey","volume":"27","author":"Ghaffari","year":"2024","journal-title":"Clust. Comput."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Aarella, S.G., Yanambaka, V.P., Mohanty, S.P., and Kougianos, E. (2025). Fortified-Edge 2.0: Advanced Machine-Learning-Driven Framework for Secure PUF-Based Authentication in Collaborative Edge Computing. Future Internet, 17.","DOI":"10.3390\/fi17070272"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"6657578","DOI":"10.1155\/jece\/6657578","article-title":"A Review of the Internet of Things (IoT) Landscape: Technologies, Applications, and Open Challenges","volume":"2026","author":"Jeddou","year":"2026","journal-title":"J. Electr. Comput. Eng."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Vadivel, S.R.S., Karthikeyan, V., Gopalakrishnan, K., and Dani Reagan Vivek, J. (2026). Introduction to the internet of things (iot). Internet of Things Security, Elsevier.","DOI":"10.1016\/B978-0-44-333759-8.00010-1"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1032761","DOI":"10.1155\/2018\/1032761","article-title":"Towards privacy preserving iot environments: A survey","volume":"2018","author":"Seliem","year":"2018","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"100293","DOI":"10.1016\/j.iot.2020.100293","article-title":"Resource discovery techniques in the internet of things: A review","volume":"12","author":"Khalil","year":"2020","journal-title":"Internet Things"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"8206","DOI":"10.1109\/JIOT.2024.3502549","article-title":"Hardware acceleration of CoAP protocol for high-speed and low-power Internet of Things communication","volume":"12","author":"Khalil","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Khalil, K., Mohaidat, T., Darwich, M., Kumar, A., and Bayoumi, M. (2024). An efficient hardware design of coap protocol for the internet of things. Proceedings of the 2024 IEEE 17th Dallas Circuits and Systems Conference (DCAS), Richardson, TX, USA, 19\u201321 April 2024, IEEE.","DOI":"10.1109\/DCAS61159.2024.10539896"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Khalil, K., Abdelgawad, A., and Bayoumi, M. (2021). Intelligent resource discovery approach for the internet of things. Proceedings of the 2021 IEEE 7th World Forum on Internet of Things (WF-IoT), New Orleans, LA, USA, 14 June\u201331 July 2021, IEEE.","DOI":"10.1109\/WF-IoT51360.2021.9595111"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"115895","DOI":"10.1016\/j.jbusres.2025.115895","article-title":"Stakeholder salience and standardisation: The case of the industrial internet of things","volume":"205","author":"Ludema","year":"2026","journal-title":"J. Bus. Res."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Vijayakumar, S., Thilagavathy, A., Sankar, R., Ramesh, T., BanuPriya, N., and Srijayanthi, S. (2026). Internet of Things in Smart and Secure Applications Development-Based Sustainability. Predictive Methods in Next-Generation Computing: An Approach Toward Sustainability, John Wiley Sons.","DOI":"10.1002\/9781394248827.ch5"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Khalil, K., Elgazzar, K., Abdelgawad, A., and Bayoumi, M. (2020). A security approach for coap-based internet of things resource discovery. Proceedings of the 2020 IEEE 6th World Forum on Internet of Things (WF-IoT), New Orleans, LA, USA, 2\u201316 June 2020, IEEE.","DOI":"10.1109\/WF-IoT48130.2020.9221153"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"24060","DOI":"10.1038\/s41598-024-75373-6","article-title":"Security Primitives for Memoryless IoT Devices Based on Physical Unclonable Functions and True Random Number Generators","volume":"14","year":"2024","journal-title":"Sci. Rep."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1007\/s44443-025-00229-6","article-title":"SPUF-KG and SSL-TRNG Enhanced Lightweight IoT Authentication and Key Exchange Protocol","volume":"37","author":"Zhang","year":"2025","journal-title":"J. King Saud Univ. Comput. Inf. Sci."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"6282","DOI":"10.1109\/COMST.2026.3691266","article-title":"Lightweight Authentication Protocols for Secure IoT Communication Networks: A Comprehensive Survey, Taxonomy, and Open Challenges","volume":"28","author":"Ghaleb","year":"2026","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Samal, L., Kori, R., and Mahapatra, K. (2025). A Secure FPGA-Based IoT Gateway for Smart Home Automation Using PUF-Based Authentication. Eng. Proc., 118.","DOI":"10.3390\/ECSA-12-26512"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Khalil, K., Idriss, H., Idriss, T., and Bayoumi, M. (2025). Lightweight Hardware Security and Physically Unclonable Functions: Improving Security of Constrained IoT Devices, Springer.","DOI":"10.1007\/978-3-031-76328-1"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Alahmadi, S., Khalil, K., Bayoumi, M., and Idriss, H. (2024). Fortifying Strong PUFs: A Modeling Attack-Resilient Approach Using Weak PUF for IoT Device Security. Proceedings of the 2024 IEEE International Symposium on Circuits and Systems (ISCAS), Singapore, 19\u201322 May 2024, IEEE.","DOI":"10.1109\/ISCAS58744.2024.10558469"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Khalil, K., Idriss, H., Idriss, T., and Bayoumi, M. (2025). Advanced PUF Designs. Lightweight Hardware Security and Physically Unclonable Functions, Springer.","DOI":"10.1007\/978-3-031-76328-1"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Khalil, K., Idriss, H., Idriss, T., and Bayoumi, M. (2025). Security in Resource-Constrained IoT Devices. Lightweight Hardware Security and Physically Unclonable Functions, Springer.","DOI":"10.1007\/978-3-031-76328-1"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"e00648","DOI":"10.1002\/qute.202500648","article-title":"Secure authentication via quantum physical unclonable functions: A review","volume":"9","author":"Galetsky","year":"2026","journal-title":"Adv. Quantum Technol."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Oduro-Antwi, M., Nguyen, D., and Sood, K. (2026). Physically unclonable functions (PUF)-based IoT security: Challenges and opportunities. Internet of Things Security, Elsevier.","DOI":"10.1016\/B978-0-44-333759-8.00020-4"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"205","DOI":"10.1007\/s41635-024-00157-3","article-title":"Robust and Lightweight Challenge Obfuscation Mechanism for Anti-Modeling Protection of Arbiter-PUFs","volume":"8","author":"Ebrahimabadi","year":"2024","journal-title":"J. Hardw. Syst. Secur."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"23962","DOI":"10.1038\/s41598-024-73839-1","article-title":"Resilience Evaluation of Memristor Based PUF Against Machine Learning Attacks","volume":"14","author":"Ibrahim","year":"2024","journal-title":"Sci. Rep."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"106434","DOI":"10.1016\/j.mejo.2024.106434","article-title":"Anti-machine-learning-attack strong PUF design based on multi-path delay selection strategy","volume":"153","author":"Li","year":"2024","journal-title":"Microelectron. J."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Maghanaki, M., Shahin, M., Keramati, S., Chen, F.F., and Contreras, E. (2026). Feature-Engineered Trojan Malware Detection on Windows-Based IoT Gateways Using a Custom Deep Neural Network and Automated Monitoring Pipeline. J. Cybersecur. Priv., 6.","DOI":"10.3390\/jcp6030090"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"7387","DOI":"10.1109\/TPAMI.2026.3667600","article-title":"Attribution explanations for deep neural networks: A theoretical perspective","volume":"48","author":"Deng","year":"2026","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Sadhu, P.K., Yanambaka, V.P., and Abdelgawad, A. (2022). Internet of things: Security and solutions survey. Sensors, 22.","DOI":"10.3390\/s22197433"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Pereira, P.P., Eliasson, J., and Delsing, J. (2014). An authentication and access control framework for CoAP-based Internet of Things. Proceedings of the IECON 2014-40th Annual Conference of the IEEE Industrial Electronics Society, Dallas, TX, USA, 9 October\u20131 November 2014, IEEE.","DOI":"10.1109\/IECON.2014.7049308"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1327","DOI":"10.1109\/JIOT.2017.2703088","article-title":"Mutual Authentication in IoT Systems Using Physical Unclonable Functions","volume":"4","author":"Aman","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"181751","DOI":"10.1109\/ACCESS.2020.3028514","article-title":"A Highly Reliable Arbiter PUF With Improved Uniqueness in FPGA Implementation Using Bit-Self-Test","volume":"8","author":"He","year":"2020","journal-title":"IEEE Access"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"20190670","DOI":"10.1587\/elex.16.20190670","article-title":"FPGA implementation of a challenge pre-processing structure arbiter PUF designed for machine learning attack resistance","volume":"17","author":"Ge","year":"2020","journal-title":"IEICE Electron. Express"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"103180","DOI":"10.1016\/j.micpro.2020.103180","article-title":"Efficient and lightweight FPGA-based hybrid PUFs with improved performance","volume":"77","author":"Anandakumar","year":"2020","journal-title":"Microprocess. Microsyst."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"104717","DOI":"10.1016\/j.micpro.2022.104717","article-title":"Device authentication with FPGA based self correcting Physical Unclonable Function for Internet of Things","volume":"95","author":"Agarwal","year":"2022","journal-title":"Microprocess. Microsyst."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Babaei, A., Schiele, G., and Zohner, M. (2022). Reconfigurable Security Architecture (RESA) Based on PUF for FPGA-Based IoT Devices. Sensors, 22.","DOI":"10.3390\/s22155577"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"18082","DOI":"10.1109\/JIOT.2023.3279847","article-title":"Joint Heterogeneous PUF-Based Security-Enhanced IoT Authentication","volume":"10","author":"Yoon","year":"2023","journal-title":"IEEE Internet Things J."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/17\/5410\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T10:59:54Z","timestamp":1787828394000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/17\/5410"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,27]]},"references-count":36,"journal-issue":{"issue":"17","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["s26175410"],"URL":"https:\/\/doi.org\/10.3390\/s26175410","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,27]]}}}