The Shield of Time: Anchoring IoT Trust in Non-Simulatable Physical Causality Against Generative AI Attacks

Abstract

As Generative AI (AIGC) achieves pixel-level realism and real-time interaction; traditional digital authentication paradigms face an unprecedented "authenticity crisis". Software-level defenses and static biometrics are increasingly vulnerable to high-fidelity AI-generated threats. This paper proposes a novel Human-Source Authentication architecture, termed Testing, Inspection, and Certification (TIC), which shifts the verification focus from logical correctness to the real-time presence of a physical entity. At the core of TIC is the Pulse-Eye Handshake (PEH) protocol, which integrates hardware-level Physical Unclonable Functions (PUF) with the physiological dynamics of the human pupillary light reflex (PLR). By leveraging a "Hardware Trinity" comprising smart glasses, a smartwatch, and a smart ring, the protocol constructs a deterministic "Shield of Time". This shield exploits the significant latency gap between the computational overhead of AI inference (typically >300ms) and the intrinsic physical limits of the human autonomic nervous system (8.3-35ms). Furthermore, architecture employs recursive zero-knowledge proof (ZKP) based on the Nova protocol to ensure multi-modal verification without compromising user privacy. Security analysis demonstrates that the proposed system remains robust against sophisticated modeling attacks and AI-driven acceleration. Our work provides a foundational anchor for digital sovereignty and system resilience in the era of pervasive AI and Industry 5.0.