Abstract:With the popularity of cloud computing, information security issues in the cloud environment are becoming more and more prominent. As the first line of defense to ensure cloud computing security, user authentication has attracted extensive attention. Though considerable efforts have been paid for a secure and practical authentication scheme in cloud computing environment, most attempts ended in failure. The design of a secure and efficient user authentication scheme for cloud computing remains a challenge on the one hand and user’s smart card or mobile devices are of limited resource; on the other hand, with the combination of cloud computing and the Internet of Things, applications in cloud environments often need to meet various security requirements and are vulnerable to more attacks. In 2018, Amin et al. proposed an enhanced user authentication scheme in cloud computing, hoping to overcome the identified security flaws of two previous schemes. However, after a scrutinization of their scheme, we revealed that it still suffers from the same attacks (such as no user anonymity, no forward secrecy, and being vulnerable to offline dictionary attack) as the two schemes they compromised. Consequently, we take the scheme of Amin et al. (2018) as a study case, we discussed the inherent reason and the corresponding solutions to authentication schemes for cloud computing environment in detail. Next, we not only proposed an enhanced secure and efficient scheme, but also explained the design rationales for a secure cloud environment protocol. Finally, we applied BAN logic and heuristic analysis to show the security of the protocol and compared our scheme with related schemes. The results manifest the superiority of our scheme.

An Efficient Delegation-Based Anonymous Authentication Protocol

Efficient password-based authentication and key exchange scheme preserving user privacy

Cryptanalysis and Improvement of an Anonymous Authentication Protocol for Wireless Access Networks

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Provable Secure Anonymous Device Authentication Protocol in IoT Environment

An Efficient Anonymous Authentication Mechanism for Delay Tolerant Networks

An Efficient Anonymous Authentication and Key Agreement Protocol

An Novel Anonymous Authenticated and Key Exchange Protocol

Cryptanalysis and Enhancements of Delegation-Based Authentication Protocol for Secure Roaming Service

An Anonymous Authentication Scheme with the Enhanced Security for Wireless Communications

A Note on "An Anonymous and Certificateless Identity Authentication Protocol for Mobile Edge Computing"

Efficient Mobile Authentication Scheme Preserving User Privacy for Large-Scale Wireless Networks

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

An Efficient Two‐party Authentication Key Exchange Protocol for Mobile Environment

An efficient two-factor authentication protocol based on elliptic curve cryptosystem with provable security

An enhanced ID-based remote mutual authentication with key agreement protocol for mobile devices on elliptic curve cryptosystem.

An Enhanced User Authentication Protocol Based on Elliptic Curve Cryptosystem in Cloud Computing Environment.

Cost-Effective Scalable and Anonymous Certificateless Remote Authentication Protocol

Anonymous Authentication Scheme for Smart Home Environment with Provable Security

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.

An improved and provable remote user authentication scheme based on elliptic curve cryptosystem with user anonymity