Abstract:With the popularity of cloud computing, information security issues in the cloud environment are becoming more and more prominent. As the first line of defense to ensure cloud computing security, user authentication has attracted extensive attention. Though considerable efforts have been paid for a secure and practical authentication scheme in cloud computing environment, most attempts ended in failure. The design of a secure and efficient user authentication scheme for cloud computing remains a challenge on the one hand and user’s smart card or mobile devices are of limited resource; on the other hand, with the combination of cloud computing and the Internet of Things, applications in cloud environments often need to meet various security requirements and are vulnerable to more attacks. In 2018, Amin et al. proposed an enhanced user authentication scheme in cloud computing, hoping to overcome the identified security flaws of two previous schemes. However, after a scrutinization of their scheme, we revealed that it still suffers from the same attacks (such as no user anonymity, no forward secrecy, and being vulnerable to offline dictionary attack) as the two schemes they compromised. Consequently, we take the scheme of Amin et al. (2018) as a study case, we discussed the inherent reason and the corresponding solutions to authentication schemes for cloud computing environment in detail. Next, we not only proposed an enhanced secure and efficient scheme, but also explained the design rationales for a secure cloud environment protocol. Finally, we applied BAN logic and heuristic analysis to show the security of the protocol and compared our scheme with related schemes. The results manifest the superiority of our scheme.

Authentication technology research of ocean environmental information cloud computing

Inter-domain authentication scheme for Pervasive Computing Environments

Authentication scheme based on biometric encryption for pervasive computing environments

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Authentication Scheme Based on Biometric Encryption

Fingerprint-based Authentication in Networking Environment

��计算中基于可转换代理签密的可证安全的认证协议

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

Analysis of Key Technologies on Cloud Computing Security

Privacy-Preserving Protocol for Data Stored in the Cloud

An Efficient Delegation-Based Anonymous Authentication Protocol

Blockchain-Based Authentication Protocol Design from a Cloud Computing Perspective

An Enhanced User Authentication Protocol Based on Elliptic Curve Cryptosystem in Cloud Computing Environment.

Contructing Authentication Web in Cloud Computing

Identity Based Encryption and Biometric Authentication Scheme for Secure Data Access in Cloud Computing

Password based authentication for web based graphics computing services retrieval in cloud

A Secure IoT-Based Authentication System in Cloud Computing Environment

A Time-Bound Ticket-Based Mutual Authentication Scheme for Cloud Computing

A High Security Signature Algorithm Based on Kerberos for REST-style Cloud Storage Service

A Privacy-Aware PUFs-Based Multiserver Authentication Protocol in Cloud-Edge IoT Systems Using Blockchain