Abstract:With the popularity of cloud computing, information security issues in the cloud environment are becoming more and more prominent. As the first line of defense to ensure cloud computing security, user authentication has attracted extensive attention. Though considerable efforts have been paid for a secure and practical authentication scheme in cloud computing environment, most attempts ended in failure. The design of a secure and efficient user authentication scheme for cloud computing remains a challenge on the one hand and user’s smart card or mobile devices are of limited resource; on the other hand, with the combination of cloud computing and the Internet of Things, applications in cloud environments often need to meet various security requirements and are vulnerable to more attacks. In 2018, Amin et al. proposed an enhanced user authentication scheme in cloud computing, hoping to overcome the identified security flaws of two previous schemes. However, after a scrutinization of their scheme, we revealed that it still suffers from the same attacks (such as no user anonymity, no forward secrecy, and being vulnerable to offline dictionary attack) as the two schemes they compromised. Consequently, we take the scheme of Amin et al. (2018) as a study case, we discussed the inherent reason and the corresponding solutions to authentication schemes for cloud computing environment in detail. Next, we not only proposed an enhanced secure and efficient scheme, but also explained the design rationales for a secure cloud environment protocol. Finally, we applied BAN logic and heuristic analysis to show the security of the protocol and compared our scheme with related schemes. The results manifest the superiority of our scheme.

A Time-Bound Ticket-Based Mutual Authentication Scheme for Cloud Computing

Authentication scheme based on biometric encryption for pervasive computing environments

��计算中基于可转换代理签密的可证安全的认证协议

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

Hash Function and Smart Card Based Multi-Server Authentication Protocol

An Enhanced User Authentication Protocol Based on Elliptic Curve Cryptosystem in Cloud Computing Environment.

Identity Based Encryption and Biometric Authentication Scheme for Secure Data Access in Cloud Computing

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Constructing authentication web in cloud computing

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Effective and Secure Access Control System Scheme in the Cloud

Revisiting anonymous two-factor authentication schemes for cloud computing

A Threshold Multi-server Protocol for Password-Based Authentication.

Password based authentication for web based graphics computing services retrieval in cloud

A New Data Integrity Verification Scheme with Low Communication Cost

Contructing Authentication Web in Cloud Computing

A Blockchain-Based Authentication and Authorization Scheme for Distributed Mobile Cloud Computing Services

Revisiting Anonymous Two-Factor Authentication Schemes for IoT-Enabled Devices in Cloud Computing Environments.

Blockchain-Based Authentication Protocol Design from a Cloud Computing Perspective

Extensible Conditional Privacy Protection Authentication Scheme for Secure Vehicular Networks in a Multi-Cloud Environment