Abstract:With the popularity of cloud computing, information security issues in the cloud environment are becoming more and more prominent. As the first line of defense to ensure cloud computing security, user authentication has attracted extensive attention. Though considerable efforts have been paid for a secure and practical authentication scheme in cloud computing environment, most attempts ended in failure. The design of a secure and efficient user authentication scheme for cloud computing remains a challenge on the one hand and user’s smart card or mobile devices are of limited resource; on the other hand, with the combination of cloud computing and the Internet of Things, applications in cloud environments often need to meet various security requirements and are vulnerable to more attacks. In 2018, Amin et al. proposed an enhanced user authentication scheme in cloud computing, hoping to overcome the identified security flaws of two previous schemes. However, after a scrutinization of their scheme, we revealed that it still suffers from the same attacks (such as no user anonymity, no forward secrecy, and being vulnerable to offline dictionary attack) as the two schemes they compromised. Consequently, we take the scheme of Amin et al. (2018) as a study case, we discussed the inherent reason and the corresponding solutions to authentication schemes for cloud computing environment in detail. Next, we not only proposed an enhanced secure and efficient scheme, but also explained the design rationales for a secure cloud environment protocol. Finally, we applied BAN logic and heuristic analysis to show the security of the protocol and compared our scheme with related schemes. The results manifest the superiority of our scheme.

User Centric Three-Factor Authentication Protocol for Cloud-Assisted Wearable Devices.

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

G-PPG: A Gesture-related PPG-based Two-Factor Authentication for Wearable Devices.

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Lightweight Authentication Protocol Based on Physical Unclonable Function

An efficient three-factor authentication protocol for wireless healthcare sensor networks

Revisiting Anonymous Two-Factor Authentication Schemes for IoT-Enabled Devices in Cloud Computing Environments.

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

Wearable-User Authentication via Cross-Technology Interference in Heterogeneous Environments

Secure and Lightweight Cluster-Based User Authentication Protocol for IoMT Deployment

Lightweight and Secure Three-Factor Authentication Scheme for Remote Patient Monitoring Using On-Body Wireless Networks.

A Rivest–Shamir–Adleman-Based Robust and Effective Three-Factor User Authentication Protocol for Healthcare Use in Wireless Body Area Networks

Towards Nonintrusive and Secure Mobile Two-Factor Authentication on Wearables

CamAuth: Securing Web Authentication with Camera

An Enhanced User Authentication Protocol Based on Elliptic Curve Cryptosystem in Cloud Computing Environment.

Shake, Shake, I Know Who You Are: Authentication Through Smart Wearable Devices

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks.

A Passwordless MFA Utlizing Biometrics, Proximity and Contactless Communication

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.