A light-weight authentication scheme based on message digest and location for mobile cloud computing

Abstract

The security of data transmission is of paramount importance to mobile cloud computing. For security purposes, the data transmission in mobile cloud computing typically requires a mutually-authenticated environment for mobile devices and cloud servers. SSH (secure shell) could be used to satisfy the requirement. However, it makes the authentication process computationally expensive for mobile devices because it involves public key cryptosystem and mobile devices are relatively restricted in terms of computation capacity. This places the onus of establishing and maintaining secure communication sessions on the resourceful cloud servers. We propose a novel mutual authentication scheme, "Message Digest and Location based Authentication (MDLA)", which involves symmetric key operations. In addition to computational simplicity, MDLA achieves integrity through message digest, and ensures the unpredictability of keys using location vector and timestamp.

Layers Based Optimal Privacy Preservation of the On-premise Data Supported by the Dual Authentication and Lightweight on Fly Encryption in Cloud Ecosystem

“…There are many works found in the literature for user authentication, one of the studies by [17], introduces a security system for cloud user validation modeling where it incorporates a mutual authentication schema in between the cloud servers and mobile devices to restrict the unauthorized access so that they achieve the purpose of preserving the user data confidentiality within cloud ecosystem. In contrast, this model includes only one 1-layer of authentication using a symmetric key based on the user's location as an attribute towards the security policy.…”

“…In contrast, one layer of the key may undergo a dictionary attack, and even though the key generation mechanism is strong and it will have the possibility of guessing the key. It leads to open a research domain to provide one more layer to authentication, which resists attackers from accessing the system [17]. Another approach by [18] introduces an authentication procedure based on a biometric fingerprint recognition system to strengthen the authentication process for the mobile cloud ecosystems.…”

Towards a Gateway-based Context-Aware and Self-Adaptive Security Management Model for IoT-based eHealth Systems

“…Each incoming connection request from a mobile client is received by master cloud that performs its verification by utilizing cognitive module. The adaptive module selects an appropriate inner cloud where mutual authentication is performed by authentication module through Message Digest and Location-based Authentication (MDLA) [12] technique in order to establish secure communication session between mobile client and cloud sever. It also lacks the parameter escalation inside MDLA.…”

A Hybrid Approach Towards Localization and Security in Wireless Networks.

“…The hashed client ID and password is supported with user's previous location ɸprev Eq (6). During the authentication phase the cloud server is responsible for providing the resources responsible for authentication to the cloud server Eq (7). The authentication request provides user an authentication key authkey which is generated using current timestamp and new current location ɸnew Eq (8).…”

“…The cloud server decrypts the message using the primary key to obtain the user's current new location and time stamp in generating the authentication key Eq (7). The basic architecture for MDLA which highlights all the three phases is shown below: Three different types of updates take place after authentication phase performed by the methodology to assure confidentiality and secure access.…”