A Novel Authentication Mechanism to Prevent Unauthorized Service Access for Mobile Device in Distributed Network

Abstract

The growth of distributed computer networks (DCN) is simple for the user to share information and computing capabilities with the host. User identification is an essential access control mechanism for the client-server networking architecture. The perception of single sign-on allows a legitimate user to access a different service provider on a DCN using a single session key. Recently, several user identification techniques being proposed for DCN. Unfortunately, the existing proposals cannot maintain user anonymity when the majority of probable attacks. In addition, the further time synchronization mechanism they use can result in widespread overhead costs. To overcome these shortcomings, we propose a novel authentication mechanism to prevent unauthorized service access for a mobile device in distributed networks. The mechanism implements methods to generate securely encrypted keys using RSA algorithm to validate the authentication of user login id and password. Later, it implements a secure session key generation using DH algorithm which allows accessing the different services without repeating the authentication mechanism. An experimental evaluation was performed to measure execution time overhead for the registration process, an authentication process, session key generation process and Service Request Performance. The comparison results with existing authentication mechanism show an improvisation in all the measures.

A Software Security Optimization Architecture (SoSOA) and its Adaptation for Mobile Applications

“…This information could be used to attack the software application, its network host or its users. Various security mechanisms utilized to prevent information leakages, such as Authentication [21,22], Access Control (Authorization), Logging and Intrusion Detection [23,24], Auditability, SQL Injection [25][26][27][28], Data Validation, and Security Tests [29,30].…”

Insider Threat Detection and Prevention Protocol: ITDP

“…A Novel authentication mechanism to prevent unauthorized service access to a mobile device in a distributed network [12]: The client-server is the distributed computer network architecture that client or user has to log on to the server for data processing. The server has to detect if the current log on client user is legitimate.…”