A Privacy-Aware Authentication Scheme for Distributed Mobile Cloud Computing Services

Abstract

In modern societies, the number of mobile users has dramatically risen in recent years. In this paper, an efficient authentication scheme for distributed mobile cloud computing services is proposed. The proposed scheme provides security and convenience for mobile users to access multiple mobile cloud computing services from multiple service providers using only a single private key. The security strength of the proposed scheme is based on bilinear pairing cryptosystem and dynamic nonce generation. In addition, the scheme supports mutual authentication, key exchange, user anonymity, and user untraceability. From system implementation point of view, verification tables are not required for the trusted smart card generator (SCG) service and cloud computing service providers when adopting the proposed scheme. In consequence, this scheme reduces the usage of memory spaces on these corresponding service providers. In one mobile user authentication session, only the targeted cloud service provider needs to interact with the service requestor (user). The trusted SCG serves as the secure key distributor for distributed cloud service providers and mobile clients. In the proposed scheme, the trusted SCG service is not involved in individual user authentication process. With this design, our scheme reduces authentication processing time required by communication and computation between cloud service providers and traditional trusted third party service. Formal security proof and performance analyses are conducted to show that the scheme is both secure and efficient.

An Efficient Two-Server Authentication and Key Exchange Protocol for Accessing Secure Cloud Services

“…Recently, Gope and Das [39] proposed an anonymous mutual authentication scheme for ubiquitous mobile cloud computing services, in which a legitimate mobile cloud user is allowed to enjoy n times all the ubiquitous services in a secure and efficient way, where the value of n may differ based on the principal he/she has paid for. In addition, Odelu et al [40] reviewed Tsai-Lo's scheme [41] and pointed out that their scheme does not provide the session-key security and strong user credentials' privacy. To remove the security weaknesses found in Tsai-Lo's scheme, Odelu et al designed a provably secure authentication scheme for distributed mobile cloud computing services.…”

An Anonymous Authentication and Key Establish Scheme for Smart Grid: FAuth

“…Li et al (2013) also proposed an authentication scheme based on bilinear pairings [11]. Tsai-Lo and Lo proposed a new anonymous authentication scheme based on nonce and bilinear pairing [12], which supports mutual authentication, key exchange, user anonymity, and user untraceability. It is claimed that their scheme withstands all major security threats and meets general security requirements.…”

An Investigation towards Paradigm Shift of Cloud Computing Approach and Need of New Security Protocol

“…[33], RSA [34], bilinear pairing [35], identity based cryptography [36] are some of protocols used for secure authentication of users over cloud. Tsai and Lo [37] have recently presented an authentication scheme that makes use of bilinear pairing for secret exchanging of private keys, mutual authentication, and rendering untraceability. The outcome of the study has been compared with 5 existing studies to find that presented scheme is highly resilient against various forms of authentication threats.…”