D-FAP: Dual-Factor Authentication Protocol for Mobile Cloud Connected Devices

Abstract

Emerging Mobile Cloud Computing (MCC) technologies offer a new world of promise by leveraging the quality of mobile services. With MCC, resource-constrained mobile devices could capitalize on the computation/storage resources of cloud servers via communication networks. While MCC adoption is growing significantly, several challenges need to be addressed to make MCC-based solutions scale and meet the ever-growing demand for more resource intensive applications. Security is a critical problem hindering the adoption of MCC. One of the most important aspects of MCC security is to establish authenticated communication sessions between mobile devices and cloud servers. The huge amount of data stored on mobile devices poses information security risks and privacy concerns for individuals, enterprises, and governments. The ability to establish authenticated communication sessions between mobile devices and cloud servers can resolve many security concerns. Limited computing and energy resources on mobile devices makes authentication and encryption a challenging task. In this paper, an overview of MCC authentication protocols is presented. Then, a Dual-Factor Authentication Protocol for MCC devices (D-FAP) is proposed. D-FAP aims at increasing authentication security by using multi-factors while offloading computation to the cloud to reduce battery consumption. The security of the protocol is formally verified and informal analysis is performed for various attacks. The results prove that the D-FAP is successful in mitigating various outsider and insider attacks.

Biometric Authentication for Intelligent and Privacy-Preserving Healthcare Systems

“…Password breaches, whether due to multiple password database leaks or increasingly sophisticated phishing attacks, dramatically increase the risk of authentication credential vulnerability [ 2 ]. Worse, poor user password hygiene, such as using passwords that are easily discovered such as birth dates, names, relatives' names, and phone pins, or repeating them across several accounts, exacerbates these flaws [ 3 ]. Figure 2 depicts the healthcare IT topology for medical devices.…”

E-Cardiac Care: A Comprehensive Systematic Literature Review

“…We also assessed the results and noted that mIoT devices do not possess the requisite data protocols and standards [ 131 ]. Therefore, many issues must be addressed to ensure IoT privacy and security [ 144 , 145 ], which is one of the major challenges of the IoT era. Moreover, the continuous monitoring of critical indicators requires reduced energy consumption and a longer battery life [ 146 ] to prevent a break of communication.…”

An Effective Model of Confidentiality Management of Digital Archives in a Cloud Environment

“…Below, we briefly introduce the technical features of these methods and analyze their application limitations in the confidentiality management of archives on the cloud. (1) Identity authentication is the process of user identity confirmation, to prevent illegal users from accessing system resources illegally [11,26]. Specifically, it can be divided into two categories, i.e., single-factor authentication [27][28][29] (such as username and password authentication, smart card authentication, dynamic password authentication and biometric authentication) and two-factor authentication [30,31] (which combines two kinds of single-factor authentication to further strengthen the security of identity authentication).…”