.png){kind=icon}
返回
A novel ECC-based provably secure and privacy-preserving multi-factor authentication protocol for cloud computing
.png){kind=icon}
PRE
AI
DOI：10.1007/s00607-021-01041-6.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The widespread adoption of cloud computing enables the end-users to leverage convenient sharing, unlimited storage and on-demand access to big data. The extensive combination of servers, networks, users and resources necessitate secure mutual authentication protocol to verify the legitimacy of users for cloud services. Recently, Sahoo et al. and Chen et al. proposed multi-factor mutual authentication and key agreement (MAKA) protocols. However, we identify that Sahoo et al.'s protocol is prone to user linkability, replay and denial-of-service (DoS) attacks. Also, Chen et al.'s protocol is vulnerable to user linkability and known session-specific temporary information (KSSTI) attack. To mitigate these vulnerabilities, we propose a novel elliptic curve cryptography (ECC) based provably secure and privacy-preserving multi-factor authentication protocol for cloud environment. Our protocol delivers user anonymity, unlinkability, perfect forward secrecy, session key security as security and privacy authentication features. The security of our protocol is proved theoretically under Real-Or-Random (ROR) model. We validate the correctness properties of our protocol under Scyther security verification tool. The informal security analysis illustrates that our protocol resists various security attacks such as replay, DoS, KSSTI, user impersonation, server spoofing, password-guessing and privileged insider. Finally, we compare our protocol with Sahoo et al., Chen et al. and other existing relevant protocols regarding security features, communication, and computation overheads. The results illustrate that our protocol exhibits high security with reasonable communication and computational overheads than other existing relevant protocols.
Keyword:
Authentication
Anonymity
Unlinkability
Biometrics
Elliptic curve cryptography
Cloud computing
期刊
C
IF:
2.8
论文数:
2.3K
被引数:
3.5K
机构
引用论文
.png){kind=icon}
Provably Secure Dynamic ID-Based Anonymous Two-Factor Authenticated Key Exchange Protocol With Extended Security Model具有扩展安全模型的可证安全动态基于身份的匿名双因素认证密钥交换协议
PREAI
分享收藏
查看更多内容