返回
An improved anonymous authentication scheme for distributed mobile cloud computing services
DOI:10.1007/s10586-017-1088-9.png)
摘要
En 中文
Mobile cloud computing blend mobile and cloud computing together with the help of wireless communication technology to achieve benefits for the stakeholders. These stakeholders include mobile users, mobile service operators and cloud service providers. Assorted challenges are also there for the implementation of mobile cloud computing but security and privacy are the dominant concerns. In order to achieve security and privacy of the said system several attempts are taken up. As the underlying system is complex and more prone against security threats, therefore strong authentication and privacy preserving schemes are desired. Three factor biometrics based authentication schemes are considered more secure for such huge and complex systems. Moreover, computational intelligence is getting popular nowadays for designing more vigorous and reliable biometrics based authentication schemes. Very recently, Tsai and Lo proposed an identity based authentication scheme for distributed mobile cloud computing environments. They claimed to achieve single sign on authentication for multiple service providers. Furthermore, they emphasized the usefulness and security of their scheme. However, the analysis in this paper shows that Tsai and Lo's scheme is insecure against server forgery attack. It is proved that any adversaries having knowledge of just public parameters can forge as a valid service provider. Then an improved scheme is proposed to mitigate the security weakness. The security of proposed scheme is instantiated under random oracle model as well as the protocol validation model of popular automated tool ProVerif.
Keyword:
Mobile cloud computing
Identity based authentication
Bilinear mapping
Elliptic curve cryptography
Bilinear mapping
ProVerif
Random oracle model
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
4.1
论文数:
5.1K
被引数:
7.5K
机构
引用论文
L-EncDB: A lightweight framework for privacy-preserving data queries in cloud computingL-encdb: 一个轻量级的云计算隐私保护数据查询框架
Cryptanalysis of a remote user authentication scheme for mobile client-server environment based on ECC基于ECC的移动客户端-服务器环境远程用户认证方案的密码分析
INFORMATION FUSION
IF15.5

