.png){kind=icon}
返回
Provably secure authenticated key agreement scheme for distributed mobile cloud computing services
.png){kind=icon}
PRE
AI
DOI：10.1016/j.future.2016.09.009.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
With the rapid development of mobile cloud computing, the security becomes a crucial part of communication systems in a distributed mobile cloud computing environment. Recently, in 2015, Tsai and Lo proposed a privacy-aware authentication scheme for distributed mobile cloud computing services. In this paper, we first analyze the Tsai-Lo's scheme and show that their scheme is vulnerable to server impersonation attack, and thus, their scheme fails to achieve the secure mutual authentication. In addition, we also show that Tsai-Lo's scheme does not provide the session-key security (SIC-security) and strong user credentials' privacy when ephemeral secret is unexpectedly revealed to the adversary. In order to withstand these security pitfalls found in Tsai-Lo's scheme, we propose a provably secure authentication scheme for distributed mobile cloud computing services. Through the rigorous security analysis, we show that our scheme achieves SIC-security and strong credentials' privacy and prevents all well-known attacks including the impersonation attack and ephemeral secrets leakage attack. Furthermore, we simulate our scheme for the formal security analysis using the widely-accepted AVISPA (Automated Validation of Internet Security Protocols and Applications) tool, and show that our scheme is secure against passive and active attacks including the replay and man-in-the-middle attacks. More security functionalities along with reduced computational costs for the mobile users make our scheme more appropriate for the practical applications as compared to Tsai-Lo's scheme and other related schemes. Finally, to demonstrate the practicality of the scheme, we evaluate the proposed scheme using the broadly-accepted NS-2 network simulator. (C) 2016 Elsevier B.V. All rights reserved.
Keyword:
Cloud computing
Sit-security
Mutual authentication
User untraceability
AVISPA
NS2 simulation
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
F
IF:
6.1
论文数:
6.8K
被引数:
2.3W
机构
引用论文
.png){kind=icon}
Anonymous Two-Factor Authentication in Distributed Systems: Certain Goals Are Beyond Attainment
PREAI
分享收藏A Secure Biometrics-Based Multi-Server Authentication Protocol Using Smart Cards基于智能卡的安全生物特征多服务器认证协议
PREAI
分享收藏
查看更多内容