Authentication In Cloud Research Articles

Blockchain and Data Integrity Authentication Technique for Secure Cloud Environment

Nowadays, numerous applications are associated with cloud and user data gets collected globally and stored in cloud units. In addition to shared data storage, cloud computing technique offers multiple advantages for the user through different distribution designs like hybrid cloud, public cloud, community cloud and private cloud. Though cloud-based computing solutions are highly convenient to the users, it also brings a challenge i.e., security of the data shared. Hence, in current research paper, blockchain with data integrity authentication technique is developed for an efficient and secure operation with user authentication process. Blockchain technology is utilized in this study to enable efficient and secure operation which not only empowers cloud security but also avoids threats and attacks. Additionally, the data integrity authentication technique is also utilized to limit the unwanted access of data in cloud storage unit. The major objective of the projected technique is to empower data security and user authentication in cloud computing environment. To improve the proposed authentication process, cuckoo filter and Merkle Hash Tree (MHT) are utilized. The proposed methodology was validated using few performance metrics such as processing time, uploading time, downloading time, authentication time, consensus time, waiting time, initialization time, in addition to storage overhead. The proposed method was compared with conventional cloud security techniques and the outcomes establish the supremacy of the proposed method.

Privacy preserving model-based authentication and data security in cloud computing

PurposeCloud computing plays a significant role in the initialization of secure communication between users. The advanced technology directs to offer several services, such as platform, resources, and accessing the network. Furthermore, cloud computing is a broader technology of communication convergence. In cloud computing architecture, data security and authentication are the main significant concerns.Design/methodology/approachThe purpose of this study is to design and develop authentication and data security model in cloud computing. This method includes six various units, such as cloud server, data owner, cloud user, inspection authority, attribute authority, and central certified authority. The developed privacy preservation method includes several stages, namely setup phase, key generation phase, authentication phase and data sharing phase. Initially, the setup phase is performed through the owner, where the input is security attributes, whereas the system master key and the public parameter are produced in the key generation stage. After that, the authentication process is performed to identify the security controls of the information system. Finally, the data is decrypted in the data sharing phase for sharing data and for achieving data privacy for confidential data. Additionally, dynamic splicing is utilized, and the security functions, such as hashing, Elliptic Curve Cryptography (ECC), Data Encryption Standard-3 (3DES), interpolation, polynomial kernel, and XOR are employed for providing security to sensitive data.FindingsThe effectiveness of the developed privacy preservation method is estimated based on other approaches and displayed efficient outcomes with better privacy factor and detection rate of 0.83 and 0.65, and time is highly reduced by 2815ms using the Cleveland dataset.Originality/valueThis paper presents the privacy preservation technique for initiating authenticated encrypted access in clouds, which is designed for mutual authentication of requester and data owner in the system.

A Comprehensive Survey on Security Threats and Countermeasures of Cloud Computing Environment

Cloud computing technology is one of the biggest breakthroughs in technology and business boom. This technology is service oriented that focuses on reducing costs, minimizing devices and paying for used service only. This paper surveys recent research on security threats and countermeasures of cloud computing environment. It begins by explaining cloud computing definition with its layers. In addition, it provides a brief explanation of the common characteristics of cloud computing service models and deployment models. Authentication and access control in cloud computing will be given at end of this work.

Analysis and Implementation of Kerberos Protocol in Hybrid Cloud Computing Environments

The concept of cloud computing has recently changed how hardware, software, and information are handled. However, security challenges and credibility requirements have never changed and may have increased. Protecting cloud computing and providing security for its resources and users is one of the critical challenges. As a result, most users are afraid to use their resources, because many security problems must be met. For example, authentication and reliability are major security constraints and must be provided in a cloud computing environment. There is a wide range of authentication protocols in use, but the researcher has recommended the Kerberos protocol to represent and test it in a complex environment such as a mixed cloud environment. A model has been developed to implement Kerberos authentication in a hybrid cloud computing environment to securely access the cloud computing services provided. This model is represented using the OPNET Modeler 14.5 simulation system. The network efficiency was measured before and after the hacker. Findings presented in this research are supporting the ability of the Kerberos protocol to prevent illegal access to cloud computing services, whether from within the private cloud or the public cloud. While maintaining the efficient performance of the network.

SecAuth-SaaS: a hierarchical certificateless aggregate signature for secure collaborative SaaS authentication in cloud computing

Collaborative cloud business models enable a new dimension of business by giving option to the third party software vendors to deploy their software in the cloud for offering software as a service (SaaS) to the users. However, the secure provisioning of resources requires scalable architecture with efficient authentication for configuring the collaborative software services in the cloud. In this paper, we propose a novel hierarchical certificateless aggregate signature to provide a scalable authentication model for SaaS in cloud computing. Our proposed scheme is secure under the adaptive chosen-message attack in the random oracle model with the hardness assumption of Computational Diffie–Hellman (CDH) problem and Decisional Diffie–Hellman (DDH) problem. Furthermore, our proposed scheme is highly efficient regarding low overhead on computation and communication cost.

A novel 1D chaotic system for image encryption, authentication and compression in cloud

To solve the privacy image problem stored in cloud, we propose a compressive sensing (CS) based image compression, authentication, encryption algorithm in cloud, which can implement computation outsourcing to get rid of the expensive storage and computation costs. To achieve these goals, combined with the logistic-tent-sine chaotic map, a logistic-tent-sine chaotic map (LTSS) is proposed for it has larger chaotic ranges and better chaotic behaviors than simple 1D chaotic map such as a logistic chaotic map. Then, the LTSS chaotic system is employed for image protection algorithm in cloud, which contains three parts: data owner, cloud services and data user. The primary role of the data owner part is to compress and encrypt the image while embedding the owner’s Palmprint discriminative and binary features for authentication. The low-frequency part of the image is encrypted using the proposed Binary Data Cyclic Encryption algorithm (BDCE) while the owner’s palmprint features are embedded for authentication of the data owner. The high-frequency data are randomized for compression by the CS and following encrypted by the Double Random Phase Encoding (DRPE). For the cloud services, authentication services depend on the key and palmprint features and the high computational compressed sensing reconstruction is implemented in cloud can reduce the user burden. For data users, a user should provide the correct key and right palmprint, and then obtain an image available from the cloud service. The algorithm has better quality compared with the common compressive sensing based algorithms and robust to noise and occlusion for using the discrete wavelet transform. What is more, theoretical analysis and empirical evaluations show that the proposed algorithm can resist to exhaustive attack, differential attack and classical attacks.

Efficient user authentication, server allocation and secure data storage in cloud

With the increased popularity and the need to store the sensitive data over the cloud, the security of stored data is a very big challenge. This work has not only investigated and rectified the susceptibility of the data in the cloud, but also proposed the technique for user authentication and server allocation efficiently. Cuckoo search algorithm (CSA) is applied for efficiently allocating the server. For maintaining the privacy of client's data over the cloud, improved attribute-based encryption (IABE) can effectively do attribute adjunction/revocation, reduce the time complexity as well as safeguard from collusion attacks. The minimum set generation, proxy key generation, file updation, and secret key updation, is modified for efficient attribute revocation/adjunction. The combination of IABE with CSA achieves the security objective and the process is enhanced efficiently.

Efficient user authentication, server allocation and secure data storage in cloud

With the increased popularity and the need to store the sensitive data over the cloud, the security of stored data is a very big challenge. This work has not only investigated and rectified the susceptibility of the data in the cloud, but also proposed the technique for user authentication and server allocation efficiently. Cuckoo search algorithm (CSA) is applied for efficiently allocating the server. For maintaining the privacy of client's data over the cloud, improved attribute-based encryption (IABE) can effectively do attribute adjunction/revocation, reduce the time complexity as well as safeguard from collusion attacks. The minimum set generation, proxy key generation, file updation, and secret key updation, is modified for efficient attribute revocation/adjunction. The combination of IABE with CSA achieves the security objective and the process is enhanced efficiently.

Exploiting Optical Chaos for Color Image Encryption and Secure Resource Sharing in Cloud

Cloud as a developing technology provides convenient services to sharing and usage of images resource, but brings a threat to images security and privacy authentication. Optical chaos possess distinct superiority for image secure sharing, therefore, based on two mutually coupled semiconductor lasers (MC-SL1 and MC-SL2), we theoretically propose a color image encryption system for secure resource sharing and introduce a watermarking method for images privacy authentication in cloud. In our paper, after achieving chaos synchronization under proper parameters, two MC-SLs are used to transmit encryption/decryption key space generated by chaotic signal of MC-SL1 and user's key. We carry out digital watermarking and encryption of a color image before secure resource sharing in cloud. On the other side of cloud, we make some tests for decryption of color image by received key space and watermark extraction. Meanwhile, we discuss security performance of color image encryption/decryption and key space transmission process, and analyze secure resource sharing of color image in cloud.

Trust management scheme for authentication in secure cloud computing using double encryption method

Trust management scheme for authentication in secure cloud computing using double encryption method

Performance Analysis of Aes and 3des for Implementing Multi Level Authentication in Cloud Through Rest Api

Last couple of decades, internet usage has been changed each and every technology domain. This has lead to implementation and accommodation of cloud computing. As the Cloud has the nature of sharing the data, it led to various types of security attacks. Hence security mechanisms which has various features/types are needed and hence security breaches can be prevented. Authentication is one of the vital techniques playing a major role in security part. Cloud Computing verifies the identification of a user during the process of accessing the services from cloud servers. Different authentication techniques are used to verify the user’s identity before granting the access to them. This paper analyze the performance of AES and 3DES algorithms and find out the best suit for implementing multi level authentication in cloud. Based on execution time, request and response time against the concurrent user load and file size, AES is faster, more secure and safer than 3DES.

Database authentication watermarking scheme in encrypted domain

Digital watermarking in encrypted domain is a potential technology for privacy protection (with encryption) and integrity authentication (with watermark) in cloud computing environments. Based on order-preserving encryption scheme (OPES), discrete cosine transformation (DCT), cryptography hash and watermarking technologies, this study proposes a new database authentication watermarking scheme in encrypted domain. Firstly, data in a database are encrypted with OPES for privacy protection. Then, the encrypted data are divided into groups for DCT operations. The watermark bits generated by hashing AC coefficients are embedded into DC coefficients for integrity authentication of the encrypted data. In receiver, whether the data have been tampered can be claimed by matching the hash value of AC coefficients and the extracted watermark information from DC coefficients. The watermark embedding process in encrypted domain is lossless to plaintext data by exploring order-preserving property of OPES. In the receiver, an illegal user can recover the original database by directly decrypting the watermarked ciphertext data. Experimental results have shown that the algorithm can efficiently detect different tampering operations while protecting data content security with OPES.

Threshold attribute‐based signcryption and its application to authenticated key agreement

AbstractSigncryption is a public key cryptosystem that achieves the functions of digital signature and public key encryption simultaneously. It significantly reduces the cost of traditional signature‐then‐encryption approach. Although a large body of signcryption schemes have been proposed, few works have been done on attribute‐based signcryption (ABSC), which simultaneously achieves the functionalities of attribute‐based encryption and attribute‐based signature, two important cryptographic primitives proposed to enforce fine‐grained access control and user authentication in cloud computing applications. In this paper, we present a threshold ABSC scheme. The scheme is proven secure under the well‐established Decisional Bilinear Diffie–Hellman and the standard Computational Diffie–Hellman assumptions in the standard model. Compared with the state of the ABSC art, our scheme has comparable efficiency without relying on any random oracle. Furthermore, we construct an authenticated key agreement protocol based on this threshold attribute‐based signcryption from the point of improving the security of cloud computing. Copyright © 2016 John Wiley & Sons, Ltd.

Provably secure biometric‐based user authentication and key agreement scheme in cloud computing

AbstractCloud computing, the conjoin of many types of computing, has made a great impact on the life of everyone. People from anywhere can access the different cloud‐based services by using the Internet. A user, who wants to access some cloud‐based service, needs to register himself/herself to an authority (service provider), and after that, he/she can use the service. To access the service, each user needs to authenticate to that particular cloud server. Several user authentication schemes for cloud computing have been presented but mostly have limitations/drawbacks as they are prone to various known attacks, such as privileged insider, user and server impersonation, and strong reply attacks, and they also have lack of functionality features. Moreover, these schemes do not provide efficient password change phase. In order to overcome these drawbacks, we propose a new provably secure biometric‐based user authentication and key agreement scheme for cloud computing. The proposed scheme overcomes the weaknesses of the existing schemes and supports extra functionality features including user anonymity and efficient password and biometric update phase for multi‐server environment. The careful formal security analysis under standard model and informal security analysis and the simulation results for formal security verification using the most acceptable AVISPA tool show that the proposed scheme is secure against various known possible attacks. The analysis of computation and communication overheads of our scheme depicts its efficiency over other related existing schemes, and thus, the proposed scheme is suitable for the cloud computing environment. Copyright © 2016 John Wiley & Sons, Ltd.

SecAuthn: Provably Secure Multi-Factor Authentication for the Cloud Computing Systems

Cloud computing is an advanced resource pooling framework which delivers an economical and more reliable Information and Communications Technology (ICT) solutions to the industry and academia. Cloud technology helps the stakeholders to avoid initial investment of costly infrastructure setup, licensing new software’s, training new personals and operational cost. Therefore, all size of IT organizations and individuals can make use of the cloud for boosting up their ICT needs. In parallel there has been backlash due to authentication access keys and credentials management issues in this new framework. As a result, in this article we have proposed a robust and privacy preserved Multi-Factor Authentication (MFA) scheme with efficient access keys distribution mechanism. The proposed MFA approach integrates the bio-metric fingerprint with user-id, password and One-Time Password (OTP) and upgrades the existing Single Sign-On (SSO) and two-factor authentications to multi-factor authentication. Our investigation not only provides the robust remote authentication in cloud but also preserves the privacy of the authentication credentials. The main shortcoming in our approach is that remote users and cloud service providers must trust the third party trustee. We have analyzed the completeness of our investigation using the GNY (Gong, Needham and Yahalom) logic. Finally, we reported the performance and robustness of our scheme with series of experiments.

Multi-domain Security Authentication Protocol for Hybrid Cloud

In recent years, with the high-speed development of cloud computing and its universal application, the cloud security technology is more and more important. In cloud computing, it is mainly through the resource sharing and collaborative action to meet the demand for an unlimited access speed, unlimited storage space and a reliable resource protection for users. For the secure access resources among different domains in cloud network, today most Cloud Computing Systems provide data security and mutual authentication with asymmetric and traditional public key cryptography. For these researches, the authentication process is cumbersome, and the certificate management is complex, which would bring some inconvenience for mutual authentication among servers or users in a Hybrid Cloud. This paper provides a security authentication protocol among multiple domains. It adopts the direct product decomposition and linear mapping technology of cyclic group to achieve mutual authentication between members in multi-domain systems or heterogeneous networks. Extensive security and performance analysis show that the proposed schemes have the advantages of in security, computation consumption and Communication consumption. It is suitable for safety authentication in large-scale Cloud computing environment.

Server-aided anonymous attribute-based authentication in cloud computing

The notion of attribute-based signature is one of the important security primitives to realize anonymous authentication. In an attribute based signature (ABS), users can generate a signature on a message with their attributes. With this signature, any verifier will be convinced that such a signature is generated from a signer with these attributes. However, the identity of the signers will be hidden from the verifier. ABS are useful to design anonymous authentication and attribute-based messaging system. However, existing work of attribute-based authentication usually requires huge computation during signing, which grows linearly with the size of the attributes. Thus, these methods result in heavy computation overhead on the users and are not suitable for devices with only small computation ability.Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as outsourcing services over the Internet. In this paper, we first address the challenging issue of securely outsourcing ABS, which enables users to largely eliminate the computational costs of ABS generation. The security model is formally defined to protect the privacy of users’ signing key while outsourcing the computation of signing. An efficient and secure outsourcing algorithm of ABS is also proposed. Extensive analysis shows that our scheme is secure in the proposed model and saves more than 90% computation overhead on the user side.

An Improved Mutual Authentication Framework for Cloud Computing

this paper, wehave propose a user authentication scheme for cloud computing. The proposed framework providesmutual authentication and session key agreement in cloud computing environment. The scheme executesin three phases such as server initialization phase, registration phase, authentication phase. Detailed security analyses have been made to validate the efficiency of the scheme. Further, the scheme has the resistance to possible attacks in cloud computing.