多云环境下基于智能卡的认证方案

doi:10.11959/j.issn.1000-436x.2018055

Abstract

Abstract:

To solve the problem of the access keys stored in a smart card increasing linearly with the number of registered clouds without third party participated in authentication,an authentication scheme was proposed for multi-cloud environment based on smart card.In the proposed scheme,the authentication was realized between user and multiple clouds without third party participation when the smart card only stored two access key.Thus the storage cost of smart card was reduced effectively.Because there was no public key cryptography,the authentication messages was generated by using XOR homomorphic function and Hash function,thus the computational cost of the smart card and the cloud servers was reduced effectively.Moreover,the proposed scheme also didn’t need to store any user’s information on the cloud servers,thereby reducing the storage and management costs of the cloud servers.The security analysis and the performance analysis show that the proposed scheme is able to resist multiple attacks,which is secure and efficient.

Key words: multi-cloud environment, identity authentication, smart card, XOR homomorphic function

CLC Number:

TP309

Sen ZHAO,Qingqing GAN,Xiaoming WANG,Fang YU. Authentication scheme for multi-cloud environment based on smart card[J]. Journal on Communications, 2018, 39(4): 131-138.

Figures/Tables 5

符号	含义
T	可信中心
U_i	第i个用户
ID _i	用户U_i的身份
PWD _i	用户U_i的密码
S_j	第 j个云服务器
$I D_{s_{j}}$	云服务器S_j的身份
p	一个大素数
k	T的密钥
k_i	用户U_i的密钥
${\hat{k}}_{s_{j}}$	云服务器S_j的密钥
f_k(?)	带密钥的XOR同态函数
H(·)	单向散列函数
T_i	读卡器的当前时间
T_S	服务器的当前时间
⊕	异或操作
\|\|	连接操作

References 20

[1]	PATI M , RAO G R . Integrity verification in multi-cloud storage using cooperative provable data possession[J]. International Journal of Computer Science and Information Technologies(IJCSIT), 2014,5(2): 982-985.
[2]	CHATURVEDI A , DAS A K , MISHRA D ,et al. Design of a secure smart card-based multi-server authentication scheme[J]. Journal of Information Security and Applications, 2016,30: 64-80.
[3]	LI H , DAI Y , TIAN L ,et al. Identity-based authentication for cloud computing[M]. Cloud Computing. Springer Berlin Heidelberg, 2009: 157-166.
[4]	ZHANG Q , LI Y Z , SONG D J.et al . Alliance-authentication protocol in cloud computing environment[J]. China Communications, 2012,7: 42-54.
[5]	CHEN T H , YEH H L.SHIH W K . An advanced ECC dynamic ID-based remote mutual authentication scheme for cloud computing[C]// 5th FTRA International Conference on Multimedia and Ubiquitous Engineering (MUE). 2011: 155-159.
[6]	YASSIN A , JIN H , IBRAHIM A ,et al. A practical privacy-preserving password authentication scheme for cloud computing[C]// 2012 IEEE 26th International Parallel and Distributed Processing Symposium Workshops and PhD Forum. 2012: 21-25.
[7]	JAIDHAR D , . Enhanced mutual authentication scheme for cloud architecture[C]// 2013 IEEE 3rd International Advance Computing Conference (IACC). 2013: 70-77.
[8]	CHOKSI S . Comparative study on authentication schemes for cloud computing[J]. International Journal of Engineering Development and Research(JIEDR), 2014,2(2): 1-7.
[9]	SINGH A , CHATTERJEE K . A secure multi-tier authentication scheme in cloud computing environment[C]// 2015 International Conference on Circuit,Power and Computing Technologies (ICCPCT). 2015: 2-8.
[10]	MEDHIOUB M , HAMDI M , KIM T . A new authentication scheme for cloud-based storage applications[C]// The 9th International Conference on Security of Information and Networks. 2016: 57-60.
[11]	KAUR R , KAUR A . Enhancing authentication schemes for multi-level graphical password in cloud environment,communications on applied electronics (CAE)[C]// Foundation of Computer Science FCS. 2016: 12-18.
[12]	LEE J , SON J , KIM H ,et al. An authentication scheme for providing to user service transparency in multicloud environment[J]. Journal of the Korea Institute of Information Security and Cryptology, 2013,23(6): 1131-1141.
[13]	KIM H , CHUNG H , KANG J . Zero-knowledge authentication for secure multi-cloud computing environments[C]// Advances in Computer Science and Ubiquitous Computing. Lecture Notes in Electrical Engineering, 2015: 255-261.
[14]	田俊峰, 孙可辉 . 基于 HIBC 的云信任分散统一认证机制[J]. 计算机研究与发展, 2015,52(7): 1660-1671.
	TIAN J F , SUN K H . Trusted-distributed-based authentication mechanism using hierarchical identity-based cryptography[J]. Journal of Computer Research and Development, 2015,52(7): 1660-1671.
[15]	周艺华, 蒿金志, 赵航 . 混合云服务中的跨云际认证机制[J]. 计算机系统应用, 2015,24(4): 118-122.
	ZHOU Y H , HAO J Z , ZHAO H . Authentication mechanism of crossing clouds in hybrid cloud services[J]. Computer Systems and Applications, 2015,24(4): 118-122.
[16]	BONG J , SUH Y , SHIN Y . Fast user authentication method considering mobility in multi-clouds[C]// 2016 International Conference on Information Networking (ICOIN). 2016: 445-448.
[17]	TSAD J L , LO N W . A privacy-aware authentication scheme for distributed mobile cloud computing services[J]. IEEE Systems Journal, 2015,9(3): 1-11.
[18]	CORON J S , DODIS Y , MALINAUD C ,et al. Merkle-Damg?rd revisited:How to construct a hash function[C]// Advances in Cryptology-CRYPTO 2005. 2005: 430-448.
[19]	REN S Q , TAN B H , SUNDARAM S ,et al. Secure searching on cloud storage enhanced by homomorphic indexing[J]. Future Generation Computer Systems, 2016,65: 102-110.
[20]	ADE-IBIJOLA O . A simulated enhancement of Fisher-Yates algorithm for shuffling in virtual card games using domain-specific data structures[J]. International Journal of Computer Applications, 2012,54(11): 24-28.

Metrics

Recommended 0

No Suggested Reading articles found!

方案	存储费用	第三方参与认证	通信费用	计算费用
方案	存储费用	第三方参与认证	通信费用	用户	云服务器
文献[13]	O (1)	是	4次	T_PD+T_H + 3T_M	2T_PE+2T_PD+T_H +4T_M
文献[14]	O (1)	是	4次	2TPD+T_H	2T_PE+T_H
文献[15]	O (1)	是	4次	2T_SE+2T_SD	4T_SE+2T_SD
文献[17]	O (1)	否	3次	3T_m+4T_H	2T_b+4T_m+4T_H
本文方案	O (1)	否	3次	2T _f +T_H	3T _f +2T_H
注：T_H表示散列函数运算时间，T_PE 表示公钥加密运算时间，T_PD表示公钥解密运算时间，T_M表示乘法运算时间，T_SE表示对称加密运算时间，T_SD表示对称解密运算时间，T_m表示点乘运算时间，T_b表示双线性对运算时间，T _f 表示XOR同态函数运算时间。认证过程中的异或操作⊕和连接操作\|\|运算开销比较少，已忽略不计。

Authentication scheme for multi-cloud environment based on smart card

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 20

Related Articles 14

Metrics

Recommended 0

[1]	Rui SHI, Huamin FENG, Huiqin XIE, Guozhen SHI, Biao LIU, Yang YANG. Privacy-preserving attribute ticket scheme based on mobile terminal with smart card [J]. Journal on Communications, 2022, 43(10): 26-41.
[2]	Houzhen WANG, Xinwei CAI, Yan GUO, Huanguo ZHANG. 5-pass zero-knowledge identity authentication scheme based on matrix completion problem [J]. Journal on Communications, 2021, 42(11): 79-86.
[3]	Liehuang ZHU,Long WANG,Jiasheng LI,Chuan ZHANG,Weihua YUAN. New entity authentication and access control scheme in satellite communication network [J]. Journal on Communications, 2018, 39(6): 73-80.
[4]	Wei-guo SHEN,Wei WANG. Keystroke features recognition based on stable linear discriminant analysis [J]. Journal on Communications, 2017, 38(Z2): 26-29.
[5]	Ying-di DONG,Jin-ye PENG,Xiao-bo ZHANG,Zhen-long ZHANG. Quantum identity authentication scheme based on measurement-device-independent quantum key distribution protocol [J]. Journal on Communications, 2016, 37(2): 152-157.
[6]	Zhi-jun WU,Ting ZHAO,Jin LEI. Authentication method in SWIM based on improved Diameter/EAP-MD5 [J]. Journal on Communications, 2014, 35(8): 1-7.
[7]	. Authentication method in SWIM based on improved Diameter/EAP-MD5 [J]. Journal on Communications, 2014, 35(8): 1-7.
[8]	. Rational analysis of authentication protocols based on NGUYEN L H scheme [J]. Journal on Communications, 2013, 34(8): 3-26.
[9]	Xing-hua LI,Ling-juan DENG,Yuan ZHANG,Jian-feng MA. Rational analysis of authentication protocols based on NGUYEN L H scheme [J]. Journal on Communications, 2013, 34(8): 18-26.
[10]	Zhen-peng LIU,Feng-long WU,Kai-yu SHANG,Wen-lei CHAI,Xiao WANG. Mutual authentication scheme based on the TPM cloud computing platform [J]. Journal on Communications, 2012, 33(Z2): 20-24.
[11]	Chun-guang MA,Jiu-ru WANG,Xiao-rui ZHONG,Hua ZHANG. One-way accumulator-based key management protocol for wireless sensor networks [J]. Journal on Communications, 2011, 32(11A): 184-189.
[12]	Chao SHEN,Zhong-min CAI,Xiao-hong GUAN,Chao FANG,You-tian DU. User authentication and monitoring based on mouse behavioral features [J]. Journal on Communications, 2010, 31(7): 68-75.
[13]	Bang-ju WANG,Huan-guo ZHANG,Yu-hua WANG. Secure password-based authentication scheme with anonymous identity without smart cards [J]. Journal on Communications, 2008, 29(10): 70-75.
[14]	Hong ZHANG. Research on smart authentication authorization and accounting in next generation network [J]. Journal on Communications, 2006, 27(2): 95-99.