ROBUST AND PRIVACY PROTECTION AUTHENTICATION IN CLOUD COMPUTING
Jheng-Jia Huang, Wen-Shenq Juang, Chun‐I Fan, Horng–Twu Liaw, 莊文勝 · 2013
In the cloud environments, the cloud user can use low computing devices to connect to the clouds. For checking the identities of the user and the cloud server, they must do mutual user authentication before using the cloud services. Also, the trans- mitted messages between them must be protected. These environments are different with traditional client-server environments since a cloud user may use many various devices to connect to the cloud server to do authentication. It will face the following problems. Therst problem is that some devices only have low computing and memory ability. The second problem is that the cloud user may have many various devices for storing secret sensitive information. If some devices are lost, it is hard to recover the sensitive information stored in these devices. In order to solve all the above problems, we propose a lightweight robust and privacy protection authentication scheme for cloud computing. Our proposed authentication scheme can prevent the insider attack even if the secret in- formation stored in a cloud database is compromised and the offline dictionary attack even if the secret information stored in a user's device is compromised. Also, the cloud user can freely choose his password to use our proposed authentication scheme.