Cloud computing authentication using biometric-Kerberos scheme based on strong Diffi-Hellman-DSA key exchange
Hamid Roomi Talkhaby, Reza Parsamehr · 2016
Cloud computing is an efficient technology to improve the performance of organizations by providing flexibility in architecture and reduction in costs. Dynamic resource pooling, virtualization, on demand service and high availability are some of the advantages provided by cloud computing. However, open and distributed architecture as well as internet access, have caused cloud environments to be risky and vulnerable. Privacy, confidentiality, and authentication are some of security concerns which need to be addressed. In this paper we propose a secure mechanism for authentication and session key distribution. For this purpose, we have chosen Kerberos 5 protocol that is one of the best known authentication and key distribution systems. But, this protocol is vulnerable to password guessing attack. Hence, we improve the Kerberos 5 with Strong Diffi-Hellman-DSA key exchange algorithm and the user's fingerprint samples. This approach provides a protocol which is highly secure. We solve the password guessing attack vulnerability using Strong Diffi-Hellman-DSA Key Exchange algorithm. Also, the use of biometric data provides a non-repudiation mechanism that can address the limitation of password-based authentication, such as the tendency of users to choose a simple password. In addition, we implement this scheme in cloud computing systems and use an enhanced approach for fingerprint template protection. Finally, in the last part we show how this scheme can protect cloud computing systems against different attacks.