Towards Efficient Authentication Scheme with Biometric Key Management in Cloud Environment

摘要

Recently, security issues are obstructing the development and using of cloud computing services. Authentication plays an important role in the cloud security, and numerous concerns have been raised to prevent an unauthorized users to access the entities' resources (sender and receiver) within thecloud environment. Existing solutions are based on one-time authentication scheme, in which a user's password is applicable only for one login session. However, none of the proposed schemes are sufficiently secure to prevent known forms of attack. In addition, these schemes often suffer from significant overhead in the key management. For this reason, we propose a robust one-time authentication scheme based on a non-interactive one-time biometric key to generate one-time login request message. The key used in our scheme has two strong building blocks, that is, it is biometrically based on the extraction of features from the entities' irises, and cryptographically based on the strong key-based message authentication code MAC-SHA-512 and Rivest Cipher 4. The proposed scheme exhibits several important security attributes, such as key agreement, biometric key management, a single authentication request for each user's login, mutual authentication, invulnerability, and efficiency.