A Robust and Privacy-Preserving Anonymous User Authentication Scheme for Public Cloud Server

Abstract

Everyone desires to avail online services provided by different service providers securely, efficiently, and effectively. In this regard, security is still a significant concern for them. However, no one guarantees secure communication by browsing different applications remotely. To ensure confidentiality, authorization, availability, nonrepudiation, and removing eavesdropping, without a robust authentication scheme, nothing will go right. Therefore, we attempted to design a robust and privacy-preserving authentication scheme for end-users to securely access public cloud servers’ services remotely without losing performance. Our proposed scheme security has been evaluated formally using the random oracle model (ROM) and ProVerif2.03 and informally using proposition and discussion. At the same time, the performance metric has been analyzed by considering the scheme’s computation and communication costs. Upon comparing the proposed scenario with state-of-the-artwork, it has been demonstrated that the scheme is much better in terms of security and performance, as these are contradicting metrics, and the change in one conversely affects the other.

A Provable Secure Cross-Verification Scheme for IoT Using Public Cloud Computing

“…For example, the scheme [39] is vulnerable to replay attacks, while the schemes [40,41] have traceability issues. Finally, the author [42] proposed an anonymous authentication scheme for mobile devices in a public cloud server. Te scheme [42] achieved all the security vulnerabilities of the scheme [43], and the communication and computation costs are also less.…”

“…Finally, the author [42] proposed an anonymous authentication scheme for mobile devices in a public cloud server. Te scheme [42] achieved all the security vulnerabilities of the scheme [43], and the communication and computation costs are also less. In the end, we identify some faws in the scheme [2], and these faws are discussed in detail under:…”

Lattice-Based Authentication Scheme to Prevent Quantum Attack in Public Cloud Environment

“…However, some of these cryptographic techniques are not secure against quantum attacks. The authors of [1] proposed an authentication scheme for a public cloud server environment that achieved all known security goals but was not much feasible for the quantum computing era. Some existing proposed schemes are not efficient against quantum attacks and are vulnerable to known security attacks, for example, the schemes [2][3][4][5][6][7][8][9][10][11][12][13] suffer from offline password attacks, while the schemes [5,6,10,[13][14][15][16][17][18][19][20][21] cannot provide anonymity.…”

Attribute Based Pseudonyms: Anonymous and Linkable Scoped Credentials

“…In public cloud servers, Naveed et al [31] charted a protocol that provides user anonymity, untraceability, perfect forward secrecy, and resistance to replay attacks. Again, non-traceability is the problem, as one-voter-one-vote cannot be assured.…”