An Improved Authentication Scheme for Remote Data Access and Sharing Over Cloud Storage in Cyber-Physical-Social-Systems

Abstract

Cyber-physical-social systems (CPSSs) epitomize an evolving paradigm, including the social, physical, and cyber world. The vital goal of CPSSs is to offer personalized, high-quality, and proactive services for the end-users. An ingenious framework for reliable services is required for CPSSs to achieve this purpose. In this regard, the cloud storage environment of cloud computing (having a great connection with the physical, cyber, and social world) requires a reliable framework for secure communication between cloud and users. Cloud storage provides various services that need scalable, cost-effective, and secure facilities of data management. Public cloud storage bound its users to maintain strict security considerations that are offered by cloud service providers. On the other hand, an opportunity for users is offered by private cloud storage to construct a controlled and self-managed model of data security. This mobile model is responsible for managing the sharing and accessing of data privately. Despite that, it induces new challenges of data security. One censorious problem is to ensure the authenticated and secure model of data-storage for accessing the data under the controlled environment of data accessibility. To tackle this challenge, many protocols have been developed. The problem is that all these protocols are unable to fulfill the required security efficiency and are susceptible to various security attacks. Recently, Tiwari et al. presented an authentication scheme for data sharing and access with a biometric feature. They claimed that their scheme resists significant security attacks. However, in this article, we show that the claim of Tiwari et al. for developing a secure scheme is not valid, and their protocol is insecure against user and server impersonation attacks. Moreover, the protocol of Tiwari et al. do not provide user anonymity. Therefore, we present an enhanced, secure, and convenient scheme for data access. Besides, in order to add the flexible distribution of data that is controlled by data-owner, our protocol provides proxy re-encryption in which the cloud server utilizes the proxy re-encryption key. Then, the data-owner generates the credential token during decryption for controlling user's accessibility. The security analysis determines that our proposed protocol resists numerous security attacks. Furthermore, performance analysis determines that our protocol has practical computation, communication, and storage costs as compared to various related protocols. Consequently, our introduced protocol achieves not only the security goals but also has performance efficiency comparable to numerous relevant protocols of cloud storage. INDEX TERMS Authentication, cloud storage, data sharing, data owner, impersonation attack. The associate editor coordinating the review of this manuscript and approving it for publication was Francesco Piccialli.

Elliptic Curve Signcryption-Based Mutual Authentication Protocol for Smart Cards

“…It can be inferred that the smart card security schemes mentioned in Yeh et al [11], Wang et al [22], Truong et al [29], Ghaffar et al [47], and Ostad-Sharif et al [49] either fail to satisfy one or more security attributes listed in Table 5 or fail to resist one or more security attacks mentioned in Table 6. Only the schemes of Zhao et al [7], Chaudhary et al [27], Mo et al [55], and Xie et al [61], and the proposed ECSSP-SC, successfully satisfy each security attribute listed in Table 5 and can counter every attack enumerated in Table 6.…”

“…The smart card security schemes mentioned in the literature survey are based either on modular exponentiation or elliptic curves. The schemes of Yeh et al [11] and Wang et al [22] listed in Table 4, Table 5, and Table 6, are based on modular exponentiation, while the other schemes mentioned in [7,27,29,47,49,55,61] are based on elliptic curves, although they do not use signcryption. As mentioned in Table 3, the proposed ECSSP-SC has utilized the signcryption based on an elliptic curve to reduce the computational time and to decrease the communication overhead.…”

“…However, the scheme of Wang et al [46] is based on chaotic maps. Gzaffar et al [47] presented an authentication scheme for remote data access over cloud-based systems, which provides proxy re-encryption, where the proxy re-encryption key is used by the cloud. This scheme successfully satisfies many security features and can counter attacks on confidentiality, access control, user anonymity, password guessing, device stolen, and non-repudiation.…”

CPS Attacks Mitigation Approaches on Power Electronic Systems With Security Challenges for Smart Grid Applications: A Review

“…Other vulnerabilities in the power electrons applications are the usage of the smart meters, which have two-way communications that donate to various security concerns about the attacker's capabilities to avail the interaction. As the smart meter has a backdoor, it can make the attacker abuse to have full control over the device [130].…”

Keyword Semantic Extended Top-k Ciphertext Retrieval Scheme Over Hybrid Government Cloud Environment

“…Since it was proposed, it has attracted extensive attention of many scholars. For example, aiming at the problem of trajectory data access and sharing over cloud environment, literature [9] proposed an improved authentication system scheme (CPSSs) that comprehensively considers cyber, physical, and social systems. Literature [10]- [14] successfully proposed a multi keyword ciphertext retrieval scheme suitable for cloud environment.…”