Center-Less Single Sign-On With Privacy-Preserving Remote Biometric-Based ID-MAKA Scheme for Mobile Cloud Computing Services

As the rapid development of Internet technology, more and more ID-based mutual authentication and key agreement (ID-MAKA) protocols for mobile multi-server environment have been proposed. However, almost all ID-MAKA schemes for multi-server architecture are based on a trusted registration center (RC). In the real world, RC may record and leak the user or server registration information. Through careful analysis, we found that a large number of related protocols are insecure under RC disclosure registration information (RCDRI) attack. At the same time, these protocols are likely to be attacked by ephemeral secret leakage (ESL) in view of the computing power of mobile clients. To solve the above problems, we propose a new ID-MAKA protocol for mobile multi-server that uses self-certified public key (SCPK) cryptography to achieve resistance to RCDRI attack and ESL attack. Because our scheme is based on an untrusted RC, the adversary has the ability to obtain the registration information from RC. In view of the above feature, we demonstrate the security of our scheme in a more robust security model, where the adversary has more ability. Finally, compared with previously proposed schemes, we show that our protocol has a high efficiency. Taking into account the security and efficiency, our protocol is more suitable for mobile clients.

Cloud computing and big data: Technologies and applications

Providing mobile cloud services requires seamless integration between various platforms to offer mobile users optimum performance. To achieve this, many fundamental problems such as bandwidth availability and reliability, resource scarceness, and finite energy must be addressed before rolling out such services. This chapter aims to explore technological challenges for mobile cloud computing in the area of resource management focusing on both parts of the infrastructure: mobile devices and cloud networks. Starting with introducing mobile cloud computing, it then stresses the importance of resource management in the operation of mobile cloud services presenting various types of resources available for cloud computing. Furthermore, it examines the various types of resource management techniques available for mobile clouds. Finally, future directions in the field of resource management for mobile cloud computing environment are presented.

Cloud computing is an emerging technology in modern society. In recent years mobile users and cloud service providers are increased rapidly. In the cloud or any other distributed environment, if the users increased then security risks also increase parallelly. Many security problems are still unclear even after the advanced security measures have been taken. Security of stored data in the server is one of the most challenging issues in the cloud-based environment. Only authorized users should access the stored data of the server. Authentication plays a significant role in providing authorization. Therefore, in cloud computing, authentication is the primary measure to protect the data and the server from an unauthorized user. In this paper, an efficient authentication scheme using the smart card in the cloud environment is proposed. In the proposed scheme, with the help of a single private key, the user can access many cloud services. Also, the proposed scheme resists all security attacks. Through the simulation using the AVISPA tool, it is proved that the proposed scheme is robust and suitable for practical implementation.

A paradigm that combines cloud computing and the Internet of Things (IoT) allows for more impressive services to be provided to users while addressing storage and computational resource issues in the IoT environments. This cloud-based IoT environment has been used in various industries, including public services, for quite some time, and has been researched in academia. However, various security issues can arise during the communication between IoT devices and cloud servers, because communication between devices occurs in open channels. Moreover, issues such as theft of a user's IoT device or extraction of key parameters from the user's device in a remote location can arise. Researchers interested in these issues have proposed lightweight mutual authentication key agreement protocols that are safe and suitable for IoT environments. Recently, a lightweight authentication scheme between IoT devices and cloud servers has been presented. However, we found out their scheme had various security vulnerabilities, vulnerable to insider, impersonation, verification table leakage, and privileged insider attacks, and did not provide users with untraceability. To address these flaws, we propose a provably secure lightweight authentication scheme. The proposed scheme uses the user's biometric information and the cloud server's secret key to prevent the exposure of key parameters. Additionally, it ensures low computational costs for providing users with real-time and fast services using only exclusive OR operations and hash functions in the IoT environments. To analyze the safety of the proposed scheme, we use informal security analysis, Burrows-Abadi-Needham (BAN) logic and a Real-or-Random (RoR) model. The analysis results confirm that our scheme is secure against insider attacks, impersonation attacks, stolen verifier attacks, and so on; furthermore, it provides additional security elements. Simultaneously, it has been verified to possess enhanced communication costs, and total bit size has been shortened to 3776 bits, which is improved by almost 6% compared to Wu et al.'s scheme. Therefore, we demonstrate that the proposed scheme is suitable for cloud-based IoT environments.

Compromise-resilient anonymous mutual authentication scheme for n by m-times ubiquitous mobile cloud computing services

Mobile cloud computing is high technology that extends existing IT capabilities and requirements. And it can also access to shareable remote computing resources pool through the network. As the concept of mobile cloud, many providers have served the mobile cloud services using their own service policies. In other words, there is no formal definition of quality criteria for mobile cloud service evaluation. To solve this problem, some quality models are proposed for cloud service evaluation. However, those did not include many metrics to evaluate the services. Even if the model included a number of criteria, it is difficult to identify whether the metrics are proper or not. Furthermore, most existing models were not concerned about mobile characteristics. Therefore, we propose a cloud service integration model to solve the problem as we mentioned above. First, we select additional metrics to satisfy the mobile characteristics. Second, we present an extended SLA model for modeling complex service-dependencies in mobile cloud services. Third, we describe a method of discovering relations between the metrics of service belonging to mobile cloud services and then using these relations for establishing newly generated SLA.

In the current technological era, the use of computers becomes an essential part of our life. The Internet has been become as mandatory in the human-being life. The cloud computing has the potential to transform the current static Internet into a fully integrated future Internet. It is a style of computing in which resources are provided “as a service” to users who need not have knowledge or expertise and or control over the infrastructure. The cloud computing technology has become a popular and necessary in the present decade. The cloud computing is the way of sharing resources for the use of various resources via the internet. Hence there are many cloud service providers are competing with each other in order to provide cloud services to the cloud users. In fact, the growth of cloud users has been increased tremendously from last decade to the present decade. In directives to provide right cloud service to users is aimed at almost all cloud service providers. The cloud service providers are also increasing many features of their cloud service products to attract the cloud service users. But cloud service users are facing difficulties to select the right service from a pool of cloud services. Hence it has become necessary for cloud service users to evaluate cloud services and select the best one, for this purpose a new evaluation model has been proposed in this paper based on data mining Fuzzy clustering algorithm.

The widespread use of smartphones and other mobile devices has brought significant changes to the storage requirements of cloud systems, necessitating a reevaluation of security protocols. Mobile Cloud Computing (MCC) is a computing paradigm that combines the capabilities of mobile devices with the flexibility and scalability of cloud computing. MCC allows mobile users to access computational power, storage, and applications over the internet, facilitating resource-intensive tasks such as data analysis, gaming, and multimedia streaming on resource-constrained mobile devices. The integration of mobile and cloud technologies has revolutionized industries such as healthcare, education, and entertainment, offering benefits like enhanced mobility, improved resource utilization, and cost efficiency. Despite its advantages, MCC faces significant security challenges that could undermine user trust and disrupt its adoption. Since mobile devices and cloud servers are connected via insecure networks, malicious actors can exploit vulnerabilities in the system. This paper aims to analyze the primary security issues in MCC technology, focusing on data protection, authentication, access control, and other critical concerns. Unlike other issues, when dealing with business objectives, protection and privacy in financial activities are of paramount importance. This article examines mobile cloud computing, its technological model, and its role in detail. Keywords: Mobile cloud computing, Technology, Privacy issues, Security.

Mobile cloud computing (MCC) is a technique or model, in which mobile applications are built, powered and hosted using cloud computing technology. It refers to the availability of Cloud Computing services in a mobile environment and it is the combination of the heterogeneous fields like mobile phone device, cloud computing and wireless networks. Of all that has been written about cloud computing, precious little attention has been paid to authentication in the cloud. In this paper we have designed a new effective security model for mobile cloud Database as a Service (DBaaS). A user can change his/her password, whenever demanded. Furthermore, security analysis realizes the feasibility of the proposed model for DBaaS and achieves efficiency. We also proposed an efficient authentication scheme to solve the authentication problem in MCC. The proposed solution which we have provided is based mainly on improved Needham-Schroeder’s protocol to prove the users’ identity to determine if this user is authorized or not. The results showed that this scheme is very strong and difficult to break it.

Cloud computing is currently the most hyped and popular paradigm in the domain of distributed computing. Multiple vendors are providing infrastructure, platform, and software-related cloud products or solutions, and the number of such vendors is growing rapidly. But the reality is that there is very little in the form of standards in general and interoperability standards in particular. This leads to a challenging situation for cloud service consumers as they need to use solutions provided by multiple cloud vendors in order to fulfill their business requirements, and the lack of standardization leads to lack of interoperability among the solutions provided by varied vendors. Service brokers act as intermediaries between the cloud service providers and consumers. The role of service brokers becomes critical in situations that need integration among multiple systems as they bridge the interoperability gaps among multiple cloud solutions and thus compensate for the lack of standards. They do so by acting as agents adding value on behalf of the service consumers. The usage of such cloud brokers also helps to future-proof the solution as service brokers add a layer of indirection, thus enabling loose coupling among the cloud service consumers and providers. The aim of this chapter is to review the role of cloud service brokers in cloud computing. The review includes consolidation of the definitions and characteristics of cloud service brokers, review of the current brokerage solutions, and interfacing requirements. Also presented are a high-level cloud service broker functional architecture, criteria for selection of a cloud service broker, future trends and review of benefits, and challenges of using cloud service brokers.

Background: The integration of mobile computing and cloud computing has the potential to revolutionize healthcare delivery by providing ubiquitous access to resources and enabling new service development and delivery models. While cloud computing has been extensively studied in fields such as genomics and molecular medicine, its application in healthcare beyond these domains remains relatively unexplored. This scoping review aims to identify the current state and emerging research topics in cloud computing in healthcare outside of the traditional “OMICS context.” Methods: A comprehensive search was conducted in MEDLINE in July 2013 and December 2014 using keywords related to cloud computing and cloud-based services. The identified journal and conference articles were independently categorized and summarized by two researchers, who subsequently consolidated their findings. Results: A total of 102 publications were analyzed, revealing six main topics in cloud computing in healthcare: telemedicine/teleconsultation, medical imaging, public health and patient self-management, hospital management and information systems, therapy, and secondary use of data. Common features utilized in these applications included broad network access for data sharing and access, as well as rapid elasticity to meet computing demands. While some articles highlighted the cost-effectiveness of pay-per-use cloud services, only 14 articles reported successful implementations, with many publications focusing on conceptual or prototypic projects. Additionally, several articles equated cloud computing with internet-/web-based data sharing, failing to illustrate the unique benefits of the cloud computing paradigm. Conclusions: Although the integration of mobile computing and cloud computing in healthcare is gaining attention, successful implementations in the field are still limited. Many papers use the term “cloud” interchangeably with “virtual machines” or “web-based” without clearly demonstrating the advantages of the cloud paradigm. Data safety and security concerns associated with involving external cloud partners remain significant barriers to adoption in the healthcare domain. As of now, cloud computing is primarily favored for its individual features, such as elasticity, pay-per-use models, and broad network access, rather than as a comprehensive cloud computing paradigm.

Cloud computing has emerged as a new computing paradigm, with provisioning model generally consisting of cloud service providers (CSPs), network service providers (NSPs), and end users. The associated economics has opened up a new research area; and with the expansion of the cloud computing market, the relationship between CSPs and NSPs, is changing profoundly. In addition to providing the default network services, traditional NSPs, in attempt to compete with CSPs, have started offering cloud services to end users. Though much progress has been made toward addressing competitions among CSPs themselves or among NSPs themselves, few studies have focused on the competition between CSPs and NSPs. In this paper, we investigate the problem of insufficient studies on the competition between CSPs and NSPs by presenting a new economic model to characterize the competition between CSPs and NSPs, and by conducting thorough theoretical analysis as well as numeric experiments to validate the proposed model. We believe, based on results, that the proposed economic model is general and feasible, and thus is applicable to modeling the competition among service providers in cloud computing market.

Mobile cloud computing (MCC) is the availability of cloud computing services in a mobile environment. By providing optimal services for mobile users, MCC incorporates the elements of mobile networks and cloud computing. In mobile cloud computing, all the data and complicated computing modules can be processed in clouds, and mobile devices do not need a powerful configuration like CPU speed, memory capacity, etc. However, the mobile devices are facing up with many struggles in their resources (e.g., battery life, storage, and bandwidth) and communications (e.g., privacy, mobility, and security). These challenges have a significant effect on the improvement of service qualities. In this paper, a literature survey on the MCC and security issues in MCC has presented.

Recent trends in Cloud Computing have further stimulated the popularization of mobile device industry, creating a novel computing paradigm called Mobile Cloud Computing (MCC). MCC takes advantage of the powerful computation and storage capability of cloud servers by offloading heavy computing or storing tasks from mobile devices to cloud servers to keep a thin frontend on the mobile devices. Such benefit is important to MCC leveraging various sensors equipped in modern mobile devices. We explore the sensing capability of MCC and design an application framework that enables a class of exciting mobile applications to be developed in the sensing-oriented MCC environment. A critical issue in such an environment is accountability. We provide a comprehensive analysis of the accountability issues in this new computing context and show how the accountability function is integrated into the application framework.