Cloud security architecture based on user authentication and symmetric key cryptographic techniques

Internet of Medical Things (IoMT) enabled e-healthcare has the potential to greately improve conventional healthcare services significantly. However, security and privacy become major issues of IoMT because of the restricted processing abilities, storage, and energy constraints of the sensors. Therefore, it leads to infeasibility of developing traditional cryptographic solutions to the IoMT sensors. In order to ensure security on sensitive medical data, effective encryption and authentication techniques need to be designed to assure security of the patients and healthcare service providers. In this view, this study designs an effective metaheuristic optimization based encryption with user authentication (EMOE-UA) technique for IoMT environment. This work proposes an EMOE-UA technique aims to accomplish mutual authentication for addressing the security issues and reducing the computational complexity. Moreover, the EMOE-UA technique employs optimal multikey homomorphic encryption (OMKHE) technique to encrypt the IoMT data. Furthermore, the improved social spider optimization algorithm (ISSOA) was employed for the optimal multikey generation of the MKHE technique. The experimental result analysis of the EMOE-UA technique takes place using benchmark data and the results are examined under various aspects. The simulation results reported the considerably better performance of the EMOE-UA technique over the existing techniques.

Todays world is of cloud computing, cloud service provider (CSP) provides different resources and services to the user anytime anywhere over the internet. Due to this feature of cloud maintain security over cloud is complex. Cloud computing security issue are authentication of user, nonrepudiation, authority, confidentiality, privacy, availability, access control and checking the integrity of data. Here we have proposed the secure architecture for cloud which is going to map some cloud security issues that are authentication of user, confidentiality, privacy, access control and checking the integrity of data. For authentication of user system uses One Time Password (OTP), for data integrity check system uses modified SHA-2 hash function. This modified version of SHA-2 will provide better solution for PreImage attack and Collision attack and for encryption and decryption system uses standard Advanced Encryption Standards (AES) algorithm.

At present, everyone makes instantaneous digital transaction by using applications like PhonePe, Google pay etc. Password is necessary to prove the user authentication. At the same time, user authentication is also verified by validating one time password. A shoulder surfer may have the possibility to crack the password during entry time. In this paper, we present a novel, clear, recall-based graphical password scheme where the user is required to figure out the triangle for some exact permutations of the password on the active display. The token holder is likely to pick the correct password permutations in the expected order cyclically per every login endeavor. For example, the user must select the first permutation of the password and that permutation must form a triangle on the visual display. After the correct triangle is identified in the visual display, a one time password is sent to the user. The user is required to enter the one time password in the text box given in the visual display. If the one time password is correct then the login attempt is successful; otherwise, the login attempt is failed. Likewise, the user is instructed to identify triangles with other permutations of the password for the remaining login attempts.KeywordsPasswordAuthenticationSecurityShoulder surfingVisual displayOne time passwordTriangle

User authentication in the online environment is promoting a hugely challenging issue. This has contributed to the realization of a user authentication where the exams can be performed over the Internet at any time and from any place and by using any digital device. Consequently, further investigations are required to focus on improving user authentication methods to enhance online security mechanisms, especially in the field of e-exams. This research proposes a new user authentication technique based on the user interface (UI). The novel idea is created based on the design preferences of candidates who are taking the e-exams. Several design features are used to design a special user interface for e-exams, for example, the font attributes, back colour, number of questions per page, group categories for questions based on difficulties, and timer setting. The introduced technique can be used to support the user authentication process in the e-exams environment. Furthermore, the proposed technique provides the ability to login to the e-exam without the need to remember the login information, but to select what the student prefers according to his/her personal information. Based on the literature review, a primary evaluation claiming that the students have differences in their preferences and that each user has stable design preferences within different sessions is revealed. In regard to these facts, they become the resource and essence of this research. The security performance of the proposed method is evaluated. The results of the experiments show a false positive (FP) rate of 0.416% and a false negative (FN) rate of 0%.

In a mobile emerging world, user authentication, service provider authentication and security is very important in mobile commerce. User authentication is performed by using fingerprint based biometric methodology. Existing system used for Mobile purchasing/payment services in handheld devices does not analyze fingerprint matching and feature extraction techniques in an efficient way. Also the existing system is not secure and accurate for m-payments applications. We propose secure, efficient and accurate m-commerce architecture for m-commerce applications. This involves fusion of Minutiae Maps (MM) and Orientation Maps (OM) for fingerprint feature extraction. The fingerprint is sent to the biometric server in a secure way using Discrete Wavelet Transform (DWT) data hiding method. User fingerprint will be checked and compared using MM and OM methods to figure out the fingerprint threshold matching score. If the threshold is 80-99% PIN distribution process is initiated, otherwise user authentication is failed. The user PIN is converted into a unique sequence and divided into two parts. Along with the user PIN, user IP address, time stamp, user ID are encrypted using RC4 (stream cipher) algorithm. Also a hash function is appended to the cipher text using Secure Hash Algorithm (SHA4). One half is verified by the authentication server and the other half is verified by the external server. After verification both the servers sends only OK message to the bank. This study looks to provide a high secure and efficient solution for m-commerce applications.

Two-factor authentication (2FA) technologies are designed to increase the security and usability of authentication. Adoption of 2FA hardware devices that generate one- time passwords has proven to be effective as a risk mitigating strategy. Despite 2FA addressing user data security concerns, individuals appear either disinterested or unable to adopt 2FA tools. Many institutions are now mandating 2FA to better secure their network and user data. Some have more rigid requirements than others (e.g., offering only one 2FA method vs. offering multiple 2FA options). To better understand the impact of mandatory 2FA policies, we conducted a study of the usability, adoption, and acceptability of 2FA at three different universities. In our study, using the Yubico FIDO U2F security token, we found that mandating the use of 2FA without complementary risk communication is often inadequate. In our interviews, we found that mandatory 2FA did not necessarily increase security, instead leading to less secure user behavior, such as sharing 2FA tokens, storing credentials for a longer time in public devices, and other security avoidance behaviors.

<span lang="EN-US">Communication among end users can be based either on wired or wireless technology. Cryptography plays a vital role in ensuring data exchange is secure among end users. Data can be encrypted and decrypted using symmetric or asymmetric key cryptographic techniques to provide confidentiality. In wireless technology, images are exchanged through low-cost wireless peripheral devices, such as radio frequency identification device (RFID), nRF, and ZigBee, that can interface with field programmable gate array (FPGA) among the end users. One of the issues is that data exchange through wireless devices does not offer confidentiality, and subsequently, data can be lost. In this paper, we propose a design and implementation of AES-128 cipher algorithm on an FPGA board for image processing through the <a name="_Hlk107307233"></a>universal asynchronous receiver transmitter (UART) protocol. In this process, the advanced encryption standard (AES) algorithm is used to encrypt and decrypt the image, while the transmitter and receiver designs are implemented on two Xilinx BASYS-3 circuits connected with a ZigBee RF module. The encrypted image uses less memory, such as LUTs (141), and also consumes less chip power (0.0291 w), I/O (0.003), block RAM (0.001 w), data, and logic to provide much higher efficiency than wired communication technology. We also observe that images can be exchanged through the UART protocol with different baud rates in run time.</span>

Cloud computing is a newfound technology that is still unclear to many security problems and ensuring the security of stored data in cloud servers is one of the most challenging issues. This paper offers a real-time method for maintaining client-based security in cloud computing communications to ensure the establishment of a secure and trust-based access. The proposed model will contain an eligible algorithm to solve data protection and user authentication problems. In the suggested model, an encryption and key exchanging model has been described based on modified Diffie-Hellman and RSA small-e to share an encrypted key between the intended recipients for transparent and secure sharing. Moreover, this client-base system contains user authentication evaluation to validate user's legal identities and to acquire access control privileges for the resources according to the role information. The proposed algorithm has been tested and evaluated according to four main parameters: time, key size, correctness, and security. In addition, effects of implementing this client-based control system on safe, secure and reliable cloud computing accesses and communications have been investigated. The results suggested that the algorithm is able to carry out the objectives of this research to decrease cloud computing security concerns such as data protection, authentication, and securing data in transmission.

With the advance of wireless communications technology, mobile communications has become more convenient than ever. However, because of the openness of wireless communications, how to protect the privacy between communication parties is becoming a very important issue. In this paper, we focus on the security of the Global System for Mobile communication (GSM) networks. A secure communication architecture for the GSM network is proposed. In the proposed architecture, we use public-key cryptography for user authentication and a stream cipher for message encryption and decryption. This architecture significantly improves the security of today's GSM networks.

많은 웹 서비스에서 편리성을 이유로 패스워드 기반 인증 시스템을 주로 사용한다. 패스워드 기반 인증 시스템은 패스워드 추측공격, 사전식 대입공격, 키 로깅 공격 등 다양한 공격에 취약한 것으로 알려져 왔다. 뿐만 아니라 대부분 웹 기반 인증 시스템은 서버가 사용자를 인증하는 단방향 인증만을 제공하므로 사용자는 현재 접속하여 비밀 정보를 남기고자하는 서버가 적합한지 검증 할 수 없다. 따라서 DNS 스푸핑 공격이나 피싱, 파밍과 같은 공격에 대응하기가 어렵다. 이러한 웹 서비스의 보안 취약점을 개선하기 위해 OTP를 사용하거나 패스워드 길이를 증가시키고, 특수기호를 포함하는 패스워드를 생성하게 하는 방안들이 적용되고 있다. 그러나 OTP 장치의 구입비용 발생, 복잡한 패스워드로 인한 사용자의 편리성 저하 등 실용성의 문제가 있다. 무엇보다 단방향 인증 기반에서는 여전히 취약점이 존재한다. 이를 해결하기 위해 본 논문에서는 QR-Code를 활용한 다중채널, 다중요소 인증시스템을 제안한다. 제안하는 시스템은 상호 인증을 제공하여 피싱이나 파밍과 같은 공격에 대응할 수 있다. 또한 휴대용 스마트 기기를 OTP 생성기로 활용하여 사용자의 편리성을 보장하면서 기존 패스워드 공격들에 대응할 수 있다. Password based authentication systems are most widely used for user convenience in web services. However such authentication systems are known to be vulnerable to various attacks such as password guessing attack, dictionary attack and key logging attack. Besides, many of the web systems just provide user authentication in a one-way fashion such that web clients cannot verify the authenticity of the web server to which they set access and give passwords. Therefore, it is too difficult to protect against DNS spoofing, phishing and pharming attacks. To cope with the security threats, web system adopts several enhanced schemes utilizing one time password (OTP) or long and strong passwords including special characters. However there are still practical issues. Users are required to buy OTP devices and strong passwords are less convenient to use. Above all, one-way authentication schemes generate several vulnerabilities. To solve the problems, we propose a multi-channel, multi-factor authentication scheme by utilizing QR-Code. The proposed scheme supports both user and server authentications mutually, thereby protecting against attacks such as phishing and pharming attacks. Also, the proposed scheme makes use of a portable smart device as a OTP generator so that the system is convenient and secure against traditional password attacks.

OTP(One Time Password) is for user authentication of Internet banking and users should carry their security card or OTP generator to use OTP. If they lost their security card or OTP generator, there is at risk for OTP leak. This paper suggests a new User Authentication Framework using personal health information from diverse technology of u-Health. It will cover the problem of OTP loss and illegal reproduction A User Authentication Framework is worthy of use because it uses various combinations of user`s physical condition which is inconstant. This protocol is also safe from leaking information due to encryption of reliable institutes. Users don`t need to bring their OTP generator or card when they use bank, shopping mall, and game site where existing OTP is used.

The security issues in the cloud have been well studied. The data security has much importance in point of data owner. There are number of approaches presented earlier towards performance in data security in cloud. To overcome the issues, a class based multi stage encryption algorithm is presented in this paper. The method classifies the data into number of classes and different encryption scheme is used for different classes in different levels. Similarly, the user has been authenticated for their access and they have been classified into different categories. According to the user profile, the method restricts the access of user and based on the same, the method defines security measures. A system defined encryption methodology is used for encrypting the data. Moreover, the user has been returned with other encryption methods which can be decrypted by the user using their own key provided by the system. The proposed algorithm improves the performance of security and improves the data security.

Integrity service application model with prevention of cryptanalytic attacks

Hardware and software co-verification from security perspective in SoC platforms

A new solution of cloud security is proposed in this paper. It is used the security architecture of cloud computing based on symmetric encryption algorithm, combination key technology and encryption chip hardware. Compared with other cloud security solution, there are some advantages. The security level is higher. The security function is stronger. It is ensured the data is security and integrity transmission. It is guaranteed the security of program running and data storage of client. The real name and rapid login of user is realized, at the same time, the construction and maintenance costs of cloud security system are reduced.Keywordsintegrity verificationlogin logcombination key algorithmsymmetric encryption algorithmgatekeeper