改进的基于smartcard的云用户双向认证方案

Improved mutual authentication scheme based on smartcard for cloud computing

为解决云计算环境下非法用户访问云服务和用户访问非法云服务的问题,分析了一些其它文献的安全认证方案,提出了一种改进的基于smartcard的云用户双向认证方案。通过smartcard、带外传输以及时间戳等元素保证了双向认证过程中的安全性,相较其它文献的方案能抵抗更多的安全攻击,从而在登录环节保证了合法云用户安全地访问合法云服务。

A mutual authentication scheme based on smarteard for cloud computing is proposed to solve the problem, of which the illegal users access the resources of cloud server and the legal users access the illegal cloud server. The identity authentication with smartcard is provided, so the server has not to verify the identity of user. Then the mutual authentication guarantees the se- curity of the communication between the user and server including two main factors as one-time key and OOB （out-of-band） secu- rity channel. The proof and analysis indicate that the proposed scheme is resist to the main possible attacks.