Strengthening Cloud Security: An Innovative Multi-Factor Multi-Layer Authentication Framework for Cloud User Authentication
Source abstract
Abstract
Cloud multi-factor authentication is a critical security measure that helps strengthen cloud security from unauthorized access and data breaches. Multi-factor authentication verifies that authentic cloud users are only authorized to access cloud apps, data, services, and resources, making it more secure for enterprises and less inconvenient for users. The number of authentication factors varies based on the security framework’s architecture and the required security level. Therefore, implementing a secured multi-factor authentication framework in a cloud platform is a challenging process. In this paper, we developed an adaptive multi-factor multi-layer authentication framework that embeds an access control and intrusion detection mechanisms with an automated selection of authentication methods. The core objective is to enhance a secured cloud platform with low false positive alarms that makes it more difficult for intruders to access the cloud system. To enhance the authentication mechanism and reduce false alarms, multiple authentication factors that include the length, validity, and value of the user factor is implemented with a user’s geolocation and user’s browser confirmation method that increase the identity verification of cloud users. An additional AES-based encryption component is applied to data, which are protected from being disclosed. The AES encryption mechanism is implemented to conceal the login information on the directory provider of the cloud. The proposed framework demonstrated excellent performance in identifying potentially malicious users and intruders, thereby effectively preventing any intentional attacks on the cloud services and data.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: User Authentication and Security Systems · Cloud Data Security Solutions · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Information Systems, College of Computer and Information Sciences, Jouf University, Sakaka 72388, Saudi Arabia
Department of Computer Science, College of Computer and Information Sciences, Jouf University, Sakaka 72388, Saudi Arabia
Computer Science Department, Faculty of Computers and Informatics, Zagazig University, Zagazig 44511, Egypt
Computer Science Department, College of Computer Science and Engineering, Taibah University, Medina 42353, Saudi Arabia
Funding
Deanship of Scientific Research at Jouf University
References (96)
Show source-provided references
1. A survey on security challenges in cloud computing: Issues, threats, and solutions10.1007/s11227-020-03213-1 ↗
2. Comparative analysis of threat modeling methods for cloud computing towards healthcare security practice
3. Patnaik, X.-S., Yang, I.K., and Sethi, S. (2021). A Survey on Cloud Computing Security Issues, Attacks and Countermeasures. Advances in Machine Learning and Computational Intelligence, Springer.10.1007/978-981-15-5243-4_47 ↗
4. A survey of cloud authentication attacks and solution approaches
5. Ghasemisharif, M., Kanich, C., and Polakis, J. (2022, January 20–26). Towards automated auditing for account and session management flaws in single sign-on deployments. Proceedings of the IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.10.1109/SP46214.2022.9833753 ↗
6. Secure and lightweight user authentication scheme for cloud-assisted internet of things10.1109/TIFS.2023.3272772 ↗
7. Quantum-safe round-optimal password authentication for mobile devices10.1109/TDSC.2020.3040776 ↗
8. Cloud computing authentication techniques: A survey
9. A survey on different authentication schemes in cloud computing environment
10. SearchAuth: Neural architecture search based continuous authentication using auto augmentation search10.1145/3599727 ↗
11. Ometov, A., Bezzateev, S., Mäkitalo, N., Andreev, S., Mikkonen, T., and Koucheryavy, Y. (2018). Multi-factor authentication: A survey. Cryptography, 2.10.3390/cryptography2010001 ↗
12. ALSaleem, B.O., and Alshoshan, A.I. (2021, January 27–28). Multi-factor authentication to systems login. Proceedings of the National Computing Colleges Conference (NCCC), Taif, Saudi Arabia.10.1109/NCCC49330.2021.9428806 ↗
13. AlQahtani, A.A.S., El-Awadi, Z., and Min, M. (2021, January 27–30). A survey on user authentication factors. Proceedings of the IEEE 12th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, BC, Canada.10.1109/IEMCON53756.2021.9623159 ↗
14. Dasgupta, D., Roy, A., and Nag, A. (2017). Multi-Factor Authentication. Advances in User Authentication, Springer International Publishing. Infosys Science Foundation.10.1007/978-3-319-58808-7 ↗
15. Sita Rani, P.B., Aman, K., Khang, A., and Kumar Sivaraman, A. (2023). Relevance of Multifactor Authentication for Secure Cloud Access. Big Data, Cloud Computing and IoT: Tools and Applications, Chapman and Hall/CRC. [1st ed.]. Chapter 10.
16. Andrés, S. (2015). Zero factor authentication: A four-year study of simple password-less website security via one-time emailed tokens. J. Inf. Secur. Appl., 1–11.
17. User perceptions of security and usability of single-factor and two-factor authentication in automated telephone banking10.1016/j.cose.2010.12.001 ↗
18. Sauer, S., Bogdan, C., Forbrig, P., Bernhaupt, R., and Winckler, M. (2014). Usability of Single- and Multi-Factor Authentication Methods on Tabletops: A Vomparative Study. Human-Centered Software Engineering, Springer. Lecture Notes in Computer Science.10.1007/978-3-662-44811-3 ↗
19. A multi-factor authentication-based framework for identity management in cloud applications
20. A multi-factor approach for cloud security. Innovations in Computer Science and Engineering
21. Review on multi-factor authentication (mfa) sources and operation challenges
22. Boonkrong, S. (2021). Multi-Factor Authentication. Authentication and Access Control: Practical Cryptography Methods and Tools, Apress. Chapter 6.10.1007/978-1-4842-6570-3 ↗
23. Sarma, H.K.D., Balas, V.E., Bhuyan, B., and Dutta, N. (2022). A Survey on Trends of Two-Factor Authentication. Contemporary Issues in Communication, Cloud and Big Data Analytics, Springer. Lecture Notes in Networks and Systems.10.1007/978-981-16-4244-9 ↗
24. Wang, P., and Baskerville, R. (2019, January 8–12). The Case for Two-Factor Authentication- Evidence from a Systematic Literature Review. Proceedings of the Pacific Asia Conference on Information Systems (PACIS 2019) Proceedings, X’ian, China.
25. Archana, B.S., Chandrashekar, A., Bangi, A.G., Sanjana, B.M., and Akram, S. (2017, January 19–20). Survey on usable and secure two-factor authentication. Proceedings of the IEEE International Conference on Recent Trends in Electronics, Information & Communication Technology (RTEICT), Bangalore, India.10.1109/RTEICT.2017.8256716 ↗
26. Secure three-factor anonymous user authentication scheme for cloud computing environment10.1155/2021/2098530 ↗
27. Singh, J., Kumar, S., and Choudhury, U. (2021). Four-Factor Authentication with Emerging Cybersecurity for Mobile Transactions. Innovations in Cyber Physical Systems, Springer. Lecture Notes in Electrical Engineering.10.1007/978-981-16-4149-7 ↗
28. Brainard, J., Juels, A., Rivest, R.L., Szydlo, M., and Yung, M. (November, January 30). Fourth-factor authentication: Somebody you know. Proceedings of the 13th ACM conference on Computer and communications security, Alexandria, VA, USA.
29. Necessity of fourth factor authentication with multiple variations as enhanced user authentication technique
30. Edwards, J., Aparicio-Navarro, F.J., Maglaras, L., and Douligeris, C. (2022, January 27–29). FFDA: A novel four-factor distributed authentication mechanism. Proceedings of the IEEE International Conference on Cyber Security and Resilience (CSR), Rhodes, Greece.10.1109/CSR54599.2022.9850279 ↗
31. A fuzzy implementation of biometrics with five factor authentication system for secured banking10.47893/IJSSAN.2012.1070 ↗
32. Multifactor authentication as a protection mechanism in computer networks10.1007/BF02733418 ↗
33. Ahmad, M.O. (2023). A Blockchain-based multi-factor authentication mechanism for securing smart cities. Sensors, 23.10.3390/s23052757 ↗
34. Sethuraman, S.C., Mitra, A., Ghosh, A., Galada, G., and Subramanian, A. (2023). MetaSecure: A passwordless authentication for the metaverse. arXiv.
35. Albuquerque, S.L., Miosso, C.J., da Rocha, A.F., and Gondim, P.R. (2023). Mobile Computing Solutions for Healthcare Systems, Bentham Science. Chapter 5.
36. Zaenchkovski, A., Lazarev, A., and Masyutin, S. (2023). Advances in Automation IV, Springer International Publishing.
37. Analysis and Intellectual structure of the multi-factor authentication in information security10.32604/iasc.2022.021786 ↗
38. A 3-level multifactor authentication scheme for cloud computing
39. Access control framework using multi-factor authentication in cloud computing10.4018/IJGC.2018070101 ↗
40. A customizable client authentication framework (ccaf) based on multi-factor for cloud computing application
41. Banyal, R.K., Jain, P., and Jain, V.K. (2013, January 24–25). Multi-factor authentication framework for cloud computing. Proceedings of the Fifth International Conference on Computational Intelligence, Modelling and Simulation (CSSIM), Seoul, Korea.10.1109/CIMSim.2013.25 ↗
42. A survey on private cloud storage security using multifactor authentication
43. Nikam, R., and Potey, M. (2016, January 23–25). Cloud storage security using multi-factor authentication. Proceedings of the 2016 International Conference on Recent Advances and Innovations in Engineering (ICRAIE), Jaipur, India.10.1109/ICRAIE.2016.7939528 ↗
44. Trusted hybrid multifactor authentication for cloud users
45. Multifactor authentication in iot devices for ensuring secure cloud storage in smart banking
46. Hussain, M.I., He, J., Zhu, N., Sabah, F., Zardari, Z.A., Hussain, S., and Razque, F. (2021). AAAA: SSO and MFA implementation in multi-cloud to mitigate rising threats and concerns related to user metadata. Appl. Sci., 11.10.3390/app11073012 ↗
47. Cloud computing integrated multi-factor authentication framework application in logistics information systems
48. OTPaaS—One time password as a service10.1109/TIFS.2018.2866025 ↗
49. A reliable agent system for cloud service discovery using mfa technique10.35940/ijrte.D1110.1284S219 ↗
50. Securing personal health records using advanced multi-factor authentication in cloud computing10.35940/ijrte.F9724.038620 ↗
51. A secure multi-factor authentication protocol for healthcare services using cloud-based sdn
52. Multi-factor authentication for secured financial transactions in cloud environment
53. Gordin, I., Graur, A., and Potorac, A. (2019, January 9–11). Two-factor authentication framework for private cloud. Proceedings of the 23rd International Conference on System Theory, Control and Computing (ICSTCC), Sinaia, Romania.10.1109/ICSTCC.2019.8885460 ↗
54. Kambou, S., and Bouabdallah, A. (2019, January 21–23). A strong authentication method for web/mobile services. Proceedings of the 2019 6th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)/2019 5th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom), Paris, France.10.1109/CSCloud/EdgeCom.2019.000-8 ↗
55. Taher, K.A., Nahar, T., and Hossain, S.A. (2019, January 10–12). Enhanced Cryptocurrency Security by Time-Based Token Multi-Factor Authentication Algorithm. Proceedings of the 2019 International Conference on Robotics, Electrical and Signal Processing Techniques (ICREST), Dhaka, Bangladesh.10.1109/ICREST.2019.8644084 ↗
56. Kennedy, W., and Olmsted, A. (2017, January 11–14). Three factor authentication. Proceedings of the 2017 12th International Conference for Internet Technology and Secured Transactions (ICITST), Cambridge, UK.10.23919/ICITST.2017.8356384 ↗
57. Hassan, M.A., and Shukur, Z. (2021, January 29–31). A secure multi factor user authentication framework for electronic payment system. Proceedings of the 3rd International Cyber Resilience Conference (CRC), Langkawi Island, Malaysia.10.1109/CRC50527.2021.9392564 ↗
58. Smys, S., Balas, V.E., Kamel, K.A., and Lafata, P. (2021). Enhancing multi-factor user authentication for electronic payments. Inventive Computation and Information Technologie, Springer. Lecture Notes in Networks and Systems.10.1007/978-981-33-4305-4 ↗
59. Multifactor authentication technique for a secure electronic voting system
60. Oke, B.A., Olaniyi, O.M., Aboaba, A.A., and Arulogun, O.T. (2017, January 29–31). Developing multifactor authentication technique for secure electronic voting system. Proceedings of the 2017 International Conference on Computing Networking and Informatics (ICCNI), Lagos, Nigeria.10.1109/ICCNI.2017.8123773 ↗
61. Misra, S., and Kumar Tyagi, A. (2022). A Secure Electronic Voting System Using Multifactor Authentication and Blockchain Technologies. Blockchain Applications in the Smart Era, Springer International Publishing.10.1007/978-3-030-89546-4 ↗
62. Design of secure electronic voting system using multifactor authentication and cryptographic hash functions
63. A proposed mobile voting framework utilizing blockchain technology and multi-factor authentication10.1088/1742-6596/1378/3/032104 ↗
64. Designing of user authentication based on multi-factor authentication on wireless networks
65. Kinai, A., Otieno, F., Bore, N., and Weldemariam, K. (2020, January 2–6). Multi-factor authentication for users of non-internet based applications of blockchain-based platforms. Proceedings of the IEEE International Conference on Blockchain (Blockchain), Rhodes, Greece.10.1109/Blockchain50366.2020.00076 ↗
66. A study on user access control method using multi-factor authentication for EDMS
67. Multifactor user authentication mechanism using internet of things
68. Rao, M.K., Santhi, S.G., and Hussain, M.A. Multi factor user authentication mechanism using internet of things. Proceedings of the Third International Conference on Advanced Informatics for Computing Research, Shimla, India.
69. FSMFA: Efficient firmware-secure multi-factor authentication protocol for IoT devices10.1016/j.iot.2023.100685 ↗
70. Liu, J., Zou, X., Han, J., Lin, F., and Ren, K. (2020, January 15–17). BioDraw: Reliable multi-factor user authentication with one single finger swipe. Proceedings of the IEEE/ACM 28th International Symposium on Quality of Service (IWQoS), Hang Zhou, China.10.1109/IWQoS49365.2020.9212855 ↗
71. Lu, D., Huang, D., Deng, Y., and Alshamrani, A. (2018, January 20–23). Multifactor user authentication with in-air-handwriting and hand geometry. Proceedings of the International Conference on Biometrics (ICB).10.1109/ICB2018.2018.00046 ↗
72. Design and implementation of cost effective multi-factor authentication framework for ATM systems10.9734/ajrcos/2020/v5i330135 ↗
73. Rückemann, C.-P., and Münster, W.-U. (2019, January 22–26). Multi-factor authentication for public displays using the semantic ambient media framework. Proceedings of the ADVCOMP 2019: The Thirteenth International Conference on Advanced Engineering Computing and Applications in Sciences, Porto, Portugal.
74. Şahan, S., Ekici, A.F., and Bahtiyar, Ş. (2019, January 16–17). A multi-factor authentication framework for secure access to blockchain. Proceedings of the 2019 5th International Conference on Computer and Technology Applications (ICCTA 2019), Istanbul, Turkey.10.1145/3323933.3324083 ↗
75. Multi-factor authentication to authorizing access to an application: A conceptual framework
76. Al-Shqeerat, K.H.A. (2023). Explore Business, Technology Opportunities and Challenges After the COVID-19 Pandemic, Springer International Publishing.
77. A secure communication using multifactor authentication and key agreement techniques in internet of medical things for COVID-19 patients10.1002/cpe.7602 ↗
78. Misra, S., and Adewumi, A. (2020). Secure Human-Computer Interaction: A Multi-Factor Authentication CAPTCHA Scheme. Handbook of Research on the Role of Human Factors in IT Project Management, IGI Global.10.4018/978-1-7998-1279-1 ↗
79. Lala, O.G., Aworinde, H.O., and Ekpe, S.I. Towards A secured financial transaction: A multi-factor authentication model. Proceedings of the 25th iSTEAMS Trans-Atlantic Multidisciplinary Virtual Conference, Laboratoire Jean Kuntzmann, Universite Laboratoire Jean Kuntzmann, Universite Grenoble, Alpes, France.
80. A verification system for multi-factor authentication for e-healthcare architectures
81. CMAF-IIoT: Chaotic map-based authentication framework for industrial internet of things10.1016/j.iot.2023.100902 ↗
82. Alasmary, H., and Tanveer, M. (2023). ESCI-AKA: Enabling secure communication in an iot-enabled smart home environment using authenticated key agreement framework. Mathematics, 11.10.3390/math11163450 ↗
83. Faceture ID: Face and hand gesture multi-factor authentication using deep learning10.1016/j.procs.2018.08.160 ↗
84. Carrillo-Torres, D., Pérez-Díaz, J.A., Cantoral-Ceballos, J.A., and Vargas-Rosales, C. (2023). A novel multi-factor authentication algorithm based on image recognition and user established relations. Appl. Sci., 13.10.3390/app13031374 ↗
85. Efficient multi-factor user authentication protocol with forward secrecy for real-time data access in WSNs10.1145/3064006 ↗
86. advanced authentication mechanisms for identity and access management in cloud computing10.32604/csse.2022.024854 ↗
87. Provably secure fine-grained data access control over multiple cloud servers in mobile cloud computing based healthcare applications10.1109/TII.2018.2824815 ↗
88. Unified biometric privacy preserving three-factor authentication and key agreement for cloud-assisted autonomous vehicles10.1109/TVT.2020.2971254 ↗
89. Practical and provably secure three-factor authentication protocol based on extended chaotic maps for mobile lightweight devices
90. Understanding failures in security proofs of multi-factor authentication for mobile devices10.1109/TIFS.2022.3227753 ↗
91. Quantum2FA: Efficient quantum-resistant two-factor authentication scheme for mobile devices10.1109/TDSC.2021.3129512 ↗
92. A Secure two-factor authentication framework in cloud computing10.1155/2022/7540891 ↗
93. Otta, S., Panda, S., Gupta, M., and Hota, C. (2023). A Systematic survey of multi-factor authentication for cloud infrastructure. Future Internet MDPI, 15.10.3390/fi15040146 ↗
94. Lee, J., Kim, M., Yu, S., Park, K., and Park, Y. (August, January 29). A secure multi-factor remote user authentication scheme for cloud-IOT applications. Proceedings of the International Conference on Computer Communication and Networks (ICCCN), Valencia, Spain.
95. Babu, R., Badirova, A., Moghaddam, F., Wieder, P., and Yahyapour, R. (2023, January 4–7). Authentication and access control in cloud-based systems. Proceedings of the Fourteenth International Conference on Ubiquitous and Future Networks (ICUFN), Paris, France.10.1109/ICUFN57995.2023.10199236 ↗
96. Gordin, I., Graur, A., and Vlad, S. (2021, January 4–6). Adomnitei, Moving forward passwordless authentication: Challenges and implementations for the private cloud. Proceedings of the 20th RoEduNet Conference: Networking in Education and Research (RoEduNet), Iasi, Romania.10.1109/RoEduNet54112.2021.9638271 ↗