journal article·2021-03-27Open access

AAAA: SSO and MFA Implementation in Multi-Cloud to Mitigate Rising Threats and Concerns Related to User Metadata

Muhammad Iftikhar Hussain, Jingsha He, Nafei Zhu, Fahad Sabah, Zulfiqar Ali Zardari, Saqib Hussain, Fahad Razque

Applied Sciences· Volume 11· Issue 7

Abstract

In the modern digital era, everyone is partially or fully integrated with cloud computing to access numerous cloud models, services, and applications. Multi-cloud is a blend of a well-known cloud model under a single umbrella to accomplish all the distinct nature and realm requirements under one service level agreement (SLA). In current era of cloud paradigm as the flood of services, applications, and data access rise over the Internet, the lack of confidentiality of the end user’s credentials is rising to an alarming level. Users typically need to authenticate multiple times to get authority and access the desired services or applications. In this research, we have proposed a completely secure scheme to mitigate multiple authentications usually required from a particular user. In the proposed model, a federated trust is created between two different domains: consumer and provider. All traffic coming towards the service provider is further divided into three phases based on the concerned user’s data risks. Single sign-on (SSO) and multifactor authentication (MFA) are deployed to get authentication, authorization, accountability, and availability (AAAA) to ensure the security and confidentiality of the end user’s credentials. The proposed solution exploits the finding that MFA achieves a better AAAA pattern as compared to SSO.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Cloud Data Security Solutions · Blockchain Technology Applications and Security · Cryptography and Data Security

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Faculty of Information Technology, Beijing University of Technology, Beijing 100124, China

Department of Information & Communication Technologies, Begum Nusrat Bhutto Women University, Sukkur 65170, Pakistan

References (46)

Show source-provided references
1. Big Data Meet Cyber-Physical Systems: A Panoramic Survey10.1109/ACCESS.2018.2878681 ↗
2. Akinrolabu, O., New, S., and Martin, A. (2019, January 21–23). Assessing the Security Risks of Multicloud SaaS Applications: A Real-World Case Study. Proceedings of the 2019 6th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)/2019 5th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom), Paris, France.10.1109/CSCloud/EdgeCom.2019.00-14 ↗
3. Cyber risk assessment in cloud provider environments: Current models and future needs10.1016/j.cose.2019.101600 ↗
4. On cloud security requirements, threats, vulnerabilities and countermeasures: A survey10.1016/j.cosrev.2019.05.002 ↗
5. Integration of blockchain and cloud of things: Architecture, applications and challenges10.1109/COMST.2020.3020092 ↗
6. A novel out-of-band biometrics authentication scheme for wearable devices
7. Vehniä, V.J. (2020). Implementing Azure Active Directory Integration with an Existing Cloud Service. [Master’s Thesis, University of VAASA].
8. Task scheduling techniques in cloud computing: A literature survey10.1016/j.future.2018.09.014 ↗
9. Bhagyoday, R., Kamani, C., Bhojani, D., and Parmar, V. (2019). Comprehensive Study of E-Health Security in Cloud Computing. Int. Res. J. Eng. Technol. (IRJET), 1216–1228.
10. FCMDT: A novel fuzzy cognitive maps dynamic trust model for cloud federated identity management10.1016/j.cose.2019.06.011 ↗
11. Encouraging users to improve password security and memorability10.1007/s10207-019-00429-y ↗
12. Pilar, D.R., Jaeger, A., Gomes, C.F.A., and Stein, L.M. (2012). Passwords Usage and Human Memory Limitations: A Survey across Age and Educational Background. PLoS ONE, 7.10.1371/journal.pone.0051067 ↗
13. Accountable Privacy-Preserving Mechanism for Cloud Computing Based on Identity-Based Encryption10.1109/ACCESS.2018.2851599 ↗
14. An efficient anonymous mutual authentication technique for providing secure communication in mobile cloud computing for smart city applications10.1016/j.scs.2019.101522 ↗
15. Cloud Computing Environment and Security Challenges: A Review
16. Improving secured ID-based authentication for cloud computing through novel hybrid fuzzy-based homomorphic proxy re-encryption10.1007/s00500-020-05119-9 ↗
17. Next generation cloud computing: New trends and research directions10.1016/j.future.2017.09.020 ↗
18. On the Design of Provably Secure Lightweight Remote User Authentication Scheme for Mobile Cloud Computing Services10.1109/ACCESS.2017.2764913 ↗
19. Zhang, Y., Xu, C., Li, H., Yang, K., Cheng, N., and Shen, X.S. (2020). PROTECT: Efficient Password-based Threshold Single-sign-on Authentication for Mobile Users against Perpetual Leakage. IEEE Trans. Mobile Comput.10.1109/TMC.2020.2975792 ↗
20. Provably secure authenticated key agreement scheme for distributed mobile cloud computing services10.1016/j.future.2016.09.009 ↗
21. Fog Computing Over IoT: A Secure Deployment and Formal Verification10.1109/ACCESS.2017.2766180 ↗
22. Ometov, A., Bezzateev, S., Mäkitalo, N., Andreev, S., Mikkonen, T., and Koucheryavy, Y. (2018). Multi-Factor Authentication: A Survey. Cryptography, 2.10.3390/cryptography2010001 ↗
23. A two way authentication using bilinear mapping function for wireless sensor networks10.1016/j.compeleceng.2016.12.009 ↗
24. A physiological and behavioral feature authentication scheme for medical cloud based on fuzzy-rough core vector machine10.1016/j.ins.2019.08.020 ↗
25. Lightweight IoT-based authentication scheme in cloud computing circumstance10.1016/j.future.2018.08.038 ↗
26. An improved Multi-server Authentication Scheme for Distributed Mobile Cloud Computing Services
27. An improved three-factor authentication scheme for patient monitoring using WSN in remote health-care system10.1016/j.cmpb.2019.105054 ↗
28. Access Control Framework Using Multi-Factor Authentication in Cloud Computing10.4018/IJGC.2018070101 ↗
29. Privacy preserving multi factor authentication using trust management10.1007/s10586-017-1181-0 ↗
30. A 3-Level Multifactor Authentication Scheme for Cloud Computing10.34218/IJCET.10.1.2019.020 ↗
31. Mohsin, J.K., Han, L., Hammoudeh, M., and Hegarty, R. (2017, January 20–22). Two Factor Vs Multi-factor, an Authentication Battle in Mobile Cloud Computing Environments. Proceedings of the International Conference on Big Data and Internet of Thing—BDIOT2017, London, UK.10.1145/3102304.3102343 ↗
32. A comprehensive survey for scheduling techniques in cloud computing10.1016/j.jnca.2019.06.006 ↗
33. PCA-CIA Ensemble-based Feature Extraction for Bio-Key Generation
34. Towards Post-Quantum Blockchain: A Review on Blockchain Cryptography Resistant to Quantum Computing Attacks10.1109/ACCESS.2020.2968985 ↗
35. Security in Quantum Computing
36. Multi-dimensional dynamic trust evaluation scheme for cloud environment10.1016/j.cose.2020.101722 ↗
37. Karie, N.M., Kebande, V.R., Ikuesan, R.A., Sookhak, M., and Venter, H.S. (2020, January 15). Hardening SAML by Integrating SSO and Multi-Factor Authentication (MFA) in the Cloud. Proceedings of the 3rd International Conference on Networking, Information Systems & Security, Marrakech, Morocco.10.1145/3386723.3387875 ↗
38. SH-BlockCC: A secure and efficient Internet of things smart home architecture based on cloud computing and blockchain technology10.1177/1550147719844159 ↗
39. Khine, P.P., and Wang, Z.S. (2017, January 15–17). Data lake: A new ideology in big data era. Proceedings of the 4th Annual International Conference on Wireless Communication and Sensor Network, Wuhan, China. EDP Sciences.10.1051/itmconf/20181703025 ↗
40. A privacy preserving multi factor authentication using trust management10.1002/spy2.88 ↗
41. A brief review on cloud security scenarios
42. El-Hajj, M., Fadlallah, A., Chamoun, M., and Serhrouchni, A. (2019). A survey of internet of things (IoT) authentication schemes. Sensors, 19.10.3390/s19051141 ↗
43. Devi, B.T., Shitharth, S., and Jabbar, M.A. (2020, January 5–7). An Appraisal over Intrusion Detection Systems in Cloud Computing Security Attacks. Proceedings of the 2020 2nd International Conference on Innovative Mechanisms for Industry Applications (ICIMIA), Bangalore, India.10.1109/ICIMIA48430.2020.9074924 ↗
44. Distributed Intrusion Detection System for Cloud Environments based on Data Mining techniques10.1016/j.procs.2018.01.095 ↗
45. User characteristics that influence judgment of social engineering attacks in social networks
46. Schechter, S., Tian, Y., and Herley, C. (2019, January 17–19). StopGuessing: Using Guessed Passwords to Thwart Online Guessing. Proceedings of the 2019 IEEE European Symposium on Security and Privacy (EuroS&P), Stockholm, Sweden.10.1109/EuroSP.2019.00048 ↗