文献类型：期刊文献

英文题名：Securing Cloud Emails Using Two Factor Authentication Based on Password/Apps in Cloud Computing

作者：Virgile, Kayigana[1];Yu, Huiqun

机构：[1]E China Univ Sci & Technol, Dept Comp Sci & Engn, Shanghai 200237, Peoples R China; Shanghai Key Lab Comp Software Evaluating & Testi, Shanghai 201112, Peoples R China

年份：2015

卷号：9

期号：3

起止页码：121

外文期刊名：INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS

收录：EI(收录号：20151800798369);WOS:【ESCI(收录号:WOS:000361376600012)】；

基金：This work was partially supported by the NSF of China under grants No. 61173048 and No. 61300041, Specialized Research Fund for the Doctoral Program of Higher Education under grant No. 20130074110015, and the Fundamental Research Funds for the Central Universities under Grant No.WH1314038.

语种：英文

外文关键词：App; multifactor authentication; Biometric authentication; illegitimate users; cloud emails; Identity authentication; Python programming; DES algorithm

摘要：Cloud computing has been extending extensively, involving multiple users on the service it provides. Cloud based email is one of services provided by cloud computing with number of users expanding on yearly basis. Cloud computing faces concerning problem of security and privacy mainly based on its working environment. Identity authentication is one reliable method in cloud environment to identify users requesting for cloud services, currently user authentication in cloud computing is based on the credentials possessed by the user mostly username & password. However, this method has vulnerability of being compromised by illegitimate users when users' passwords have been revealed or cracked. The paper proposes a more secure structure, i.e the two-factor authentication which authenticates by requiring the username/password pair also needs a second factor to completely grant access. The second factor is App stored in users' smart devices. Username & password/Apps method will continue to allow users to set up passwords for their accounts, it will make a random compulsory code to be entered through App on smart phone devices hence keep privacy of cloud emails. Testing has been done with help of Python program environment. Comparing to recent related proposed schemes, our proposed scheme has advantage of high unbreakable security feature with low implement cost.