Authentication in the clouds: a framework and its application to mobile users

Authors:
Richard Chow;Markus Jakobsson;Ryusuke Masuoka;Jesus Molina;Yuan Niu;Elaine Shi;Zhexuan Song
Affiliations:
PARC, Palo Alto, CA, USA;FatSkunk, Mountain View, CA, USA;Fujitsu Laboratories of America, Sunnyvale, CA, USA;Fujitsu Laboratories of America, Sunnyvale, CA, USA;University of California - Davis, Davis, CA, USA;PARC, Palo Alto, CA, USA;Fujitsu Labs of America, Sunnyvale, CA, USA
Venue:
Proceedings of the 2010 ACM workshop on Cloud computing security workshop
Year:
2010

Citing 5
Cited 3

Cache Cookies for Browser Authentication (Extended Abstract)

SP '06 Proceedings of the 2006 IEEE Symposium on Security and Privacy
Cognitive security for personal devices

Proceedings of the 1st ACM workshop on Workshop on AISec
CloudAV: N-version antivirus in the network cloud

SS'08 Proceedings of the 17th conference on Security symposium
Implicit authentication for mobile devices

HotSec'09 Proceedings of the 4th USENIX conference on Hot topics in security
Implicit authentication through learning user behavior

ISC'10 Proceedings of the 13th international conference on Information security

Touch me once and i know it's you!: implicit authentication based on touch screen patterns

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Towards secure mobile cloud computing: A survey

Future Generation Computer Systems
Enhanced dynamic credential generation scheme for protection of user identity in mobile-cloud computing

The Journal of Supercomputing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Cloud computing is a natural fit for mobile security. Typical handsets have input constraints and practical computational and power limitations, which must be respected by mobile security technologies in order to be effective. We describe how cloud computing can address these issues. Our approach is based on a flexible framework for supporting authentication decisions we call TrustCube (to manage the authentication infrastructure) and on a behavioral authentication approach referred to as implicit authentication (to translate user behavior into authentication scores). The combination results in a new authentication paradigm for users of mobile technologies, one where an appropriate balance between usability and trust can be managed through flexible policies and dynamic tuning.