A Generic Framework for Three-Factor Authentication: Preserving Security and Privacy in Distributed Systems

Authors:
Xinyi Huang;Yang Xiang;Ashley Chonka;Jianying Zhou;Robert H. Deng
Affiliations:
Singapore Management University, Singapore;Deakin University, Melbourne;Deakin University, Geelong;Institute for Infocomm Research, Singapore;Singapore Management University, Singapore
Venue:
IEEE Transactions on Parallel and Distributed Systems
Year:
2011

Citing 0
Cited 2

How to achieve non-repudiation of origin with privacy protection in cloud computing

Journal of Computer and System Sciences
Smart Environment as a Service: Three Factor Cloud Based User Authentication for Telecare Medical Information System

Journal of Medical Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

As part of the security within distributed systems, various services and resources need protection from unauthorized use. Remote authentication is the most commonly used method to determine the identity of a remote client. This paper investigates a systematic approach for authenticating clients by three factors, namely password, smart card, and biometrics. A generic and secure framework is proposed to upgrade two-factor authentication to three-factor authentication. The conversion not only significantly improves the information assurance at low cost but also protects client privacy in distributed systems. In addition, our framework retains several practice-friendly properties of the underlying two-factor authentication, which we believe is of independent interest.