Using Smart Card to Achieve a Single Sign-on for Multiple Cloud Services

As a hopeful computing paradigm, cloud services are obtainable to end users based on pay-as-you-go service. Security is represented one of the vital issues for the extended adoption of cloud computing, with the object of accessing several cloud service providers, applications, and services by using anonymity features to authenticate the user. We present a good authentication scheme based on quick response (QR) code and smart card. Furthermore, our proposed scheme has several crucial merits such as key management, mutual authentication, one-time password, user anonymity, freely chosen password, secure password changes, and revocation by using QR code. The security of proposed scheme depends on crypto-hash function, QR-code validation, and smart card. Moreover, we view that our proposed scheme can resist numerous malicious attacks and are more appropriate for practical applications than other previous works. The proposed scheme has proved as a strong mutual authentication based on burrows-abadi-needham (BAN) logic and security analysis. Furthermore, our proposed scheme has good results compared with related work.

Download Full-text

Engineering Authentication Process with Cloud Computing

International Journal of Scientific Research in Computer Science Engineering and Information Technology ◽

10.32628/cseit195259 ◽

2019 ◽

pp. 246-253

Author(s):

G. Nivedhitha ◽

R. Ilakkiya

Keyword(s):

Cloud Computing ◽

Key Management ◽

Cloud Model ◽

Cloud Services ◽

Single Sign On ◽

Multiple Resources ◽

Authentication And Authorization ◽

Secure Authentication ◽

Client Side ◽

Gain Access

Cloud computing is a way to increase the capacity or add capabilities dynamically without any upfront investments. Despite the growth achieved from the cloud computing, security is still questionable which impacts the cloud model adoption. Aside of having network and application securities being adopted, there must be a security that authenticate the user when accessing the cloud services that is bound to the rules between the cloud computing provider and the client side. The existing system provides authentication based on keys Encryption algorithms either symmetric key-based or asymmetric are key-based. Both encryption approaches have a major problem related to encryption key management i.e. how to securely generate, store, access and exchange secrete keys. In this paper, an optimized infrastructure for secure authentication and authorization in Cloud Environment using SSO (Single Sign-On) is proposed. SSO is a process of authenticating once and gain access of multiple resources that aims at reducing number of login and password in heterogeneous environment and to gain balance in Security, Efficiency and Usability. Also an authentication model for cloud computing based on the Kerberos protocol to provide single sign-on and to prevent against DDOS attacks is also presented in this paper.

Download Full-text

How to Integrate On-premise Authentication System into Cloud Services: Single Sign-on for Office365

2019 ACM SIGUCCS Annual Conference on - SIGUCCS '19 ◽

10.1145/3347709.3347818 ◽

2019 ◽

Author(s):

Tsuyoshi Akiyama ◽

Takayuki Nagai ◽

Hideo Masuda ◽

Hiromi Yamaoka

Keyword(s):

Cloud Services ◽

Single Sign On ◽

Authentication System

Download Full-text

A smart card based single Sign-On and password management solution as a browser extension

2010 International Conference on Education and Management Technology ◽

10.1109/icemt.2010.5657596 ◽

2010 ◽

Cited By ~ 1

Author(s):

Emin Erdem ◽

K. Orcun Kucukkurt ◽

Kadir Samurkas ◽

Ertug Kanargi ◽

Ufuk Celikkan

Keyword(s):

Smart Card ◽

Single Sign On ◽

Browser Extension ◽

Password Management

Download Full-text

SHIBBOLETH WEB-PROXY FOR SINGLE SIGN-ON OF CLOUD SERVICES

Proceedings of the 2nd International Conference on Cloud Computing and Services Science ◽

10.5220/0003926000890095 ◽

2012 ◽

Keyword(s):

Cloud Services ◽

Single Sign On

Download Full-text

Applied Research of Single Sign on Technology in Cloud Services

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.602-605.3552 ◽

2014 ◽

Vol 602-605 ◽

pp. 3552-3555

Author(s):

Wei Li ◽

Yuan Bo Zhu ◽

Ming Zou

Keyword(s):

Cloud Service ◽

Cloud Services ◽

Industrial Services ◽

Identity Information ◽

Single Sign On ◽

Application Systems ◽

Design And Manufacturing ◽

Software Services ◽

Cloud Service Platform ◽

Industrial Cloud

Industrial cloud service platform launched a series of industrial services based on cloud computing for middle and small-sized enterprises. These services include CAD, CAE and other software services utilized on industrial design and manufacturing. Due to integrating various application systems, an efficient authentication technology was urgent required to realize the exchange and sharing of the identity information in the platform. Based on analysis and compare of various mainstream Single Sign-On (SSO) technologies, this paper proposed an SSO solution by using Central Authentication Service (CAS) protocol. Proposed system makes it easy and convenient to deal with login authentication and gain identity information of the whole platform. In addition, proposed system significantly improves the user experience.

Download Full-text

PERANCANGAN ENTERPRISE ARCHITECTURE TEKNOLOGI INFORMASI ADAPTIF DENGAN FRAMEWORK TOGAF PADA UNIVERSITAS BINA INSAN

Jurnal Sistem Informasi Musirawas (JUSIM) ◽

10.32767/jusim.v5i01.744 ◽

2020 ◽

Vol 5 (01) ◽

pp. 19-33

Author(s):

A. Taqwa Martadinata ◽

Firdaus Firdaus

Keyword(s):

Enterprise Architecture ◽

Open Group ◽

Single Sign On ◽

Architectural Framework

Teknologi Informasi (TI) serta Sistem Informasi (SI) saat ini wajib ada dalam menunjang sebuah organisasi atau perusahaan. Arsitektur yang baik beserta dokumentasinya yang sesuai memungkinkan kemudahan pemeliharaan agar sistem tidak menjadi usang. Dalam hal ini arsitektur TI didefinisikan sebagai framework yang terintegrasi untuk mengembangkan atau memelihara TI yang ada dan memperoleh TI yang baru untuk mencapai tujuan strategis organisasi. The Open Group Architectural Framework (TOGAF): Kuat pada Aspek Arsitektur Bisnis dan Arsitektur Teknis. Pada penelitian ini menggunakan TOGAF ADM mulai dari fase pendahuluan, kebutuhan manajemen, visi arsitektur, bisnis arsitektur, arsitektur system informasi, arsitektur teknologi,serta solusi dan peluang. Menetapkan 3 prinsip pengembangan arsitektur informasi teknologi adaptif pada Universitas Bina Insan. Pengembangan aplikasi berbasis single sign on (sso) untuk intergrasi antar system. Merupakan sebuah hasil dari penelitian ini yang dapat menghasilkan sebuah rancangan infrastruktur teknologi informasi yang berifat adaftip dengan konsep yang di adopsi berupa teknologi virtualisasi server, serta pemanfaatan proses bisnis mampu berjalan efisien, efektif serta sesuai yang diinginkan manajemen.

Download Full-text