A Systematic Survey of Multi-Factor Authentication for Cloud Infrastructure
A Systematic Survey of Multi-Factor Authentication for Cloud Infrastructure
复制标题
DOI：
10.3390/fi15040146
复制
发表时间：
2023-04
期刊：
影响因子：
3.4
通讯作者：
Soumya Prakash Otta;S. Panda;Maanak Gupta;C. Hota
中科院分区：
文献类型：
--
作者：
Soumya Prakash Otta;S. Panda;Maanak Gupta;C. Hota
云计算中各种服务和资源的未经授权使用是必须防止的。身份验证和访问控制是云计算中最重要的问题。该领域的几位研究人员提出了许多方法来增强云身份验证的健壮性。长期以来，用户名和关联密码一直是单因素身份验证的常见做法。然而，计算速度和简单方法的使用方面的进步，从Brute Force技术开始，到实施先进和高效的加密算法，已经给认证系统带来了几个威胁和漏洞，导致其有效性的下降。多因素身份验证已成为一种强大的方式，可以同时使用多种身份验证因素来保护云。这采用了多个级别的级联身份验证检查。本文对多因素身份认证机制采用多因素身份认证的各种因素进行了广泛而系统的调查。从调查中得出的结论是，得出一种独特的身份验证因素，该因素不需要任何额外的、专门的硬件或软件来进行多因素身份验证。在该过程中，这种认证还使用相关用户的不同生物特征。这一安排增强了安全可靠的用户身份验证过程。该机制也被评估为抵抗冒充攻击的有效手段。
The unauthorized usage of various services and resources in cloud computing is something that must be protected against. Authentication and access control are the most significant concerns in cloud computing. Several researchers in this field suggest numerous approaches to enhance cloud authentication towards robustness. User names and associated passwords have been a common practice for long as Single Factor Authentication. However, advancements in the speed of computing and the usage of simple methods, starting from the Brute Force technique to the implementation of advanced and efficient crytographic algorithms, have posed several threats and vulnerabilities for authentication systems, leading to the degradation of their effectiveness. Multi-factor authentication has emerged as a robust means of securing the cloud using simultaneous and multiple means of authentication factors. This employs multiple levels of cascaded authentication checks. This paper covers an extensive and systematic survey of various factors towards their adoption and suitability for authentication for multi-factor authentication mechanisms. The inference drawn from the survey is in terms of arriving at a unique authentication factor that does not require any additional, specialized hardware or software for multi-factor authentication. Such authentication also uses the distinct biometric characteristics of the concerned user in the process. This arrangement augments the secured and robust user authentication process. The mechanism is also assessed as an effective means against impersonation attacks.