Mutual authentication for mobile cloud computing: Review and suggestion

With the combination of mobile computing technology and cloud computing, mobile users have the advantage of mobility, resources, and access availability to the Internet to communicate data seamlessly anywhere at any time. However, the transfer of data through vulnerable channels poses security threats such as man-in-middle and sniffing. This paper explores, reviews, and analyses several existing works related to authentication in mobile cloud computing. This paper also aims to propose an authentication scheme to secure data communication in mobile cloud computing. The proposed scheme is based on multi-factor authentication that uses usernames, passwords, and a One-Time Password. The One-Time Password is encrypted with a Diffie-Hellman key exchange algorithm to achieve mutual authentication between the mobile device and the cloud server. The proposed scheme will be implemented and tested using Java.