Published Paper Details:

Nowadays, the security and privacy of users data and files in cloud has become a big concern both for users and also for the cloud service providers. There should be proper security should be provided to data which is send to cloud. we introduce a new two-factor authentication (2FA) access control system for web-based cloud computing services. Specifically, in our proposed 2FA access control system, an attribute-based access control mechanism is implemented with the necessity of a password, secret key and a Trustee response. As a user cannot access the system if they do not hold all these, the mechanism can enhance the security of the system, especially in those scenarios where many users share the same computer for web-based cloud services. In addition, attribute-based control in the system also enables the cloud server to restrict the access to those users with the same set of attributes while preserving user privacy, i.e., the cloud server only knows that the user fulfills the required predicate, but has no idea on the exact identity of the user. Finally, we also carry out a simulation to demonstrate the practicability of our proposed 2FA system.