A secure data backup scheme using multi‐factor authentication. (1st September 2017)

• Record Type: Journal Article
• Authors: Liu, Yining; Zhong, Qi; Chang, Liang; Xia, Zhe; He, Debiao; Cheng, Chi
• Is Part Of: IET information security. Volume 11:Number 5(2017)
• Page Start: 250
• Page End: 255
• Publication Date: 2017-09-01
• Subjects: authorisation -- storage management; multifactor authentication -- remote backup storage technique -- data encryption -- user‐centred design data backup scheme -- symmetrical key -- smart card -- password -- biometrics -- laptop; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2016.0103
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : Sensitive data stored in laptops or other mobile devices can easily be lost, stolen, misplaced or corrupted, the remote backup storage technique is used to address these issues; however, the backup server could not be fully trusted, the data should be encrypted in advance. Although the key is more easily protected due to the smaller size compared with the backup data, it is still impossible for ordinary human to remember. A user‐centred design data backup scheme is proposed using multi‐factor authentication. The user firstly selects a symmetrical key and divides it into three shares, then destroys the key. The key can easily be reconstructed by combining the shares stored in the user's smart card and the laptop. Even if the smart card or laptop is lost, the key can still be recovered with the password and biometrics. The proposed scheme not only achieves the required security goals but also is more robust and practical.