IAM with postlogin authentication for service usage authorisation in cloud computing Online publication date: Fri, 22-Feb-2019
by Aniruddha S. Rumale; Dinesh N. Chaudhari
International Journal of Cloud Computing (IJCC), Vol. 8, No. 1, 2019
Abstract: To avoid any theft or manipulation of sensitive information like user profile, or to avoid any inadvertent execution of financial transactions, identity and access management of cloud service provider (CSP) need to do postlogin authentication of a user. This can be done using some randomly generated password, different from the login password. Postlogin authentication authorises user the complete access to use sensitive part or service of user's account. It can be done by: 1) sending one time password (OTP) to user over some other safe communication network; 2) throwing some challenging intelligent designs like a game for playing, quest for solving, etc. Postlogin authentication guarantees safety of user's sensitive data and services even after the theft of username and login-password. The paper outlines in brief the generic IAM process with the need of postlogin authentication within the context of cloud computing. Paper proposes variable length OTP, and some intelligent designs for postlogin authentication.
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Cloud Computing (IJCC):
Login with your Inderscience username and password:
Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.
If you still need assistance, please email subs@inderscience.com
Our Blog 
Follow us on Twitter 
Visit us on Facebook