Security Study On Cloud Computing Based Mobile Application Model

Mobile Cloud Computing provides elastic computing infrastructure which enables resource-on-demand computing model. Applications of this kind which names Elastic Application can save energy and be widely used. But its security issues still need seriously concerned. To solve this problem, we provide group key exchange agreement and attribute-based access control scheme to meet the model's needs.Different from traditional key exchange agreements, we proposed a group key exchange agreement which fits the elastic application model well. The agreement uses classification and prediction method in authentication for energy saving purpose and achieves simple secret sharing mechanism. The agreement has a better performance on energy saving comparing to traditional key exchange agreements, and is well suited for lower energy consumption scene. The proposed access control scheme is based on an existing model with introducing trusted third party and a special kind of access tree architecture for energy saving and achieves fine-gained access control. In addition, the proposed access control scheme is attribute-based and overcomes the limitation of the fixed relationship between attribute quantity and user quantity in traditional attribute-based access control schemes. We then prove that the schemes are provably secure in the given models. We do experiments to tell that the key exchange scheme is secure and then compare the proposed authentication scheme with an existing signature scheme on energy saving. At last we do simulation to prove that the attribute-based access control scheme has a good performance on energy saving.