Mobility Can Help: Protect User Identity with Dynamic Credential

Security becomes a prominent issue for mobile cloud computing since valuable information moves to the cloud. An important security problem is how the users identify themselves to the cloud. If an attacker is capable of faking or stealing user credentials, such as passwords and digital certificates, current security measures are not sufficient to safe-guard user’s valuable information in the cloud. This paper proposes a set of light weight algorithms to generate dynamic credential to defend against such powerful attackers. Many communication randomness, like the user mobility, were commonly believed harmful for security. In this paper, they are converted to helpful elements to generate dynamic credentials. Dynamic credential introduces interesting security properties.