A secure data backup scheme using multi-factor authentication

作者：Liu, Yining^*; Zhong, Qi; Chang, Liang; Xia, Zhe; He, Debiao; Cheng, Chi

来源：IET Information Security, 2017, 11(5): 250-255.

DOI：10.1049/iet-ifs.2016.0103

• authorisation
• storage management
• multifactor authentication
• remote backup storage technique
• data encryption
• user-centred design data backup scheme
• symmetrical key
• smart card
• password
• biometrics
• laptop

Sensitive data stored in laptops or other mobile devices can easily be lost, stolen, misplaced or corrupted, the remote backup storage technique is used to address these issues; however, the backup server could not be fully trusted, the data should be encrypted in advance. Although the key is more easily protected due to the smaller size compared with the backup data, it is still impossible for ordinary human to remember. A user-centred design data backup scheme is proposed using multi-factor authentication. The user firstly selects a symmetrical key and divides it into three shares, then destroys the key. The key can easily be reconstructed by combining the shares stored in the user's smart card and the laptop. Even if the smart card or laptop is lost, the key can still be recovered with the password and biometrics. The proposed scheme not only achieves the required security goals but also is more robust and practical.

• 出版日期2017-9
• 单位桂林电子科技大学; 武汉理工大学; 武汉大学; 中国地质大学（北京）