Improving Cloud Data Security by hybridization of Zero-Knowledge Proof and Time-Based One-Time Password

Abstract

Password has been the major vulnerability and challenge in cloud computing environment due to adversarial threat sources. Zero-Knowledge Proof (ZKP) becomes the excellent optional strategy and current anticipation for Cloud Data security and assurance as it gives the server zero knowledge of passwords. However, the VERIFIER, despite having no knowledge of the password must verify that the password entered by the PROVER is correct. A major challenge that occurs is when the user disremembers the password, the cloud environment becomes inaccessible and the cloud service provider has no any replica of the password as a backup. Eavesdropping/snooping is a major threat which provides full access to the cloud environment. Adding Time-based One-time Password (TOTP) will be an elucidation to password delinquency as it expires after a certain splits of seconds or minutes which would render the password unserviceable to the snooped. This research examined cloud services in relation to the security challenges faced by organizations and proposed the hybridization of the Zero-Knowledge Proof and Time-Based One-Time Password algorithms for a better security of the cloud environment.