Title
The Use of Two Authentication Factors to Enhance the Security of Mass Storage Devices
Abstract
Recently, removable (external USB) mass storage devices are finding widespread utilization for transferring and backing up data. They even can be used as bootable devices. They have brought us great convenience, yet, simultaneously, they are very vulnerable to the extraction of private and confidential data from computer systems. Some access authentication schemes have been proposed for removable storage media as means of ensuring the security of the data. For the most part, such schemes use an Internet connection and a main server as a trusted third party, which generally provides an inadequate level of security. In this paper, we analyze the security risks of these schemes and propose a novel approach that takes into account both the users and the physical properties of the media so as to join the user and removable storage media. We involve users' smart-phones in the authentication process as a second authentication factor. Then, only legitimate users can authenticate themselves with their smart-phones to obtain access to their removable storage media. An analysis of the security associated with this scheme is presented. Our mechanism will leverage the general public to secure their credentials through their USB storage devices, without the need of an Internet connection or communication with a trusted third party.
Year
DOI
Venue
2014
10.1109/ITNG.2014.13
ITNG
Keywords
Field
DocType
mass storage media, two-factor authentication, smart-phones, discrete logarithm problem
Trusted third party,Authentication,Chip Authentication Program,Challenge–response authentication,Computer security,Computer science,Computer network,Data Authentication Algorithm,Authentication protocol,Access control,Multi-factor authentication
Conference
Citations 
PageRank 
References 
1
0.37
4
Authors
3
Name
Order
Citations
PageRank
Mohamed Hamdy Eldefrawy1425.40
Muhammad Khurram Khan23538204.81
Hassan Elkamchouchi360.86