TY - CONF T1 - Authentication in the clouds: a framework and its application to mobile users Y1 - 2010 A1 - Chow, Richard A1 - Jakobsson, Markus A1 - Masuoka, Ryusuke A1 - Molina,Jesus A1 - Niu, Yuan A1 - Elaine Shi A1 - Song,Zhexuan KW - Authentication KW - Cloud computing KW - Mobile computing AB - Cloud computing is a natural fit for mobile security. Typical handsets have input constraints and practical computational and power limitations, which must be respected by mobile security technologies in order to be effective. We describe how cloud computing can address these issues. Our approach is based on a flexible framework for supporting authentication decisions we call TrustCube (to manage the authentication infrastructure) and on a behavioral authentication approach referred to as implicit authentication (to translate user behavior into authentication scores). The combination results in a new authentication paradigm for users of mobile technologies, one where an appropriate balance between usability and trust can be managed through flexible policies and dynamic tuning. T3 - CCSW '10 PB - ACM SN - 978-1-4503-0089-6 UR - http://doi.acm.org/10.1145/1866835.1866837 ER -