title: Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ Ð·Ð°ÑÐ¸ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÑ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð² Ð´Ð»Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº Ð¾Ð±Ð»Ð°ÑÐ½ÑÐ¼ ÑÐµÑÐ²Ð¸ÑÐ°Ð¼
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¼Ð°Ð³Ð¸ÑÑÑÐ°
titleType: Subtitle
title: The development of authentication methods with data protection of mobile users for access to cloud services
Creators: name: Ð ÑÐ¶Ð¾Ð², ÐÐ¼Ð¸ÑÑÐ¸Ð¹
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2020
Subjects: IT-ÑÐµÑ Ð½Ð¾Ð»Ð¾Ð³Ð¸Ð¸
Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ
WEB-ÑÐµÑÐ²ÐµÑ
Ð·Ð°ÑÐ¸ÑÐ° Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸
SSL/TLS
Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÐ¹ Ð°Ð±Ð¾Ð½ÐµÐ½Ñ
Ð¿ÐµÑÐµÐ´Ð°ÑÐ° Ð´Ð°Ð½Ð½ÑÑ
IPSEC
VPN
ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ðµ
IT technologies
authentication
WEB server
information security
mobile user
data transfer
encryption

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ Ð·Ð°ÑÐ¸ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÑ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð² Ð´Ð»Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº Ð¾Ð±Ð»Ð°ÑÐ½ÑÐ¼ ÑÐµÑÐ²Ð¸ÑÐ°Ð¼Â». ÐÐ°Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð¾ÑÐ¾Ð±ÐµÐ½Ð½Ð¾ÑÑÐµÐ¹ Ð¿ÑÐ¾ÑÐµÑÑÐ° Ð¾Ð±Ð¼ÐµÐ½Ð° Ð´Ð°Ð½Ð½ÑÐ¼Ð¸ Ð² Ð³Ð»Ð¾Ð±Ð°Ð»ÑÐ½Ð¾Ð¹ ÑÐµÑÐ¸ Ð¼ÐµÐ¶Ð´Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÐ¼ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð¼ Ð¸ Ð²ÐµÐ±-ÑÐµÑÐ²Ð¸ÑÐ¾Ð¼ Ð¿Ð¾ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð¼Ñ ÐºÐ°Ð½Ð°Ð»Ñ ÑÐ²ÑÐ·Ð¸ Ð¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐµ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸, Ð¿Ð¾Ð·Ð²Ð¾Ð»ÑÑÑÐ¸Ñ Ð´Ð¾Ð±Ð¸ÑÑÑÑ Ð²ÑÑÐ¾ÐºÐ¸Ñ Ð¿Ð¾ÐºÐ°Ð·Ð°ÑÐµÐ»ÐµÐ¹ Ð¿ÑÐ¾Ð¸Ð·Ð²Ð¾Ð´Ð¸ÑÐµÐ»ÑÐ½Ð¾ÑÑÐ¸ Ð¸ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð² Ð´Ð°Ð½Ð½Ð¾Ð¼ Ð¿ÑÐ¾ÑÐµÑÑÐµ Ð¿ÑÐ¸ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÑ ÑÑÐ»Ð¾Ð²Ð¸ÑÑ. ÐÐ°Ð´Ð°ÑÐ¸, ÐºÐ¾ÑÐ¾ÑÑÐµ ÑÐµÑÐ°Ð»Ð¸ÑÑ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ·ÑÑÐµÐ½Ð¸Ðµ Ð°ÐºÑÑÐ°Ð»ÑÐ½ÑÑ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ð¾Ð² ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ, ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ñ ÑÐµÑ-ÑÑÐ½ÐºÑÐ¸Ð¹, ÑÐµÑÐ²Ð¸ÑÐ¾Ð² Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÐºÐ°Ð½Ð°Ð»Ð°, Ð¾Ð±ÐµÑÐ¿ÐµÑÐ¸Ð²Ð°ÑÑÐ¸Ñ Ð²ÑÑÐ¾ÐºÐ¸Ð¹ ÑÑÐ¾Ð²ÐµÐ½Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¿ÑÐ¸ Ð¾Ð±Ð¼ÐµÐ½Ðµ Ð´Ð°Ð½Ð½ÑÐ¼Ð¸ Ð¼ÐµÐ¶Ð´Ñ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ°Ð¼Ð¸ Ð² Ð³Ð»Ð¾Ð±Ð°Ð»ÑÐ½Ð¾Ð¹ ÑÐµÑÐ¸. 2. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° ÐºÐ»Ð°ÑÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¹ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÑ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð² â Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹ Ð²ÐµÐ±-ÑÐµÑÐ²Ð¸ÑÐ¾Ð² Ð¸ Ð¿ÐµÑÐµÐ´Ð°Ð²Ð°ÐµÐ¼ÑÑ Ð´Ð°Ð½Ð½ÑÑ. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð¾ÑÐµÐ½ÐºÐ¸ ÐºÐ°ÑÐµÑÑÐ²Ð° Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÐºÐ°Ð½Ð°Ð»Ð° Ð¿ÐµÑÐµÐ´Ð°ÑÐ¸ Ð´Ð°Ð½Ð½ÑÑ. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° ÑÑÐµÐ½Ð°ÑÐ¸ÐµÐ² â Ð½Ð°Ð±Ð¾ÑÐ¾Ð² ÑÐ°ÑÐ°ÐºÑÐµÑÐ¸ÑÑÐ¸Ðº Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÑ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð² Ð¸ Ð¿ÐµÑÐµÐ´Ð°Ð²Ð°ÐµÐ¼ÑÑ Ð´Ð°Ð½Ð½ÑÑ, Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÑÑÑÐ¸Ñ ÑÑÐ»Ð¾Ð²Ð¸Ñ Ð¾Ð±Ð¼ÐµÐ½Ð° Ð´Ð°Ð½Ð½ÑÐ¼Ð¸. 5. ÐÐ½Ð°Ð»Ð¸Ð· Ð°ÐºÑÑÐ°Ð»ÑÐ½ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð¾ ÐºÑÐ¸Ð¿ÑÐ¾ÑÑÐ¾Ð¹ÐºÐ¾ÑÑÐ¸ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ð¾Ð² ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ, ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ñ ÑÐµÑ-ÑÑÐ½ÐºÑÐ¸Ð¹, ÑÐµÑÐ²Ð¸ÑÐ¾Ð² Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÐºÐ°Ð½Ð°Ð»Ð° Ð¾Ð±Ð¼ÐµÐ½Ð° Ð´Ð°Ð½Ð½ÑÐ¼Ð¸ Ð¸ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ðµ Ð½Ð°Ð±Ð¾ÑÐ° Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸, Ð¾Ð±ÐµÑÐ¿ÐµÑÐ¸Ð²Ð°ÑÑÐ¸Ñ Ð¼Ð°ÐºÑÐ¸Ð¼Ð°Ð»ÑÐ½ÑÐ¹ ÑÑÐ¾Ð²ÐµÐ½Ñ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¿ÑÐ¸ ÑÐ¼ÐµÑÐµÐ½Ð½ÑÑ ÑÑÐµÐ±Ð¾Ð²Ð°Ð½Ð¸ÑÑ Ðº Ð¿ÑÐ¾Ð¸Ð·Ð²Ð¾Ð´Ð¸ÑÐµÐ»ÑÐ½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼Ñ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ°. 6. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¸Ð¼Ð¸ÑÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÐºÐ°Ð½Ð°Ð»Ð° Ð¾Ð±Ð¼ÐµÐ½Ð° Ð´Ð°Ð½Ð½ÑÐ¼Ð¸ Ð¼ÐµÐ¶Ð´Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÐ¼ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð¼ Ð¸ Ð¾Ð±Ð»Ð°ÑÐ½ÑÐ¼ ÑÐµÑÐ²Ð¸ÑÐ¾Ð¼. 7. Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð½Ð° Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð½Ð°Ð±Ð¾ÑÐ° Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸. 8. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð² ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÑ ÑÑÐµÐ½Ð°ÑÐ¸ÑÑ Ð¿Ð¾Ð´ÐºÐ»ÑÑÐµÐ½Ð¸Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÑ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ¾Ð² Ðº Ð¾Ð±Ð»Ð°ÑÐ½ÑÐ¼ ÑÐµÑÐ²Ð¸ÑÐ°Ð¼. ÐÐ¼Ð¸ÑÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ Ð¼Ð¾Ð´ÐµÐ»Ñ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð° Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐµÐ°Ð»ÑÐ½Ð¾Ð¹ ÑÐµÑÐ¸ Ñ ÑÐ¸ÑÑÐµÐ¼Ð¾Ð¹ Ð¼Ð°ÑÑÑÑÑÐ¸Ð·Ð°ÑÐ¾ÑÐ¾Ð² MikroTik, ÑÐ°Ð±Ð¾ÑÐ°ÑÑÐ¸Ñ Ð¿Ð¾Ð´ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸ÐµÐ¼ Ð¾Ð¿ÐµÑÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ RouterOS. Ð¡ Ð¿Ð¾Ð¼Ð¾ÑÑÑ ÑÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ¾Ð² Ð½Ð° Ð´Ð°Ð½Ð½Ð¾Ð¹ Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð±ÑÐ»Ð¸ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ñ Ð¸Ð·Ð¼ÐµÑÐµÐ½Ð¸Ñ ÑÐ°ÑÐ°ÐºÑÐµÑÐ¸ÑÑÐ¸Ðº Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÐºÐ°Ð½Ð°Ð»Ð° Ð¿ÐµÑÐµÐ´Ð°ÑÐ¸ Ð´Ð°Ð½Ð½ÑÑ Ð¸ Ð¿Ð¾ Ð¸Ñ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ°Ð¼ ÑÐ°ÑÑÑÐ¸ÑÐ°Ð½Ñ Ð·Ð½Ð°ÑÐµÐ½Ð¸Ñ Ð¿Ð°ÑÐ°Ð¼ÐµÑÑÐ¾Ð², Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÑÑÑÐ¸Ñ ÐµÐ³Ð¾ ÐºÐ°ÑÐµÑÑÐ²Ð¾. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ Ð¿Ð¾Ð»ÑÑÐµÐ½ Ð½Ð°Ð±Ð¾Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸, Ð°ÐºÑÑÐ°Ð»ÑÐ½ÑÑ Ð´Ð»Ñ ÑÐµÑÐµÐ½Ð¸Ñ Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¸ ÐºÐ°ÑÐµÑÑÐ²Ð° ÐµÐµ Ð¾Ð±Ð¼ÐµÐ½Ð° Ð² Ð³Ð»Ð¾Ð±Ð°Ð»ÑÐ½Ð¾Ð¹ ÑÐµÑÐ¸ Ð¿ÑÐ¸ ÑÑÐ»Ð¾Ð²Ð¸Ð¸ Ð¿Ð¾Ð´ÐºÐ»ÑÑÐµÐ½Ð¸Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð°Ð±Ð¾Ð½ÐµÐ½ÑÐ° Ðº Ð¾Ð±Ð»Ð°ÑÐ½Ð¾Ð¼Ñ ÑÐµÑÐ²Ð¸ÑÑ. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð° ÑÐ°Ð±Ð»Ð¸ÑÑ ÑÐµÑÐµÐ½Ð¸Ð¹, Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÑÑÑÐ¸Ðµ ÑÐµÐ»ÐµÑÐ¾Ð¾Ð±ÑÐ°Ð·Ð½Ð¾ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ñ ÐºÐ¾Ð½ÐºÑÐµÑÐ½Ð¾Ð³Ð¾ Ð¼ÐµÑÐ¾Ð´Ð° Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¿ÑÐ¸ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð½ÑÑ ÑÑÐ»Ð¾Ð²Ð¸ÑÑ Ð¾Ð±Ð¼ÐµÐ½Ð° Ð´Ð°Ð½Ð½ÑÐ¼Ð¸.
description: The Theme of the final graduation research: âThe development of authentication methods and protection of data of mobile subscribers for access to cloud servicesâ. This research is devoted to study the features of the data exchange process in a global network between a mobile subscriber and a web service through a SVTC and the development of authentication methods which are able to achieve high productivity and security in this process under different conditions. The Tasks that were solved during the research: 1. The research of current encryption algorithms, cryptographic hash functions, the services of secure channel providing a high level of information security during data exchange between subscribers in the global network. 2. Development of classifications of mobile subscribers - users of web services and transmitted data. 3. Development of a model to estimate the quality of a secure data channel. 4. Development of scenarios - sets of characteristics of mobile subscribers and transmitted data determination the conditions for data exchange. 5. Analysis of current data on the cryptographic strength of encryption algorithms, cryptographic hash functions, services of a secure data exchange channel and determination of a set of authentication methods providing the highest level of information security with moderate requirements for subscriber system performance. 6. Development of a simulation model of a secure data exchange channel between a mobile subscriber and a cloud service. 7. Implementation on a model of a set of authentication methods. 8. A research of the effectiveness of implementing authentication methods in various scenarios of connected mobile subscribers to cloud services. The imitation model is developed on the basis of a real network with a system of MikroTik routers working under the RouterOS operating system. Using experiments on this model, measures of the characteristics of a secure data transmission channel were carried out and the values of parameters determining its quality were calculated based on their results. As a result of the work, a set of authentication methods was obtained that are relevant to solve the problems of information security and the quality of its exchange in the global network, provided that the mobile subscriber is connected to the cloud service. A decision table has been developed that determines the usefulness of using a specific authentication method under certain conditions of data exchange.