GOPES: Group Order-Preserving Encryption Scheme Supporting Query Processing over Encrypted Data
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
As cloud computing has become a widespread technology, malicious attackers can obtain the privateinformation of users that has leaked from the service provider in the outsourced databases. To resolve theproblem, it is necessary to encrypt the database prior to outsourcing it to the service provider. However, themost existing data encryption schemes cannot process a query without decrypting the encrypted databases. Moreover, because the amount of the data is large, it takes too much time to decrypt all the data. For this,Programmable Order-Preserving Secure Index Scheme (POPIS) was proposed to hide the original data whileperforming query processing without decryption. However, POPIS is weak to both order matching attacksand data count attacks. To overcome the limitations, we propose a group order-preserving data encryptionscheme (GOPES) that can support efficient query processing over the encrypted data. Since GOPES canpreserve the order of each data group by generating the signatures of the encrypted data, it can provide a highdegree of data privacy protection. Finally, it is shown that GOPES is better than the existing POPIS, withrespect to both order matching attacks and data count attacks.
Abstract
As cloud computing has become a widespread technology, malicious attackers can obtain the privateinformation of users that has leaked from the service provider in the outsourced databases. To resolve theproblem, it is necessary to encrypt the database prior to outsourcing it to the service provider. However, themost existing data encryption schemes cannot process a query without decrypting the encrypted databases. Moreover, because the amount of the data is large, it takes too much time to decrypt all the data. For this,Programmable Order-Preserving Secure Index Scheme (POPIS) was proposed to hide the original data whileperforming query processing without decryption. However, POPIS is weak to both order matching attacksand data count attacks. To overcome the limitations, we propose a group order-preserving data encryptionscheme (GOPES) that can support efficient query processing over the encrypted data. Since GOPES canpreserve the order of each data group by generating the signatures of the encrypted data, it can provide a highdegree of data privacy protection. Finally, it is shown that GOPES is better than the existing POPIS, withrespect to both order matching attacks and data count attacks.
참고문헌 (11)
- H. Hacigumus, "Providing database as a service", Proceedings 18th International Conference on Data Engineering, pp.29~38 (2002)
- C. Curino, "Relational cloud: a database-as-a-service for the cloud", Proceedings of the 5th Biennial Conference on Innovative Data Systems Research, pp.235~240 (2011)
- R. Buyya, "Cloud computing and emerging IT platforms:vision, hype, and reality for delivering computing as the 5th utility", Future Generation Computer Systems, 25(6), pp.599~616 (2009)
- Y. Zhu, "Dynamic audit services for outsourced storages in clouds", IEEE Transactions on Services Computing, 6(2), pp.227~238 (2013)
- R. Agrawal, "Order preserving encryption for numeric data", Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data, pp.563~574 (2004)
- L. Xiao, "Security analysis for order preserving encryption schemes", Proceedings of 201246th Annual Conference on Information Sciences and Systems (CISS), pp.1~6 (2012)
- "Extending order preserving encryption for multi-user systems" (2012)[URL]
- D. H. Yum, "Information Security Applications", pp.84~97 (2011), Springer
- D. Liu, "Programmable order-preserving secure index for encrypted database query", Proceedings of 2012 IEEE 5th International Conference on Cloud Computing, pp.502~509 (2012)
- "FIPS 197: Announcing the advanced encryption standard (AES)" (2001)[URL]
- "US Census Bureau"[URL]