A Secure and Efficient Order Preserving Encryption Scheme for Relational Databases
A Secure and Efficient Order Preserving Encryption Scheme for Relational Databases
复制标题
DOI：
10.5220/0003095700250035
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Hasan Kadhem;Toshiyuki Amagasa;H. Kitagawa
中科院分区：
文献类型：
--
作者：
Hasan Kadhem;Toshiyuki Amagasa;H. Kitagawa
加密是一种经过充分研究的保护敏感数据机密性的技术。然而，加密关系数据库会影响查询处理过程中的性能。要以合理的开销在加密数据库上执行查询，保持加密值的顺序是一种有用的技术。遗憾的是，现有的保序加密方案不能抵抗已知的明文攻击和统计攻击。在这些攻击中，假设攻击者事先知道明文值或明文域的统计信息。提出了一种新的数据库加密方案MV-POES(多值偏序保护加密方案)，该方案允许对加密数据库进行隐私保护查询，提高了安全性。我们的想法是将明文域划分为多个分区，并在加密域中将它们随机化。然后，将一个整数值加密为不同的多个值，以防止统计攻击。同时，MV-POPS保留了分区内整数值的顺序，以允许对加密数据直接应用比较操作。我们的方案对已知的明文攻击和统计攻击是健壮的。MV-POPES实验表明，该方案能够以合理的开销实现对敏感数据的安全保护，证明了该方案的实用性。
Encryption is a well-studied technique for protecting the confidentiality of sensitive data. However, encrypting relational databases affects the performance during query processing. Preserving the order of the encrypted values is a useful technique to perform queries over the encrypted database with a reasonable overhead. Unfortunately, the existing order preserving encryption schemes are not secure against known plaintext attacks and statistical attacks. In those attacks, it is assumed that the attacker has prior knowledge about plaintext values or statistical information on the plaintext domain. This paper presents a novel database encryption scheme called MV-POPES (Multivalued Partial Order Preserving Encryption Scheme), which allows privacy-preserving queries over encrypted databases with an improved security level. Our idea is to divide the plaintext domain into many partitions and randomize them in the encrypted domain. Then, one integer value is encrypted to different multiple values to prevent statistical attacks. At the same time, MV-POPES preserves the order of the integer values within the partitions to allow comparison operations to be directly applied on encrypted data. Our scheme is robust against known plaintext attacks and statistical attacks. MV-POPES experiments show that security for sensitive data can be achieved with reasonable overhead, establishing the practicability of the scheme.