Achieving Data Privacy through Secrecy Views and Null-Based Virtual Updates
Achieving Data Privacy through Secrecy Views and Null-Based Virtual Updates
复制标题
通过保密视图和基于空的虚拟更新实现数据隐私
DOI：
--
复制
发表时间：
2011
影响因子：
8.9
通讯作者：
Lechen Li
中科院分区：
文献类型：
--
作者：
L. Bertossi;Lechen Li
我们可能希望在关系数据库中对用户或用户组隐藏敏感信息。我们将敏感数据描述为保密视图的扩展。在对受限制的用户提出的查询返回答案之前，更新数据库，使保密视图为空或为一个具有空值的元组。然后，对这些视图中的任何一个的查询都不会返回有意义的信息。由于不应该为此目的对数据库进行物理更改，因此更新只是虚拟的，而且是最小的。最小化确保查询答案在保护隐私的同时，也最大限度地提供信息。虚拟更新基于SQL标准中使用的空值。我们为查询提供了保密视图、虚拟更新和秘密答案（sa）的语义。由虚拟更新产生的不同实例被指定为具有稳定模型语义的逻辑程序的模型，该模型语义成为sa计算的基础。
We may want to keep sensitive information in a relational database hidden from a user or group thereof. We characterize sensitive data as the extensions of secrecy views. The database, before returning the answers to a query posed by a restricted user, is updated to make the secrecy views empty or a single tuple with null values. Then, a query about any of those views returns no meaningful information. Since the database is not supposed to be physically changed for this purpose, the updates are only virtual, and also minimal. Minimality makes sure that query answers, while being privacy preserving, are also maximally informative. The virtual updates are based on null values as used in the SQL standard. We provide the semantics of secrecy views, virtual updates, and secret answers (SAs) to queries. The different instances resulting from the virtually updates are specified as the models of a logic program with stable model semantics, which becomes the basis for computation of the SAs.