L-EncDB: A lightweight framework for privacy-preserving data queries in cloud computing
L-EncDB: A lightweight framework for privacy-preserving data queries in cloud computing
复制标题
L-EncDB：云计算中隐私保护数据查询的轻量级框架
DOI：
10.1016/j.knosys.2014.04.010
复制
发表时间：
2015-05-01
影响因子：
8.8
通讯作者：
Wong, Duncan S.
中科院分区：
文献类型：
--
作者：
Li, Jin;Liu, Zheli;Wong, Duncan S.
随着云计算的出现，个人和组织开始对将数据库从本地服务器迁移到远程云服务器感兴趣。然而，在实践中，数据所有者和云服务提供商并不处于同一个信任域中。为了保护数据隐私，敏感数据在外包之前通常必须进行加密，这使得有效的数据库利用成为一项非常具有挑战性的任务。为了应对这一挑战，在本文中，我们提出了 L-EncDB，一种新颖的轻量级数据库加密机制，它 (i) 保留数据库结构，(ii) 支持高效的基于 SQL 的查询。为了实现这一目标，本文构建了一种新的格式保留加密（FPE）方案，该方案可用于加密数据库中存储的所有类型的字符串。广泛的分析表明，所提出的 1,-EncDB 方案在现有安全模型下是高效且可证明安全的。 (C) 2014 Elsevier B.V. 保留所有权利。
With the advent of cloud computing, individuals and organizations have become interested in moving their databases from local to remote cloud servers. However, data owners and cloud service providers are not in the same trusted domain in practice. For the protection of data privacy, sensitive data usually have to be encrypted before outsourcing, which makes effective database utilization a very challenging task. To address this challenge, in this paper, we propose L-EncDB, a novel lightweight encryption mechanism for database, which (i) keeps the database structure and (ii) supports efficient SQL-based queries. To achieve this goal, a new format-preserving encryption (FPE) scheme is constructed in this paper, which can be used to encrypt all types of character strings stored in database. Extensive analysis demonstrates that the proposed 1,-EncDB scheme is highly efficient and provably secure under existing security model. (C) 2014 Elsevier B.V. All rights reserved.