SBIR Phase I: Encrypted Databases: From Theory to Systems

SBIR 第一阶段：加密数据库：从理论到系统

• 批准号: 1916335
• 负责人: Tarik Moataz
• 金额: $ 22.5万
• 依托单位: SIFR SYSTEMS, INC.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-07-01 至 2021-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1916335&HistoricalAwards=false
• 关键词: SBIR; Phase; Encrypted; Databases; Theory

The broader impact/commercial potential of this Small Business Innovation Research (SBIR) Phase I project consists of (1) preventing server-level data breaches; and (2) increasing adoption of cloud computing; especially in sectors that inherently deal with sensitive data and are subject to regulation. This includes the healthcare and finance industries as well as government agencies. Data breaches are occurring at an alarming rate and affecting every industry and sector of government. This project enables customers to search and query data without ever needing to decrypt it, effectively protecting data against server-level breaches. Potential customers from the financial and healthcare industries said in interviews that their adoption of cloud computing had been slowed due to the sensitivity of some of their data. Their inability to use the cloud to store and analyze highly sensitive data is very costly since they have to build and maintain on-premise infrastructures to handle it. The outcome of this project will enable customers to make use of and benefit from cloud computing even for their most sensitive data. From a societal standpoint, this project increases user security and privacy and helps achieve regulatory compliance while investing less in cybersecurity.This Small Business Innovation Research (SBIR) Phase I project aims to design, build and evaluate a commercially viable encrypted relational database system. The project will tackle a variety of technical challenges that need to be overcome before this technology can see widespread adoption. The first is integration with existing database management systems (DBMSs). Commercial database systems benefit from over 40 years of research, optimization and engineering breakthroughs. While the new cryptographic techniques proposed for this project have many advantages in terms of security and efficiency, it is not a-priori clear how to integrate them into a standard DBMS without a complete re-design. To address this challenge, this project leverages a new algorithmic paradigm called emulation that seamlessly integrates these new cryptographic techniques with standard commercial DBMSs. The second challenge this project addresses is concrete real-world efficiency. The theoretical analysis of the proposed solution shows that it is asymptotically efficient. The proposed work, however, will show that it is also efficient in practice on real data and against real database benchmarks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这项小型企业创新研究（SBIR）I期项目的更广泛的影响/商业潜力包括（1）防止服务器级数据泄露； （2）增加云计算的采用；特别是在固有地处理敏感数据并受到调节的部门中。这包括医疗保健和金融行业以及政府机构。数据泄露以惊人的速度发生，并影响政府的每个行业和部门。该项目使客户能够搜索和查询数据无需解密，从而有效保护数据免受服务器级别的漏洞。来自金融和医疗保健行业的潜在客户在采访中表示，由于其某些数据的敏感性，他们对云计算的采用已减慢。他们无法使用云来存储和分析高度敏感的数据非常昂贵，因为他们必须构建和维护本地基础架构来处理它。该项目的结果将使客户甚至可以从云计算中利用并受益于最敏感的数据。从社会的角度来看，该项目提高了用户安全和隐私，并有助于实现监管合规性，同时投资于网络安全。这一小型企业创新研究（SBIR）I阶段项目旨在设计，构建和评估商业上可行的加密性关系数据库系统。该项目将应对各种技术挑战，这些挑战需要克服，在这项技术可以看到广泛采用之前。首先是与现有数据库管理系统（DBMS）集成。商业数据库系统受益于40多年的研究，优化和工程突破。尽管为该项目提出的新的加密技术在安全性和效率方面具有许多优势，但尚不清楚如何将它们集成到没有完整的重新设计的情况下。为了应对这一挑战，该项目利用了一种称为仿真的新算法范式，该范式将这些新的加密技术与标准的商业DBMS无缝整合在一起。该项目解决的第二个挑战是具体的现实世界效率。对拟议解决方案的理论分析表明，它在渐近上有效。但是，拟议的工作将表明，它在实际数据和实际数据库基准方面也有效。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的智力优点和更广泛影响的评估审查标准通过评估来获得支持的。