Collaborative Research: SaTC: CORE: Medium: Quicksilver: A Write-oriented, Private, Outsourced Database Management System

协作研究：SaTC：核心：媒介：Quicksilver：面向写入的私有外包数据库管理系统

• 批准号: 2016240
• 负责人: Jennie Rogers
• 金额: $ 60万
• 依托单位: Northwestern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2016240&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; CORE; Medium

Businesses, non-profits, and other organizations are increasingly outsourcing their database needs to third-party cloud providers. The cloud offers many competitive advantages over on-premises deployments including lower costs, high availability, unprecedented scalability, and ease of deployment and maintenance. At the same time, the rise of a hybrid transaction and analytics processing (HTAP) systems presents an additional promise to address the need for real-time data-driven business intelligence by supporting both transactional as well as analytical functions in a single platform. Privacy, legal, and political constraints, however, require organizations to minimize and formally quantify the information leaked outside their organizational boundaries. While there has been much work on building query answering systems on untrusted hardware using encrypted databases and multiparty computation, almost none of these efforts handle database updates, support transactions with interleaving operations, or offer recovery from failures while ensuring strong privacy guarantees. This work will exploit synergies among four areas of research -- databases, oblivious RAMs, secure multiparty computation, and differential privacy. Quicksilver will make it possible to query sensitive data while outsourcing database operations to untrusted cloud providers and this work will have immediate implications for healthcare, federal statistical agencies such as the US Census Bureau, finance, and education. The investigators will integrate this research into a comprehensive education, dissemination and outreach plan that will result in (a) new graduate and undergraduate and graduate courses with open-source materials, (b) the mentoring of graduate students -- especially women and URMs -- on techniques for thriving during their studies, (c) open-source lesson plans for high school teachers on data science, and (d) courses for employees of federal agencies on these topics. In this project, the investigators will design, implement, and evaluate principled techniques for data processing on untrusted third-party platforms. The investigators will first design and implement efficient protocols for updating databases using techniques in cryptography, differential privacy, and systems. They will then create and evaluate algorithms for privacy-preserving concurrency control so that Quicksilver’s transactions will offer interleaving transactions with atomicity, consistency, isolation, and durability (ACID), the gold standard of database systems. In addition, this work will result in protocols for transaction recovery under secure computation when individual cloud nodes fail mid-transaction. This research will reveal novel techniques in oblivious query processing, secure multiparty computation, and differentially-private algorithms.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

企业、非营利组织和其他组织越来越多地将其数据库需求外包给第三方云提供商。与本地部署相比，云具有许多竞争优势，包括更低的成本、高可用性、前所未有的可扩展性以及易于部署和维护。与此同时，混合交易和分析处理(HTAP)系统的兴起提供了额外的承诺，通过在单个平台中支持交易和分析功能来满足对实时数据驱动的商业智能的需求。然而，隐私、法律和政治限制要求组织将泄露到其组织边界之外的信息降至最低并正式量化。虽然在使用加密数据库和多方计算在不受信任的硬件上构建查询应答系统方面已经做了很多工作，但几乎没有一项工作处理数据库更新、支持具有交错操作的事务或在确保强大隐私保证的同时提供故障恢复。这项工作将利用四个研究领域之间的协同效应--数据库、不经意的RAM、安全多方计算和差异隐私。QuickSilver将使查询敏感数据成为可能，同时将数据库操作外包给不受信任的云提供商，这项工作将对医疗保健、联邦统计机构(如美国人口普查局)、金融和教育产生直接影响。调查人员将把这项研究整合到一个全面的教育、传播和推广计划中，这将导致(A)使用开源材料开设新的研究生、本科生和研究生课程，(B)指导研究生--特别是女性和城市管理人员--在他们的学习中取得成功的技巧，(C)为高中教师提供数据科学的开源课程计划，以及(D)为联邦机构的雇员提供关于这些主题的课程。在这个项目中，调查人员将设计、实现和评估在不可信的第三方平台上处理数据的原则性技术。调查人员将首先使用密码学、差异隐私和系统方面的技术设计和实现高效的数据库更新协议。然后，他们将创建和评估保护隐私的并发控制算法，以便QuickSilver的交易将提供具有原子性、一致性、隔离性和持久性(ACID)的交错交易，ACID是数据库系统的黄金标准。此外，这项工作将导致在安全计算下当单个云节点在事务处理过程中失败时的事务恢复协议。这项研究将揭示不经意查询处理、安全多方计算和差异私有算法方面的新技术。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

AntMan: Interactive Zero-Knowledge Proofs with Sublinear Communication

• DOI: 10.1145/3548606.3560667
• 发表时间: 2022-11
• 期刊: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Chenkai Weng;Kang Yang;Zhaomin Yang;Xiang Xie;Xiao Wang

Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization

• 发表时间: 2021-06
• 作者: Lixu Wang;Shichao Xu;Ruiqi Xu;Xiao Wang;Qi Zhu

ZKSQL: Verifiable and Efficient Query Evaluation with Zero-Knowledge Proofs

• DOI: 10.14778/3594512.3594513
• 发表时间: 2023-04
• 期刊: Proc. VLDB Endow.
• 作者: Xiling Li;Chenkai Weng;Yongxin Xu;Xiao Wang;Jennie Duggan

ppSAT: Towards Two-Party Private SAT Solving

ppSAT：迈向两方私人 SAT 解决方案

• 发表时间: 2022
• 期刊: USENIX
• 作者: Luo, N;Judson, S;Antonopoulos, T;Piskac, R;Wang, X
• 通讯作者: Wang, X

Practical Security and Privacy for Database Systems

数据库系统的实用安全和隐私

• DOI: 10.1145/3448016.3457544
• 发表时间: 2021
• 期刊: IGMOD '21: Proceedings of the 2021 International Conference on Management of Data
• 作者: Xi He, Jennie Rogers