Privacy preserving database system

隐私保护数据库系统

• 批准号: 105566-2007
• 负责人: Barker, Kenneth
• 金额: $ 1.89万
• 依托单位: University of Calgary
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2007
• 资助国家: 加拿大
• 起止时间: 2007-01-01 至 2008-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=361150
• 关键词: Privacy; preserving; database; system

A Privacy Preserving Database Management System (DBMS) provides the core functions expected of any DBMS while guaranteeing data provided by a supplier is only used for its intended purpose. This research will develop a DBMS that includes privacy as a core feature rather than as an "add-on" to an existing non-privacy aware DBMS. The goal is to develop a system where data providers supply information with explicit privacy requirements, possibly different requirements for different kinds of data, while the DBMS itself can collect the data at any level but only use it in concordance with the privacy specified by the provider. Thus, the data provider's privacy is preserved by the DBMS.Once the privacy model is developed and demonstrated to be correct and complete, the approach is to take an existing DBMS, probably open source, and add these privacy features by wrapping an existing DBMS with them. This will not require changes to the DBMS engine itself and will provide insights into how to add privacy retroactively to legacy systems. Based on the lessons learned from this extension, the model will be incorporated directly into an open source DBMS engine to create a privacy-preserving one that is native in that all features are implemented within the engine itself. Thus, the native PP-DBMS will incorporate the privacy model in all components of a DBMS engine including the user interface, query processor, and transaction manager. This will ultimately lead to a system that can provide stronger security and provide users with increased privacy protection.The work will be undertaken in collaboration with several other academic researchers and industrial partners will be sought to develop commericialization possibilities.

隐私保护数据库管理系统(DBMS)提供任何DBMS应有的核心功能，同时保证供应商提供的数据仅用于其预期目的。这项研究将开发一个将隐私作为核心功能的数据库管理系统，而不是作为现有的非隐私意识数据库管理系统的“附加组件”。目标是开发一种系统，在该系统中，数据提供者提供具有明确隐私要求的信息，可能对不同种类的数据有不同的要求，而数据库管理系统本身可以在任何级别收集数据，但仅根据提供者指定的隐私使用数据。一旦隐私模型被开发并被证明是正确和完整的，方法是采用现有的DBMS，可能是开源的，并通过包装现有的DBMS来添加这些隐私特性。这将不需要对DBMS引擎本身进行更改，并将提供有关如何向遗留系统追溯添加隐私的见解。根据从这个扩展中学到的经验教训，该模型将被直接合并到一个开源DBMS引擎中，以创建一个原生的隐私保护引擎，因为所有功能都在引擎本身内实现。因此，原生PP-DBMS将隐私模型合并到DBMS引擎的所有组件中，包括用户界面、查询处理器和事务管理器。这最终将导致一个能够提供更强的安全性并为用户提供更多隐私保护的系统。这项工作将与其他几名学术研究人员合作进行，并将寻求行业合作伙伴开发商业化的可能性。