Secure Query Answering for Outsourced Databases in Cloud Computing

云计算中外包数据库的安全查询应答

• 批准号: RGPIN-2014-06027
• 负责人: Wang, Ke
• 金额: $ 3.93万
• 依托单位: Simon Fraser University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2016
• 资助国家: 加拿大
• 起止时间: 2016-01-01 至 2017-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=611983
• 关键词: Secure; Query; Answering; Outsourced; Databases

Cloud computing is no doubt an effective approach to deal with “big data”, through providing on-demand high quality services from powerful and configurable computing resources hosted by a third party called the cloud. One application of cloud computing is “database as a service”, where the data owner outsources complex database management systems into the cloud. A major obstacle to this application is the confidentiality of sensitive data since the cloud server is not under the control of the data owner and is untrusted. To protect data privacy and confidentiality, sensitive data must be encrypted before being outsourced to the cloud server. This, however, renders traditional query processing methods (such as indexing) inapplicable because all such methods operate on the plaintext data. Thus, query processing over encrypted data is a new research issue and of paramount importance. There are three requirements to be addressed. The first is confidentiality, that is, the cloud server should not learn anything other than the query result through storing the data and computing the query. The second is authentication where the user should be able to detect the occurrence of the event if the server does not follow the prescribed protocol or tampers with the data or query result. The third is efficiency where the method should be scalable to data at the cloud scale. This requires indexing and computational methods that work directly on encrypted data without scanning the entire database. Cryptography is traditionally a field addressing the first requirement, but the methods developed do not scale up to the cloud scale because a full scan of database often is required. Recent developments in databases and information retrieval address some of these issues, but to our knowledge, no work has addressed all three requirements. In addition, data grows dynamically and the above requirements must be met over time. Initial studies suggest that a “searchable encryption” that addresses all of the above requirements is possible for certain types of queries under some relaxed requirement of confidentiality. The objective of this proposal is to investigate the trade-off between searchability and confidentiality and propose solutions to searchable encryption for larger classes of queries while providing practically acceptable confidentiality. The innovation of this proposal is combining the techniques from databases, cryptography, and information retrieval, which traditionally has different focuses, to address this challenging problem. The outcome of this project will provide methodologies for more secure execution of cloud computing, therefore, benefit all of the data owners, cloud servers, and data users.

云计算无疑是处理“大数据”的一种有效方法，它通过由第三方云托管的强大且可配置的计算资源提供按需高质量的服务。云计算的一个应用是“数据库即服务”，数据所有者将复杂的数据库管理系统外包到云中。此应用程序的一个主要障碍是敏感数据的机密性，因为云服务器不在数据所有者的控制之下，并且不受信任。为了保护数据隐私和机密性，敏感数据必须在外包给云服务器之前进行加密。然而，这使得传统的查询处理方法（如索引）不适用，因为所有这些方法都对明文数据进行操作。因此，对加密数据的查询处理是一个非常重要的新研究课题。