SBIR Phase I: Encrypted Databases: From Theory to Systems

该小型企业创新研究（SBIR）第一阶段项目的更广泛影响/商业潜力包括：（1）防止服务器级数据泄露;（2）增加云计算的采用;特别是在本质上处理敏感数据并受监管的部门。这包括医疗保健和金融行业以及政府机构。数据泄露正在以惊人的速度发生，并影响到政府的每个行业和部门。该项目使客户能够搜索和查询数据，而无需对其进行解密，从而有效地保护数据免受服务器级别的破坏。来自金融和医疗行业的潜在客户在接受采访时表示，由于一些数据的敏感性，他们对云计算的采用已经放缓。他们无法使用云来存储和分析高度敏感的数据，这是非常昂贵的，因为他们必须建立和维护内部部署的基础设施来处理它。这个项目的结果将使客户能够利用云计算，甚至是他们最敏感的数据，并从中受益。从社会的角度来看，该项目提高了用户的安全性和隐私，并有助于实现合规性，同时减少对网络安全的投资。该小型企业创新研究（SBIR）第一阶段项目旨在设计，构建和评估商业上可行的加密关系数据库系统。该项目将解决在这项技术被广泛采用之前需要克服的各种技术挑战。第一个是与现有数据库管理系统（DBMS）的集成。商业数据库系统受益于40多年的研究，优化和工程突破。虽然为这个项目提出的新的加密技术在安全性和效率方面有很多优点，但在没有完全重新设计的情况下，如何将它们集成到标准的DBMS中并不是先验的。为了应对这一挑战，该项目利用了一种称为仿真的新算法范例，将这些新的加密技术与标准的商业DBMS无缝集成。该项目解决的第二个挑战是具体的现实世界效率。理论分析表明，该方法是渐近有效的。然而，拟议的工作将表明，它也是有效的，在实践中对真实的数据和对真实的数据库benchmarks.This奖项反映了NSF的法定使命，并已被认为是值得的支持，通过评估使用基金会的知识价值和更广泛的影响审查标准。

The broader impact/commercial potential of this Small Business Innovation Research (SBIR) Phase I project consists of (1) preventing server-level data breaches; and (2) increasing adoption of cloud computing; especially in sectors that inherently deal with sensitive data and are subject to regulation. This includes the healthcare and finance industries as well as government agencies. Data breaches are occurring at an alarming rate and affecting every industry and sector of government. This project enables customers to search and query data without ever needing to decrypt it, effectively protecting data against server-level breaches. Potential customers from the financial and healthcare industries said in interviews that their adoption of cloud computing had been slowed due to the sensitivity of some of their data. Their inability to use the cloud to store and analyze highly sensitive data is very costly since they have to build and maintain on-premise infrastructures to handle it. The outcome of this project will enable customers to make use of and benefit from cloud computing even for their most sensitive data. From a societal standpoint, this project increases user security and privacy and helps achieve regulatory compliance while investing less in cybersecurity.This Small Business Innovation Research (SBIR) Phase I project aims to design, build and evaluate a commercially viable encrypted relational database system. The project will tackle a variety of technical challenges that need to be overcome before this technology can see widespread adoption. The first is integration with existing database management systems (DBMSs). Commercial database systems benefit from over 40 years of research, optimization and engineering breakthroughs. While the new cryptographic techniques proposed for this project have many advantages in terms of security and efficiency, it is not a-priori clear how to integrate them into a standard DBMS without a complete re-design. To address this challenge, this project leverages a new algorithmic paradigm called emulation that seamlessly integrates these new cryptographic techniques with standard commercial DBMSs. The second challenge this project addresses is concrete real-world efficiency. The theoretical analysis of the proposed solution shows that it is asymptotically efficient. The proposed work, however, will show that it is also efficient in practice on real data and against real database benchmarks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.