A User Privacy Protection Technique for Executing SQL over Encrypted Data in Database Outsourcing Service

Abstract : The fact that the data owners outsource their data to external service providers introduces many security and privacy issues. Among them, the most significant research questions relate to data confidentiality and user privacy. Encryption was regarded as a solution for data confidentiality. The privacy of a user is characterized by the query he poses to the server and its result. We explore the techniques to execute the SQL query over the encrypted data without revealing to the server any information about the query such as the query type or the query pattern, and its result. By implementing all the relational operators by using the unique selection operator on the server-side database with a constant number of elements in each time of selection, our proposal can defeat against the statistical attacks of the untrusted server compromising data confidentiality and user privacy. Experimental evaluation demonstrates that our proposal less affects the system’s performance and is applicable in the real world.
Document type :
Conference papers
Christos Douligeris; Nineta Polemi; Athanasios Karantjias; Winfried Lamersdorf. 12th Conference on e-Business, e-Services, and e-Society (I3E), Apr 2013, Athens, Greece. Springer, IFIP Advances in Information and Communication Technology, AICT-399, pp.25-37, 2013, Collaborative, Trusted and Privacy-Aware e/m-Services. 〈10.1007/978-3-642-37437-1_3〉
Liste complète des métadonnées

Cited literature [9 references]  Display  Hide  Download

https://hal.inria.fr/hal-01470566
Contributor : Hal Ifip <>
Submitted on : Friday, February 17, 2017 - 3:18:31 PM
Last modification on : Saturday, December 16, 2017 - 6:54:03 AM
Document(s) archivé(s) le : Thursday, May 18, 2017 - 2:49:47 PM

File

978-3-642-37437-1_3_Chapter.pd...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

T. Hue, D. Thuc, T. Thuy, Isao Echizen, S. Wohlgemuth. A User Privacy Protection Technique for Executing SQL over Encrypted Data in Database Outsourcing Service. Christos Douligeris; Nineta Polemi; Athanasios Karantjias; Winfried Lamersdorf. 12th Conference on e-Business, e-Services, and e-Society (I3E), Apr 2013, Athens, Greece. Springer, IFIP Advances in Information and Communication Technology, AICT-399, pp.25-37, 2013, Collaborative, Trusted and Privacy-Aware e/m-Services. 〈10.1007/978-3-642-37437-1_3〉. 〈hal-01470566〉

Share

Metrics

Record views

214

Files downloads

24