Skip to Main content Skip to Navigation
New interface
Conference papers

A User Privacy Protection Technique for Executing SQL over Encrypted Data in Database Outsourcing Service

Abstract : The fact that the data owners outsource their data to external service providers introduces many security and privacy issues. Among them, the most significant research questions relate to data confidentiality and user privacy. Encryption was regarded as a solution for data confidentiality. The privacy of a user is characterized by the query he poses to the server and its result. We explore the techniques to execute the SQL query over the encrypted data without revealing to the server any information about the query such as the query type or the query pattern, and its result. By implementing all the relational operators by using the unique selection operator on the server-side database with a constant number of elements in each time of selection, our proposal can defeat against the statistical attacks of the untrusted server compromising data confidentiality and user privacy. Experimental evaluation demonstrates that our proposal less affects the system’s performance and is applicable in the real world.
Complete list of metadata

Cited literature [9 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Friday, February 17, 2017 - 3:18:31 PM
Last modification on : Saturday, December 16, 2017 - 6:54:03 AM
Long-term archiving on: : Thursday, May 18, 2017 - 2:49:47 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



T. P. Hue, D. N. Thuc, T. D. Thuy, Isao Echizen, S. Wohlgemuth. A User Privacy Protection Technique for Executing SQL over Encrypted Data in Database Outsourcing Service. 12th Conference on e-Business, e-Services, and e-Society (I3E), Apr 2013, Athens, Greece. pp.25-37, ⟨10.1007/978-3-642-37437-1_3⟩. ⟨hal-01470566⟩



Record views


Files downloads