基于STE的减少查询泄露的关系数据库加密方案

苏雨晨; 马昌社

doi:10.11959/j.issn.2096-109x.2024020

您当前的位置：

首页 >

文章列表页 >

基于STE的减少查询泄露的关系数据库加密方案

学术论文 | 更新时间：2024-08-14

- 基于STE的减少查询泄露的关系数据库加密方案
- STE-based encrypted relational database scheme with reduced leakages
- 网络与信息安全学报 2024年10卷第2期页码：165-181
- 作者机构：
  
  华南师范大学计算机学院，广东广州 510631
- 作者简介：
  
  [ "苏雨晨（2000- ），女，湖南益阳人，华南师范大学硕士生，主要研究方向为可搜索加密、加密数据库。" ]
  [ "马昌社（1974- ），男，湖南邵阳人，博士，华南师范大学教授，主要研究方向为加密数据隐私计算、应用密码技术。" ]
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2024020
  中图分类号： TP309
- 收稿：2023-11-14，
  
  修回：2024-03-04，
  
  纸质出版：2024-04-15
- 稿件说明：
移动端阅览
苏雨晨, 马昌社. 基于STE的减少查询泄露的关系数据库加密方案[J]. 网络与信息安全学报, 2024, 10(02): 165-181.

Format: SU Y C, MA C S. STE-based encrypted relational database scheme with reduced leakages[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 165-181.
苏雨晨, 马昌社. 基于STE的减少查询泄露的关系数据库加密方案[J]. 网络与信息安全学报, 2024, 10(02): 165-181. DOI： 10.11959/j.issn.2096-109x.2024020.

Format: SU Y C, MA C S. STE-based encrypted relational database scheme with reduced leakages[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 165-181. DOI： 10.11959/j.issn.2096-109x.2024020.

摘要

近年提出的基于部分预计算的SQL连接索引（PpSj）方案是一种基于结构化加密技术的关系数据库加密方案，它利用部分预计算索引连接技术和过滤哈希集技术支持高效的连接查询和布尔查询。但是，该方案也存在一些缺陷，主要表现在执行布尔查询时会泄露过多的信息，以及不能支持范围查询。针对这些问题，提出一种改进的多功能加密数据库（MFEDB）方案，该方案在PpSj方案基础上，引入一种混合过滤技术，结合2种过滤方法，减少了布尔查询的信息泄露，扩展了支持的结构化查询语言（SQL）的查询子集，包括等值查询、连接查询、布尔查询和范围查询，同时平衡了服务器存储开销与客户端和服务器之间产生的通信开销。

Abstract

Recently

the concept of partially precomputed indexing for Structured query language (SQL) join (PpSj)

which was predicated on structured encryption

has been introduced. This approach employed partial precomputed index join and hash filter set technology to facilitate efficient execution of join queries and Boolean queries. However

the scheme has encountered some limitations

primarily characterized by excessive information leakage during the execution of Boolean queries and an inability to support range queries. To resolve these issues

an enhanced relation database encryption scheme

termed multi-function encrypted database (MFEDB)

was proposed. This scheme incorporated a hybrid filter technique derived from the PpSj scheme

integrating two filtering methods. It aimed to minimize the information leakage associated with Boolean queries

expand the subset of supported SQL queries to include equivalent queries

join queries

Boolean queries

and range queries

and balance the trade-off between the server's storage costs and the communication overhead between the client and the server.

关键词

Keywords

references

BINDSCHAEDLER V , GRUBBS P , CASH D , et al . The Tao of inference in privacy-protected databases [J ] . Proceedings of the VLDB Endowment , 2018 , 11 ( 11 ): 1715 - 1728 .

BLACKSTONE L , KAMARA S , MOATAZ T . Revisiting leakage abuse attacks [C ] // Proceedings 2020 Network and Distributed . System Security Symposium . Reston : Internet Society , 2020 : 1175 .

DEMERTZIS I , PAPADOPOULOS D , PAPAMANTHOU C , et al . SEAL: attack mitigation for encrypted databases via adjustable leakage [C ] // Proceedings of the 29th USENIX Conference on Security Symposium . New York : ACM Press , 2020 : 2433 - 2450 .

CHASE M , KAMARA S . Structured encryption and controlled disclosure [C ] // Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security . Berlin : Springer , 2010 : 577 - 594 .

KAMARA S , MOATAZ T . SQL on structurally-encrypted databases [C ] // Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security . Cham : Springer , 2018 : 149 - 180 .

CASH D , NG R , RIVKIN A . Improved structured encryption for SQL databases via hybrid indexing [C ] // Proceedings of the International Conference on Applied Cryptography and Network Security . Cham : Springer , 2021 : 480 - 510 .

CASH D , JARECKI S , JUTLA C , et al . Highly-scalable searchable symmetric encryption with support for Boolean queries [C ] // Proceedings of the Annual Cryptology Conference . Berlin : Springer , 2013 : 353 - 373 .

KAMARA S , MOATAZ T . Boolean searchable symmetric encryption with worst-case sub-linear complexity [C ] // Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques . Cham : Springer , 2017 : 94 - 124 .

古宜平 , 马昌社 . 支持联合查询的高效可搜索对称加密方案 [J ] . 华南师范大学学报(自然科学版) , 2020 , 52 ( 3 ): 120 - 128 .

GU Y P , MA C S . Efficient searchable symmetric encryption for conjunctive queries [J ] . Journal of South China Normal University (Natural Science Edition) , 2020 , 52 ( 3 ): 120 - 128 .

SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // Proceedings of IEEE Symposium on Security and Privacy . S&P . Piscataway : IEEE Press , 2000 : 44 - 55 .

CURTMOLA R , GARAY J , KAMARA S , et al . Searchable symmetric encryption: improved definitions and efficient constructions [J ] . Journal of Computer Security , 2011 , 19 ( 5 ): 895 - 934 .

CASH D , JAEGER J , JARECKI S , et al . Dynamic searchable encryption in very-large databases: data structures and implementation [C ] // Proceedings of the 2014 Network and Distributed System Security Symposium . Reston : Internet Society , 2014 : 853 .

DEMERTZIS I , TALAPATRA R , PAPAMANTHOU C . Efficient searchable encryption through compression [J ] . Proceedings of the VLDB Endowment , 2018 , 11 ( 11 ): 1729 - 1741 .

KAMARA S , PAPAMANTHOU C , ROEDER T . Dynamic searchable symmetric encryption [C ] // Proceedings of the 2012 ACM conference on Computer and communications security . New York : ACM press , 2012 : 965 - 976 .

MIERS I , MOHASSEL P . IO-DSSE: scaling dynamic searchable encryption to millions of indexes by improving locality [J ] . Cryptology ePrint Archive . 2017 : 830 .

STEFANOV E , PAPAMANTHOU C , SHI E . Practical dynamic searchable encryption with small leakage [C ] // Proceedings of the 2014 Network and Distributed System Security Symposium . Reston : Internet Society , 2014 : 832 .

BOST R , MINAUD B , OHRIMENKO O . Forward and backward private searchable encryption from constrained cryptographic primitives [C ] // Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security . New York : ACM press , 2017 : 1465 - 1482 .

POPA R A , REDFIELD C M S , ZELDOVICH N , et al . CryptDB: protecting confidentiality with encrypted query processing [C ] // Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles . New York : ACM Press , 2011 : 85 - 100 .

AGRAWAL R , KIERNAN J , SRIKANT R , et al . Order preserving encryption for numeric data [C ] // Proceedings of the 2004 ACM SIGMOD international conference on Management of data . New York : ACM press , 2004 : 563 - 574 .

GRUBBS P , SEKNIQI K , BINDSCHAEDLER V , et al . Leakage-abuse attacks against order-revealing encryption [C ] // Proceedings of the 2017 IEEE Symposium on Security and Privacy (SP) . Piscataway : IEEE Press , 2017 : 655 - 672 .

DURAK F B , DUBUISSON T M , CASH D . What else is revealed by order-revealing encryption? [C ] // Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security . New York : ACM press , 2016 : 1155 - 1166 .

NAVEED M , KAMARA S , WRIGHT C V . Inference attacks on property-preserving encrypted databases [C ] // Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security . New York : ACM press , 2015 : 644 - 655 .

PAPPAS V , KRELL F , VO B , et al . Blind seer: a scalable private DBMS [C ] // Proceedings of the 2014 IEEE Symposium on Security and Privacy . Piscataway : IEEE Press , 2014 : 359 - 374 .

BELLARE M , HOANG V T , ROGAWAY P . Foundations of garbled circuits [C ] // Proceedings of the 2012 ACM conference on Computer and communications security . New York : ACM Press , 2012 : 784 - 796 .

BLOOM B H . Space/time trade-offs in hash coding with allowable errors [J ] . Communications of the ACM , 1970 , 13 ( 7 ): 422 - 426 .

CODD E F . A relational model of data for large shared data banks [J ] . Communications of the ACM , 1970 , 13 ( 6 ): 377 - 387 .

KAMARA S , MOATAZ T , ZDONIK S , et al . An optimal relational database encryption scheme [J ] . IACR Cryptol EPrint Arch , 2020 : 274 .

BELLARE M , CANETTI R , KRAWCZYK H . Pseudorandom functions revisited: the cascade construction and its concrete security [C ] // Proceedings of the 37th Conference on Foundations of Computer Science . Piscataway : IEEE Press , 2002 : 514 - 523 .

DEMERTZIS I , PAPADOPOULOS S , PAPAPETROU O , et al . Practical private range search in depth [J ] . ACM Transactions on Database Systems , 2018 , 43 ( 1 ): 1 - 52 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向IEX方案存储开销优化的方法