Key management for multi-user encrypted databases

Database outsourcing is becoming increasingly popular introducing a new paradigm, called database-as-a-service (DAS), where an organization’s database is stored at an external service provider. In such a scenario, access control is a very important issue, especially if the data owner wishes to publish her data for external use. In this paper, we first present our approach for the implementation of access control through selective encryption. The focus of the paper is then the presentation of the experimental results, which demonstrate the applicability of our proposal. Categories and Subject Descriptors: H.2.1 [Database Management]: Logical Design; H.2.7 [Database Management]: Database Administration General Terms: Security, Management, Experimentation.

• Type: Conference
• Year: 2005
• Where: STORAGESS
• Authors: Ernesto Damiani, Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Stefano Paraboschi, Pierangela Samarati
• Keywords: Access Control, Database, External Service Provider, STORAGESS 2005