Self-enforcing Private Inference Control

Private inference control enables simultaneous enforcement of inference control and protection of users’ query privacy. Private inference control is a useful tool for database applications, especially when users are increasingly concerned about individual privacy nowadays. However, protection of query privacy on top of inference control is a double-edged sword: without letting the database server know the content of user queries, users can easily launch DoS attacks. To assuage DoS attacks in private inference control, we propose the concept of self-enforcing private inference control, whose intuition is to force users to only make inference-free queries by enforcing inference control themselves; otherwise, penalty will inflict upon the violating users. Towards instantiating the concept, we formalize a model on self-enforcing private inference control, and propose a concrete provably secure scheme, based on Woodruff and Staddon’s work. In our construction, “penalty” is instant...

• Type: Conference
• Year: 2009
• Where: PROVSEC
• Authors: Yanjiang Yang, Yingjiu Li, Jian Weng, Jianying Zhou, Feng Bao
• Keywords: Inference Control, Private Inference Control, PROVSEC 2009, Security Privacy, Self-enforcing Private Inference