New Paradigm of Inference Control with Trusted Computing

Abstract. The database server is a crucial bottleneck in traditional inference control architecture, as it enforces highly computation-intensive auditing for all users who query the protected database. As a result, most auditing methods, though rigorously studied, can never be implemented in practice for protecting largescale real-world database systems. To shift this paradigm, we propose a new inference control architecture that will entrust inference control to each users platform, provided that the platform is equipped with trusted computing technology. The trusted computing technology is designed to attest the state of a users platform to the database server, so as to assure the server that inference control could be enforced as expected. A generic protocol is proposed to formalize the interactions between the users platform and database server. Any existing inference control technique can work with our protocol, for which the security properties are formally proven. Since each use...

• Type: Conference
• Year: 2007
• Where: DBSEC
• Authors: Yanjiang Yang, Yingjiu Li, Robert H. Deng
• Keywords: Database, DBSEC 2007, Inference Control, Inference Control Architecture, Users Platform