Provably-Secure Schemes for Basic Query Support in Outsourced Databases

In this paper, we take a closer look at the security of outsourced databases (aka Database-as-the-Service or DAS), a topic of emerging importance. DAS allows users to store sensitive data on a remote, untrusted server and retrieve desired parts of it on request. At first we focus on basic, exact-match query functionality, and then extend our treatment to prefix-matching and, to a more limited extent, range queries as well. We propose several searchable encryption schemes that are not only practical enough for use in DAS in terms of query-processing efficiency but also provably-provide privacy and authenticity of data under new definitions of security that we introduce. The schemes are easy to implement and are based on standard cryptographic primitives such as block ciphers, symmetric encryption schemes, and message authentication codes. As we are some of the first to apply the provable-security framework of modern cryptography to this context, we believe our work will help to pr...

• Type: Conference
• Year: 2007
• Where: DBSEC
• Authors: Georgios Amanatidis, Alexandra Boldyreva, Adam O'Neill
• Keywords: DAS Allows Users, Database, DBSEC 2007, Encryption Schemes, Searchable Encryption Schemes