Restricted Queries over an Encrypted Index with Applications to Regulatory Compliance

Compliance storage is an increasingly important area for businesses faced with a myriad of new document retention regulations. Today, businesses have turned to Write-One Read Many (WORM) storage technology to achieve compliance. But WORM answers only a part of the compliance puzzle; in addition to guaranteed document retention, businesses also need secure indexing, to ensure auditors can find required documents in a large database, secure deletion to expire documents (and their index entries) from storage once they are past their expiry period, and support for litigation holds, which require that certain documents are retained pending the resolution of active litigation. We build upon previous work in compliance storage and attribute-based encryption to design a system that satisfies all three of these requirements. In particular, we design a new encrypted index, which allows the owner of a database of documents to grant access to only those documents that match a particular query. T...

• Type: Conference
• Year: 2008
• Where: ACNS
• Authors: Nikita Borisov, Soumyadeb Mitra
• Keywords: ACNS 2008, Compliance Storage, Cryptography, Document Retention, Documents