摘要
外包数据库中的数据隐私和用户隐私保护是现代外包数据库服务面临的新挑战,针对目前外包数据库服务中单方面考虑数据隐私保护或用户隐私保护技术难以同时满足外包数据库安全需求的不足,提出一种可同时强制数据隐私和用户隐私保护的外包数据库服务模型,采用属性分解和部分属性加密技术,基于结合准标志集自动检测技术的近似算法实现外包数据的最小加密属性分解,同时把密码学应用于辅助随机服务器协议,以实现数据库访问时的用户隐私保护。理论分析和实验结果表明,该模型可以提供有效的数据隐私保护和查询处理,以及较好的用户隐私保护计算复杂度。
It is crucial to design solutions able to respond to privacy guarantees with a clear integration strategy for existing ap- plications and a consideration of the performance impact of the protection measures. This paper proposed a novel solution to enforce data privacy and user privacy over outsourced database services. The approach started from a flexible definition of pri- vacy constraints on a relational schema, applied encryption on information in a parsimonious way and mostly relied on attribute partition to protect sensitive information. Based on the approximation algorithm for the minimal encryption attribute partition with quasi-identifier detection, the approach allow storing the outsourced data on an untrusted database server and minimizing the amount of data represented in encrypted format, it could also solve the problem of private information retrieval to protect user privacy by applying cryptographic technology on the auxiliary random server protocol. The theoretical analysis and experi- mental resuhs show that the new model can provide efficient data privacy protection and query processing, efficient in computa- tional complexity and dose not increase the cost of communication complexity of user privacy protection.
出处
《计算机应用研究》
CSCD
北大核心
2011年第1期304-308,共5页
Application Research of Computers
基金
国家"863"计划资助项目(2007AA01Z448)
安徽省省级高校自然科学研究重点项目(KJ2010A003)
南京大学计算机软件新技术国家重点实验室开放课题(KFKT2010B01)
关键词
外包数据库服务
数据隐私
用户隐私
属性分解
加密
outsourced database services
data privacy
user privacy
attribute partition
encryption