面向DaaS的隐私保护机制研究综述

Research on privacy preservation mechanism for DaaS

DaaS是基于云基础设施对外提供数据库服务的云服务模式,能有效地解决个人和企业处理海量数据所带来的存储、管理压力,但隐私泄露极大地阻碍了DaaS的发展,如何增强现有DaaS模式的隐私保护成为亟需解决的问题。首先通过文献分析的方法剖析了DaaS的服务框架及其隐私泄露模型,接着对DaaS中实现委托数据的机密性、对机密数据查询过程中的隐私保护及查询结果的验证、委托数据完整性验证过程中隐私保护三个方面的发展现状进行了综合分析。通过分析得出,现有的隐私保护方法对DaaS中数据更新和查询效率方面的支持及其实用性都存在不同程度的缺陷,如何设计高效的机密性算法和保护隐私的数据查询及查询结果验证仍是未来研究的重点。最后展望了未来的研究方向。

DaaS is a kind of cloud service which can provide the database services for others based on cloud infrastructure. It can effectively solve the difficulty of storage and management for massive data of individuals and enterprises. However, privacy leaks greatly hinder the development of DaaS. How to enhance the privacy protection of the existing DaaS becomes an urgent problem needed to be solved. Adopting the literature analysis method, this paper firstly summarized service architecture of DaaS and its privacy leaks mode. Then comprehensively analyzed the present researches on data confidentiality, query privacy preserving and query result validation, privacy preserving during data integrity validation of DaaS. From the analysis, it can be inferred that existing privacy preserving methods exist varying degrees of impairment in the aspects of efficiency of data update and query of DaaS and its practical applications. How to design more efficient algorithms for data confidential and the data que- ries with privacy preserving and query resuhs validation are still the future research focus. Finally, it gave the he future re- search directions of in the privacy preserving in DaaS.