Publication Type

Journal Article

Version

acceptedVersion

Publication Date

3-2017

Abstract

We present a public key encryption scheme for relational databases (PKDE) that allows the owner to control the execution of cross-relation joins on an outsourced server. The scheme allows anyone to deposit encrypted records in a database on the server. Thereafter, the database owner may authorize the server to join any two relations to identify matching records across them, while preventing self-joins that would reveal information on records that are unmatched in the join. The security of our construction is formally proved in the random oracle model based on the computational bilinear Diffie-Hellman assumption. Specifically, before a relation is joined, its encrypted records enjoy IND-CCA2 security; after a join, our scheme offers One-Way CCA2 security protection on the records. Our PKDE construction is shown to outperform the only existing

Keywords

Database security, Data encryption, Controlled join, Equality test, Private set intersection, Data outsourcing

Discipline

Computer Sciences | Databases and Information Systems | Information Security

Research Areas

Cybersecurity

Publication

Computer Journal

Volume

60

Issue

4

First Page

600

Last Page

612

ISSN

0010-4620

Identifier

10.1093/comjnl/bxw083

Publisher

Oxford University Press (OUP): Policy A - Oxford Open Option A

Copyright Owner and License

Authors

Additional URL

https://doi.org/10.1093/comjnl/bxw083

Download

Share

COinS