Executing SQL over encrypted data in the database-service-provider model

By Hakan Hacıgümüş, B. Iyer, Sharad Mehrotra. ACM SIGMOD Conference, 2002

1,388 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems

View Paper: https://www.semanticscholar.org/paper/c0e3333ec5098fc902bbd7ad30b820ad9b3a324f

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

Citations in the corpus

Secure kNN computation on encrypted databases (2009, neutral): “Copyright 2009 ACM 978-1-60558-551-2/09/06 ...$5.00.”
Dynamic authenticated index structures for outsourced databases (2006, background): “In particular, query execution assurance of [30] does not provide authentication: the server could pass the challenges and yet still return false query results.”
Deterministic and Efficiently Searchable Encryption (2007, background): “Sub-linear time searchable encryption has been much targeted by the database security community [45,3, 36 ,25,38,39,41,37,19,51].”
Order preserving encryption for numeric data (2004, background): “For example, if a column of a table containing sensitive information is encrypted, and is used in a query predicate with a comparison operator, an entire table scan would be needed to evaluate the query.”
Multi-Dimensional Range Query over Encrypted Data (2007, background): “Applications of searchable encryption have been studied by the database community [30, 22, 2].”
Scalable and efficient provable data possession (2008, background): “(In other words, it might maliciously or accidentally erase hosted data; it might also relegate it to slow or o.-line storage.)”
Processing Analytical Queries over Encrypted Data (2013, methodology): “Hacıgümü¸s et al [14] proposed an early approach for executing SQL queries over encrypted data by performing approximate filtering at the server (using bucketing) and performing final query processing at the client, and extended it to handle aggregate queries [15, 16].”
Two Can Keep A Secret: A Distributed Architecture for Secure Database Services (2005, background): “Schemes proposed so far for this model encrypt data on the client side and then store the encrypted database on the server side [ HILM02 , HIM04, AKSX04].”
An Ideal-Security Protocol for Order-Preserving Encoding (2013, methodology): “mOPE is also related to cryptographic schemes for performing range queries over encrypted data [8, 19, 28, 36].”
CryptDB: protecting confidentiality with encrypted query processing (2011, methodology): “[22] heuristically split the domain of possible values for each column into partitions, storing the partition number unencrypted for each data item, and rely on extensive client-side filtering of query results.”
Over-encryption: Management of Access Control Evolution on Outsourced Data (2007, background): “Most proposals assume that the data are encrypted with a single key only [7, 10, 11].”
Privacy preserving decision tree learning over multiple parties (2007, background): “In addition to these, there are several proposals in privacy preserving data outsourcing [20] [21], which propose a new approach for data management, i.e., database as a service, and the goal is to protect the content of the data from database service provider while ensuring efficient query…”
Query Execution Assurance for Outsourced Databases (2005, background): “Ultimately, we believe this e(cid:11)ort and others to bring the \database as a service" paradigm one step closer to being a viable secure alternative for data management.”
Relational Cloud: a Database Service for the cloud (2011, background): “Systems solutions [10, 6, 18] have been proposed, but, relative to our solution, offer much weaker (at best) and compromised security guarantees, require significant client-side query processing and bandwidth consumption, lack core functionality (e.”
A Privacy-Preserving Index for Range Queries (2004, methodology): “In the DAS model, since data is stored at the service provider (that may not be fully trusted) many new security and privacy challenges arise.”
Balancing confidentiality and efficiency in untrusted relational DBMSs (2003, methodology): “The index of range technique proposed in [8] in the framework of a database-service-provider architecture relies on partitioning client tables’ attributes’ domains into sets of intervals.”
TrustedDB: A Trusted Hardware-Based Database with Privacy and Data Confidentiality (2011, background): “Above solutions are specialized for certain types of query operations on encrypted data: [12] for equality predicates, [20], [45], [46] for range predicates, and [19], [42] for aggregation.”