Abstract:As organizations struggle with processing vast amounts of information, outsourcing sensitive data to third parties becomes a necessity. To protect the data, various cryptographic techniques are used in outsourced database systems to ensure data privacy, while allowing efficient querying. A rich collection of attacks on such systems has emerged. Even with strong cryptography, just communication volume or access pattern is enough for an adversary to succeed. In this work we present a model for differentially private outsourced database system and a concrete construction, $\mathcal{E}\text{psolute}$, that provably conceals the aforementioned leakages, while remaining efficient and scalable. In our solution, differential privacy is preserved at the record level even against an untrusted server that controls data and queries. $\mathcal{E}\text{psolute}$ combines Oblivious RAM and differentially private sanitizers to create a generic and efficient construction. We go further and present a set of improvements to bring the solution to efficiency and practicality necessary for real-world adoption. We describe the way to parallelize the operations, minimize the amount of noise, and reduce the number of network requests, while preserving the privacy guarantees. We have run an extensive set of experiments, dozens of servers processing up to 10 million records, and compiled a detailed result analysis proving the efficiency and scalability of our solution. While providing strong security and privacy guarantees we are less than an order of magnitude slower than range query execution of a non-secure plain-text optimized RDBMS like MySQL and PostgreSQL.

Equivalence-based Security for Querying Encrypted Databases: Theory and Application to Privacy Policy Audits

Secure Skyline Queries on Cloud Platform

Privacy-Preserving Queries On Encrypted Data

SQL queries over encrypted databases: a survey

Secure Computation over Encrypted Databases

QSDB: an Encrypted Database Model for Privacy-Preserving in Cloud Computing.

Attribute-based Queries over Outsourced Encrypted Database.

ServeDB: Secure, Verifiable, and Efficient Range Queries on Outsourced Database

A Quantum-based Database Query Scheme for Privacy Preservation in Cloud Environment

Publicly Verifiable Boolean Query over Outsourced Encrypted Data.

An Efficient and Privacy-Preserving Range Query over Encrypted Cloud Data

Lightweight and Secure Two-Party Range Queries over Outsourced Encrypted Databases

Secure Storage and Fuzzy Query over Encrypted Databases.

Differential Privacy Enhanced Dynamic Searchable Symmetric Encryption for Cloud Environments.

A Survey on Property-Preserving Database Encryption Techniques in the Cloud

Integrated Security over Outsourced Database Services Based on Encryption

$\mathcal{E}\text{psolute}$: Efficiently Querying Databases While Providing Differential Privacy

Sql-Based Fuzzy Query Mechanism Over Encrypted Database

Secure Boolean Queries over Encrypted Data from Indistinguishability Obfuscation

An Improved Scheme for Range Queries on Encrypted Data

Efficient Privacy-Preserving Skyline Queries over Outsourced Cloud