Abstract:Order-preserving encryption (OPE) is a fundamental cryptographic tool for enabling efficient range queries on encrypted data in outsourced databases. Despite its importance, existing OPE schemes face critical limitations that hinder their practicality. Stateful designs require clients to maintain plaintext-to-ciphertext mappings, imposing significant storage and management overhead. Stateless designs often rely on interactive protocols between the client and server, leading to high communication latency and limited scalability. These limitations make existing schemes unsuitable for real-world applications that demand simplicity, efficiency, and scalability. In this work, we present Homomorphic OPE (HOPE), a new OPE scheme that eliminates client-side storage and avoids additional client-server interaction during query execution. HOPE leverages the additive property of homomorphic encryption to introduce a novel comparison key mechanism, which transforms ciphertext comparison into a randomized difference computation. This mechanism ensures that only the sign of the comparison is preserved while fully masking the underlying plaintext values, enabling secure and efficient range queries without leaking additional information about the data. We provide a formal cryptographic analysis of HOPE, proving its security under the widely accepted IND-OCPA model. Our proofs rigorously demonstrate that the comparison key mechanism reveals no information beyond the order of the plaintexts and ensures resistance to both chosen-plaintext attacks and frequency analysis. To validate the practicality of HOPE, we conduct extensive experiments comparing it with state-of-the-art OPE schemes. The results demonstrate that HOPE achieves competitive query performance while addressing the key limitations of existing designs, making it a scalable and secure solution for outsourced database systems.

Secure Parallel Processing of Big Data Using Order-Preserving Encryption on Google BigQuery

Secure Skyline Queries on Cloud Platform

Outsourcing Eigen-Decomposition and Singular Value Decomposition of Large Matrix to a Public Cloud

A Survey on Property-Preserving Database Encryption Techniques in the Cloud

Order-Preserving Database Encryption with Secret Sharing

A Practical and Secure Stateless Order Preserving Encryption for Outsourced Databases

Outsourcing Large-Scale Quadratic Programming to A Public Cloud

Practical-oriented Protocols for Privacy-Preserving Outsourced Big Data Analysis: Challenges and Future Research Directions

HOPE: Homomorphic Order-Preserving Encryption for Outsourced Databases -- A Stateless Approach

ServeDB: Secure, Verifiable, and Efficient Range Queries on Outsourced Database

Protecting Sensitive Tabular Data in Hybrid Clouds

Verifiable inner product computation on outsourced database for authenticated multi-user data sharing

DiCE -- A Data Encryption Proxy for the Cloud

Stateless and Non-Interactive Order-Preserving Encryption for Outsourced Databases through Subtractive Homomorphism

Secure Computation of Top-K Eigenvectors for Shared Matrices in the Cloud

Privacy-Preserving Query over Encrypted Graph-Structured Data in Cloud Computing

A Distributed Approach to Privacy on the Cloud

Enforcing Data Privacy in Outsourced Database Services

Integrated privacy protection and access control over outsourced database services

SGPM: a Privacy Protected Approach of Time-Constrained Graph Pattern Matching in Cloud

QSDB: an Encrypted Database Model for Privacy-Preserving in Cloud Computing.