Abstract:Order-preserving encryption (OPE) plays an important role in securing outsourced databases. OPE schemes can be either Stateless or Stateful. Stateful schemes can achieve the ideal security of order-preserving encryption, i.e., “reveal no information about the plaintexts besides order.” However, comparing to stateless schemes, stateful schemes require maintaining some state information locally besides encryption keys and the ciphertexts are mutable. On the other hand, stateless schemes only require remembering encryption keys and thus is more efficient. It is a common belief that stateless schemes cannot provide the same level of security as stateful ones because stateless schemes reveal the relative distance among their corresponding plaintext. In real world applications, such security defects may lead to the leakage of statistical and sensitive information, e.g., the data distribution, or even negates the whole encryption. In this paper, we propose a practical and secure stateless order-preserving encryption scheme. With prior knowledge of the data to be encrypted, our scheme can achieve IND-CCPA (INDistinguishability under Committed ordered Chosen Plaintext Attacks) security for static data set. Though the IND-CCPA security can't be met for dynamic data set, our new scheme can still significantly improve the security in real world applications. Along with the encryption scheme, in this paper we also provide methods to eliminate access pattern leakage in communications and thus prevents some common attacks to OPE schemes in practice.

Additive Order Preserving Encryption Based Encrypted Documents Ranking in Secure Cloud Storage

Secure Ranking over Encrypted Documents

Security Analysis on One-to-Many Order Preserving Encryption-Based Cloud Data Search

Two-Step-Ranking Secure Multi-Keyword Search over Encrypted Cloud Data

MDOPE: Efficient multi-dimensional data order preserving encryption scheme

Semi-order Preserving Encryption

Toward Secure Multikeyword Top-k Retrieval over Encrypted Cloud Data

Order preserving encryption for numeric data

A Practical and Secure Stateless Order Preserving Encryption for Outsourced Databases

Practical Frequency-Hiding Order-Preserving Encryption with Improved Update

Research on order-preserving encryption scheme based on CryptDB

Preferred Keyword Search over Encrypted Data in Cloud Computing.

Enabling Secure and Efficient Ranked Keyword Search over Outsourced Cloud Data

Stateless and Non-Interactive Order-Preserving Encryption for Outsourced Databases through Subtractive Homomorphism

A Review of Order Preserving Encryption Schemes

Efficient Privacy-Preservation Multi-factor Ranking with Approximate Search over Encrypted Big Cloud Data.

A Ranked Searchable Encryption Scheme For Encrypted Data Hosted On The Public Cloud

Multi-keyword ranked searchable encryption scheme with access control for cloud storage

Efficient privacy‐preserving scheme supporting disjunctive multi‐keyword search with ranking

Secure and Efficient Multi-Attribute Range Queries Based on Comparable Inner Product Encoding

Encryption Algorithm Supporting Relational Calculations in Cloud Computing