Abstract:Due to the advantages of pay-on-demand, expand-on-demand and high availability, cloud databases (CloudDB) have been widely used in information systems. However, since a CloudDB is distributed on an untrusted cloud side, it is an important problem how to effectively protect massive private information in the CloudDB. Although traditional security strategies (such as identity authentication and access control) can prevent illegal users from accessing unauthorized data, they cannot prevent internal users at the cloud side from accessing and exposing personal privacy information. In this paper, we propose a client-based approach to protect personal privacy in a CloudDB. In the approach, privacy data before being stored into the cloud side, would be encrypted using a traditional encryption algorithm, so as to ensure the security of privacy data. To execute various kinds of query operations over the encrypted data efficiently, the encrypted data would be also augmented with additional feature index, so that as much of each query operation as possible can be processed on the cloud side without the need to decrypt the data. To this end, we explore how the feature index of privacy data is constructed, and how a query operation over privacy data is transformed into a new query operation over the index data so that it can be executed on the cloud side correctly. The effectiveness of the approach is demonstrated by theoretical analysis and experimental evaluation. The results show that the approach has good performance in terms of security, usability and efficiency, thus effective to protect personal privacy in the CloudDB.

Integrating secure database access control and privacy protection

Integrated privacy protection and access control over outsourced database services

A Reference Model And System Architecture For Database Firewall

Integrated Security over Outsourced Database Services Based on Encryption

One Method and Implementation of Security-Policy-based Data Protection

Threat Analysis And Security Protection For Malicious Dbms

Progress of Cryptographic Access Control and Encryption Security Database

Privacy-Aware Data Purpose Based Access Control for Relational Database

Authorisation and access control architecture as a framework for data and privacy protection

CPP: Towards Comprehensive Privacy Preserving for Query Processing in Information Networks.

Overview of Privacy Protection Technology Based on Database Application

Database System Model to Strengthen Safety

Dynamic and Semantic-Aware Access-Control Model for Privacy Preservation in Multiple Data Center Environments

An Effective Approach for the Protection of Privacy Text Data in the CloudDB

View-based access control mechanism for spatial database

Controlling Information Leakage of Fine-Grained Access Model in DBMSs

Providing Ontology-Based Privacy-Aware Data Access Through Web Services and Service Composition.

Value versus damage of information release: A data privacy perspective

Application of Access Control Model for Confidential Data

Distributed secure database service based on sensitive data encryption

PRIVACY-PRESERVING OLAP FOR ACCURATE ANSWER