Attribute fragmentation and encryption to enforce privacy in outsourced database services

YongHong Yu,Wenyang Bai

2010-01-01

Journal of Computational Information Systems

Abstract:Advances in networking technologies and the continued growth of the internet have triggered a new trend towards outsourcing data management and information technology needs to external service providers. Technical considerations and many significant commercial and legal regulations demand that privacy guarantees be provided whenever sensitive information is stored, processed, or communicated to external parties. It is therefore crucial to design solutions able to respond to this demand with a clear integration strategy for existing applications and a consideration of the performance impact of the protection measures. In this paper, we propose a solution to enforce data privacy over outsourced database services. The approach starts from a flexible definition of privacy constraints on a relational schema, applies encryption on information in parsimonious way and mostly relies on attribute fragmentation to protect sensitive information. Based on the approximation algorithm for the minimal encryption attribute fragmentation, assisting by detecting quasi-identifier automatically, the approach allow storing the outsourced data on a single database server and minimizing the amount of data represented in encrypted format. Based on the decomposition of SQL queries, the approach allows executing queries over encrypted outsourced database efficiently. The theoretical analysis and experimental results show that our new model can provide efficient data privacy protection and query processing. © 2010 Binary Information Press.