Abstract:Order-preserving encryption (OPE) is a fundamental cryptographic tool for enabling efficient range queries on encrypted data in outsourced databases. Despite its importance, existing OPE schemes face critical limitations that hinder their practicality. Stateful designs require clients to maintain plaintext-to-ciphertext mappings, imposing significant storage and management overhead. Stateless designs often rely on interactive protocols between the client and server, leading to high communication latency and limited scalability. These limitations make existing schemes unsuitable for real-world applications that demand simplicity, efficiency, and scalability. In this work, we present Homomorphic OPE (HOPE), a new OPE scheme that eliminates client-side storage and avoids additional client-server interaction during query execution. HOPE leverages the additive property of homomorphic encryption to introduce a novel comparison key mechanism, which transforms ciphertext comparison into a randomized difference computation. This mechanism ensures that only the sign of the comparison is preserved while fully masking the underlying plaintext values, enabling secure and efficient range queries without leaking additional information about the data. We provide a formal cryptographic analysis of HOPE, proving its security under the widely accepted IND-OCPA model. Our proofs rigorously demonstrate that the comparison key mechanism reveals no information beyond the order of the plaintexts and ensures resistance to both chosen-plaintext attacks and frequency analysis. To validate the practicality of HOPE, we conduct extensive experiments comparing it with state-of-the-art OPE schemes. The results demonstrate that HOPE achieves competitive query performance while addressing the key limitations of existing designs, making it a scalable and secure solution for outsourced database systems.

Secure and Efficient Multi-Attribute Range Queries Based on Comparable Inner Product Encoding

A Secure and Fast Range Query Scheme for Encrypted Multi-Dimensional Data

Privacy-Preserving Multi-Range Queries for Secure Data Outsourcing Services

Ciphertext Range Query Scheme Against Agent Transfer and Permission Extension Attacks for Cloud Computing

ServeDB: Secure, Verifiable, and Efficient Range Queries on Outsourced Database

Secure Range Queries for Multiple Users

BOPE: Boundary Order-Preserving Encryption Scheme in Relational Database System

HOPE: Homomorphic Order-Preserving Encryption for Outsourced Databases -- A Stateless Approach

Security Analysis on One-to-Many Order Preserving Encryption-Based Cloud Data Search

<i>HEDA</i>: Multi-Attribute Unbounded Aggregation over Homomorphically Encrypted Database

Verifiable inner product computation on outsourced database for authenticated multi-user data sharing

Predicate- and Attribute-Hiding Inner Product Encryption in a Public Key Setting

Efficient Privacy-Preservation Multi-factor Ranking with Approximate Search over Encrypted Big Cloud Data.

Range Queries on Two Column Data

Efficient Inner Product Encryption With Simulation-Based Security

Volume-Hiding Range Searchable Symmetric Encryption for Large-Scale Datasets

Efficient Privacy-Preserving Multi-Dimensional Range Query for Cloud-Assisted Ehealth Systems

Attribute-Based Equality Test Over Encrypted Data Without Random Oracles

Efficient personalized search over encrypted data for mobile edge-assisted cloud storage

Preferred Keyword Search over Encrypted Data in Cloud Computing.

Flexible symmetric predicate encryption for data privacy in IoT environments