h(k)‐private information retrieval from privacy‐uncooperative queryable databases
Josep Domingo‐Ferrer, Agustí Solanas, Jordi Castellà‐Roca · Online Information Review · 2009
Purpose This paper aims to address the privacy problem associated with the use of internet search engines. The purpose of the paper is to propose and validate a set of methods and protocols to guarantee the privacy of users' queries. Design/methodology/approach In this paperh(k)‐private information retrieval (h(k)‐PIR) is defined as a practical compromise between computational efficiency and privacy. Also presented areh(k)‐PIR protocols that can be used to query any database, which does not even need to know that the user is trying to preserve his or her privacy. Findings The proposed methods are able to properly protect the privacy of users' queries. When internet users apply the protocols, search engines (e.g. Google) are not able to determine unequivocally the real interests of their users. The quality of the results does decrease with the increase in privacy, but the obtained trade‐off is excellent. Practical implications Current private information retrieval (PIR) protocols suffer from two significant shortcomings: their computational complexity isO(n) wherenis the number of records in the database, which precludes their use for very large databases and web search engines; and they assume that the database server cooperates in the PIR protocol, which prevents deployment in real‐life uncooperative settings. The proposed protocols overcome both problems. Originality/value This is the first set of protocols that offer practical protection for the privacy of the queries that internet users submit to an internet search engine. The proposal has been implemented and it will be released to the general public soon. It will help to protect the right to privacy of millions of internet users.