Enabling Access Control in Partially Honest Outsourced Databases
Lanju Kong, Qingzhong Li, Lin Li · International Journal of Database Theory and Application · 2014
With the growing popularity of outsourced databases (ODBs), access control for multiple users with different privileges in outsourced environments is required in more and more applications.Under the assumption that ODBs may be interested in the original data value, or delay the update operations when end users cannot verify the results, this paper attempts to enhance ODBs with finegrained access control for multiple users with less impact on their other functionalities.Our work can be divided into two parts.In the first part, we propose a method to enforce the access control rules by encrypting the original table and using the keys to distinguish various rights.In addition to read/non-read rights, read/update rights can be distinguished in our encrypted table.We also implement validation-only rights for ODBs and oblige them to fulfill any update validation without knowing the original data.In the second part, we study the query evaluation over the encrypted table.Two kinds of B+ tree indexes on each column are designed, which can accelerate the selection in ODBs.