A Confidentiality-Preserving Search Technique for Encrypted Relational Cloud Databases
Vasily Sidorov, Wee Keong Ng · 2016
Database-as-a-Service is offered by many cloud service providers and could significantly reduce the IT infrastructure maintenance bills for enterprises. However, many hesitate migrating their data storage and processing to the cloud, and one of the reasons are data security issues. Encryption could provide sound security guarantees, but existing approaches often gravitate to one of the extremes: either high security and very limited functionality, or vice versa. This paper proposes a flexible database encryption scheme allowing multiple users to perform complex search-based queries, including cross-table joins, capable of utilizing database's indexing capabilities. Several proxy servers in between the user and the database server help to achieve this and make it all transparent for the user. The proposed solution demonstrates a practical performance level in most of our experiments.