A Key Management Scheme Based on Outsourced Database
Shi Yonghui, Kunfu Wang · 2017
Aiming at the security issues in outsourced databases about data confidentiality and integrity, this paper proposes a key management scheme which is safe and effective based on NTRU (Number Theory Research Unit) signature technology.Firstly, according to the structure of the data table, the attribute parameters are selected to generate the data encryption key, and then the encrypted data is encrypted; Secondly, the encrypted data and signature data are stored together to the outsourced database, and data encryption key is stored in the local security database which is protected by the system master key, and the master key and the signature private key are stored in the hardware security module; Finally, when the data is decrypted, the NTRU signature of the requested data is first verified, and the data can be decrypted if the authentication is passed, otherwise the decryption data is not needed.The security and performance analysis results show that the scheme is secure and effective, and the key management scheme is secure and stable under different encryption algorithms, on the other hand, confidentiality and integrity protection can be provided at the same time.