面向多用户的多层嵌套数据库加密方案

doi:10.12068/j.issn.1005-3026.2018.12.004

东北大学学报:自然科学版 ›› 2018, Vol. 39 ›› Issue (12): 1691-1696.DOI: 10.12068/j.issn.1005-3026.2018.12.004

面向多用户的多层嵌套数据库加密方案

周福才，张鑫月，曾康，秦诗悦

(东北大学软件学院，辽宁沈阳110169)

收稿日期:2017-09-20 修回日期:2017-09-20 出版日期:2018-12-15 发布日期:2018-12-19
通讯作者: 周福才
作者简介:周福才(1964-)，男，吉林长春人，东北大学教授，博士生导师.冯明杰(1971-)，男，河南禹州人，东北大学副教授; 王恩刚(1962-)，男，辽宁沈阳人，东北大学教授，博士生导师.
基金资助:
国家自然科学基金资助项目(51171041).国家自然科学基金资助项目(61772127，61472184)；国家科技重大专项(2013ZX03002006)；辽宁省科技攻关项目(2013217004)；中央高校基本科研业务费专项资金资助项目(N151704002)；辽宁省博士启动基金资助项目(20141012)；沈阳市科技基金资助项目(F14231108).

Multi-layer Nested Database Encryption Scheme for Multiple Users

ZHOU Fu-cai， ZHANG Xin-yue， ZENG Kang， QIN Shi-yue

School of Software， Northeastern University， Shenyang 110169， China.

Received:2017-09-20 Revised:2017-09-20 Online:2018-12-15 Published:2018-12-19
Contact: ZHOU Fu-cai
About author:-
Supported by:
-

摘要/Abstract

摘要： 围绕外包数据的安全性问题与用户隐私性问题，展开对加密数据库方案的研究，提出了一个面向多用户的多层嵌套数据库加密方案.该方案根据洋葱模型多层理论，采用多种不同类型的加密算法对用户的外包数据进行多层嵌套加密，实现了既保证数据机密性又满足多种不同SQL查询类型的数据库加密方案.针对用户递交包含敏感信息的查询语句在一定程度上泄露用户自身的隐私这一问题，设计了基于单服务器私有信息检索(private information retrieval，PIR)技术的用户隐私保护机制，实现了用户匿名查询.安全性分析表明，该方案满足数据机密性与用户隐私性.Sysbench基准测试实验分析表明，该方案具有良好的查询处理效率、读写吞吐量以及健壮性.

关键词: 外包数据, 洋葱加密模型, 数据库加密, PIR, 隐私保护

Abstract: Encrypted database scheme about outsourced data confidentiality and user privacy was researched， and a scheme of multi-layer nested database encryption for multiple users was proposed. A data encryption scheme was also proposed based on onion model to perform nested encryption on outsourced data by applying multi-layer theory with a variety of data encryption algorithms to guarantee data confidentiality and to work with SQL queries in different types. Meanwhile， user privacy protection scheme was proposed based on single server private information retrieval(PIR)to enable users to send SQL queries with sensitive data and protect the privacy of users when accessing the database， realizing user anonymous query. The security analysis results show that the scheme protects data confidentiality and user privacy. An evaluation result tested with a benchmark tool Sysbench demonstrates its well query processing efficiency， throughput and robustness.

Key words: outsourced data, onion encryption model, database encryption, private information retrieval(PIR), privacy protection

中图分类号:

TP309.2

周福才，张鑫月，曾康，秦诗悦. 面向多用户的多层嵌套数据库加密方案[J]. 东北大学学报:自然科学版, 2018, 39(12): 1691-1696.

ZHOU Fu-cai， ZHANG Xin-yue， ZENG Kang， QIN Shi-yue. Multi-layer Nested Database Encryption Scheme for Multiple Users[J]. Journal of Northeastern University Natural Science, 2018, 39(12): 1691-1696.

参考文献

[1]Zhang Y，Sun Y.Cloud storage management technology ［C］// Proceedings of the 2nd International Conference on Information and Computing Science.Washington，DC，2009:309-311.
[2]Hacigümüs H，Iyer B，Mehrotra S.Providing database as a service［C］// Proceedings of the 18th International Conference on Data Engineering.Washington，DC，2002:29-38.
[3]新京报.50亿条公民信息泄露，京东前员工牵涉其中［EB/OL］.［2017-03-11］.http://www.chinanews.com/sh/2017/03-11/8171115.shtml.(The Beijing News.5 billion citizens’ information disclosure，former staff of Jingdong involved in ［EB/OL］.［2017-03-11］.http://www.chinanews.com/sh/2017/03-11/8171115.shtml.)
[4]Wood C，Fernandez E B，Summers R C.Database security:requirements，policies，and models［J］.IBM Systems Journal，1980，19(2):229-252.
[5]Song D X，Wagner D，Perrig A.Practical techniques for searches on encrypted data［C］// Proceedings of the 2000 IEEE Symposium on Security and Privacy.Washington，DC，2000:44-55.
[6]Agrawal R，Kiernan J，Srikant R，et al.Order preserving encryption for numeric data［C］// Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data.New York，2004:563-574.
[7]Amanatidis G，Boldyreva A，O’Neill A.Provably-secure schemes for basic query support in outsourced databases［C］// Proceedings of the 21st Annual IFIP WG 11.3 Working Conference on Data and Applications Security.Redondo Beach，2007:14-30.
[8]刘念.DAS模型中的数据库加密与密文检索研究［D］.北京:北京邮电大学，2010.(Liu Nian.The study of database encryption and cipher text query in DAS［D］.Beijing:Beijing University of Posts and Telecommunications，2010.)
[9]Popa R A，Redfield C，Zeldovich N，et al.CryptDB:protecting confidentiality with encrypted query processing［C］// Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles.New York，2011:85-100.
[10]Hang I，Kerschbaum F，Damiani E.ENKI:access control for encrypted query processing ［C］// Proceedings of the 2015 ACM SIGMOD International Conference on Management of Data.Melbourne，2015:183-196.
[11]Poddar R，Boeltert T，Popa R A.Arx:a strongly encrypted database system［EB/OL］.［2016-06-07］.https://eprint.iacr.org/2016/591.pdf.
[12]Paillier P.Public-key cryptosystems based on composite degree residuosity classes［C］// Advances in Cryptology—EUROCRYPT’99.Prague，1999:223-238.
[13]Popa R A，Li F H，Zeldovich N.An ideal-security protocol for order-preserving encoding［C］// Proceedings of the 2013 IEEE Symposium on Security and Privacy.Washington，DC，2013:463-477.
[14]Kushilevitz E，Ostrovsky R.Replication is not needed:single database，computationally-private information retrieval［C］// Proceedings of the 38th Annual Symposium on Foundations of Computer Science.Washington，DC，1997:364-373.
[15]Popa R A.Building practical systems that compute on encrypted data［D］.Cambridge，MA:MIT，2014.

面向多用户的多层嵌套数据库加密方案

Multi-layer Nested Database Encryption Scheme for Multiple Users

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 6

编辑推荐

Metrics

本文评价

[1]	张晶，李传文. 一种基于安全索引的位置隐私保护方法[J]. 东北大学学报（自然科学版）, 2022, 43(12): 1702-1708.
[2]	王强，玄鹏开，王红伟，周福才. 支持全操作的公共可验证外包数据库方案[J]. 东北大学学报:自然科学版, 2018, 39(8): 1098-1103.
[3]	王丽娜，彭瑞卿，冯博，李叶. 基于地图匹配的时空轨迹匿名算法[J]. 东北大学学报:自然科学版, 2014, 35(5): 667-670.
[4]	盛刚，温涛，郭权，印莹. 云计算中安全的向量点积计算[J]. 东北大学学报(自然科学版), 2013, 34(6): 786-791.
[5]	孟祥福;马宗民;严丽;. 数据库模糊查询结果自动排序方法[J]. 东北大学学报(自然科学版), 2008, 29(7): 960-964.
[6]	李全顺;徐成海;贾庆舒;彭润玲;. 4种钝顶螺旋藻生长与放氢的比较研究[J]. 东北大学学报(自然科学版), 2007, 28(12): 1762-1765.