Multi-dimensional Range Query on Outsourced Database with Strong Privacy Guarantee

• Published in: International journal of computer network and information security Vol. 9; no. 10; pp. 13 - 23
• Main Authors: Giang, Do Hoang, Keong, Ng Wee
• Format: Journal Article
• Language: English
• Published: Hong Kong Modern Education and Computer Science Press 08.10.2017
• Subjects: Cloud computing; Cryptography; Data management; Encryption; Privacy; Queries
• ISSN: 2074-9090; 2074-9104
• DOI: 10.5815/ijcnis.2017.10.02

Cloud services have provided important solutions for drastically reducing the cost of data management and maintenance. However, data outsourcing not only deprives clients of direct control over their data but also allows the server to gain direct access to the client data. Data encryption has been recognized as the solution to the privacy issue, but it also creates new challenges for both industry and academia. A naive question is whether the client still has the capability to query and obtain useful information when the data are encrypted and stored remotely. This paper investigates a solution to one of the most important types of query operations over encrypted data, namely multi-dimensional range queries. Our solution combines cryptographic techniques with the bucketization approach. We leverage a three-party architecture and secure multiparty computation to design and analyze the security of the protocols. Further, we discuss solutions for both static and dynamic datasets where new data records can be appended. First, we present the solutions for the case when the set of attributes in the query is pre-defined. Subsequently, we discuss the generalization.