陆海, 朱岩, 陈娥, 韩皓庭. 可搜索加密及其驱动的SQL隐私数据库设计[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2024.02.07.004
引用本文: 陆海, 朱岩, 陈娥, 韩皓庭. 可搜索加密及其驱动的SQL隐私数据库设计[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2024.02.07.004
Privacy-Preserving SQL Database Driven by Searchable Encryption[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2024.02.07.004
Citation: Privacy-Preserving SQL Database Driven by Searchable Encryption[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2024.02.07.004

可搜索加密及其驱动的SQL隐私数据库设计

Privacy-Preserving SQL Database Driven by Searchable Encryption

  • 摘要: 隐私数据库是促进国家大数据战略与数据要素市场发展中构建数据开放、共享及治理体系的重要手段,而可搜索加密作为实现隐私数据库的重要密码技术,仍存在缺乏灵活检索机制及抗量子安全等问题,也难以适配关系数据库中的SQL查询机制。在对可搜索加密技术现状分析基础上,本文设计了可适配关系数据库SQL查询语言的隐私数据库架构,该架构划分为用户端和数据外包服务两部分,用户端之外数据均处于密文状态,SQL语言可转化为隐私的SQL语言对密文数据进行密码化检索处理,可在关系数据表中支持多样化隐私字段存储,密文通过用户端进行解密以实现用户身份验证。进一步,本文在格密码体制下以密钥策略属性基加密框架为基础,利用理想格上短整数解和带误差学习困难问题设计了检索策略属性基可搜索加密用以支持上述隐私数据库密码系统的构建。在该方案中,安全查询策略与查询凭证相绑定而非索引,确保密文数据的索引可依据安全策略进行细粒度密码化检索;同时,引入小策略矩阵来优化安全查询策略生成以降低索引匹配过程中累积误差。由安全性证明可知,查询凭证满足在选择策略攻击下的不可伪造性,所提系统满足在带有策略和标识查询的选择明文攻击下的语义安全性。

     

    Abstract: Privacy-preserving database plays a crucial role in establishing an open, shared, and governed system amidst the evolution of national big data strategies and data market. Searchable encryption (SE), as a fundamental cryptographic technology for building privacy-preserving database, facilitates efficient searching of encrypted data without the need for decryption. Among various SE schemes, Attribute-Based Searchable Encryption (ABSE) provides advantages in access control, data authenticity, and retrieval efficiency. However, most existing ABSEs could not support the flexible query methods of SQL in relational databases, as well as fine-grained query policies. Moreover, most existing ABSEs are constructed under traditional algebraic structures, such as Bilinear Pairing, which are susceptible to quantum computing attacks. To address these challenges, this paper presents a novel privacy-preserving database architecture that can be adaptable to the SQL query language of relational databases. The architecture is divided into two parts: clients and cloud outsourcing services. All data are in a ciphertext form outside the clients, and data table in cloud privacy-preserving database consists of four kinds of fileds: public fields, encrypted index fields, encrypted data fields, and confidential fields. When a user initiates an SQL query, the Privacy-Preserving SQL Engine (PP-SQL Engine) can transform it into a private SQL language to perform the cryptographic retrieval on the encrypted index fields. More specifically, the query policy in SQL is transformed into several query credentials that are bound with the policy. Theses credentials are further used to retrieve the encrypted data fields in the database whose encrypted index fields match with the policy. The retrieved encrypted data fields can be decrypted at the client through the user’s private key for verifying the user’s identity. To provide the cryptographic support for the privacy-preserving database architecture, the Retrieval-Policy Attribute-Based Searchable Encryption (RP-ABSE) scheme is designed on the Key-Policy Attribute-Based Encryption (KP-ABE) framework. The security of this scheme is based on the hard problem over ideal lattice, i.e., the Short Integer Solution (SIS) and the Learning With Error (LWE). Moreover, the secure query policy is bound to the query credentials rather than the encrypted index fileds. It ensures that encrypted data can be cryptographically retrieved by different query policies, eliminating the need for updating the encrypted data even when the query policy undergoes changes. Simultaneously, the Small Policy Matrix (SPM) is introduced to optimize the generation of secure query policies and reduce cumulative errors in the process of index matching. Finally, this paper proves that the query credential satisfies unforgeability under the chosen policy attack, and the RP-ABSE satisfies semantic security under the chosen plaintext attack with policy and identity queries. Therefore, the privacy-preserving database architecture could provide an important technique support for the establishment of data market mechanisms and data governance systems.

     

/

返回文章
返回