Aggregation Queries in the Database-As-a-Service Model

In the Database-As-a-Service (DAS) model, clients store their database contents at servers belonging to potentially untrusted service providers. To maintain data confidentiality, clients need to outsource their data to servers in encrypted form. At the same time, clients must still be able to execute queries over encrypted data. One prominent and fairly effective technique for executing SQL-style range queries over encrypted data involves partitioning (or bucketization) of encrypted attributes. However, executing aggregation-type queries over encrypted data is a notoriously difficult problem. One well-known cryptographic tool often utilized to support encrypted aggregation is homomorphic encryption; it enables arithmetic operations over encrypted data. One technique based on a specific homomorphic encryption function was recently proposed in the context of the DAS model. Unfortunately, as shown in this paper, this technique is insecure against ciphertextonly attacks. We propose a simp...

• Type: Conference
• Year: 2006
• Where: DBSEC
• Authors: Einar Mykletun, Gene Tsudik
• Keywords: DAS Model, DBSEC 2006, DBSEC 2007, Encrypted, Range Queries