An ideal-security protocol for order-preserving encoding

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2013, Pages 463-477

  Popa, Raluca Ada ^a   Li, Frank H ^a   Zeldovich, Nickolai ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

encoding; order preserving encryption

Indexed keywords

CIPHERTEXTS; ENCRYPTED DATA; ENCRYPTION SCHEMES; MICRO-BENCHMARKS; MYSQL DATABASE; ORDERS OF MAGNITUDE; PLAINTEXT; SORT ORDERS;

ENCODING (SYMBOLS); SECURITY OF DATA;

CRYPTOGRAPHY;

EID: 84881262361     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2013.38     Document Type: Conference Paper

References (40)

1. D. Agrawal, A. El Abbadi, F. Emekci, and A. Metwally. Database management as a service: Challenges and opportunities. In ICDE, 2009.
2. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. Order preserving encryption for numeric data. In ACM SIGMOD, 2004.
3. G. W. Ang, J. H. Woelfel, and T. P. Woloszyn. System and method of sort-order preserving tokenization. US Patent Application 13/450,809, 2012.
4. G. Antoshenkov, D. Lomet, and J. Murray. Order preserving compression. In ICDE, 1996.
5. C. Binnig, S. Hildenbrand, and F. Färber. Dictionary-based order-preserving string compression for main memory column stores. In ACM SIGMOD, 2009.
6. A. Boldyreva, N. Chenette, Y. Lee, and A. O'Neill. Order-preserving symmetric encryption. In EUROCRYPT, 2009.
7. A. Boldyreva, N. Chenette, and A. O'Neill. Order-preserving encryption revisited: improved security analysis and alternative solutions. In CRYPTO, 2011.
8. D. Boneh and B. Waters. Conjunctive, subset, and range queries on encrypted data. In Theory of Cryptography, 2007.
9. CipherCloud. Tokenization for cloud data. http://www.ciphercloud.com/ tokenization-cloud-data.aspx.
10. R. Falkenrath and P. Rosenzweig. Encryption, not restriction, is the key to safe cloud computing. Nextgov, 2012. http://www.nextgov.com/cloud-computing/ 2012/10/o/58608/.
11. K. Fraser and T. Harris. Concurrent programming without locks. ACM TOCS, 25(2), 2007.
12. Gazzang. Gazzang zNcrypt: Transparent data encryption to fit your cloud. http://www.gazzang.com/products/zncrypt.
13. T. Ge and S. B. Zdonik. Fast, secure encryption for indexing in a column-oriented DBMS. In ICDE, 2007.
14. C. Gentry. Fully homomorphic encryption using ideal lattices. In ACM STOC, 2009.
15. C. Gentry, S. Halevi, and N. P. Smart. Homomorphic evaluation of the AES circuit. Cryptology ePrint Archive, Report 2012/099, 2012.
16. O. Goldreich. Foundations of Cryptography: Volume I Basic Tools. Cambridge University Press, 2001.
17. O. Goldreich. Foundations of Cryptography: Volume II Basic Applications. Cambridge University Press, 2004.
18. O. Goldreich, S. Micali, and A. Wigderson. How to play any mental game. In ACM STOC, 1987.
19. H. Hacigümüş, B. Iyer, C. Li, and S. Mehrotra. Executing SQL over encrypted data in the database-service-provider model. In ACM SIGMOD, 2002.
20. H. Kadhem, T. Amagasa, and H. Kitagawa. MV-OPES: Multivalued-order preserving encryption scheme: A novel scheme for encrypting integer value to many different values. IEICE Trans. on Info. and Systems, E93.D(9), 2010.
21. H. Kadhem, T. Amagasa, and H. Kitagawa. A secure and efficient order preserving encryption scheme for relational databases. In International Conference on Knowledge Management and Information Sharing, 2010.
22. V. Kolesnikov and A. Shikfa. On the limits of privacy provided by order-preserving encryption. Bell Labs Technical Journal, 17(3), 2012.
23. S. Lee, T.-J. Park, D. Lee, T. Nam, and S. Kim. Chaotic order preserving encryption for efficient and secure queries on databases. IEICE Trans. on Info. and Systems, E92.D(11), 2009.
24. X. Liangliang, O. Bastani, and D. Lin. Security analysis for order preserving encryption schemes. Technical Report UTDCS-01-12, University of Texas at Dallas, 2012.
25. I.-L. Y. Liangliang Xiao and D. Lin. Security analysis for an order preserving encryption scheme. Technical Report UTDCS-06-10, University of Texas at Dallas, 2010.
26. D. Liu and S. Wang. Programmable order-preserving secure index for encrypted database query. In IEEE International Conference on Cloud Computing, 2012.
27. D. Liu and S. Wang. Nonlinear order preserving index for encrypted database query in service cloud environments. Concurrency and Computation: Practice and Experience, 2013.
28. Y. Lu. Privacy-preserving logarithmic-time search on encrypted data in cloud. In NDSS, 2012.
29. R. C. Merkle. A certified digital signature. In CRYPTO, 1989.
30. G. Özsoyoglu, D. A. Singer, and S. S. Chung. Anti-tamper databases: Querying encrypted databases. In IFIP WG 11.3 Working Conf. on Database and Applications Security, 2003.
31. O. Pandey and Y. Rouselakis. Property preserving symmetric encryption. In EUROCRYPT, 2012.
32. Perspecsys. The PRS server: Data protection for cloud applications. http://www.perspecsys.com/perspecsys-cloud-protection-gateway/.
33. R. A. Popa, C. M. S. Redfield, N. Zeldovich, and H. Balakrishnan. CryptDB: Protecting confidentiality with encrypted query processing. In ACM SOSP, 2011.
34. R. A. Popa, F. H. Li, and N. Zeldovich. An ideal-security protocol for order-preserving encoding. Cryptology ePrint Archive, Mar. 2013. http://eprint.iacr.org/.
35. F. Y. Rashid. Salesforce.com acquires SaaS encryption provider Navajo Systems. eWeek.com, 2011.
36. E. Shi, J. Bethencourt, T.-H. H. Chan, D. Song, and A. Perrig. Multi-dimension range query over encrypted data. In IEEE Symposium on Security and Privacy, 2007.
37. Vormetric. Cloud encryption. http://www.vormetric.com/products/ encryption/cloud-encryption/.
38. L. Xiao, I.-L. Yen, and D. T. Huynh. Extending order preserving encryption for multi-user systems. Cryptology ePrint Archive, Report 2012/192, 2012.
39. L. Xiao, I.-L. Yen, and D. T. Huynh. A note for the ideal order-preserving encryption object and generalized order-preserving encryption. Cryptology ePrint Archive, Report 2012/350, 2012.
40. D. Yum, D. Kim, J. Kim, P. Lee, and S. Hong. Order-preserving encryption for non-uniformly distributed plaintexts. In Intl. Workshop on Information Security Applications, 2011.