Building Confidential and Efficient Query Services in the Cloud with RASP Data Perturbation

TL;DR

This paper introduces RASP data perturbation, a method combining encryption, noise, and projections to enable secure, efficient cloud-based range and kNN query services on sensitive data, balancing privacy and performance.

Contribution

The paper presents a novel RASP data perturbation technique that ensures data confidentiality and query privacy while maintaining query efficiency in cloud environments.

Findings

RASP provides strong resilience against data and query attacks.

The method enables efficient range query processing using existing indexing.

Experiments demonstrate improved security and performance over traditional methods.

Abstract

With the wide deployment of public cloud computing infrastructures, using clouds to host data query services has become an appealing solution for the advantages on scalability and cost-saving. However, some data might be sensitive that the data owner does not want to move to the cloud unless the data confidentiality and query privacy are guaranteed. On the other hand, a secured query service should still provide efficient query processing and significantly reduce the in-house workload to fully realize the benefits of cloud computing. We propose the RASP data perturbation method to provide secure and efficient range query and kNN query services for protected data in the cloud. The RASP data perturbation method combines order preserving encryption, dimensionality expansion, random noise injection, and random projection, to provide strong resilience to attacks on the perturbed data and queries. It also preserves multidimensional ranges, which allows existing indexing techniques to be applied to speedup range query processing. The kNN-R algorithm is designed to work with the RASP range query algorithm to process the kNN queries. We have carefully analyzed the attacks on data and queries under a precisely defined threat model and realistic security assumptions. Extensive experiments have been conducted to show the advantages of this approach on efficiency and security.