Enjoy the Untrusted Cloud: A Secure, Scalable and Efficient SQL-like Query Framework for Outsourcing Data
Yaxing Chen, Qinghua Zheng, Dan Liu, Zheng Yan, Wenhai Sun, Ning, Zhang, Wenjing Lou, Y. Thomas Hou

TL;DR
This paper introduces QShield, a secure, scalable, and efficient SQL-like query framework leveraging Intel SGX to protect data confidentiality and integrity in untrusted cloud environments, while supporting multi-user access control and ensuring query correctness.
Contribution
The work presents a novel hardware-assisted framework with a lightweight secret sharing scheme and trust proof mechanism to address key revocation and knowledge extractor vulnerabilities.
Findings
QShield guarantees data confidentiality and integrity on untrusted clouds.
The framework supports scalable multi-user access control.
QShield incurs minimal performance overhead.
Abstract
While the security of the cloud remains a concern, a common practice is to encrypt data before outsourcing them for utilization. One key challenging issue is how to efficiently perform queries over the ciphertext. Conventional crypto-based solutions, e.g. partially/fully homomorphic encryption and searchable encryption, suffer from low performance, poor expressiveness and weak compatibility. An alternative method that utilizes hardware-assisted trusted execution environment, i.e., Intel SGX, has emerged recently. On one hand, such work lacks of supporting scalable access control over multiple data users. On the other hand, existing solutions are subjected to the key revocation problem and knowledge extractor vulnerability. In this work, we leverage the newly hardware-assisted methodology and propose a secure, scalable and efficient SQL-like query framework named QShield. Building upon…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCryptography and Data Security · Cloud Data Security Solutions · Security and Verification in Computing
