ObliuSky: Oblivious User-Defined Skyline Query Processing in the Cloud

TL;DR

ObliuSky is a system that enables privacy-preserving user-defined skyline queries in cloud databases, protecting data, queries, and access patterns while maintaining efficiency and practical performance.

Contribution

It introduces a novel framework that ensures obliviousness and confidentiality for user-defined skyline queries in cloud environments, surpassing prior work in security and efficiency.

Findings

Provides strong confidentiality for database, queries, and results.

Achieves obliviousness to data access patterns, preventing indirect data leaks.

Maintains practical query latency with efficient encryption methods.

Abstract

The proliferation of cloud computing has greatly spurred the popularity of outsourced database storage and management, in which the cloud holding outsourced databases can process database queries on demand. Among others, skyline queries play an important role in the database field due to its prominent usefulness in multi-criteria decision support systems. To accommodate the tailored needs of users, user-defined skyline query has recently emerged as an intriguing advanced type of skyline query, which allows users to define custom preferences in their skyline queries (including the target attributes, preferred dominance relations, and range constraints on the target attributes). However, user-defined skyline query services, if deployed in the cloud, may raise critical privacy concerns as the outsourced databases and skyline queries may contain proprietary/privacy-sensitive information, and the cloud might even suffer from data breaches. In light of the above, this paper presents ObliuSky, a new system framework enabling oblivious user-defined skyline query processing in the cloud. ObliuSky departs from the state-of-the-art prior work by not only providing confidentiality protection for the content of the outsourced database, the user-defined skyline query, and the query results, but also making the cloud oblivious to the data patterns (e.g., user-defined dominance relations among database points and search access patterns) which may indirectly cause data leakages. We formally analyze the security guarantees and conduct extensive performance evaluations. The results show that while achieving much stronger security guarantees than the state-of-the-art prior work, ObliuSky is superior in database and query encryption efficiency, with practically affordable query latency.