OblivCDN: A Practical Privacy-preserving CDN with Oblivious Content Access
Viet Vo, Shangqi Lai, Xingliang Yuan, Surya Nepal, Qi Li

TL;DR
OblivCDN is a practical privacy-preserving CDN system that leverages optimized Range ORAM primitives to protect content confidentiality and user privacy, achieving high performance and compatibility with existing Internet infrastructure.
Contribution
The paper introduces OblivCDN, a novel system that adapts Range ORAM for efficient, real-world CDN deployment without trusted hardware, reducing costs and integration complexity.
Findings
Downloads a 256MB video in 5.6 seconds
Achieves 90x speedup over naive ORAM approaches
Outperforms prior privacy-preserving CDN methods by 366x
Abstract
Content providers increasingly utilise Content Delivery Networks (CDNs) to enhance users' content download experience. However, this deployment scenario raises significant security concerns regarding content confidentiality and user privacy due to the involvement of third-party providers. Prior proposals using private information retrieval (PIR) and oblivious RAM (ORAM) have proven impractical due to high computation and communication costs, as well as integration challenges within distributed CDN architectures. In response, we present \textsf{OblivCDN}, a practical privacy-preserving system meticulously designed for seamless integration with the existing real-world Internet-CDN infrastructure. Our design strategically adapts Range ORAM primitives to optimise memory and disk seeks when accessing contiguous blocks of CDN content, both at the origin and edge servers, while preserving both…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
