Towards Privacy-Preserving Range Queries with Secure Learned Spatial Index over Encrypted Data

TL;DR

This paper introduces a novel privacy-preserving range query scheme over encrypted data using a secure learned spatial index, achieving strong privacy guarantees with high efficiency for cloud data management.

Contribution

It presents the SLS-INDEX, a secure learned index combining cryptography and prediction architecture, and a range query protocol that enhances privacy and performance over existing methods.

Findings

Significantly improves query efficiency compared to existing solutions.

Ensures dataset, query, result, and access pattern privacy.

Demonstrates effectiveness on real-world and synthetic datasets.

Abstract

With the growing reliance on cloud services for large-scale data management, preserving the security and privacy of outsourced datasets has become increasingly critical. While encrypting data and queries can prevent direct content exposure, recent research reveals that adversaries can still infer sensitive information via access pattern and search path analysis. However, existing solutions that offer strong access pattern privacy often incur substantial performance overhead. In this paper, we propose a novel privacy-preserving range query scheme over encrypted datasets, offering strong security guarantees while maintaining high efficiency. To achieve this, we develop secure learned spatial index (SLS-INDEX), a secure learned index that integrates the Paillier cryptosystem with a hierarchical prediction architecture and noise-injected buckets, enabling data-aware query acceleration in the encrypted domain. To further obfuscate query execution paths, SLS-INDEXbased Range Queries (SLRQ) employs a permutation-based secure bucket prediction protocol. Additionally, we introduce a secure point extraction protocol that generates candidate results to reduce the overhead of secure computation. We provide formal security analysis under realistic leakage functions and implement a prototype to evaluate its practical performance. Extensive experiments on both real-world and synthetic datasets demonstrate that SLRQ significantly outperforms existing solutions in query efficiency while ensuring dataset, query, result, and access pattern privacy.