基于加密技术外包数据库服务集成安全.pdf

第 31卷第 1期 计算机应用 Vo.l 31No. 1 2011年 1月 Journal of ComputerApp lications Jan. 2011 : 100 1- 9081( 20 11) 01- 0 110- 05 do:i 10. 3724 /SP. J. 1087. 2011. 00110 1 2 余永红 , 柏文阳 ( 1. , 233030; 2. , 210093) ( e press_yu@ 163. com ) : 针对目前外包数据库服务中单方面考虑某种保护技术难以 时满足外包数据库安全需求的不足, 提出 一种集成数据机密性数据隐私用户隐私和访问控制保护的外包数据库服务模型, 采用属性分解和部分属性加密技 术, 基于结合准标识集自动检测技术的近似算法实现外包数据的最小加密属性分解, 时把密码学应用于辅助随机 服务器协议, 以实现数据库访问时的用户隐私保护和访问控制理论分析表明, 该模型可以提供有效的数据隐私保 护和查询处理, 较好的用户隐私保护计算复杂度 : 外包数据库服务; 数据隐私; 用户隐私; 访问控制; 加密 : TP309 : A In tegrated secu rity over ou tsourced database services based on encryp tion 1 2 YU Yong-hong , BA IW en-yang ( 1. School of Management Science and Engineering, Anhui University of F inance and Economics, BengbuAnhui 233030, China; 2. StateKey Laboratoryfor ovel Sof tware Technology, anj ing University, anj ing J iangsu 210093, China) A bstract: Currently in outsourced database service, to consider a unilateral protection technology outsourcing is difficult to m eet the security requirem ents of the lack of a database. In th is paper, the authors proposed a solu tion to enforce data confidentiality, data privacy, user privacy and access con trol over outsourced database services. The approach started from a fle ible definition of privacy constraints on a relational schem a, app lied encryption on inform ation in a parsmi onious way and m ostly relied on attribute partition to protect sens itive information. B ased on the appro mi ation algorithm for the m inmi al en