数据库服务——安全与隐私保护 - 软件学报.pdf

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.21, No.5, May 2010, pp.991− 1006 doi: 10.3724/SP.J.1001.2010.03746 Tel/Fax: +86-10 © by Institute of Software , the Chinese Academy of Sciences . All rights reserved. ∗ 数据库服务——安全与隐私保护 1,2 3+ 2 2,3 田秀霞 , 王晓玲 , 高 明 , 周傲英 1(上海电力学院 计算机与信息工程学院,上海 200090) 2(复旦大学 上海市智能信息处理重点实验室,上海 200433) 3(华东师范大学 上海市高可信计算重点实验室,上海 200062) Database as a Service⎯ Security and Privacy Preserving 1,2 3+ 2 2,3 TIAN Xiu-Xia , WANG Xiao-Ling , GAO Ming , ZHOU Ao-Ying 1(Computer and Information Engineering College, Shanghai University of Electric Power, Shanghai 200090, China) 2(Shanghai Key Laboratory of Intelligent Information, Fudan University, Shanghai 200433, China) 3(Shanghai Key Laboratory of Trustworthy Computing, East China Normal University, Shanghai 200062, China) + Corresponding author: E-mail: xlwang@ Tian XX, Wang XL, Gao M, Zhou AY. Database as a services⎯ Security and privacy preserving. Journal of Software, 2010,21(5):991−1006. /1000-9825/3746.htm Abstract : This paper gives a summary of the secure and privacy preserving in database as a service (DaaS) from five primary techniques such as data confidentiality, data integrity, data completeness, query privacy preserving and access control policy. Data confidentiality is analyzed from the encrypted-based and division-based aspects; Data integrity and data completeness focus on the signature-based, challenge-response and probability-based aspects;