具有隐私保护的外包数据库合计查询方案

摘要

针对外包数据库中数据的隐私性和安全性问题,提出一种具有隐私保护的外包数据库合计查询方案.利用Mignotte 秘密共享方案将数据所有者的数据库外包给服务提供者,服务提供者根据用户提出合计查询要求,在不泄露外包数据的前提下协同计算查询并将结果响应给用户,用户根据数据所有者对数据项的Pedersen承诺和生成的Merkle 哈希树对结果进行验证.研究结果表明:在查询过程中,该方案能够保证数据项和中间结果的隐私性和安全性;在数据所有者可信的前提下,用户能够验证查询结果;与同类方案相比,该方案具有更高的效率.%In order to insure the privacy and security of data on outsourced databases, a privacy-preserving aggregate query scheme on outsourced databases was proposed.The data owner's database was outsourced to service providers by Mignotte's secret sharing scheme.Service providers collaboratively computed users' aggregate queries and responded the results to users without disclosing outsourced data.Users verified the results according to the data owner's Pedersen commitment for database entries and Merkle hash tree.The results show that the scheme can ensure the privacy and security of database entries and intermediate results in the query process.Users can verify the query results relying on their trust of the data owner.Compared to similar schemes, this scheme has higher efficiency.