Cryptographic key management scheme for supporting multi-user SQL queries over encrypted databases

摘要

Database outsourcing is getting more popular bringing in a new standard, called database-as-a-service, where an organisation's database is stored in cloud. In such a setting, both access control and data confidentiality plays an important role, particularly when a data owner likes to publish his data for external use. Any cloud provider promises the security of its platform, while the execution of solutions to ensure confidentiality of the data stored in cloud databases is left to the data owner. The state-of-the-art solutions deal few preliminary issues with aid of SQL queries on encrypted data. In this paper, we propose a novel cryptographic key management scheme that combines data encryption and key management and supports multi-user SQL queries over encrypted databases. Our approach shows the proposed solutions for enforcing access control and for ensuring confidentiality of data. The experimental results obtained in this paper show the performance of proposed scheme.