NDLI: Access control aware data retrieval for secret sharing based database outsourcing

Content Provider	Springer Nature Link
Author	Hadavi, Mohammad Ali Jalili, Rasool Karimi, Leila
Copyright Year	2015
Abstract	Enforcing dynamic and confidential access control policies is a challenging issue of data outsourcing to external servers due to the lack of trust towards the servers. In this paper, we propose a scalable yet flexible access control enforcement mechanism when the underlying relational data, on which access policies are defined, has been shared through a secret sharing scheme. For sharing values of an attribute in a relation, the attribute is assigned a secret distribution key and its values are split and distributed among data servers according to a Shamir based secret sharing scheme. Given access control policies over attributes of the relation schema, access to distribution keys, used further for reconstructing original values, is managed using the Chinese remainder theorem. Our solution, in addition to preserving the confidentiality of access control policies, is flexible to efficiently adopt grant and revoke of authorizations. Moreover, it prevents the possibility of information leakage caused by query processing through an access control aware retrieval of data shares. That is, our solution not only enforces access control policies for reconstructing shares and obtaining original values, but also for retrieving shares in query processing scenario. We implemented our mechanism and performed extensive experiments, whose results confirm its efficiency and considerable scalability in practice.
Starting Page	505
Ending Page	534
Page Count	30
File Format	PDF
ISSN	09268782
Journal	Distributed and Parallel Databases
Volume Number	34
Issue Number	4
e-ISSN	15737578
Language	English
Publisher	Springer US
Publisher Date	2015-10-14
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Data outsourcing Access control Secret sharing Chinese remainder theorem Policy update Oversharing Database Management Data Structures Information Systems Applications (incl. Internet) Operating Systems Memory Structures
Content Type	Text
Resource Type	Article
Subject	Information Systems and Management Information Systems Software Hardware and Architecture

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Special issue on secure and privacy-aware data management

Special issue on data management on modern hardware

Dynamic delegation framework for role based access control in distributed data management systems

Discovering pattern-aware routes from trajectories

Scalable data summarization on big data

MILo-DB: a personal, secure and portable database machine

A multi-threshold secret image sharing scheme based on the generalized Chinese reminder theorem

Special issue for data intensive eScience

OATS: online aggregation with two-level sharing strategy in cloud

Access control aware data retrieval for secret sharing based database outsourcing

Similar Documents

Special issue on secure and privacy-aware data management

Special issue on data management on modern hardware

Dynamic delegation framework for role based access control in distributed data management systems

Discovering pattern-aware routes from trajectories

Scalable data summarization on big data

MILo-DB: a personal, secure and portable database machine

A multi-threshold secret image sharing scheme based on the generalized Chinese reminder theorem

Special issue for data intensive eScience

OATS: online aggregation with two-level sharing strategy in cloud

Access control aware data retrieval for secret sharing based database outsourcing