암호화 데이터 상에서의 효율적인 질의처리를 위한 부분 순서 보존 암호화 기법의 설계 및 구현

다국어 초록 (Multilingual Abstract)

ABSTRACT
Due to advancement in cloud computing technology, the research on the outsourced database has been recently spotlighted. However, because the outsourced database may contain personal information of users, the private information can be exposed by the malicious attackers, i.e., service provider. In order to resolve this problem, it is important to encrypt the database prior to outsourcing it to the service provider.
On the other hand, in terms of query processing, it is impossible to process a query over the encrypted database without decrypting it. However, it is time-consuming and inefficient way. Therefore, the order-preserving encryption scheme has been proposed to enhance the query processing efficiency. The order-preserving encryption hides the original database while allowing the order preservation of the encrypted values so that the service provider can perform a query processing without database decryption. In the order-preserving encryption scheme, the encrypted data is sorted by certain column values, so it is weak to both order matching attack and count attack.
Therefore, we, in this paper, propose a partial order-preserving encryption scheme and a query processing algorithm. First, our partial order-preserving encryption scheme divides database into data groups and encrypts the data in each group by using periodic function. Therefore, we can preserve the order of each data group, but not each data. So the proposed encryption scheme is robust to borh order matching attack and counting attack. Second, our query processing algorithm utilizes a signature for each data which stores the data original data information. By using signature information, we can efficiently perform the exact matching query and range query over the encrypted database.
Through our performance analysis, it is shown that the proposed algorithm outperforms the existing algorithm in terms of range query processing and exact matching query processing while providing the higher level of privacy protection.

목차 (Table of Contents)

• I. 서론 1
• II. 관련 연구 4
• 2.1 G. Ozsoyglu et al.의 연구 4
• 2.2 R. Agrawal et al.의 연구 6
• 2.3 Dongxi Liu et al.의 연구 7
• 2.4 순서 보존 암호화 기법의 문제점 11
• III. 부분 순서 암호화 기법 13
• 3.1 시스템 구조 13
• 3.2 부분 순서 보존 암호화 기법의 기본 변환 함수 15
• 3.3 정확 매칭 질의를 위한 부분 순서 보존 암호화 기법 18
• 3.4 범위 질의를 위한 부분 순서 보존 암호화 기법 20
• 3.5 질의처리 성능 개선을 위한 시그니처 생성 23
• 3.6 부분 순서 보존 암호화 기법의 전체 알고리즘 25
• IV. 성능 평가 28
• 4.1 실험 환경 및 구현 결과 28
• 4.2 데이터 분포에 따른 데이터 노출 빈도 성능평가 30
• 4.3 정확 매칭 질의처리에 대한 성능평가 32
• 4.4 범위 질의처리에 대한 성능평가 33
• V. 결론 및 향후 연구 35
• 참고문헌 36