Scalable Architecture for Multi-User Encrypted SQL Operations on Cloud Database Services

The success of the cloud database paradigm is strictly related to strong guarantees in terms of service availability, scalability and security, but also of data confidentiality. Any cloud provider assures the security and availability of its platform, while the implementation of scalable solutions t...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on cloud computing 2014-10, Vol.2 (4), p.448-458
Main Authors: Ferretti, Luca, Pierazzi, Fabio, Colajanni, Michele, Marchetti, Mirco
Format: Article
Language:English
Subjects:
Access Control
Authorization
Cloud computing
Computer architecture
Computer security
Confidentiality
Encryption
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:The success of the cloud database paradigm is strictly related to strong guarantees in terms of service availability, scalability and security, but also of data confidentiality. Any cloud provider assures the security and availability of its platform, while the implementation of scalable solutions to guarantee confidentiality of the information stored in cloud databases is an open problem left to the tenant. Existing solutions address some preliminary issues through SQL operations on encrypted data. We propose the first complete architecture that combines data encryption, key management, authentication and authorization solutions, and that addresses the issues related to typical threat scenarios for cloud database services. Formal models describe the proposed solutions for enforcing access control and for guaranteeing confidentiality of data and metadata. Experimental evaluations based on standard benchmarks and real Internet scenarios show that the proposed architecture satisfies also scalability and performance requirements.
ISSN:2168-7161
2168-7161
2372-0018
DOI:10.1109/TCC.2014.2378782