With the widespread use of e-business coupled with the public's awareness of data privacy issues and recent database security related legislations, incorporating security features into modern database products has become an increasingly important topic. Several database vendors already offer integrated solutions that provide data privacy within existing products. However, treating security and privacy issues as an afterthought often results in inefficient implementations. Some notable RDBMS storage models (such as the N-ary Storage Model) suffer from this problem. In this work, we analyze issues in storage security and discuss a number of trade-offs between security and efficiency. We then propose a new secure storage model and a key management architecture which enable efficient cryptographic operations while maintaining a very high level of security. We also assess the performance of our proposed model by experimenting with a prototype implementation based on the well-known TPC-H data set.

A framework for efficient storage security in RDBMS

This thesis in the field of cryptography considers secure data storage outsourcing with keyword search capabilities. To ensure data confidentiality the data is stored in encrypted format. An efficient solution has been developed to enable conjunctive keyword search. Also, a protocol is applied to enable efficient and secure sharing of encrypted data. It is possible to efficiently enrol and revoke users for both the searching and the decryption part of the system. The newly developed search technique is implemented as well to test its practical performance.

/pdf/secure-data-storage-outsourcing-with-conjunctive-keyword-3m31mep20b.pdf

Secure Data Storage Outsourcing with Conjunctive Keyword Search

This paper presents a HMAC based Temper Evident Encryption (HTEE) technique for providing confidentiality and integrity of numeric data in a database environment through an encryption scheme based on the keyed Hash Message Authentication Code (HMAC) function The encryption scheme implemented in this project extends and improves an existing HMAC based encryption scheme The result is a symmetric encryption process which detects unauthorized updates to ciphertext data, verifies integrity and provides confidentiality This encryption scheme provides an alternative to standard approaches that offer confidentiality and integrity of data such as combining the Advanced Encryption Standard (AES) algorithm with a hash digest The purpose of the scheme is to provide a straightforward and efficient encryption that supports data integrity, to investigate the use of HMAC for reversible encryption and key transformation, and to improve upon an existing method

/pdf/htee-an-hmac-based-tamper-evident-encryption-2gsju6oa7y.pdf

HTEE: An HMAC based Tamper Evident Encryption

The Maritime Cloud is the term used to describe the concept of an infrastructure that support authorized, seamless information transfer, as requested by the IMO e-navigation strategy, and as derived from testbeds focused on e-navigation. In this paper, we proposed Bucket ID Transformation that is a new encryption mechanism and the scheme can range search without order-preserving. Bucket ID Transformation is performed by recursive HMAC as many as a value of Bucket ID.

http://www.sersc.org/journals/IJSIA/vol10_no2_2016/13.pdf

Security Enhancement Scheme supporting range queries on encrypted DB for Secure e-Navigation Era

This thesis in the field of cryptography considers secure data outsourcing with keyword search capabilities. To ensure data confidentiality the data is stored in encrypted format. An efficient solution has been developed to enable conjunctive keyword search. Also, a protocol is applied to enable efficient and secure sharing of encrypted data. It is possible to efficiently enrol and revoke users for both the searching and the decryption part of the system. The newly developed search technique is implemented as well to test its practical performance.

When the traditional encryption algorithms are applied to the database, efficiency degradation occurs because the orders of ciphertext and plaintext are not the same. Therefore, the encryption mechanisms suitable for database environment are required. We propose an encryption mechanism that can support range queries without exposing the order of plaintext. This method is more powerful than the previous order-preserving methods and is expected to handle data more efficiently than other methods including auxiliary B+-tree.

http://www.computer.org/csdl/proceedings/iccit/2007/3038/00/30381402.pdf

How to Construct a New Encryption Scheme Supporting Range Queries on Encrypted Database

http://ieeexplore.ieee.org/iel5/4420216/4420217/04420452.pdf

Sung Min Lee

Papers

How to Construct a New Encryption Scheme Supporting Range Queries on Encrypted Database

How to Construct a New Encryption Scheme Supporting Range Queries on Encrypted Database