In SaaS Applications, the data of tenants are stored in the untrusted service provider side, this case increases the risk of data leakage, and becomes the brief reason to prevent people and enterprise from taking SaaS mode for their applications. Correspondingly, confidentiality-guarantee has become the key factor of its large scale promotion. In this paper we propose a general secure mechanism that allows the sensitive data of tenants to be stored in encrypted mode, which guarantees data confidentiality on the assumption that application server is trusted, and then put forward the analysis of its security and performance.

/pdf/a-confidentiality-guarantee-mechanism-for-saas-3q2tzrldda.pdf

A Confidentiality-Guarantee Mechanism for SaaS

Encryption technology has become an important mechanism of securing data stored in database.However,it is difficult to search efficiently the encrypted data and many researchers take it into consideration.To solve the problem,a novel way is proposed,we not only encrypt the character data by using the conventional encrypted algorithms,but also adopt the way of flatting and scrambling,and then store the translated characteristic values together with the encrypted data in the encrypted table.The approach can provide better security,and results of experiments validate the performance of our approach compared with the conventional approach.

Wang Zheng-fei

Papers

Efficient method of querying encrypted data