Private SQL interface for encrypted data

Querying databases without a layer of privacy protection might lead to serious privacy issues. Such issues include access patterns and communication volume patterns. By combining the state-of-the-art privacy standard (differential privacy) and encryption in provides resilience to a host of attacks on remote databases, including data reconstruction attacks. However, there is still research work needed in building a private access system on top of an encrypted database. In this work, we explore the use of a plethora of privacy preserving data publishing (PPDP) techniques with different definitions and guarantees to build a private access system. We aim at exploring two main questions: i) How and if the privacy guarantees deteriorate when a user asks different queries and combines the outputs or when multiple users collude, and ii) How the functionality is affected by each PPDP technique, e.g., can the system still support joins between two anonymized tables.

Faculty Supervisor:

Yan Liu

Student:

Fatima Zahra Errounda

Partner:

TandemLaunch Technologies Inc.

Discipline:

Engineering - computer / electrical

Sector:

Information and communications technologies

University:

Concordia University