Because of server-untrustable model in outsourcing encrypted database system, it’s fatal for data owners to keep their data confidential under complex query operations performed by database servers. Trusted Execution Environments (TEEs) provide a secure space for privacy computation via hardware-based methods to increase the efficiency of database system, and it ensures the availability of computing directly on sensitive data in untrusted outsourcing database servers. However, while various query schemes are designed under the combination of encrypted database and TEEs, designing an available and secure scheme for join queries on multiple data tables with TEEs remains an open problem. Besides, previous works also devote less to bench-marking multi-way joins on TEEs. In our work, we extend binary join query scheme into multi-way forms in encrypted database system based on TEEs. It combines various join algorithms based on hash functions (hash-based, radix-based, etc.) with parallelized optimizing mechanism. Besides, we do bench-marking with TEEBench framework on those multi-way join schemes in three-way forms using both cache-fit and cache-exceed datasets and do different evaluation on two TEEs hardware platforms (Intel SGX and AMD SEV) to show its availability. After that, we also propose a multi-way join scheme with access pattern protection through the combination between our previous scheme and oblivious I/O methods. With the evaluation of its efficiency and memory leakage, we can also verify the feasibility of our access-pattern-protected multi-way join scheme.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Secure Multi-way Join Query and Its Bench-Marking with Trusted Execution Environments

  • Yi Zhao,
  • Sen Zhao,
  • Siyi Lv

摘要

Because of server-untrustable model in outsourcing encrypted database system, it’s fatal for data owners to keep their data confidential under complex query operations performed by database servers. Trusted Execution Environments (TEEs) provide a secure space for privacy computation via hardware-based methods to increase the efficiency of database system, and it ensures the availability of computing directly on sensitive data in untrusted outsourcing database servers. However, while various query schemes are designed under the combination of encrypted database and TEEs, designing an available and secure scheme for join queries on multiple data tables with TEEs remains an open problem. Besides, previous works also devote less to bench-marking multi-way joins on TEEs. In our work, we extend binary join query scheme into multi-way forms in encrypted database system based on TEEs. It combines various join algorithms based on hash functions (hash-based, radix-based, etc.) with parallelized optimizing mechanism. Besides, we do bench-marking with TEEBench framework on those multi-way join schemes in three-way forms using both cache-fit and cache-exceed datasets and do different evaluation on two TEEs hardware platforms (Intel SGX and AMD SEV) to show its availability. After that, we also propose a multi-way join scheme with access pattern protection through the combination between our previous scheme and oblivious I/O methods. With the evaluation of its efficiency and memory leakage, we can also verify the feasibility of our access-pattern-protected multi-way join scheme.