Authenticating Aggregate Queries over Set-Valued Data with Confidentiality. Xu, C., Chen, Q., Hu, H., Xu, J., & Hei, X. IEEE Transactions on Knowledge and Data Engineering (\textbfTKDE), 30(4):630–644, 4, 2018.
Authenticating Aggregate Queries over Set-Valued Data with Confidentiality [link]Paper  doi  abstract   bibtex   
With recent advances in data-as-a-service (DaaS) and cloud computing, aggregate query services over set-valued data are becoming widely available for business intelligence that drives decision making. However, as the service provider is often a third-party delegate of the data owner, the integrity of the query results cannot be guaranteed and is thus imperative to be authenticated. Unfortunately, existing query authentication techniques either do not work for set-valued data or they lack data confidentiality. In this paper, we propose authenticated aggregate queries over set-valued data that not only ensure the integrity of query results but also preserve the confidentiality of source data. As many aggregate queries are composed of multiset operations such as set union and subset, we first develop a family of privacy-preserving authentication protocols for primitive multiset operations. Using these protocols as building blocks, we present a privacy-preserving authentication framework for various aggregate queries and further optimize their authentication performance. Security analysis and empirical evaluation show that our proposed privacy-preserving authentication techniques are feasible and robust under a wide range of system workloads.
@article{TKDE:auth-aggregate-queries,
    author = {Xu, Cheng
              and Chen, Qian
              and Hu, Haibo
              and Xu, Jianliang
              and Hei, Xiaojun},
    author+an = {1=highlight},
    title = {Authenticating Aggregate Queries over Set-Valued Data with Confidentiality},
    journal = {IEEE Transactions on Knowledge and Data Engineering (\textbf{TKDE})},
    year = {2018},
    month = {4},
    day = {1},
    volume = {30},
    number = {4},
    pages = {630--644},
    issn = {1041-4347},
    doi = {10.1109/TKDE.2017.2773541},
    url = {https://doi.org/10.1109/TKDE.2017.2773541},
    eprint_url = {https://xuc.me/file/paper/TKDE18.pdf},
    poster_url = {https://xuc.me/file/poster/TKDE18.pdf},
    addendum = {Full Paper},
    abstract = {With recent advances in data-as-a-service (DaaS) and cloud computing, aggregate query services over set-valued data are becoming widely available for business intelligence that drives decision making. However, as the service provider is often a third-party delegate of the data owner, the integrity of the query results cannot be guaranteed and  is thus imperative to be authenticated. Unfortunately, existing query authentication techniques either do not work for set-valued data or they lack data confidentiality. In this paper, we propose authenticated aggregate queries over set-valued data that not only ensure the integrity of query results but also preserve the confidentiality of source data. As many aggregate queries are composed of multiset operations such as set union and subset, we first develop a family of privacy-preserving authentication protocols for primitive multiset operations. Using these protocols as building blocks, we present a privacy-preserving authentication framework for various aggregate queries and further optimize their authentication performance. Security analysis and empirical evaluation show that our proposed privacy-preserving authentication techniques are feasible and robust under a wide range of system workloads.},
}

Downloads: 0