Full encryption

作者：Jinwei Zhu, Kun Cheng, Jiayang Liu, Liang Guo · 发表于：Proceedings of the VLDB Endowment · 年份：2021 · DOI：10.14778/3476311.3476351 · 被引用次数：23 · 研究领域：Cryptography and Data Security、Security and Verification in Computing、Distributed systems and fault tolerance

In this paper, we present a novel mechanism called Full Encryption (FE) in GaussDB. FE-in-GaussDB provides column-level encryption for sensitive data, and secures the asset from any malicious cloud administrator or information leakage attack. It ensures not only the security of operations on ciphertext data, but also the efficiency of query execution, by combining the advantages of cryptography algorithms (i.e. software mode) and Trusted Execution Environment (i.e. hardware mode). With this, FE-in-GaussDB supports full-scene query processing including the matching, the comparison and other rich computing functionalities. We demonstrate the prototype of FE-in-GaussDB and an experimental performance evaluation to prove its availability and effectiveness.