GhostDB: Hiding Data from Prying Eyes

Christophe Salperwyck (1) , Nicolas Anciaux (1, 2) , Mehdi Benzine (1, 2) , Luc Bouganim (1, 2) , Philippe Pucheral (1, 2) , Dennis Shasha (1)

1 SMIS - Secured and Mobile Information Systems
2 PRISM - Parallélisme, Réseaux, Systèmes, Modélisation

corporate product information, sensitive government information, or symptom and treatment information about hospital patients. You may want to issue queries whose result will combine private and public data, but private data must not be revealed, say, to the prying eyes of some insurance fraudster. GhostDB is an architecture and system to achieve this. You carry private data in a smart USB device (a large Flash persistent store combined with a tamper and snoop-resistant CPU and small RAM). When the key is plugged in, you can issue queries that link private and public data and be sure that the only information revealed to a potential spy is which queries you pose and the public data you access. Queries linking public and private data entail novel distributed processing techniques on extremely unequal devices (standard computer and smart USB device) in which data flows in only one direction: from public to private. This demonstration shows GhostDB's query processing in action.

Domaines: Base de données [cs.DB]

Christophe Salperwyck, Nicolas Anciaux, Mehdi Benzine, Luc Bouganim, Philippe Pucheral, et al.. GhostDB: Hiding Data from Prying Eyes. BDA 2007 : 23èmes Journées "Bases de Données Avancées", Oct 2007, Marseille, France. ⟨inria-00321721⟩