GhostDB: querying visible and hidden data without leaks

  • Authors:

  • Nicolas Anciaux;Mehdi Benzine;Luc Bouganim;Philippe Pucheral;Dennis Shasha

  • Affiliations:

  • INRIA Rocquencourt, Le Chesnay, France;INRIA Rocquencourt, Le Chesnay, France and University of Versailles, France;INRIA Rocquencourt, Le Chesnay, France;INRIA Rocquencourt, Le Chesnay, France and University of Versailles, France;INRIA Rocquencourt, Le Chesnay, France and New York University, New York, USA

  • Venue:
  • Proceedings of the 2007 ACM SIGMOD international conference on Management of data
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Imagine that you have been entrusted with private data, such as corporate product information, sensitive government information, or symptom and treatment information about hospital patients. You may want to issue queries whose result will combine private and public data, but private data must not be revealed. GhostDB is an architecture and system to achieve this. You carry private data in a smart USB key (a large Flash persistent store combined with a tamper and snoop-resistant CPU and small RAM). When the key is plugged in, you can issue queries that link private and public data and be sure that the only information revealed to a potential spy is which queries you pose. Queries linking public and private data entail novel distributed processing techniques on extremely unequal devices (standard computer and smart USB key). This paper presents the basic framework to make this all work intuitively and efficiently.