System and architecture for analytics on encrypted databases
A method is provided for generating an encrypted database. The method includes: receiving a plaintext database having plaintext data entries therein; and generating an encrypted database using the plaintext database, the encrypted database including encrypted data entries therein. The encrypted database is configured to support at least one form of conditional query such that the at least one form of conditional query returns a correct encrypted result when the query is computed on the encrypted data entries without the decryption thereof.
1. A method of generating an encrypted database, said method comprising:
receiving a plaintext database having plaintext data entries therein;
augmenting the received plaintext database to achieve an augmented plaintext database by appending one or more supplemental arrays of data entries in plaintext format to the received plaintext data base, wherein said supplemental arrays are generated from data in the received plaintext database so as to represent one or more attributes in the received plaintext database which are identified as conditional attributes that are to be made available for an execution of a conditional query in an encrypted domain; and
generating an encrypted database using the augmented plaintext database, said encrypted database including encrypted data entries therein;
wherein said encrypted database is configured to support at least one form of conditional query such that said at least one form of conditional query returns a correct encrypted result when said query is computed on the encrypted data entries without the decryption thereof.
2. The method of claim 1 , wherein the encrypted data is encrypted with a semantically secure encryption.
3. The method of claim 2 , wherein the encrypted data is encrypted using a homomorphic cryptosystem.
4. The method of claim 3 , wherein the homomorphic cryptosystem is an additively homomorphic cryptosystem.
5. The method of claim 3 , wherein the homomorphic cryptosystem supports 2-DNF (Disjunctive Normal Form) operations.
6. The method of claim 1 , wherein the at least one form of conditional query is one of a WHERE query or a GROUPBY query.
7. The method of claim 1 , further comprising:
establishing a public-private key pair, wherein a public key of said pair is used to encrypt the encrypted database and a private key of said pair is provided to decrypt a returned result of a query.
8. The method of claim 1 , wherein said private key is not made available to a database management system in which the encrypted database is maintained or a server which computes queries conducted on the encrypted database.
9. A system for administering an encrypted database, said system comprising:
an Extract, Transfer and Load (ETL) server, implemented on one or more hardware components, wherein said ETL server is operative to (i) receive as input a plaintext database having unencrypted data therein, and (ii) based upon the input plaintext database, output a corresponding encrypted database having encrypted data therein, wherein the ETL server augments the input plaintext database to achieve an augmented plaintext database by appending one or more supplemental arrays of data entries in unencrypted format to the input plaintext data base, said supplemental arrays being generated from data in the input plaintext database so as to represent one or more attributes in the input plaintext database which are identified as conditional attributes that are to be made available for an execution of a conditional query in an encrypted domain, and wherein the ETL server generates the corresponding encrypted database by encrypting the augmented plaintext database;
a database (DB) server, implemented on one or more hardware components, wherein said DB server is operative to (i) receive and maintain the encrypted database from the ETL server, and (ii) return encrypted data in response to queries submitted to the DB server; and
a computation server, implemented on one or more hardware components, wherein said computation server is operative to (i) submit queries to the DB server, and (ii) conduct computations on encrypted data returned from the DB server;
wherein said computations are conducted on the encrypted data from the encrypted database without decryption of the encrypted data, and results obtained from said computations are encrypted, said encrypted database being configured so as to support obtaining correct encrypted results in response to at least one form of conditional query without revealing samples of the unencrypted data underlying the encrypted data.
10. The system of claim 9 , wherein the encrypted data is encrypted with a semantically secure encryption.
11. The system of claim 10 , wherein the encrypted data is encrypted using a homomorphic cryptosystem.
12. The system of claim 11 , wherein the homomorphic cryptosystem is an additively homomorphic cryptosystem.
13. The system of claim 11 , wherein the homomorphic cryptosystem supports 2-DNF (Disjunctive Normal Form) operations.
14. The system of claim 9 , wherein the at least one form of conditional query is one of a WHERE query or a GROUPBY query.
15. The system of claim 9 , further comprising:
a key authority which administers a public-private key pair, wherein a public key of said pair is used to encrypt the encrypted database and a private key of said pair is usable to decrypt the encrypted result of a query.
16. The system of claim 15 , wherein said private key is not made available to the DB server or the computation server.
17. A method of generating an encrypted database, said method comprising:
receiving a plaintext database having plaintext data entries therein arranged in a first number of arrays;
augmenting the received plaintext database to achieve an augmented plaintext database by appending one or more supplemental arrays of data entries in plaintext format to the received plaintext data base such that the augmented plaintext database has data entries arranged in a second number of arrays which second number is greater than the first number, wherein the data entries in said supplemental arrays are generated based upon existing data entries in the received plaintext database so as to represent one or more attributes in the received plaintext database which are identified as conditional attributes that are to be made available for an execution of a conditional query in an encrypted domain; and
generating an encrypted database using the augmented plaintext database, said encrypted database including encrypted data entries therein;
wherein said encrypted database is configured to support at least one form of conditional query such that said at least one form of conditional query returns a correct encrypted result when said query is computed on the encrypted data entries without the decryption thereof.