A Secure Range Query Enabled Approach for Encrypted XML Documents

Outsourcing organizational data raises questions about the data security and enabling an untrusted server to process queries efficiently. This paper proposes an approach for supporting range queries over encrypted XML documents. We offered an encryption scheme which protects sensitive structural information as well as sensitive values in the hosted database. Some secured indexes are designed to lead the server processing of queries over encrypted data without improvement of its knowledge about the data content. A small XML schema also maintained at the client side to hide the structure of database from the server view. For query processing, sensitive structures are removed from queries and the encrypted query is sent to the server side. We compared the proposed approach with other approaches and demonstrate that this approach is more secure against frequency-based and size-based attacks. Additionally, the overhead of data outsourced at the server is reduced and most of the query processing load is left on the server side.

Keywords:

Query on Encrypted Data , Frequency-based Attack , Size-based Attack , Outsourced Data