TY - GEN
T1 - Regulatory compliant Oblivious RAM
AU - Carbunar, Bogdan
AU - Sion, Radu
PY - 2010
Y1 - 2010
N2 - We introduce WORM-ORAM, a first mechanism that combines Oblivious RAM (ORAM) access privacy and data confidentiality with Write Once Read Many (WORM) regulatory data retention guarantees. Clients can outsource their database to a server with full confidentiality and data access privacy, and, for data retention, the server ensures client access WORM semantics. In general simple confidentiality and WORM assurances are easily achievable e.g., via an encrypted outsourced data repository with server-enforced read-only access to existing records (albeit encrypted). However, this becomes hard when also access privacy is to be ensured - when client access patterns are necessarily hidden and the server cannot enforce access control directly.WORM-ORAM overcomes this by deploying a set of zero-knowledge proofs to convince the server that all stages of the protocol are WORM-compliant.
AB - We introduce WORM-ORAM, a first mechanism that combines Oblivious RAM (ORAM) access privacy and data confidentiality with Write Once Read Many (WORM) regulatory data retention guarantees. Clients can outsource their database to a server with full confidentiality and data access privacy, and, for data retention, the server ensures client access WORM semantics. In general simple confidentiality and WORM assurances are easily achievable e.g., via an encrypted outsourced data repository with server-enforced read-only access to existing records (albeit encrypted). However, this becomes hard when also access privacy is to be ensured - when client access patterns are necessarily hidden and the server cannot enforce access control directly.WORM-ORAM overcomes this by deploying a set of zero-knowledge proofs to convince the server that all stages of the protocol are WORM-compliant.
UR - https://www.scopus.com/pages/publications/79956312604
U2 - 10.1007/978-3-642-13708-2_27
DO - 10.1007/978-3-642-13708-2_27
M3 - Conference contribution
AN - SCOPUS:79956312604
SN - 3642137075
SN - 9783642137075
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 456
EP - 474
BT - Applied Cryptography and Network Security - 8th International Conference, ACNS 2010, Proceedings
T2 - 8th International Conference on Applied Cryptography and Network Security, ACNS 2010
Y2 - 22 June 2010 through 25 June 2010
ER -