An efficient approach to support querying secure outsourced XML information

Yin Yang, Wilfred Ng, Ho Lam Lau, James Cheng

Research output: Chapter in Book/Report/Conference proceedingConference contribution

13 Citations (Scopus)

Abstract

Data security is well-recognized a vital issue in an information system that is supported in an outsource environment. However, most of conventional XML encryption proposals treat confidential parts of an XML document as whole blocks of text and apply encryption algorithms directly on them. As a result, queries involving the encrypted part cannot be efficiently processed. In order to address these problems, we propose XQEnc, a novel approach to support querying encrypted XML. XQEnc is based on two important techniques of vectorization and skeleton compression, Essentially, vectorization, which is a generalization of columns of a relational table, makes use the basic path of an XML tree to label the data values. Skeleton compression collapses the redundant paths into a multiplicity attribute. Our analysis and experimental study shows that XQEnc achieves both better query efficiency and more robust security compared with conventional methods. As an application, we show how XQEnc can be realized with relational techniques to enable secure XML data outsourcing.

Original languageEnglish
Title of host publicationAdvanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings
PublisherSpringer Verlag
Pages157-171
Number of pages15
Volume4001 LNCS
ISBN (Print)354034652X, 9783540346524
Publication statusPublished - 2006
Externally publishedYes
Event18th International Conference on Advanced Information Systems Engineering, CAiSE 2006 - Luxembourg, Luxembourg
Duration: 5 Jun 20069 Jun 2006

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume4001 LNCS
ISSN (Print)03029743
ISSN (Electronic)16113349

Other

Other18th International Conference on Advanced Information Systems Engineering, CAiSE 2006
CountryLuxembourg
CityLuxembourg
Period5/6/069/6/06

Fingerprint

XML
Vectorization
Skeleton
Encryption
Cryptography
Compression
Query
Data Security
Path
Outsourcing
Security of data
Labels
Information Systems
Experimental Study
Table
Multiplicity
Information systems
Attribute

ASJC Scopus subject areas

  • Computer Science(all)
  • Theoretical Computer Science

Cite this

Yang, Y., Ng, W., Lau, H. L., & Cheng, J. (2006). An efficient approach to support querying secure outsourced XML information. In Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings (Vol. 4001 LNCS, pp. 157-171). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4001 LNCS). Springer Verlag.

An efficient approach to support querying secure outsourced XML information. / Yang, Yin; Ng, Wilfred; Lau, Ho Lam; Cheng, James.

Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings. Vol. 4001 LNCS Springer Verlag, 2006. p. 157-171 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 4001 LNCS).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Yang, Y, Ng, W, Lau, HL & Cheng, J 2006, An efficient approach to support querying secure outsourced XML information. in Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings. vol. 4001 LNCS, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 4001 LNCS, Springer Verlag, pp. 157-171, 18th International Conference on Advanced Information Systems Engineering, CAiSE 2006, Luxembourg, Luxembourg, 5/6/06.
Yang Y, Ng W, Lau HL, Cheng J. An efficient approach to support querying secure outsourced XML information. In Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings. Vol. 4001 LNCS. Springer Verlag. 2006. p. 157-171. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
Yang, Yin ; Ng, Wilfred ; Lau, Ho Lam ; Cheng, James. / An efficient approach to support querying secure outsourced XML information. Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings. Vol. 4001 LNCS Springer Verlag, 2006. pp. 157-171 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
@inproceedings{37b7277ad4f441da8a2433e23c987f15,
title = "An efficient approach to support querying secure outsourced XML information",
abstract = "Data security is well-recognized a vital issue in an information system that is supported in an outsource environment. However, most of conventional XML encryption proposals treat confidential parts of an XML document as whole blocks of text and apply encryption algorithms directly on them. As a result, queries involving the encrypted part cannot be efficiently processed. In order to address these problems, we propose XQEnc, a novel approach to support querying encrypted XML. XQEnc is based on two important techniques of vectorization and skeleton compression, Essentially, vectorization, which is a generalization of columns of a relational table, makes use the basic path of an XML tree to label the data values. Skeleton compression collapses the redundant paths into a multiplicity attribute. Our analysis and experimental study shows that XQEnc achieves both better query efficiency and more robust security compared with conventional methods. As an application, we show how XQEnc can be realized with relational techniques to enable secure XML data outsourcing.",
author = "Yin Yang and Wilfred Ng and Lau, {Ho Lam} and James Cheng",
year = "2006",
language = "English",
isbn = "354034652X",
volume = "4001 LNCS",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "157--171",
booktitle = "Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings",

}

TY - GEN

T1 - An efficient approach to support querying secure outsourced XML information

AU - Yang, Yin

AU - Ng, Wilfred

AU - Lau, Ho Lam

AU - Cheng, James

PY - 2006

Y1 - 2006

N2 - Data security is well-recognized a vital issue in an information system that is supported in an outsource environment. However, most of conventional XML encryption proposals treat confidential parts of an XML document as whole blocks of text and apply encryption algorithms directly on them. As a result, queries involving the encrypted part cannot be efficiently processed. In order to address these problems, we propose XQEnc, a novel approach to support querying encrypted XML. XQEnc is based on two important techniques of vectorization and skeleton compression, Essentially, vectorization, which is a generalization of columns of a relational table, makes use the basic path of an XML tree to label the data values. Skeleton compression collapses the redundant paths into a multiplicity attribute. Our analysis and experimental study shows that XQEnc achieves both better query efficiency and more robust security compared with conventional methods. As an application, we show how XQEnc can be realized with relational techniques to enable secure XML data outsourcing.

AB - Data security is well-recognized a vital issue in an information system that is supported in an outsource environment. However, most of conventional XML encryption proposals treat confidential parts of an XML document as whole blocks of text and apply encryption algorithms directly on them. As a result, queries involving the encrypted part cannot be efficiently processed. In order to address these problems, we propose XQEnc, a novel approach to support querying encrypted XML. XQEnc is based on two important techniques of vectorization and skeleton compression, Essentially, vectorization, which is a generalization of columns of a relational table, makes use the basic path of an XML tree to label the data values. Skeleton compression collapses the redundant paths into a multiplicity attribute. Our analysis and experimental study shows that XQEnc achieves both better query efficiency and more robust security compared with conventional methods. As an application, we show how XQEnc can be realized with relational techniques to enable secure XML data outsourcing.

UR - http://www.scopus.com/inward/record.url?scp=33746052820&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=33746052820&partnerID=8YFLogxK

M3 - Conference contribution

SN - 354034652X

SN - 9783540346524

VL - 4001 LNCS

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 157

EP - 171

BT - Advanced Information Systems Engineering - 18th International Conference, CAiSE 2006, Proceedings

PB - Springer Verlag

ER -