CT-ISG: Collaborative Research: Towards Trustworthy Database Systems

CT-ISG：协作研究：迈向可信赖的数据库系统

• 批准号: 0831278
• 负责人: Feifei Li
• 金额: $ 15.06万
• 依托单位: Florida State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-10-01 至 2012-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831278&HistoricalAwards=false
• 关键词: CT; ISG; Collaborative; Research; Towards; CT; ISG; Collaborative; Research; Towards

Answers to database queries often form the basis for critical decision-making. To improve efficiency and reliability, answers to these queries can be provided by distributed servers close to the querying clients. However, because of the servers' ubiquity, the logistics associated with fully securing them may be prohibitive; moreover, when the servers are run by third parties, the clients may not trust them as much as they trust the original data owners. Thus, the authenticity of the answers provided by servers in response to clients' queries must be verifiable by the clients. More generally, database responses are more useful if they contain the evidence of their own correctness. For example, this enables a consumer to provide her own credit report to a creditor without having the creditor request it from the reporting agency to establish the validity of the report. This project is developing methods for authenticating the validity and authenticity of a variety of database queries, including general relational, data cube, and spatio-temporal queries. Furthermore, techniques that use powerful cryptographic primitives are being developed for providing authentication and confidentiality. This research will enable utilization of this infrastructure in applications where users must rely on the authenticity of the answer, such as in financial systems, network monitoring, traffic control, or applications yet to be imagined. The results of this project will be disseminated through publications in journals and conferences. Furthermore, source code of these methods, in the form of libraries, will be made available over the web.

数据库查询的答案通常是关键决策的基础。为了提高效率和可靠性，可以通过靠近查询客户端的分布式服务器来提供这些查询的答案。但是，由于服务器的普遍存在，与完全保护它们相关的物流可能会令人难以置信。此外，当服务器由第三方运行时，客户可能不会像他们信任原始数据所有者那样信任他们。因此，服务器对客户端查询提供的答案的真实性必须由客户验证。更一般而言，如果数据库响应包含其自身正确性的证据，则更有用。例如，这使消费者能够向债权人提供自己的信用报告，而无需让债权人向报告机构要求它建立报告的有效性。 该项目正在开发使用各种数据库查询的有效性和真实性的方法，包括通用关系，数据立方体和时空查询。此外，正在开发使用强大的加密原始图的技术来提供身份验证和机密性。这项研究将在用户必须依赖答案的真实性的应用程序中利用该基础架构，例如在金融系统，网络监控，流量控制或尚未想象的应用程序中。该项目的结果将通过期刊和会议的出版物进行传播。此外，以库的形式将这些方法的源代码通过网络提供。