New Paradigm of Inference Control with Trusted Computing

• Main Authors: YANG, Yanjiang, LI, Yingjiu, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2006
• Subjects: Inference control; trusted computing; auditing; security protocol; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/611; https://ink.library.smu.edu.sg/context/sis_research/article/1610/viewcontent/Yang2007_NewParadigmOfInferenceControl_pv.pdf
• Institution: Singapore Management University

The database server is a crucial bottleneck in traditional inference control architecture, as it enforces highly computation-intensive auditing for all users who query the protected database. As a result, most auditing methods, though rigorously studied, can never be implemented in practice for protecting largescale real-world database systems. To shift this paradigm, we propose a new inference control architecture that will entrust inference control to each users platform, provided that the platform is equipped with trusted computing technology. The trusted computing technology is designed to attest the state of a users platform to the database server, so as to assure the server that inference control could be enforced as expected. A generic protocol is proposed to formalize the interactions between the users platform and database server. Any existing inference control technique can work with our protocol, for which the security properties are formally proven. Since each user’s platform enforces inference control for its own queries, our solution avoids the bottleneck.