One-Server Private Information Retrieval Scheme with Mutual Authentication Capability

在電腦網路及電子商務的環境中，要對資料庫伺服器保持使用者（顧客）的隱私不認為是可行的；直到私密資訊擷取機制(Private information retrieval: PIR)被提出並有解決方案為止。一個私密資訊擷取機制允許使用者查詢（擷取）線上資料庫的資料項時，對資料庫伺服器隱藏了所查詢的資料項。在這篇論文中，我們提出一個擁有相互認證功能的新單伺服器私密資訊擷取機制。因為搭配相互認證功能及使用安全的共同處理器(SC: secure coprocessor)，我們的私密資訊擷取機制比之前所提出的機制更加安全及實用（有效率）。在本篇論文中我們提供了一個比較表，以比較我們所提出的私密資訊擷取機制及之前所提出的私密資訊擷取機制；除此之外我們也用了一些篇幅做詳細的安全性分析及說明。

關鍵字

私密資訊擷取機制PIR ；安全的共同處理器SC ；相互認證

並列摘要

In e-commerce, the protection of users' privacy from a server was not considered feasible until the private information retrieval (PIR) problem was stated and solved. A PIR scheme allows a user to retrieve a data item from an online database while hiding the identity of the item from a database server. In this paper, a new PIR scheme combined with authentication for protecting the privacy of users is proposed. Using only one server (combined with secure coprocessor) and including the mutual authentication process in the proposed scheme, it is more secure and more practical in the real e-commerce environment compared with previous PIR solutions. In addition, a security analysis for our scheme and comparisons to other PIR schemes are given.

並列關鍵字

private information retrieval PIR ； secure coprocessor SC ； mutual authentication

國際替代計量

One-Server Private Information Retrieval Scheme with Mutual Authentication Capability

全文下載

主題瀏覽