Preserving privacy and fairness in peer-to-peer data integration

ABSTRACT

Peer-to-peer data integration - a.k.a. Peer Data Management Systems (PDMSs) - promises to extend the classical data integration approach to the Internet scale. Unfortunately, some challenges remain before realizing this promise. One of the biggest challenges is preserving the privacy of the exchanged data while passing through several intermediate peers. Another challenge is protecting the mappings used for data translation. Protecting the privacy without being unfair to any of the peers is yet a third challenge. This paper presents a novel query answering protocol in PDMSs to address these challenges. The protocol employs a technique based on noise selection and insertion to protect the query results, and a commutative encryption-based technique to protect the mappings and ensure fairness among peers. An extensive security analysis of the protocol shows that it is resilient to several possible types of attacks. We implemented the protocol within an established PDMS: the Hyperion system. We conducted an experimental study using real data from the healthcare domain. The results show that our protocol manages to achieve its privacy and fairness goals, while maintaining query processing time at the interactive level.

References

1. R. Agrawal, A. Evfimievski, and R. Srikant. Information sharing across private databases. In SIGMOD, 2003.
2. A. Blum, C. Dwork, F. McSherry, and K. Nissim. Practical privacy: The suLQ framework. In PODS, 2005
3. A. Bonifati et al. Schema mapping and query translation in heterogeneous P2P XML databases. In VLDBJ, 2009.
4. I. Dinur and K. Nissim. Revealing information while preserving privacy. In PODS, 2003.
5. E. Franconi, G. Kuper, A. Lopatenko, I. Zaihrayeu. Queries and Updates in the coDB Peer to Peer Database System. In VLDB Demonstration session, 2004.
6. O. Goldreich. Foundations of Cryptography, volume 2. Cambridge University Press, 2004.
7. A. Y. Halevy, Z. G. Ives, D. Suciu, and I.Tatarinov. Schema mediation in peer data management systems. In ICDE, 2003.
8. A. Kementsietsidis and M. Arenas. Data Sharing Through Query Translation in Autonomous Sources. In VLDB 2004.
9. A. Kementsietsidis, M. Arenas, R. J. Miller. Mapping Data in Peer-to-Peer Systems: Semantics and Algorithmic Issues. In SIGMOD, 2003.
10. K. LeFevre, D. J. DeWitt and R. Ramakrishnan. Incognito: Efficient Full-Domain K-Anonymity. In SIGMOD, 2005
11. A. Meyerson and R. Williams. On the complexity of optimal k-anonymity. In PODS, 2004.
12. G. Miklau and D. Suciu. Controlling Access to Published Data Using Cryptography. In VLDB, 2003.
13. National Institute of Health. Computational Technology for Effective Health Care: Immediate Steps and Strategic Directions. http://www.nlm.nih.gov/pubs/reports/comptech_prepub.pdf, 2009.
14. W.S. Ng, B. C. Ooi, K.L. Tan, A. Zhou. PeerDB: A P2P-based System for Distributed Data Sharing. In ICDE, 2003
15. S. Pohlig and M. Hellman. An improved algorithm for computing logarithms over GF(p) and its cryptographic significance. IEEE TOIT, 24:106--110, Jan 1978.
16. P. Rodriguez-Gianolli et al. Data Sharing in the Hyperion Peer Database System. In VLDB, 2005
17. L. Sweeney. k-Anonymity: A Model for Protecting Privacy. In Int. J. on Uncertainty, Fuzziness & Knowledge-based Systems, 1998.
18. I. Tatarinov and A. Y. Halevy. Efficient query reformulation in peer-data management systems. In SIGMOD, 2004.
19. I. Tatarinov et al. The Piazza Peer Data Management Project. In WWW, 2003.
20. http://www.carfax.com
21. http://www.gmplib.org

Index Terms

• Information systems

  • Data management systems

    • Information integration

      • Extraction, transformation and loading

• Software and its engineering

  • Software organization and properties

    • Extra-functional properties

      • Interoperability