A multi-server oblivious dynamic searchable encryption framework

Data privacy is one of the main concerns for data outsourcing on the cloud. Although standard encryption can provide confidentiality, it also prevents the clients from searching/retrieving meaningful information on the outsourced data thereby, degrading the benefits of using cloud services. To address this data utilization vs. privacy dilemma, Dynamic Searchable Symmetric Encryption (DSSE) has been proposed, which enables encrypted search and update functionality over the encrypted data via a secure index. Despite a lot of efforts, state-of-the-art DSSE constructions still leak significant information from the access pattern, making them vulnerable against various practical attacks. While generic Oblivious Random Access Machine (ORAM) can hide the access pattern, it incurs a logarithmic communication overhead, which was shown costly to be directly used in the DSSE setting. In this article, by exploiting the multi-cloud infrastructure, we develop a comprehensive Oblivious Distributed DSSE (ODSE) framework that allows oblivious search and updates on the encrypted index with high security and improved efficiency over the use of generic ORAM. Our framework contains a series of ODSE schemes each featuring different levels of performance and security required by various types of real-life applications. ODSE offers desirable security guarantees such as informationtheoretic security and robustness in the presence of a malicious adversary. We fully implemented ODSE framework and evaluated its performance in a real cloud environment (Amazon EC2). Our experiments showed that ODSE schemes are 3×-57× faster than using generic ORAMs on a DSSE encrypted index under real network settings.