Private Information Retrieval with Access Control
Private Information Retrieval (PIR) allows a user to query for a record from a remote database without revealing the query to the database server. However, PIR does not provide access control guarantees, allowing any user access to any record. Moreover, the database server cannot check access permis...
| Main Author: | |
|---|---|
| Other Authors: | |
| Format: | Thesis |
| Published: |
Massachusetts Institute of Technology
2023
|
| Online Access: | https://hdl.handle.net/1721.1/151392 |
| _version_ | 1826201746104385536 |
|---|---|
| author | Goyal, Pawan |
| author2 | Servan-Schreiber, Sacha |
| author_facet | Servan-Schreiber, Sacha Goyal, Pawan |
| author_sort | Goyal, Pawan |
| collection | MIT |
| description | Private Information Retrieval (PIR) allows a user to query for a record from a remote database without revealing the query to the database server. However, PIR does not provide access control guarantees, allowing any user access to any record. Moreover, the database server cannot check access permissions through conventional techniques as they are fundamentally incompatible with PIR.
In this thesis, we present Pirac—a novel framework for access control in PIR. In Pirac, only users who have permission to access a specific database record can retrieve it. Our constructions make black-box use of the underlying PIR schemes and therefore apply to both single-server and multi-server PIR.
We evaluate our open-source implementation of Pirac when applied to state-of-theart PIR schemes. For databases with roughly one million 4 KiB records, adding access control via Pirac incurs a 2.6× server-side computational overhead in single-server PIR and 3.1× in multi-server PIR, while keeping user processing and communication overheads at a minimum.
We show that Pirac enables new applications of PIR, including privacy-preserving password breach lookups, multi-user databases with personal content, and private friend discovery, among others. |
| first_indexed | 2024-09-23T11:56:04Z |
| format | Thesis |
| id | mit-1721.1/151392 |
| institution | Massachusetts Institute of Technology |
| last_indexed | 2024-09-23T11:56:04Z |
| publishDate | 2023 |
| publisher | Massachusetts Institute of Technology |
| record_format | dspace |
| spelling | mit-1721.1/1513922023-08-01T03:50:00Z Private Information Retrieval with Access Control Goyal, Pawan Servan-Schreiber, Sacha Devadas, Srini Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science Private Information Retrieval (PIR) allows a user to query for a record from a remote database without revealing the query to the database server. However, PIR does not provide access control guarantees, allowing any user access to any record. Moreover, the database server cannot check access permissions through conventional techniques as they are fundamentally incompatible with PIR. In this thesis, we present Pirac—a novel framework for access control in PIR. In Pirac, only users who have permission to access a specific database record can retrieve it. Our constructions make black-box use of the underlying PIR schemes and therefore apply to both single-server and multi-server PIR. We evaluate our open-source implementation of Pirac when applied to state-of-theart PIR schemes. For databases with roughly one million 4 KiB records, adding access control via Pirac incurs a 2.6× server-side computational overhead in single-server PIR and 3.1× in multi-server PIR, while keeping user processing and communication overheads at a minimum. We show that Pirac enables new applications of PIR, including privacy-preserving password breach lookups, multi-user databases with personal content, and private friend discovery, among others. M.Eng. 2023-07-31T19:36:19Z 2023-07-31T19:36:19Z 2023-06 2023-06-06T16:34:56.049Z Thesis https://hdl.handle.net/1721.1/151392 In Copyright - Educational Use Permitted Copyright retained by author(s) https://rightsstatements.org/page/InC-EDU/1.0/ application/pdf Massachusetts Institute of Technology |
| spellingShingle | Goyal, Pawan Private Information Retrieval with Access Control |
| title | Private Information Retrieval with Access Control |
| title_full | Private Information Retrieval with Access Control |
| title_fullStr | Private Information Retrieval with Access Control |
| title_full_unstemmed | Private Information Retrieval with Access Control |
| title_short | Private Information Retrieval with Access Control |
| title_sort | private information retrieval with access control |
| url | https://hdl.handle.net/1721.1/151392 |
| work_keys_str_mv | AT goyalpawan privateinformationretrievalwithaccesscontrol |