Toward cloud-based key management for outsourced databases
Résumé
A major drawback of implementing Database-as-a-Service (DaaS) on untrusted servers is the complexity of key
management required for handling revocation. In this paper
we put forward the idea of using the cloud for decoupling the
management of local, user-specific encryption keys from the one
of role-specific protection keys, obtaining simple key management
and revocation schemes.