ConcurORAM:高吞吐量无状态并行多客户端ORAM
ConcurORAM: High-Throughput Stateless Parallel Multi-Client ORAM
摘要:
ConcurORAM是一种并行的多客户端不经意RAM(ORAM),它消除了对并发无状态客户端的等待,并允许整体吞吐量优雅地扩展,而不需要可信的第三方组件(代理)或直接的客户端间协调。ConcurORAM背后的一个关键见解是,在多客户端数据访问期间,只有并发访问的服务器托管的数据结构的子集需要访问隐私保证。其他的一切都可以安全地实现为不经意的数据结构,这些数据结构稍后在ORAM“驱逐”期间安全有效地同步。此外,由于延迟的主要贡献者是驱逐-其中客户端驻留的数据被重新洗牌并重新加密插入到主服务器数据库中- ConcurORAM还使多个并发客户端能够异步地、并行地(不损害一致性)以及在后台驱逐,而不必阻止正在进行的查询。因此,吞吐量可以随着并发客户端数量的增加而很好地扩展,并且不会受到回收的显著影响。例如,30个并发客户端每秒可以并行执行大约65个查询,比最先进的技术提高了2倍。与单客户端部署相比,单个客户端的查询访问时间仅增加了2倍。
英文摘要:
ConcurORAM is a parallel, multi-client oblivious RAM (ORAM) that eliminates waiting for concurrent stateless clients and allows overall throughput to scale gracefully, without requiring trusted third party components (proxies) or direct inter-client coordination. A key insight behind ConcurORAM is the fact that, during multi-client data access, only a subset of the concurrently-accessed server-hosted data structures require access privacy guarantees. Everything else can be safely implemented as oblivious data structures that are later synced securely and efficiently during an ORAM "eviction". Further, since a major contributor to latency is the eviction - in which client-resident data is reshuffled and reinserted back encrypted into the main server database - ConcurORAM also enables multiple concurrent clients to evict asynchronously, in parallel (without compromising consistency), and in the background without having to block ongoing queries. As a result, throughput scales well with increasing number of concurrent clients and is not significantly impacted by evictions. For example, about 65 queries per second can be executed in parallel by 30 concurrent clients, a 2x speedup over the state-of-the-art. The query access time for individual clients increases by only 2x when compared to a single-client deployment.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。