Harpocrates：用于敏感数据操作的隐私保护和不可变审计日志
Harpocrates: Privacy-Preserving and Immutable Audit Log for Sensitive Data Operations
摘要：
审计日志是监控敏感数据上的细粒度操作（例如，人身、健康）进行安全检查和保证。由于此类数据操作可能高度敏感，因此确保审计日志不仅具有有效性和不变性，而且还具有针对标准数据法规（例如，HIPAA）合规性。尽管其关键需求，最先进的隐私保护审计日志方案（例如，Ghostor（NSDI '20），Calypso（VLDB '19））不能同时完全获得高级别的隐私，完整性和不变性，其中某些信息（例如，用户身份）仍然在日志中泄露。在本文中，我们提出了Harpocrates，一个新的隐私保护和不可变的审计日志计划。Harpocrates允许数据存储、共享和访问操作被记录在审计日志中而不泄漏敏感信息（例如，数据标识符、用户身份），同时允许公开验证数据操作的有效性。Harpocrates利用区块链技术来实现不变性并避免单点故障，而加密零知识证明则用于保密性和公共可验证性。我们分析了我们提出的技术的安全性，并证明它实现了不可延展性和不可篡改性。我们完全实现了Harpocrates，并在真实的区块链系统上评估了它的性能（即，Hyperledger Fabric）部署在商品平台上（即，Amazon EC2）。实验结果表明，Harpocrates具有很高的可扩展性，并达到实用的性能。
英文摘要：
The audit log is a crucial component to monitor fine-grained operations over sensitive data (e.g., personal, health) for security inspection and assurance. Since such data operations can be highly sensitive, it is vital to ensure that the audit log achieves not only validity and immutability, but also confidentiality against active threats to standard data regulations (e.g., HIPAA) compliance. Despite its critical needs, state-of-the-art privacy-preserving audit log schemes (e.g., Ghostor (NSDI '20), Calypso (VLDB '19)) do not fully obtain a high level of privacy, integrity, and immutability simultaneously, in which certain information (e.g., user identities) is still leaked in the log. In this paper, we propose Harpocrates, a new privacy-preserving and immutable audit log scheme. Harpocrates permits data store, share, and access operations to be recorded in the audit log without leaking sensitive information (e.g., data identifier, user identity), while permitting the validity of data operations to be publicly verifiable. Harpocrates makes use of blockchain techniques to achieve immutability and avoid a single point of failure, while cryptographic zero-knowledge proofs are harnessed for confidentiality and public verifiability. We analyze the security of our proposed technique and prove that it achieves non-malleability and indistinguishability. We fully implemented Harpocrates and evaluated its performance on a real blockchain system (i.e., Hyperledger Fabric) deployed on a commodity platform (i.e., Amazon EC2). Experimental results demonstrated that Harpocrates is highly scalable and achieves practical performance.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
