Privacy-Preserving Queries Over Relational Databases
Most software systems request sensitive information from users to construct a query, but privacy concerns can make a user unwilling to provide such information. The authors explore how Private Information Retrieval (PIR) can help users keep their sensitive information from being leaked in an SQL query. They show how to retrieve data from a relational database with PIR by hiding sensitive constants contained in the predicates of a query. Experimental results and micro-benchmarking tests show their approach incurs reasonable storage overhead for the added privacy benefit and performs between 7 and 480 times faster than previous paper.