title: Two Can Keep a Secret: A Distributed Architecture for Secure Database Services creator: Aggarwal, Gagan creator: Bawa, Mayank creator: Ganesan, Prasanna creator: Garcia-Molina, Hector creator: Kenthapadi, Krishnaram creator: Motwani, Rajeev creator: Srivastava, Utkarsh creator: Thomas, Dilys creator: Xu, Ying subject: Miscellaneous description: Recent trends towards database outsourcing, as well as concerns and laws governing data privacy, have led to great interest in enabling secure database services. Previous approaches to enabling such a service have been based on data encryption, causing a large overhead in query processing. We propose a new, distributed architecture that allows an organization to outsource its data management to {\em two} untrusted servers while preserving data privacy. We show how the presence of two servers enables efficient partitioning of data so that the contents at any one server are guaranteed not to breach data privacy. We show how to optimize and execute queries in this architecture, and discuss new challenges that emerge in designing the database schema. date: 2005 type: Conference or Workshop Item type: NonPeerReviewed format: application/pdf identifier: http://ilpubs.stanford.edu:8090/659/1/2004-42.pdf identifier: Aggarwal, Gagan and Bawa, Mayank and Ganesan, Prasanna and Garcia-Molina, Hector and Kenthapadi, Krishnaram and Motwani, Rajeev and Srivastava, Utkarsh and Thomas, Dilys and Xu, Ying (2005) Two Can Keep a Secret: A Distributed Architecture for Secure Database Services. In: The Second Biennial Conference on Innovative Data Systems Research (CIDR 2005), January 4-7, 2005, Asilomar, California. relation: http://ilpubs.stanford.edu:8090/659/