{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T16:17:52Z","timestamp":1791217072608,"version":"4.1.0"},"reference-count":55,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2016,8,8]],"date-time":"2016-08-08T00:00:00Z","timestamp":1470614400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"INRIA Project Lab CAPPRIS"},{"name":"ANR Grant KISS (Keep your Information Safe and Secure) n\u00b0","award":["ANR-11-INSE-0005"],"award-info":[{"award-number":["ANR-11-INSE-0005"]}]},{"name":"IDEX Paris-Saclay","award":["ANR-11-IDEX-0003-02"],"award-info":[{"award-number":["ANR-11-IDEX-0003-02"]}]},{"name":"Paris-Saclay Institut de la Soci\u00e9t\u00e9 Num\u00e9rique"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Database Syst."],"published-print":{"date-parts":[[2016,8,8]]},"abstract":"<jats:p>Current applications, from complex sensor systems (e.g., quantified self) to online e-markets, acquire vast quantities of personal information that usually end up on central servers where they are exposed to prying eyes. Conversely, decentralized architectures that help individuals keep full control of their data complexify global treatments and queries, impeding the development of innovative services. This article aims precisely at reconciling individual's privacy on one side and global benefits for the community and business perspectives on the other. It promotes the idea of pushing the security to secure hardware devices controlling the data at the place of their acquisition. Thanks to these tangible physical elements of trust, secure distributed querying protocols can reestablish the capacity to perform global computations, such as Structured Query Language (SQL) aggregates, without revealing any sensitive information to central servers. This article studies how to secure the execution of such queries in the presence of honest-but-curious and malicious attackers. It also discusses how the resulting querying protocols can be integrated in a concrete decentralized architecture. Cost models and experiments on SQL\/Asymmetric Architecture (AA), our distributed prototype running on real tamper-resistant hardware, demonstrate that this approach can scale to nationwide applications.<\/jats:p>","DOI":"10.1145\/2894750","type":"journal-article","created":{"date-parts":[[2016,8,8]],"date-time":"2016-08-08T13:10:44Z","timestamp":1470661844000},"page":"1-43","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":20,"title":["Private and Scalable Execution of SQL Aggregates on a Secure Decentralized Architecture"],"prefix":"10.1145","volume":"41","author":[{"given":"Quoc-Cuong","family":"To","sequence":"first","affiliation":[{"name":"Inria and University of Versailles St-Quentin, PRiSM lab"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Benjamin","family":"Nguyen","sequence":"additional","affiliation":[{"name":"INSA Centre Val de Loire, LIFO lab, Bourges cedex, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Philippe","family":"Pucheral","sequence":"additional","affiliation":[{"name":"Inria and University of Versailles St-Quentin, PRiSM lab, Versailles Cedex, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,8,8]]},"reference":[{"key":"e_1_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-003-0095-z"},{"key":"e_1_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.5555\/1287369.1287383"},{"key":"e_1_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007632"},{"key":"e_1_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.14778\/1920841.1920850"},{"key":"e_1_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10619-013-7122-x"},{"key":"e_1_2_2_6_1","volume-title":"Proceedings of the 6<sup>th<\/sup> Australasian Information Security Conference (AISC\u201908)","author":"Alzaid Hani","unstructured":"Hani Alzaid , Ernest Foo , and Juan G. Nieto . 2008. Secure data aggregation in wireless sensor networks: A survey . In Proceedings of the 6<sup>th<\/sup> Australasian Information Security Conference (AISC\u201908) . 93--105. Hani Alzaid, Ernest Foo, and Juan G. Nieto. 2008. Secure data aggregation in wireless sensor networks: A survey. In Proceedings of the 6<sup>th<\/sup> Australasian Information Security Conference (AISC\u201908). 93--105."},{"key":"e_1_2_2_7_1","series-title":"Lecture Notes in Computer Science","volume-title":"DBSec","author":"Amanatidis Georgios","unstructured":"Georgios Amanatidis , Alexandra Boldyreva , and Adam O\u2019Neill . 2007. Provably-secure schemes for basic query support in outsourced databases . In DBSec . Lecture Notes in Computer Science , Volume 4602 , Springer , Berlin . 14--30. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-73538-0_2 10.1007\/978-3-540-73538-0_2 Georgios Amanatidis, Alexandra Boldyreva, and Adam O\u2019Neill. 2007. Provably-secure schemes for basic query support in outsourced databases. In DBSec. Lecture Notes in Computer Science, Volume 4602, Springer, Berlin. 14--30. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-73538-0_2"},{"key":"e_1_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015040.1015045"},{"key":"e_1_2_2_9_1","doi-asserted-by":"crossref","unstructured":"Nicolas Anciaux Luc Bouganim and Philippe Pucheral. 2009. Hardware approach for trusted access and usage control. Handbook of Research on Secure Multimedia Distribution (Chapter A). IGI Global.  Nicolas Anciaux Luc Bouganim and Philippe Pucheral. 2009. Hardware approach for trusted access and usage control. Handbook of Research on Secure Multimedia Distribution (Chapter A). IGI Global.","DOI":"10.4018\/978-1-60566-262-6.ch009"},{"key":"e_1_2_2_10_1","unstructured":"Nicolas Anciaux Philippe Bonnet Luc Bouganim Benjamin Nguyen Philippe Pucheral and Iulian Sandu-Popa. 2013. Trusted cells: A sea change for personal data services. In CIDR. Asilomar USA.  Nicolas Anciaux Philippe Bonnet Luc Bouganim Benjamin Nguyen Philippe Pucheral and Iulian Sandu-Popa. 2013. Trusted cells: A sea change for personal data services. In CIDR. Asilomar USA."},{"key":"e_1_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2588555.2588893"},{"key":"e_1_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/1777777.1777820"},{"key":"e_1_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2004.05.023"},{"key":"#cr-split#-e_1_2_2_14_1.1","doi-asserted-by":"crossref","unstructured":"Emmanuel Bresson and Mark Manulis. 2007. Malicious participants in group key exchange: Key. control and contributiveness in the shadow of trust. In ATC 395--409. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-73547-2_41 10.1007\/978-3-540-73547-2_41","DOI":"10.1007\/978-3-540-73547-2_41"},{"key":"#cr-split#-e_1_2_2_14_1.2","doi-asserted-by":"crossref","unstructured":"Emmanuel Bresson and Mark Manulis. 2007. Malicious participants in group key exchange: Key. control and contributiveness in the shadow of trust. In ATC 395--409. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-73547-2_41","DOI":"10.1007\/978-3-540-73547-2_41"},{"key":"e_1_2_2_15_1","first-page":"292","article-title":"On security models and compilers for group key exchange protocols","volume":"4752","author":"Bresson Emmanuel","year":"2007","unstructured":"Emmanuel Bresson , Mark Manulis , and Joerg Schwenk . 2007 . On security models and compilers for group key exchange protocols . IWSEC. 4752 , 292 -- 307 . DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-75651-4_20 10.1007\/978-3-540-75651-4_20 Emmanuel Bresson, Mark Manulis, and Joerg Schwenk. 2007. On security models and compilers for group key exchange protocols. IWSEC. 4752, 292--307. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-75651-4_20","journal-title":"IWSEC."},{"key":"e_1_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MOBIQUITOUS.2005.25"},{"key":"e_1_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1053283.1053289"},{"key":"e_1_2_2_18_1","volume-title":"Sampling Techniques, 3<sup>rd<\/sup> edition","author":"Cochran William Gemmell","unstructured":"William Gemmell Cochran . 1977. Sampling Techniques, 3<sup>rd<\/sup> edition . John Wiley , New York, NY . William Gemmell Cochran. 1977. Sampling Techniques, 3<sup>rd<\/sup> edition. John Wiley, New York, NY."},{"key":"e_1_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948124"},{"key":"e_1_2_2_20_1","first-page":"12","article-title":"A survey on statistical disclosure control and micro-aggregation techniques for secure statistical databases. Software","volume":"40","author":"Fayyoumi Ebaa","year":"2010","unstructured":"Ebaa Fayyoumi and B. John Oommen . 2010 . A survey on statistical disclosure control and micro-aggregation techniques for secure statistical databases. Software : Pract. Exper. 40 , 12 (November 2010), 1161--1188. DOI:http:\/\/dx.doi.org\/10.1002\/spe.v40:12 10.1002\/spe.v40:12 Ebaa Fayyoumi and B. John Oommen. 2010. A survey on statistical disclosure control and micro-aggregation techniques for secure statistical databases. Software: Pract. Exper. 40, 12 (November 2010), 1161--1188. DOI:http:\/\/dx.doi.org\/10.1002\/spe.v40:12","journal-title":"Pract. Exper."},{"key":"e_1_2_2_21_1","volume-title":"Rethinking Personal Data: Strengthening Trust. (May","author":"Economic Forum The World","year":"2012","unstructured":"The World Economic Forum . 2012. Rethinking Personal Data: Strengthening Trust. (May 2012 ). Retrieved March 3, 2016 from http:\/\/www.weforum.org\/reports\/rethinking-personal-data-strengthening-trust. The World Economic Forum. 2012. Rethinking Personal Data: Strengthening Trust. (May 2012). Retrieved March 3, 2016 from http:\/\/www.weforum.org\/reports\/rethinking-personal-data-strengthening-trust."},{"key":"e_1_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1749603.1749605"},{"key":"e_1_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1325851.1325912"},{"key":"e_1_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"e_1_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(84)90070-9"},{"key":"e_1_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/564691.564717"},{"key":"#cr-split#-e_1_2_2_27_1.1","doi-asserted-by":"crossref","unstructured":"Hakan Hacig\u00fcm\u00fcs Balakrishna R. Iyer and Sharad Mehrotra. 2004. Efficient execution of aggregation queries over encrypted relational databases. In DASFAA. Korea 125--136. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-24571-1_10 10.1007\/978-3-540-24571-1_10","DOI":"10.1007\/978-3-540-24571-1_10"},{"key":"#cr-split#-e_1_2_2_27_1.2","doi-asserted-by":"crossref","unstructured":"Hakan Hacig\u00fcm\u00fcs Balakrishna R. Iyer and Sharad Mehrotra. 2004. Efficient execution of aggregation queries over encrypted relational databases. In DASFAA. Korea 125--136. DOI:http:\/\/dx.doi.org\/10.1007\/978-3-540-24571-1_10","DOI":"10.1007\/978-3-540-24571-1_10"},{"key":"e_1_2_2_28_1","doi-asserted-by":"crossref","unstructured":"Bijit Hore Sharad Mehrotra and Gene Tsudik. 2004. A privacy-preserving index for range queries. In VLDB\u201904. VLDB Endowment 223--235.   Bijit Hore Sharad Mehrotra and Gene Tsudik. 2004. A privacy-preserving index for range queries. In VLDB\u201904. VLDB Endowment 223--235.","DOI":"10.1016\/B978-012088469-8.50064-4"},{"key":"e_1_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-011-0245-7"},{"key":"e_1_2_2_30_1","volume-title":"Introduction to Modern Cryptography: Principles and Protocols","author":"Katz Jonathan","unstructured":"Jonathan Katz and Yehuda Lindell . 2007. Introduction to Modern Cryptography: Principles and Protocols . Chapman & Hall\/CRC. Jonathan Katz and Yehuda Lindell. 2007. Introduction to Modern Cryptography: Principles and Protocols. Chapman & Hall\/CRC."},{"key":"e_1_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102146"},{"key":"e_1_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/11535218_15"},{"key":"e_1_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2007.381742"},{"key":"e_1_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2006.872575"},{"key":"e_1_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13651-1_15"},{"key":"e_1_2_2_37_1","first-page":"5","article-title":"On the trusted use of large-scale personal data","volume":"35","author":"de Montjoye Yves-Alexandre","year":"2012","unstructured":"Yves-Alexandre de Montjoye , Samuel S. Wang , Alex Pentland , Dinh Tien Tuan Anh , and Anwitaman Datta . 2012 . On the trusted use of large-scale personal data . IEEE Data Eng. Bull. 35 , 4, 5 -- 8 . Yves-Alexandre de Montjoye, Samuel S. Wang, Alex Pentland, Dinh Tien Tuan Anh, and Anwitaman Datta. 2012. On the trusted use of large-scale personal data. IEEE Data Eng. Bull. 35, 4, 5--8.","journal-title":"IEEE Data Eng. Bull."},{"key":"#cr-split#-e_1_2_2_38_1.1","doi-asserted-by":"crossref","unstructured":"Einar Mykletun and Gene Tsudik. 2006. Aggregation queries in the database-as-a-service model. In DBSec. France 89--103. DOI:http:\/\/dx.doi.org\/10.1007\/11805588_7 10.1007\/11805588_7","DOI":"10.1007\/11805588_7"},{"key":"#cr-split#-e_1_2_2_38_1.2","doi-asserted-by":"crossref","unstructured":"Einar Mykletun and Gene Tsudik. 2006. Aggregation queries in the database-as-a-service model. In DBSec. France 89--103. DOI:http:\/\/dx.doi.org\/10.1007\/11805588_7","DOI":"10.1007\/11805588_7"},{"key":"#cr-split#-e_1_2_2_39_1.1","doi-asserted-by":"crossref","unstructured":"Pascal Paillier. 1999. Public-key cryptosystems based on composite degree residuosity classes. In EUROCRYPT. 223--238. DOI:http:\/\/dx.doi.org\/10.1007\/3-540-48910-X_16 10.1007\/3-540-48910-X_16","DOI":"10.1007\/3-540-48910-X_16"},{"key":"#cr-split#-e_1_2_2_39_1.2","doi-asserted-by":"crossref","unstructured":"Pascal Paillier. 1999. Public-key cryptosystems based on composite degree residuosity classes. In EUROCRYPT. 223--238. DOI:http:\/\/dx.doi.org\/10.1007\/3-540-48910-X_16","DOI":"10.1007\/3-540-48910-X_16"},{"key":"e_1_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043566"},{"key":"e_1_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/937503.937506"},{"key":"e_1_2_2_42_1","unstructured":"StreamSQL. 2015. Retrieved March 3 2015 from: http:\/\/www.streambase.com\/developers\/docs\/latest\/streamsql\/  StreamSQL. 2015. Retrieved March 3 2015 from: http:\/\/www.streambase.com\/developers\/docs\/latest\/streamsql\/"},{"key":"e_1_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/958942.958943"},{"key":"e_1_2_2_44_1","unstructured":"Quoc-Cuong To Benjamin Nguyen and Philippe Pucheral. 2013. Secure Global Protocol in Personal Data Server. SMIS Technical report. INRIA France.  Quoc-Cuong To Benjamin Nguyen and Philippe Pucheral. 2013. Secure Global Protocol in Personal Data Server. SMIS Technical report. INRIA France."},{"key":"e_1_2_2_45_1","unstructured":"Quoc-Cuong To Benjamin Nguyen and Philippe Pucheral. 2014a. Privacy-preserving query execution using a decentralized architecture and tamper resistant hardware. In EDBT. Athens 487--498. DOI:http:\/\/dx.doi.org\/10.5441\/002\/edbt.2014.44    10.5441\/002\nQuoc-Cuong To Benjamin Nguyen and Philippe Pucheral. 2014a. Privacy-preserving query execution using a decentralized architecture and tamper resistant hardware. In EDBT. Athens 487--498. DOI:http:\/\/dx.doi.org\/10.5441\/002\/edbt.2014.44"},{"key":"e_1_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.14778\/2733004.2733046"},{"key":"e_1_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26148-5_3"},{"key":"e_1_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.14778\/2535573.2488336"},{"key":"#cr-split#-e_1_2_2_50_1.1","doi-asserted-by":"crossref","unstructured":"Bing Wu Jie Wu and Mihaela Cardei. 2008. A survey of key management in mobile ad hoc networks. In Handbook of Research on Wireless Security. IGI Global 479--499. DOI:http:\/\/dx.doi.org\/10.4018\/978-1-59904-899-4.ch030 10.4018\/978-1-59904-899-4.ch030","DOI":"10.4018\/978-1-59904-899-4.ch030"},{"key":"#cr-split#-e_1_2_2_50_1.2","doi-asserted-by":"crossref","unstructured":"Bing Wu Jie Wu and Mihaela Cardei. 2008. A survey of key management in mobile ad hoc networks. In Handbook of Research on Wireless Security. IGI Global 479--499. DOI:http:\/\/dx.doi.org\/10.4018\/978-1-59904-899-4.ch030","DOI":"10.4018\/978-1-59904-899-4.ch030"},{"key":"e_1_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1155\/2011\/570680"},{"key":"e_1_2_2_52_1","unstructured":"INRIA LIRIS UVSQ GEMALTO CryptoExperts CG78. 2012. Use Cases and Functional Architecture Specification. KISS deliverable ANR-11-INSE-0005-D1 21\/12\/2012. France.  INRIA LIRIS UVSQ GEMALTO CryptoExperts CG78. 2012. Use Cases and Functional Architecture Specification. KISS deliverable ANR-11-INSE-0005-D1 21\/12\/2012. France."}],"container-title":["ACM Transactions on Database Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2894750","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2894750","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:05:40Z","timestamp":1750273540000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2894750"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,8,8]]},"references-count":55,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2016,8,8]]}},"alternative-id":["10.1145\/2894750"],"URL":"https:\/\/doi.org\/10.1145\/2894750","relation":{},"ISSN":["0362-5915","1557-4644"],"issn-type":[{"value":"0362-5915","type":"print"},{"value":"1557-4644","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,8,8]]},"assertion":[{"value":"2015-02-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-02-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-08-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}