Differential Purpose Scan: An End-to-End Privacy-aware Access Method
Resumo
Este trabalho propõe um novo operador, Purpose Scan (PS), que é introduzido no plano de execução para que os consentimentos dos donos dos dados para propósitos específicos sejam assegurados. Também é proposto o Differential Purpose Scan, que adiciona privacidade diferencial para evitar vazamentos de informação. Experimentos demonstram que o PS melhora o desempenho em relação a abordagens baseadas em visões.
Palavras-chave:
database, purpose consent, privacy
Referências
Agrawal, R., Bird, P., Grandison, T., Kiernan, J., Logan, S., and Rjaibi, W. (2005). Extending relational database systems to automatically enforce privacy policies. In ICDE, pages 1013–1022, Tokyo. IEEE Computer Society.
Amora, P., Praciano, F., and Machado, J. (2025). Purpose filter: A space-efficient purpose metadata storage. In LNCS, Lecture Notes in Computer Science.
Byun, J. and Li, N. (2008). Purpose based access control for privacy protection in relational database systems. VLDB J., 17(4):603–619.
Deshpande, A. (2021). Sypse: Privacy-first Data Management through Pseudonymization and Partitioning . In CIDR, pages 1–8, Online. [link].
Dwork, C. (2006). Differential privacy. In ICALP 2006, Venice, Italy, July 10-14, 2006, Proceedings, Part II, volume 4052 of LNCS, pages 1–12. Springer.
Kabra, G., Ramamurthy, R., and Sudarshan, S. (2006). Redundancy and information leakage in fine-grained access control. In ACM SIGMOD, Chicago, Illinois, USA, June 27-29, pages 133–144. ACM.
Konstantinidis, G., Holt, J., and Chapman, A. (2021). Enabling personal consent in databases. Proc. VLDB Endow., 15(2):375–387.
Kraska, T., Stonebraker, M., Brodie, M. L., Servan-Schreiber, S., and Weitzner, D. J. SchengenDB: A data protection database proposal. In VLDB 2019 Workshops, Los Angeles, CA, USA, August 30, 2019, volume 11721 of LNCS.
Machado, J., Amora, P., and Praciano, F. (2024). Purpose and consent enforcement in dbms. In SBBD, pages 172–175. SBC.
Pappachan, P., Yus, R., Mehrotra, S., and Freytag, J. (2020). Sieve: A middleware approach to scalable access control for database management systems. Proc. VLDB Endow., 13(11):2424–2437.
Pappachan, P., Zhang, S., He, X., and Mehrotra, S. (2022). Don’t be a tattle-tale: Preventing leakages through data dependencies on access control protected data. Proc. VLDB Endow., 15(11):2437–2449.
Praciano, F. D. B. S., Amora, P. R. P., Abreu, I. C., and Machado, J. C. (2022). Purpose scan: A purpose-aware access method. In VLDB Workshops, volume 13814 of LNCS.
Rizvi, S., Mendelzon, A. O., Sudarshan, S., and Roy, P. (2004). Extending query rewriting techniques for fine-grained access control. In SIGMOD Conference, pages 551–562, France. ACM.
Shastri, S., Banakar, V., Wasserman, M., Kumar, A., and Chidambaram, V. (2020). Understanding and benchmarking the impact of GDPR on database systems. Proc. VLDB Endow., 13(7):1064–1077.
Ítalo de Abreu, Praciano, F., Amora, P., and Machado, J. (2021). Consql: Consentimentos em sql para o processamento de consultas orientado a propósitos. In SBBD. SBC.
Amora, P., Praciano, F., and Machado, J. (2025). Purpose filter: A space-efficient purpose metadata storage. In LNCS, Lecture Notes in Computer Science.
Byun, J. and Li, N. (2008). Purpose based access control for privacy protection in relational database systems. VLDB J., 17(4):603–619.
Deshpande, A. (2021). Sypse: Privacy-first Data Management through Pseudonymization and Partitioning . In CIDR, pages 1–8, Online. [link].
Dwork, C. (2006). Differential privacy. In ICALP 2006, Venice, Italy, July 10-14, 2006, Proceedings, Part II, volume 4052 of LNCS, pages 1–12. Springer.
Kabra, G., Ramamurthy, R., and Sudarshan, S. (2006). Redundancy and information leakage in fine-grained access control. In ACM SIGMOD, Chicago, Illinois, USA, June 27-29, pages 133–144. ACM.
Konstantinidis, G., Holt, J., and Chapman, A. (2021). Enabling personal consent in databases. Proc. VLDB Endow., 15(2):375–387.
Kraska, T., Stonebraker, M., Brodie, M. L., Servan-Schreiber, S., and Weitzner, D. J. SchengenDB: A data protection database proposal. In VLDB 2019 Workshops, Los Angeles, CA, USA, August 30, 2019, volume 11721 of LNCS.
Machado, J., Amora, P., and Praciano, F. (2024). Purpose and consent enforcement in dbms. In SBBD, pages 172–175. SBC.
Pappachan, P., Yus, R., Mehrotra, S., and Freytag, J. (2020). Sieve: A middleware approach to scalable access control for database management systems. Proc. VLDB Endow., 13(11):2424–2437.
Pappachan, P., Zhang, S., He, X., and Mehrotra, S. (2022). Don’t be a tattle-tale: Preventing leakages through data dependencies on access control protected data. Proc. VLDB Endow., 15(11):2437–2449.
Praciano, F. D. B. S., Amora, P. R. P., Abreu, I. C., and Machado, J. C. (2022). Purpose scan: A purpose-aware access method. In VLDB Workshops, volume 13814 of LNCS.
Rizvi, S., Mendelzon, A. O., Sudarshan, S., and Roy, P. (2004). Extending query rewriting techniques for fine-grained access control. In SIGMOD Conference, pages 551–562, France. ACM.
Shastri, S., Banakar, V., Wasserman, M., Kumar, A., and Chidambaram, V. (2020). Understanding and benchmarking the impact of GDPR on database systems. Proc. VLDB Endow., 13(7):1064–1077.
Ítalo de Abreu, Praciano, F., Amora, P., and Machado, J. (2021). Consql: Consentimentos em sql para o processamento de consultas orientado a propósitos. In SBBD. SBC.
Publicado
29/09/2025
Como Citar
PRACIANO, Francisco D. B. S.; MACHADO, Javam C..
Differential Purpose Scan: An End-to-End Privacy-aware Access Method. In: WORKSHOP DE TESES E DISSERTAÇÕES (WTDBD) - SIMPÓSIO BRASILEIRO DE BANCO DE DADOS (SBBD), 40. , 2025, Fortaleza/CE.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2025
.
p. 175-181.
DOI: https://doi.org/10.5753/sbbd_estendido.2025.247655.
