Secure data outsourcing based on seed-residual shares and order-shuffling encryption

Secret sharing is a promising approach to protecting the confidentiality of outsourced data. However, the existing secret sharing-based data outsourcing schemes involve several security and performance issues, including vulnerability to some inferences and attacks. In particular, most of them leak the order of the secret values. In this paper, a nondeterministic encryption scheme, called order-shuffling encryption (OSE), is first proposed. It generates searchable encrypted values that do not leak the order of the secret values. Then, a new secure data outsourcing scheme is elaborated on secret sharing and OSE. The proposed data outsourcing scheme generates some searchable shares using OSE and some other non-searchable and random shares from each secret value to be outsourced. It provides resistance to various inferences and attacks and supports the server-side execution of a wide variety of queries. Extensive evaluations and analyses demonstrate that the proposed secure data outsourcing scheme is quite practical and efficient.