Publicly verifiable ownership protection for relational databases

ABSTRACT

Today, watermarking techniques have been extended from the multimedia context to relational databases so as to protect the ownership of data even after the data are published or distributed. However, all existing watermarking schemes for relational databases are secret key based, thus require a secret key to be presented in proof of ownership. This means that the ownership can only be proven once to the public (e.g., to the court). After that, the secret key is known to the public and the embedded watermark can be easily destroyed by malicious users. Moreover, most of the existing techniques introduce distortions to the underlying data in the watermarking process, either by modifying least significant bits or exchanging categorical values. The distortions inevitably reduce the value of the data. In this paper, we propose a watermarking scheme by which the ownership of data can be publicly proven by anyone, as many times as necessary. The proposed scheme is distortion-free, thus suitable for watermarking any type of data without fear of error constraints. The proposed scheme is robust against typical database attacks including tuple/attribute insertion/deletion, random/selective value modification, data frame-up, and additive attacks.

REFERENCES

• 1: R. Agrawal and J. Kiernan. Watermarking relational databases. In Proceedings of VLDB, pages 155--166, 2002.
• 2: Elisa Bertino , Beng Chin Ooi , Yanjiang Yang , Robert H. Deng, Privacy and Ownership Preserving of Outsourced Medical Data, Proceedings of the 21st International Conference on Data Engineering (ICDE'05), p.521-532, April 05-08, 2005 [doi>10.1109/ICDE.2005.111]
• 3: Dan Boneh , Matthew K. Franklin, Identity-Based Encryption from the Weil Pairing, Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology, p.213-229, August 19-23, 2001
• 4: Coalition Against Database Piracy (CADP). Piracy is unacceptable in the information age or any other age, July 2, 2005. http://cadp.net/default.asp.
• 5: Clifford Cocks, An Identity Based Encryption Scheme Based on Quadratic Residues, Proceedings of the 8th IMA International Conference on Cryptography and Coding, p.360-363, December 17-19, 2001
• 6: I. J. Cox and J. M. G. Linnartz. Public watermarks and resistance to tampering. In Proceedings of International Conference on Image Processing, pages 3--6, 1997.
• 7: Ingemar Cox , Matthew L. Miller , Jeffery A. Bloom, Digital watermarking, Morgan Kaufmann Publishers Inc., San Francisco, CA, 2001
• 8: S. Craver and S. Katzenbeisser. Security analysis of public-key watermarking schemes. In SPIE Vol. 4475, Mathematics of Data/Image Coding, Compression, and Encryption IV, pages 172--182, 2001.
• 9: J. J. Eggers, J. K. Su, and B. Girod. Public key watermarking by eigenvectors of linear transforms. In Proceedings of European Signal Processing Conference (EUSIPCO), 2000.
• 10: S. Farrell and R. Housley. An internet attribute certificate profile for authorization, internet draft, April, 2002. http://www.ietf.org/rfc/rfc3281.txt.
• 11: T. Furon, I. Venturini, and P. Duhamel. A unified approach of asymmetric watermarking schemes. In SPIE Vol. 4314, Security and Watermarking of Multimedia Contents III, pages 269--279, 2001.
• 12: B. Gray and J. Gorelick. Database piracy plague. The Washington Times, March 1, 2004. http://www.washingtontimes.com.
• 13: David Gross-Amblard, Query-preserving watermarking of relational databases and XML documents, Proceedings of the twenty-second ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems, p.191-201, June 09-11, 2003, San Diego, California [doi>10.1145/773153.773172]
• 14: G. Hachez and J. Quisquater. Which directions for asymmetric watermarking. In Proceedings of XI European Signal Processing Conference (EUSIPCO), Vol. I, pages 283--286, 2002.
• 15: F. Hartung and B. Girod. Fast public-key watermarking of compressed video. In Proceedings of IEEE International Conference on Speech and Signal Processing, 1997.
• 16: R. Housley, W. Ford, W. Polk, and D. Solo. Internet x.509 public key infrastructure certificate and crl profile, July 2, 2005. http://www.ietf.org/rfc/rfc2459.txt.
• 17: N. F. Johnson, Z. Duric, and S. Jajodia. Information Hiding: Steganography and Watermarking--Attacks and Countermeasures. Kluwer Publishers, 2000.
• 18: Stefan Katzenbeisser , Fabien A. Petitcolas, Information Hiding Techniques for Steganography and Digital Watermarking, Artech House, Inc., Norwood, MA, 2000
• 19: Yingjiu Li , Vipin Swarup , Sushil Jajodia, Constructing a virtual primary key for fingerprinting relational data, Proceedings of the 3rd ACM workshop on Digital rights management, October 27-27, 2003, Washington, DC, USA [doi>10.1145/947380.947398]
• 20: Yingjiu Li , Vipin Swarup , Sushil Jajodia, Fingerprinting Relational Databases: Schemes and Specialties, IEEE Transactions on Dependable and Secure Computing, v.2 n.1, p.34-45, January 2005 [doi>10.1109/TDSC.2005.12]
• 21: Jean-Paul M. G. Linnartz , Marten van Dijk, Analysis of the Sensitivity Attack against Electronic Watermarks in Images, Proceedings of the Second International Workshop on Information Hiding, p.258-272, April 14-17, 1998
• 22: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 23: S. Micali, Efficient Certificate Revocation, Massachusetts Institute of Technology, Cambridge, MA, 1996
• 24: B. Schneier. Applied Cryptography. John Wiley & Sons, Inc., 1996.
• 25: Adi Shamir, Identity-based cryptosystems and signature schemes, Proceedings of CRYPTO 84 on Advances in cryptology, p.47-53, August 1985, Santa Barbara, California, United States
• 26: Radu Sion, Proving Ownership over Categorical Data, Proceedings of the 20th International Conference on Data Engineering, p.584, March 30-April 02, 2004
• 27: R. Sion, M. Atallah, and S. Prabhakar. Resilient information hiding for abstract semi-structures. In Proceedings of the Workshop on Digital Watermarking, 2003.
• 28: Radu Sion , Mikhail Atallah , Sunil Prabhakar, Rights protection for relational data, Proceedings of the 2003 ACM SIGMOD international conference on Management of data, June 09-12, 2003, San Diego, California [doi>10.1145/872757.872772]
• 29: R. Sion, M. Atallah, and S. Prabhakar. Resilient rights protection for sensor streams. In Proceedings of the Very Large Databases Conference, pages 732--743, 2004.
• 30: Joshua R. Smith , Chris Dodge, Developments in Steganography, Proceedings of the Third International Workshop on Information Hiding, p.77-87, September 29-October 01, 1999
• 31: G. W. Snedecor and W. G. Cochran. Statistical Methods. 8th edition, Iowa State Press, 1989.
• 32: L. Vaas. Putting a stop to database piracy. eWEEK, enterprise news and reviews, September 24, 2003. http://www.eweek.com/print_article/0,3048,a=107965,00.asp.
• 33: R. G. van Schyndel, A. Z. Tirkel, and I. D. Svalbe. Key independent watermark detection. In Proceedings of IEEE International Conference on Multimedia Computing and Systems, Vol. 1, 1999.
• 34: Y. Wu, F. Bao, and C. Xu. On the security of two public key watermarking schemes. In Proceedings of 4th IEEE Pacific-Rim Conference on Multimedia, 2003.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.4 Systems
          Subjects: Relational databases

Keywords:
certificate, ownership protection, public verifiability, relational database, watermark