Database outsourcing is a common cloud computing paradigm that allows data owners to take advantage of its on-demand storage and computational resources. The main challenge is maintaining data confidentiality with respect to untrusted parties i.e., cloud service provider, as well as providing relevant query results in real-time to authenticated users. Existing approaches either compromise confidentiality of the data or suffer from high communication cost between the server and the user. To overcome this problem, we propose a dual transformation and encryption scheme for spatial data, where encrypted queries are executed entirely at the service provider on the encrypted database and encrypted results are returned to the user. The user issues encrypted spatial range queries to the service provider and then uses the encryption key to decrypt the query response returned. This allows a balance between the security of data and efficient query response as the queries are processed on encrypted data at the cloud server. Moreover, we compare with existing approaches on large datasets and show that this approach reduces the average query communication cost between the authorized user and service provider, as only a single round of communication is required by the proposed approach.

中文翻译：

---

促进云上安全高效的空间查询处理

数据库外包是一种常见的云计算范式，它允许数据所有者利用其按需存储和计算资源。主要挑战是维护不受信任方（即云服务提供商）的数据机密性，以及向经过身份验证的用户实时提供相关查询结果。现有方法要么危及数据的机密性，要么遭受服务器和用户之间高昂的通信成本。为了克服这个问题，我们提出了一种空间数据的双重转换和加密方案，其中加密查询完全在服务提供商处对加密数据库执行，并将加密结果返回给用户。用户向服务提供商发出加密的空间范围查询，然后使用加密密钥对返回的查询响应进行解密。这允许在数据安全性和高效查询响应之间取得平衡，因为查询是在云服务器上对加密数据进行处理的。此外，我们在大型数据集上与现有方法进行比较，并表明该方法降低了授权用户和服务提供商之间的平均查询通信成本，因为所提出的方法只需要单轮通信。