Abstract: In database-as-service(DAS) paradigm, the untrusted of service providers bring new challenges of secure data management, including data confidentiality and data integrity. To ensure data security in DAS paradigm, current research can be divided into two classes: centralized architecture and distributed architecture. Firstly, the major research in centralized architecture is discussed from three aspects: relational databases, XML databases and text databases. Secondly, a systematic analysis is conducted in distributed architecture. Finally, the future challenges and research fields are pointed.

Key words: database service, database security, encrypted data querying, query authentication, authenticated data structure

摘要： 数据库服务模式下, 服务提供商的不可信带来了新的数据安全管理问题：数据的保密管理和可信性管理。根据托管方式的不同, 将现有研究分为两类：集中式托管方式下的安全研究和分布式托管方式下的安全研究。在集中式托管方式下, 系统地阐述了关系数据库、XML数据库和文本数据库下的密文检索和数据验证问题。在分布式托管方式下, 重点阐述了数据分解方法和分离的数据验证方法。通过对现有研究进行综述, 指出数据库服务模式下数据安全管理面临的挑战和未来的发展方向。

关键词: 数据库服务, 数据库安全, 密文检索, 查询验证, 验证数据结构