Security and Privacy in Communication Networks. 7th International ICST Conference, SecureComm 2011, London, UK, September 7-9, 2011, Revised Selected Papers

Research Article

PP2db: A Privacy-Preserving, P2P-Based Scalable Storage System for Mobile Networks

Download
252 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-31909-9_34,
        author={Manuel Crotti and Diego Ferri and Francesco Gringoli and Manuel Peli and Luca Salgarelli},
        title={PP2db: A Privacy-Preserving, P2P-Based Scalable Storage System for Mobile Networks},
        proceedings={Security and Privacy in Communication Networks. 7th International ICST Conference, SecureComm 2011, London, UK, September 7-9, 2011, Revised Selected Papers},
        proceedings_a={SECURECOMM},
        year={2012},
        month={10},
        keywords={Trust anonymity secure P2P databases mobile networks},
        doi={10.1007/978-3-642-31909-9_34}
    }
    
  • Manuel Crotti
    Diego Ferri
    Francesco Gringoli
    Manuel Peli
    Luca Salgarelli
    Year: 2012
    PP2db: A Privacy-Preserving, P2P-Based Scalable Storage System for Mobile Networks
    SECURECOMM
    Springer
    DOI: 10.1007/978-3-642-31909-9_34
Manuel Crotti1,*, Diego Ferri1,*, Francesco Gringoli1,*, Manuel Peli1,*, Luca Salgarelli1,*
  • 1: University of Brescia
*Contact email: Manuel.Crotti@ing.unibs.it, Diego.Ferri@ing.unibs.it, Francesco.Gringoli@ing.unibs.it, Manuel.Peli@ing.unibs.it, Luca.Salgarelli@ing.unibs.it

Abstract

Reputation-based systems that handle millions of users face the problem of simultaneously supporting privacy and trust in an efficient way. In order to scale, often existing systems either sacrifice privacy to preserve trust, or vice versa. The introduction of advanced cryptographic techniques such as Group Signatures might offer a solution, but their applicability to large, distributed systems such as P2P-based ones has yet to be proved. In this paper we introduce PP2db, a privacy-preserving, scalable and distributed storage system targeted at mobile networks, specifically designed to support the anonymous but trusted exchange of Quality of Experience (QoE) information. In such case-study, QoE data is exchanged among users so as to make informed decisions on which network to select at any given time. We demonstrate that by enriching a P2P database with Group Signatures it is possible to create distributed storage mechanisms that guarantee privacy-preserving features, while offering strong trust at the group level. Furthermore, we demonstrate that the resulting architecture can scale in a realistic mobile network scenario to handle millions of users.